My DPC
Security

Crypto wallet security: protect your seed phrase and funds

In self-custody, you are the bank. No one can reverse a transaction or reset a lost recovery phrase. The good news: most losses come from a handful of avoidable mistakes. This guide covers the habits that prevent them, whichever network you use.

Updated 7 min read

Your recovery phrase is the wallet

The 12 or 24 words shown when you create a wallet can recreate it on any device. Whoever has them has your funds.

  • Write it on paper or metal; never store it in screenshots, cloud notes, email or chat.
  • Keep at least one copy somewhere safe from fire and water.
  • Never type it into a website. Legitimate apps and support teams never ask for it.

How phishing and fake sites work

Scammers copy real projects: identical designs, similar domains, fake "support" accounts that reply to your public questions within seconds. Their goal is to make you sign a transaction or reveal your phrase.

  • Bookmark official sites and open them only from your bookmarks.
  • Treat unsolicited direct messages about presales, airdrops or "wallet validation" as scams.
  • Check the spelling of the domain character by character.
  • Be suspicious of urgency: "last chance", "your wallet will be locked".

Read what you sign

Connecting a wallet only shares your public address. Signing is what moves value or grants permission. Before approving, check:

  • Which asset leaves your wallet and how much.
  • The receiving address, compared with the one published on the official site.
  • Whether the request asks for an unlimited approval to spend a token. On EVM networks you can review and revoke approvals with tools such as revoke.cash.

A safer wallet setup

  • Use a hardware wallet for larger amounts; it keeps keys off your computer.
  • Keep a separate hot wallet with small balances for everyday connections.
  • Install wallets only from official sources and keep them updated.
  • Enable a strong device lock and, where offered, a wallet password or biometric lock.

If you think your wallet is compromised

  1. Create a new wallet with a new recovery phrase on a clean device.
  2. Move remaining funds to it immediately.
  3. Revoke token approvals from the old wallet where possible.
  4. Report the scam site or account to the platform where you found it.

What DPC will never ask you for

DPC pages never request seed phrases or private keys. Wallet connections and USDC transfers are approved inside your own wallet. The DPC security page lists official links and the wallets page explains the supported Solana wallets.

Official links in one placeCheck the DPC security page before connecting a wallet anywhere.

View DPC security

Frequently asked questions

What is a seed phrase?

A seed or recovery phrase is a list of 12 or 24 words that can recreate your wallet on any device. Anyone who knows it controls your funds.

Is it safe to connect my wallet to a website?

Connecting only shares your public address. The risk lies in what you sign afterwards, so connect only on official sites and read every transaction request.

What is a token approval?

On EVM networks, an approval lets a contract spend a token from your wallet. Unlimited approvals can be abused if the contract is malicious, so review and revoke ones you no longer need.

Should I use a hardware wallet?

For larger amounts, yes. A hardware wallet keeps private keys on a separate device and requires a physical confirmation for each transaction.

This guide is general information, not financial, legal or tax advice. Crypto assets are volatile and can lose value. Check the rules that apply in your country.

Keep reading

How-toBuy crypto with USDC on SolanaWallet setup, getting USDC and SOL, signing safely and verifying your transaction.Crypto basicsWhat is a crypto presale?How token presales work, why prices rise in stages and what to check before you take part.Blockchain technologyEVM-compatible blockchainsWhat EVM compatibility means for wallets, developers and users — and what a chain ID is for.