Crypto security isn't hard — but ignoring it is expensive. Here are 10 rules that will keep you safe.
1. Never Share Your Seed Phrase
Your 12/24-word seed phrase is the master key to your wallet. Anyone who has it controls your funds. No legitimate service, support agent, or platform will ever ask for it.
2. Use a Hardware Wallet for Large Amounts
If you're holding more than $500 in crypto, get a hardware wallet (Ledger, Trezor). They keep your keys offline and immune to hacks.
3. Verify URLs Before Connecting
Phishing sites look identical to real ones. Always check the URL bar. Bookmark official sites. Never click links from DMs.
4. Revoke Unused Token Approvals
When you approve a dApp to spend your tokens, that approval lasts forever unless you revoke it. Check and revoke at solscan.io or similar tools.
5. Use Separate Wallets
Have a "hot wallet" for daily use (small amounts) and a "cold wallet" for storage (large amounts). Never connect your cold wallet to random sites.
6. Be Skeptical of DMs
If someone DMs you with an "opportunity," it's a scam. 100% of the time. Turn off DMs in Discord crypto servers.
7. Don't FOMO Into Anything
Scammers create urgency. "Only 10 minutes left!" "Price is about to 100x!" If you feel rushed, step back.
8. Check Smart Contracts Before Interacting
Use tools like Solscan to check if a contract is verified and audited. Unverified contracts are red flags.
9. Enable 2FA Everywhere
Exchange accounts, email, everything. Use an authenticator app (not SMS). SIM swap attacks are real.
10. If It Sounds Too Good to Be True...
...it is. Free money, guaranteed returns, "send 1 get 2 back" — all scams. The only free money is a Nobunaga treasure hunt 😉
The best security tool is your own skepticism. Use it generously.