How do I keep my crypto safe?

Use a well-known exchange or wallet, turn on two-factor authentication, and move large holdings to a hardware wallet. Never share a recovery phrase—anyone who…

Use a well-known exchange or wallet, turn on two-factor authentication, and move large holdings to a hardware wallet. Never share a recovery phrase—anyone who has it controls the crypto.

Why crypto needs more care than a bank account

With a bank, a fraudulent payment can often be reversed and a forgotten password reset. Crypto mostly works the other way: transfers are usually final, and your recovery phrase is effectively the master key to everything. That design gives you real control, but it also means thieves aim at your phrase, your logins, and your mistakes — because there is no help desk that can undo a transfer once it leaves your wallet.

What to do, step by step

1. Use a well-known exchange or wallet, downloaded only from the official site or app store.
2. Protect every account with a unique password and two-factor authentication, preferably an authenticator app rather than text messages.
3. Write your recovery phrase on paper and store it offline. Never type it into a website or keep a photo of it.
4. Move large or long-term holdings to a hardware wallet, which keeps your keys off the internet.
5. Send a small test transfer first whenever you use a new address, and double-check the address before sending the rest.