📚 How to not get hacked

Important stuuf!

  1. If you are using @metamask_io extension, do not install any other extensions in the same browser. Some 3rd party extensions can screen read, view & manage browser stuff.
  2. Lock your metamask when not needed & check for which sites have been granted access to your account at times & revoke unnecessary ones.
  3. Have some browser discipline & use different browser for different types of activities. Have a separate browser for #web3 with metamask alone (recommend @brave). Turn on shields whenever possible.
  4. Review your browser security & privacy settings when installed. Don't use password managers if possible (especially in the browser where metamask is installed) Don't use multiple web3 wallets in a same browser.
  5. Don't store or save your seed phrases in any digital services. Write it down somewhere safe or use @argentHQ for better security.
  6. Cleanup your browser history & cache at some frequency to remove the clutter & unwanted caching of data + cookies.
  7. Most important of all, think before proceeding to a website & allowing access to your account. Don't ignore security warnings from your browser.
  8. Don't import your wallet in whatever wallet providers you come across. Limit yourself to a max of 3 providers.
  9. Try not to use mobile phones for web3 activities as of now if possible. It's easier to backdoor mobiles than a PC. **Don't use APKs to install applications on your mobile.**
  10. Have separate wallets for various usecases (to hold funds, to participate in a DAO, to invest & to experiment)
  11. Be super vigilant. Don't let your guard down, even in a rush.
Last updated on by luxumbra