Crypto Security Checklist

2FA enabled on all exchanges

Use an authenticator app, not SMS

Unique passwords for every crypto account

Use a password manager

Withdrawal address whitelist enabled

Only allow withdrawals to pre-approved addresses

Email account secured with 2FA

Your email is the master key to account recovery

Seed phrase stored offline

Written on paper or metal, never digitally

Seed phrase has a backup in a second location

Protects against fire, flood, theft

Tested wallet recovery from seed phrase

Verify you can actually restore before storing large amounts

Hardware wallet for large holdings

Ledger, Trezor, or similar for amounts you can't afford to lose

Always verify addresses before sending

Triple check, especially the first and last characters

Send test transactions first

A small amount to verify the address works

Verify the correct network before sending

Wrong network = lost funds

Never shared seed phrase with anyone

No support agent, friend, or website should ever ask for it

Bookmarked exchange and wallet URLs

Never follow links from emails or DMs to log in

Regularly review and revoke token approvals

Use revoke.cash or similar to check active approvals