Private Keys and Recovery Phrases
Know the difference between transaction signing and wallet recovery credentials.
Private keys authorize activity for specific accounts, while recovery phrases commonly regenerate a set of keys. Both are highly sensitive. A leaked key generally cannot be secured by changing an ordinary app password.
Recognize the risk and verify the details
Avoid unnecessary key exports or displays of sensitive credentials.
↗Keep phrase backups offline and away from mail, drives, or clipboard sync.
↗Inspect chain, contract permissions, and what a signature will authorize.
↗If exposure is suspected, plan a move to fresh credentials instead of reusing the compromised ones.
↗Key principle
Requests for keys to unlock, verify, refund, or secure funds are serious warning signs.
When should you pause?
Requests for keys to unlock, verify, refund, or secure funds are serious warning signs.
Treat unexpected requests for private keys or recovery words as high risk. If authorization or transfer details are unclear, pause and verify independently before continuing.
Three checks before proceeding
- Never send a private key to another person
- Never submit a phrase to online support
- Signature matches the intended action
A clearer start to wallet security
Check the source, back up your recovery phrase, and review every transaction before signing.
⬇ Download NowDownload instructions and safety guidance are available on this site.