Know what you are protecting
A seed phrase (also called a recovery phrase) can recreate a wallet and usually controls every asset in it. A private key controls a specific address. A wallet password may protect only the app on one device. Losing access to any of these can be serious; sharing a seed phrase or private key can give someone else full control.
What never to share
- Seed or recovery phrases—even one word at a time.
- Private keys, keystore files, or recovery codes.
- Screen shares that expose recovery information.
- Photos, cloud notes, or copied text containing wallet secrets.
No legitimate support agent needs these to diagnose a wallet, verify an account, or “sync” funds.
Safer backup habits
- Write the recovery information down offline, accurately, and in the correct order.
- Keep it somewhere private and protected from fire, water, and casual access.
- Do not store it in email, chat, screenshots, cloud drives, or a browser extension.
- Before moving a large balance, verify that you understand the wallet’s documented recovery process.
Before approving anything
Read what a wallet is asking you to sign. A transaction or token approval can have consequences beyond a login. If the site, request, or timing feels wrong, stop and independently verify the destination first.
