Using FOMOSCAN
How do I keep a web3 wallet secure?
Wallets are almost never broken cryptographically. People lose funds by signing something they did not read, by reaching a fake site through a search result or a chat link, or by using one wallet for both long-term holdings and speculation. Fixing those three habits removes the large majority of real-world risk.
The three habits
- Separate wallets. One for holdings that never signs anything speculative, one funded only with what you are actively trading. This alone bounds every other mistake.
- Bookmarks only. Reach trading sites from your own bookmark, never from a search ad, a chat link, or a reply on a post.
- Read what you sign. Token approvals are the mechanism behind most drains. If a transaction asks for spending permission you did not intend to give, reject it.
Requests that are always fraudulent
- Anyone asking for your seed phrase or private key, for any stated reason.
- Support that contacts you first, in a DM, offering to fix a problem.
- A 'wallet validation', 'sync' or 'migration' step that requires entering a phrase.
- An airdrop that must be claimed by connecting and signing an unreadable payload.
Last reviewed