Security Is the Price of Self-Custody
In crypto, you are your own bank — which means you're also your own security team. There's no fraud hotline and no chargebacks. The upside is that with a handful of disciplined habits, you can make yourself an extremely hard target. Here are ten steps, roughly in order of importance, to protect your wallet.
1. Protect Your Seed Phrase Above All Else
Your recovery phrase is your wallet. Anyone who has it owns your funds.
- Write it on paper or stamp it into metal; never store it digitally.
- Keep two copies in separate secure locations.
- Never type it into any website or share it with "support." See our seed phrase guide.
2. Use a Hardware Wallet for Real Money
A hardware wallet keeps your private keys offline, so malware on your computer can't steal them. For any meaningful balance, this is the single biggest upgrade you can make — follow our hardware wallet setup guide. Buy only directly from the manufacturer.
3. Separate Hot and Cold Wallets
Keep a small "spending" balance in a hot wallet and the bulk in cold storage. If your hot wallet is compromised, your losses are capped. See hot vs cold storage.
4. Enable Strong 2FA Everywhere
- Use an authenticator app (or a hardware security key), not SMS — SIM-swap attacks defeat SMS 2FA.
- Enable 2FA on your exchange, email, and any account tied to your crypto.
5. Lock Down Your Email
Your email is the master key to password resets. Give it a unique password, strong 2FA, and never reuse it for shady sign-ups.
6. Use a Password Manager
Unique, random passwords for every service mean one breach can't cascade. A reputable password manager makes this effortless.
7. Practice Approval Hygiene
When you use DeFi, you grant contracts permission to move your tokens. Malicious or forgotten approvals are a top cause of drained wallets.
- Prefer limited spending caps over unlimited approvals.
- Periodically revoke approvals you no longer use with a reputable revoke tool.
- Read every signature request — reject anything you don't understand.
8. Use a Burner Wallet for Risky Activity
Mint NFTs, claim airdrops, and test new dApps from a separate wallet that holds little value. Never connect your main holdings to unknown sites.
9. Secure Your Devices
- Keep your OS, browser, and wallet apps updated.
- Install wallet extensions only from official sources.
- Avoid public Wi-Fi for transactions; use a trusted network or VPN.
- Never store keys or phrases on a cloud-synced device.
10. Verify Everything, Trust Nothing
Bookmark real dApp URLs, double-check addresses (attackers swap clipboard contents with malware), and send a small test transaction before any large transfer. Learn to spot fakes in our phishing guide.
Layered defense: No single measure is enough. Combined, seed-phrase discipline + hardware wallet + 2FA + approval hygiene make you a very hard target.
Quick Security Audit
- Is my seed phrase offline, in two locations, and never digitized?
- Are large holdings on a hardware wallet bought direct from the maker?
- Is app-based 2FA on my exchange and email?
- Have I revoked old token approvals recently?
- Do I use a burner wallet for risky mints?
Final Thoughts
Wallet security isn't about paranoia — it's about a repeatable routine. Protect your seed phrase, move savings to cold storage, lock down 2FA and email, keep your approvals clean, and verify before you click. Do these consistently and you'll sidestep the mistakes that cost most people their crypto.