How to Keep Your Crypto Safe: A Self-Custody Wallet & Seed-Phrase Security Checklist

One of the best things about crypto is that you can truly own it — held in your own wallet, under your own control, with no bank or company in the middle. And keeping it safe is more straightforward than most people expect. A handful of simple habits is all it takes to protect your wallet for the long run.

This is your practical, do's-and-don'ts checklist for self-custody security — how to store your seed phrase the right way, lock down your wallet, and trade and hold with total peace of mind.

The golden rules of wallet security (quick version)

Write your recovery phrase down offline — never store it as a photo, screenshot, or cloud note.
Never share your recovery phrase or private keys with anyone, ever.
Keep backups in more than one safe, private place.
Use a reputable wallet and keep your device and apps up to date.
Slow down with links and messages — confirm you're on the official app or site.

Master those five and you've covered the vast majority of what wallet security is about. Here's how to put each into practice.

First, the one thing that matters most: your recovery phrase

When you set up a self-custody wallet, you're given a recovery phrase (also called a seed phrase) — usually 12 or 24 words. This phrase is the master key to your wallet: it can restore your crypto on any device, which is exactly why it deserves a little care.

The good news is that protecting it is simple. Keep your recovery phrase private and offline, and you hold the keys to your own crypto — securely and entirely on your terms. (New to the idea of holding your own keys? See our guide to what self-custody really means.)

How to store your seed phrase (the right way)

Do:

✅ Write it down on paper — or, even better, stamp it onto a metal backup plate that survives fire and water.
✅ Store it somewhere private and secure, like a safe or a locked drawer at home.
✅ Make a second copy and keep it in a different safe location, so a single accident never locks you out.
✅ Record the exact words in the exact order. The sequence matters.
✅ Keep it to yourself. The fewer people who know it exists, the better.

Don't:

❌ Don't take a photo or screenshot of it. Photos sync to the cloud and can be exposed.
❌ Don't save it in your email, notes app, password manager, or cloud storage. Keep it offline.
❌ Don't type it into any website or app except your wallet, during a genuine restore that you initiated.
❌ Don't share it with anyone — not "support," not a friend, not a giveaway. No legitimate service ever needs it.

That's really the heart of it: an offline, private recovery phrase is a safe recovery phrase.

Securing your wallet and device

Beyond the recovery phrase, a few everyday habits keep your wallet itself secure:

Do:

✅ Use a reputable, well-reviewed wallet from official app stores or the official website.
✅ Keep your wallet app and device software updated — updates often include security fixes.
✅ Lock your device with a strong passcode, and your wallet with its own password or biometrics.
✅ Use a secure internet connection, and be cautious on public Wi-Fi.
✅ Double-check addresses before sending — confirm the first and last characters match.

Don't:

❌ Don't download wallets from random links or unofficial sources.
❌ Don't approve transactions or "connect wallet" prompts you don't recognize.
❌ Don't reuse weak passwords across apps.
❌ Don't leave large amounts where you don't need to — move long-term holdings to your most secure storage.

A few easy habits that beat phishing

Most attempts to reach your crypto aren't high-tech — they're someone trying to trick you into handing over your recovery phrase or approving something. The defenses are simple and quick to build into your routine:

Treat your recovery phrase as something no one ever needs to see. That single mindset defeats nearly every phishing attempt.
Reach support through the official app or website only — never through a link in a DM or email.
Pause when something feels urgent. Pressure is a classic tactic; a real situation can wait for you to verify it.
Bookmark the official site and use your bookmark instead of search results or links.

For a friendly rundown of the specific tactics to sidestep, our guide to common P2P scams pairs perfectly with this checklist.