Protect recovery material
A seed phrase or private key controls the assets. Keep it offline, private, and never enter it into a website, support chat, form, or browser extension prompt.
Evergreen guide
Crypto security: protect your wallet before you transact
Crypto transfers are generally irreversible. Use this checklist before signing, connecting, approving, or moving assets. It is general education, not incident response or professional advice.
Never share recovery material
CoinAbout, a wallet provider, exchange, or legitimate support agent will not need your seed phrase, private key, or backup file to help you.
A practical checklist
Verify every signing request
Read the domain, wallet account, network, transaction type, token amount, and contract approval before approving. A signature can authorize more than a visible login action.
Use separate wallets
Keep a low-balance wallet for experiments and a separate hardware-backed wallet for long-term holdings. Do not connect high-value wallets to unfamiliar sites.
Treat links as untrusted
Open exchanges, wallets, and dapps from a saved official address. Attackers commonly use sponsored ads, lookalike domains, fake extensions, and direct-message impersonation.
Review token approvals
Remove approvals you no longer need and avoid unlimited allowances when a limited amount is available. Confirm the contract and network before changing an approval.
Harden account access
Use a unique password, password manager, and phishing-resistant multi-factor authentication where offered. Keep devices, browsers, wallet software, and extensions updated.
If you think an account is compromised
- Stop approving new requests and disconnect the affected wallet from sites you do not recognize.
- Move remaining assets to a newly created wallet only after verifying its recovery backup offline.
- Revoke unnecessary token approvals and contact the affected exchange or wallet provider through its official support channel.
- Preserve transaction hashes and report phishing pages to the provider or relevant security team.
For CoinAbout account and wallet-signature practices, read the CoinAbout security policy. For broader online-account guidance, see CISA's Secure Our World .