Harden identity and access

Use a unique password, secure the recovery email and enable a verified authentication option where available. Never reuse one-time codes or approve an unexpected prompt.

Protect the device and browser

Install operating-system and browser updates, use a screen lock and remove unknown extensions. Avoid account access on public or shared computers.

Verify every value transfer

Recheck asset, network and address immediately before approval. Keep private keys and seed phrases offline and outside every support conversation.