Advices to secure your wallet

Crypto-assets are stored in wallets. You can either manage your own wallets or use a service provider like GOin.

Risks

The crypto-assets in your wallets are exposed to various risks, the main ones being:

Phishing attacks

Hackers can send emails, SMS or messages on social networks that appear to come from a legitimate source, such as a crypto-asset exchange platform or a wallet service provider. These messages encourage users to click on a malicious link or provide their login information.
Brute force attacks

Hackers can try to guess your password or passphrase using brute force software. This is especially risky if you use a weak or easy-to-guess password.
Keylogger attacks

A keylogger is a type of malware that records all the keystrokes you type on your keyboard. This can include your passwords, passphrases, and other sensitive information.
Code injection attacks

Hackers can inject malicious code into a website or application that you use to access your wallet. This code can allow them to steal your funds or take control of your wallet.
Software vulnerability attacks

Wallet software may contain vulnerabilities that can be exploited by hackers. It is important to keep your wallet software up to date with the latest security patches.
Human errors

Human errors, such as losing your passphrase or sending funds to the wrong address, can also lead to the loss of your funds.

Advices

Choose secure wallets for your personal management
- Hardware wallets. Store your private keys offline, making them inaccessible to hackers. They are recommended for long-term storage of your crypto-assets or if their value is significant. The most well-known are Ledger* and Trezor*.
- Paper wallets. Print your private keys on paper and keep them in a secure place, such as a safe. If a malicious person recovers this paper wallet, they will have instant access to your crypto-assets.
- Software wallets. Choose a reputable wallet with advanced security features. When the value of your crypto-assets is significant, we recommend using this type of wallet only in addition to a hardware wallet to store the crypto-assets needed for your daily transactions. The most well-known are Metamask* and Trust Wallet*.
Use a strong and unique password

Your password should be at least 16 characters long and a combination of uppercase and lowercase letters, numbers, and symbols. Do not use the same password for other online accounts.
Enable two-factor authentication (2FA)

2FA adds an extra layer of security by requiring you to provide an additional code besides your password when logging in.
Be careful with links and websites

Never click on a link in an unsolicited email or message, even if it appears to come from a legitimate source. Always check the URL of the website before entering your information.
Keep your software up to date

Install the latest security patches as soon as they are available.
Back up your passphrase

Your passphrase is the key to your wallet. It is important to store it in a safe and offline place. Never share it with anyone.
Be aware of scams

There are many scams related to crypto-assets. Be wary of offers that seem too good to be true (e.g. a message offering to multiply your crypto-assets by sending them to a specific wallet).
Diversify

Do not put all your crypto-assets in the same wallet. This limits the impact in case of theft or loss of one of your wallets.
Engage a qualified service provider

You can delegate the custody of your crypto-assets to a service provider like GOin, which, as part of its custody services, implements a set of procedures and policies to manage those risks.

More information:

* The providers mentioned in this document are the most well-known and used at present. However, their solutions have experienced vulnerabilities in the past. GOin recommends that you do your own assessment before using their solutions.