Crypto Security Checklist: 12 Things to Do This Week
Most crypto losses are not sophisticated hacks. They are preventable mistakes, and this list covers the ones that actually cause them.
Never share a seed phrase — with anyone, ever
No legitimate app, exchange or support agent needs it. Every single request for a seed phrase is a scam, without exception.
Use an authenticator app, not SMS
SIM-swap attacks make SMS the weakest common second factor. An authenticator app or hardware key removes that attack entirely.
Give every account a unique password
Reused passwords mean one unrelated breach compromises your exchange. A password manager solves this permanently.
Verify contract addresses from official sources
Fake tokens with real names are everywhere. Copy addresses from the project’s own site or a major aggregator, never from a reply or DM.
Bookmark exchanges and never search for them
Paid search ads impersonating exchanges are a common phishing vector. Your own bookmark cannot be spoofed.
Security habits that prevent the losses you cannot undo
Everything else in this article is optimisation. This part is survival. Crypto transactions are final, there is no chargeback, and there is no support line that can reverse a transfer. That asymmetry means security deserves more of your attention than strategy, and gets far less.
The essentials: a hardware wallet for anything you are not actively trading; a recovery phrase written on paper and stored physically, never photographed and never typed into a website; app-based or hardware two-factor authentication rather than SMS, which is defeated by SIM-swap attacks; and a permanent assumption that anyone contacting you about your crypto is attempting fraud.
The most common theft is not a technical exploit. It is a convincing message — a fake support agent, an airdrop that needs your seed phrase, a wallet-draining signature request — that persuades you to hand over access. No legitimate service will ever ask for your recovery phrase, and a portfolio tracker only ever needs a public address, which cannot move funds.
Never miss a move in the markets you follow
One alert, set once and watched continuously on our servers, delivered on whichever channel you actually read and silent during the hours you choose.
- Fires about a second after the price hits
- Runs on our servers, so it reaches you with the app closed
- Free for 3 alerts — no card, no account
Download the app for real-time notifications
Frequently asked questions
Is any of this financial advice?
No. Everything here is general educational information about how markets and tools work, not a recommendation to buy or sell anything. Your circumstances, tax position and risk tolerance are specific to you — for decisions that depend on them, speak to a licensed professional in your jurisdiction.
Price alerts that never need an exchange key or wallet access: crypto price alerts, or every market and alert type. Choosing an app? How the alert apps compare, from their own pricing pages.
Keep reading
How to Store Filecoin (FIL) Safely
Buying FIL is the easy part. Holding it through a full market cycle without losing it to a mistake or a scam i…
SecurityHow to Store GMX (GMX) Safely
Buying GMX is the easy part. Holding it through a full market cycle without losing it to a mistake or a scam i…
SecuritySent Crypto to the Wrong Network? What Can and Cannot Be Recovered
Some of these are recoverable and some are permanently gone, and the difference comes down to whether anyone c…
SecurityHow to Store Cosmos (ATOM) Safely
Buying ATOM is the easy part. Holding it through a full market cycle without losing it to a mistake or a scam …