Write the seed phrase on paper
Never store it in photos, notes apps, email or cloud drives. Keep copies in separate safe places.
Never type it into a website
The only time you enter it is to restore your own wallet on a device you trust.
Use a hardware wallet for larger amounts
Buy it only from the maker. A device that arrives opened or with a pre-filled phrase is a trap.
Turn on two-step sign-in on every exchange
Use an authenticator app instead of text messages, which can be hijacked.
Use a unique password for each account
A password manager makes this easy. Reused passwords are how one leak becomes many.
Bookmark the real sites
Open exchanges and wallets from your bookmarks, not from search ads or messages.
Send a small test first
Before a large transfer, send a small amount to the same address and check it arrived.
Check the address character by character
Malware can swap a copied address for the attacker’s. Compare the start and the end.
Be careful what you approve
Connecting a wallet or signing an approval can let a program spend your tokens. Review requests and remove old approvals.
Ignore unsolicited help
Direct messages offering support, a giveaway or an investment tip are scams almost every time.
Keep software updated
Update your phone, wallet app and browser so known security holes are closed.
Plan for the worst
Tell someone you trust that a recovery plan exists, without sharing the phrase itself.
This is general education, not financial advice. Crypto can lose value quickly; never put in money you cannot afford to lose.