Security
How to Secure Your Crypto Wallet: A Threat-Model Guide
Protect a crypto wallet with a practical threat model covering seed phrases, approvals, phishing, devices, backups, and recovery.
Wallet security begins with identifying what can go wrong: stolen recovery data, a malicious transaction, compromised device, lost backup, or social engineering.
Protect recovery material
Never type a seed phrase into a website, form, chat, or browser extension. Store backups offline in a location appropriate to the value at risk. Test that you can understand your recovery process without exposing the phrase.
Verify every transaction
Read the site domain, wallet prompt, network, destination, and requested approval. A signature can authorize meaningful actions. If a prompt is unclear, reject it and verify through official documentation.
Reduce the blast radius
Use separate wallets for long-term storage, daily activity, and experiments. Keep software updated from verified sources. Regularly review and revoke unneeded token approvals.