Wallet and account security
A signature, a seed phrase, a second factor and a withdrawal whitelist control different permissions. These files put wallet and account safeguards side by side, from what a signing button authorises to how keys, login checks and withdrawal restrictions fit together.
Files in this group
| Title and the question it covers |
|---|
| Wallet Signatures: What That Button Actually Signed A transfer moves an asset once. An approval grants permission to move assets later, repeatedly. The dangerous one can be the one that costs nothing to sign. |
| Why a Seed Phrase Must Never Be Photographed A seed phrase is the asset, not a password — there is no recovery. Leak paths listed as actions you actually take, plus backups and the optional 25th word. |
| Two-Factor: SMS, Authenticator App, Hardware Key The three methods fail in different ways. The one people miss: an authenticator app does not stop a real-time phishing relay. Only a domain-bound key does. |
| Is a Withdrawal Whitelist Worth Turning On A withdrawal whitelist restricts destinations. A separate waiting period can delay new addresses. Learn what to check and where API permissions need attention. |
| The Phishing Pattern Behind Airdrop Claim Pages Judging whether an airdrop is real is hard. Checking whether it exists on the project's own channels is easy. Swap the question and the category dissolves. |