Most crypto losses are not clever hacks. They are a signed approval, a leaked phrase or a fake site. Good habits remove most of that risk.
Keep your keys yours
- Never share your seed phrase or private key. No support team, exchange or project will ask for it.
- Write the phrase on paper or metal and store it offline. Avoid screenshots, cloud notes and photos.
- Consider a hardware wallet for anything you cannot afford to lose.
Split your wallets
Keep long-term holdings in a wallet that rarely connects to anything. Use a second, lightly funded wallet for new apps, mints and unknown tokens. If the second one is compromised, the damage stays small.
Sign with your eyes open
- Read what the prompt says. Approvals, permits and setApprovalForAll deserve extra suspicion.
- Simulate transactions where your wallet supports it so you can see what will leave your account.
- Check the web address before connecting. Use bookmarks for the sites you trust.
- Ignore unsolicited tokens and airdrops. Interacting with them is often the trap.
Routine maintenance
- Review and revoke old approvals every month or so.
- Remove browser extensions you no longer use.
- Keep your device and wallet software updated.
- Use unique passwords and app-based two-factor authentication for exchange and email accounts.