Key Takeaways
- Most crypto losses come from human mistakes and scams, not broken technology.
- A hardware wallet, offline seed phrase backup and app-based two-factor authentication cover the biggest risks.
- Verify addresses, URLs and transactions before you confirm anything.
- Keep only what you need on exchanges and in hot wallets.
In crypto, you are your own bank, and that means security is your responsibility. These ten habits will protect you from the vast majority of hacks, scams and costly mistakes.
1. Use a hardware wallet for long-term holdings
A hardware wallet from a reputable brand such as Ledger or Trezor keeps your private keys offline and requires physical confirmation for every transaction. Buy only from the manufacturer's official store. Read hot vs cold wallets.
2. Back up your seed phrase offline
Write your seed phrase on paper or metal and store it somewhere secure. Never photograph it, email it or save it to the cloud.
3. Never share your seed phrase or private keys
No legitimate company or support agent will ever ask for them. Anyone who does is a scammer.
4. Turn on strong two-factor authentication
Use an authenticator app or a hardware security key on every exchange and email account. Avoid SMS codes where possible, because they're vulnerable to SIM-swap attacks. Ask your mobile carrier about adding a port-out PIN.
5. Secure your email
Your email can reset passwords for everything else. Use a unique, strong password, a password manager and app-based 2FA. Consider a dedicated email address only for crypto accounts.
6. Watch out for phishing
Bookmark official websites and type URLs yourself. Be wary of sponsored search ads, links in emails and texts and look-alike domains. Read our guide to spotting crypto scams.
7. Double-check every address and transaction
Clipboard malware can swap a copied address for an attacker's. Verify the first and last several characters, confirm addresses on your hardware wallet's screen, and send a small test transaction before large transfers. Make sure you're using the correct network.
8. Be careful what you sign
When using DeFi or NFT sites, read what each transaction approves. Unlimited token approvals on a malicious contract can drain your wallet. Periodically review and revoke approvals you no longer need, and consider a separate "burner" wallet for experimental apps.
9. Don't keep too much on exchanges
Exchanges are convenient but are custodial and can be hacked, as the 2026 Binance hack showed. Keep only what you're actively trading and withdraw the rest to your own wallet. Use reputable, regulated platforms from our exchange rankings.
10. Keep your devices and software updated
Install updates for your operating system, browser, wallet apps and hardware wallet firmware. Only download software from official sources, and avoid pirated software and suspicious browser extensions.
Bonus: stay private
- Don't publicly share how much crypto you own.
- Be careful about posting wallet addresses linked to your identity.
- Have an inheritance plan so loved ones can access funds if needed, without exposing your keys today.
Security checklist
| Task | Why it matters |
|---|---|
| Hardware wallet for savings | Keeps keys offline |
| Seed phrase on paper or metal | Recovery without online exposure |
| Authenticator app or security key | Stops SIM-swap and password attacks |
| Bookmarked official URLs | Avoids phishing sites |
| Test transactions | Catches address and network mistakes |
| Revoke old approvals | Limits wallet-drainer damage |
Frequently asked questions
What is the safest way to store crypto?
For most people, a reputable hardware wallet with an offline seed phrase backup is the safest option for long-term holdings.
Is it safe to keep crypto on an exchange?
Reputable exchanges invest heavily in security, but you're trusting a third party with your funds. Keep only what you need there.
What should I do if I think my wallet is compromised?
Immediately create a new wallet with a new seed phrase on a clean device and move your remaining funds there.
This guide is for educational purposes only and is not financial advice.
This content is for educational purposes only and is not financial advice. Cryptocurrency investments are volatile and risky. Some links may be affiliate links — see our disclosure.