10.2 Best Security Practices

Protecting your crypto is essential, as transactions are irreversible. To avoid falling victim to scams, strong security habits matter more than any strategy.

Wallets, Private Keys and Seed Phrases

• Use hardware wallets (Ledger, Trezor, etc.) for long-term or high-value holdings.
• Never share your seed phrase, private keys, or mnemonic.
• If using software wallets, use reputable providers, keep software updated, and isolate small operational funds.
• Use passphrases (24th word or additional words) where supported, to add a layer of security.

Multi-Factor Authentication and Account Protection

• Enable 2FA (e.g. via authenticator apps) on exchanges and associated accounts.
• Use separate email accounts for crypto.
• Use strong, unique passwords and a secure password manager.
• Be cautious of SMS-based 2FA as SIM swapping is a known attack vector.

Transaction Vigilance and Approvals

• When interacting with dApps, check permission requests: see what tokens/contracts are being approved.
• Limit approvals to minimal necessary amount rather than “unlimited.”
• Use tools like “revoke” services that allow you to cancel or reduce token approvals.
• Before confirming a transaction, double-check destination addresses and amounts.

Network Safety and Phishing Protection

• Use browser wallets with caution; consider a fresh browser profile for crypto activities only.
• Keep browser, operating system, and wallet software up‑to-date.
• Use anti-phishing extensions or security tools (e.g. wallet domain whitelists).
• Verify SSL certificates, check padlock icons, and avoid clicking suspicious links.

Backup, Recovery and Redundancy

• Keep encrypted backups of seed phrases in physically separate secure places (e.g. safe, metal plate).
• Use multisig wallets where feasible (require multiple keys to approve a transaction).
• For long-term storage, consider “cold storage” (offline wallets or paper wallets).
• Consider social recovery or threshold schemes (if supported), but understand risks.