Wallet safety checklist

Seven habits that keep your wallet safe

Most drains come down to a few avoidable mistakes. Run through these once and you cut off the ways attackers get in.

1. 1

   Revoke approvals you do not recognize

   An old approval can still drain you long after you used a site. Scan with the tool above and revoke anything unfamiliar, especially unlimited ones.

2. 2

   Cap unlimited approvals

   Unlimited spend approvals are the single biggest drain risk. Revoke them, and where a site lets you, approve only the amount you are spending right now.

3. 3

   Keep a hot wallet and a cold wallet

   Use a small everyday wallet for minting and trying new apps, and keep the bulk of your holdings in a separate wallet you rarely connect anywhere.

4. 4

   Check the URL before you connect

   Drainers copy real sites down to the logo. Type the address yourself or use a saved bookmark, and never connect from a link in a DM or a reply.

5. 5

   Never sign something you cannot read

   If a signature request is blank, vague, or asks to set an approval you did not start, reject it. A real action tells you plainly what it does.

6. 6

   Use a hardware wallet for anything meaningful

   A hardware wallet keeps your keys off an internet-connected device, so a compromised phone or laptop cannot sign on its own.

7. 7

   Set up Protect while your wallet is still safe

   Coverage has to be approved before a drain, never after. If your wallet qualifies, get it covered now so a bad day is not a total loss.