Crypto Security 101: How to NOT Get Hacked & Lose Everything

Anon, if you don't want to lose your assets one day, you have to take care of your crypto OpSec (operational security).

Here are key practices to consider:

1. Dedicated Hardware:

Use a separate, new and wiped out computer exclusively for crypto activities.
Don't download any software, games and cracked torrents, they often contain malware! Don't watch movies and hentai on it, they often redirect to websites that can bring malware to your PC

3. Secure Wallet Management:

Cold Storage: Ideally utilize hardware wallets or other forms of cold storage to keep your private keys/seed phrase offline, significantly reducing the risk of online attacks. Ideally, set up a multisig if your bank is big.

Seed Phrase Handling: Generate your seed phrase offline and record it on paper or a metal card; NEVER store it electronically, in apple notes, via screenshot or somewhere else on a device. 

Avoid typing your seed phrase on internet-connected devices. ALWAYS Be cautious whenever you are asked to type your seed phrase, because unless you are installing a wallet, it's a SCAM.  Also a fake metamask or other wallet applications may auto install and prompt you to enter your seed phrase, so be CAREFUL


4. Transaction Vigilance: Always review transaction details before signing.  Always check what you are sending, what amounts, and who you are sending it to. Most of the wallets show how much ETH or other token you are sending, so always check everything is correct before sending the transaction

Avoid setting unlimited spending caps and regularly revoke unnecessary token approvals using tools like revoke cash. It is also a great way to increase your onchain footprint with transactions.

5. Browser Security: Use browsers with enhanced privacy settings and configure settings manually. Brave is okay. If you are using google chrome for some reason, do this:
 Settings > Downloads > Ask where to save each file before downloading: ON 

A person lost 6 figures because of that simple Google Chrome setting. https://x.com/FourVork/status/1886844629812674611 

6. Password Hygiene: Employ unique, complex passwords for each account and change them regularly. Consider using a reputable password manager like keepass to securely generate and store your passwords.

7. Two-Factor Authentication (2FA): Enable 2FA on CEXes and all other accounts, opting for authenticator apps or hardware tokens. Do not use SMS-based methods, which are more susceptible to attacks like simswaps.


8. Email Security: Use dedicated email addresses for different accounts to compartmentalize access and reduce the impact of potential breaches.


9. Physical Security: Ensure that devices used for cryptocurrency activities are physically secure and stored properly. Be mindful of your environment to prevent unauthorized access or observation. 

Do not be vocal about your crypto holdings, the less people know about your crypto net worth, the better. Ledger cold wallet co-founder was recently Kidnapped in Paris, and had his hand mutilated while he and his wife were kidnapped, forcing him to give up his crypto. 

So especially when travelling, make sure people do not know about your holdings to prevent to protect yourself against $5 wrench attacks.

10. Continuous Learning: Stay informed about the latest security threats and best practices. Engage with reputable sources and communities to keep your knowledge up-to-date. Ppl like @officer_cia have nice comprehensive guides on opsec, check them out

2. Cautious Online Behavior:

Do not click ANY suspicious links.

When you go on a protocol, make 100% you are clicking the OFFICIAL link. There are many fake links under twitter posts with inpersonating accounts. Also official accounts get compromised a lot, so do not click any links!

Also most of direct messages you receive on Discord and twitter are SCAM!. Always verify the authenticity of communications before engaging, or better never engage in DMs with crypto pc.