Wallet safety depends on the device environment
Unpatched systems, unknown software, browser extensions, and remote-control tools can all reduce confidence in what you see and sign.
Use a device you control for important wallet actions and keep its software maintained.
Screen locks and account separation matter
Use a reliable device lock and avoid leaving wallet or browser sessions exposed to other users.
Before sending a device for repair, consider whether wallet data and browser sessions should be removed or migrated.
Do not blindly trust the clipboard
Malware can replace copied addresses. After pasting a destination, read it again in the wallet’s final confirmation screen.
Recovery phrases should not be stored as ordinary clipboard snippets or password notes.
Public computers and networks increase uncertainty
A public computer can retain software, extensions, or keystroke capture that you do not control. Public Wi-Fi can also make it harder to trust the environment.
Use read-only access for public chain information rather than importing a wallet into an uncontrolled machine.
Remote control deserves special caution
A person controlling your screen may be able to guide clicks, view sensitive information, or pressure you into signing.
Stop the session and inspect the device if anyone asks to remotely operate your wallet.
A legitimate support process does not require someone else to operate your signing interface.
Device check before an important transfer
Confirm the OS and browser are in a known state, close unnecessary screen-sharing or remote-control software, and look for unfamiliar extensions or persistent pop-ups.
Reduce exposure before device repair
After copying an address, compare it again in the final wallet prompt. Stop if the clipboard changes unexpectedly or if the wallet request does not match the page action.
When finished, end unneeded sessions and lock the device. Resolve device anomalies before continuing asset operations.
- Keep system, browser, and wallet software maintained
- Minimize unknown extensions and high-privilege tools
- Do not import a wallet on a public computer
- Re-check pasted addresses in the final confirmation