Wallet Security Basics

Self-custody gives you complete control of your Monero — and complete responsibility for keeping it safe. The good news is that strong security comes down to a handful of habits you can adopt from day one. In this lesson you will learn the core practices that protect your XMR from loss, theft, and simple mistakes, without needing to be a security expert.

1. Protect Your Seed Above All Else

Your 25-word seed phrase is the master key to everything. The two unbreakable rules:

Back it up offline — handwritten on paper (or stamped in metal), stored somewhere safe.
Never enter it digitally — no websites, photos, cloud notes, emails, or chats. A real wallet only asks for your seed locally, when restoring.

If anyone ever asks you to "confirm" or "validate" your seed online, it is a scam. We go deeper on protecting the seed in Securing Your Seed.

2. Download Wallets Only From Official Sources

Fake wallet apps are one of the most common ways people lose funds. Always get software from its official site — for the official wallets, the getmonero.org downloads page. Where the project provides hashes or signatures, verify them. Be wary of search-ad links, app-store clones, and "support" agents sending you download links. More on this in Phishing and Scams.

3. Understand Password vs. Seed

Your wallet password encrypts the wallet file on your device — it stops someone using your computer from opening the app. It does not back up your funds. Only the seed recovers a lost or broken wallet. Use a strong, unique password and keep your seed backup; they do different jobs.

4. Verify Addresses Every Time You Send

When sending, paste or scan the recipient's address and glance at the first and last characters. Clipboard-hijacking malware can silently swap an address for an attacker's. For a new or important recipient, send a small test amount first. Remember: Monero transactions are irreversible. These habits come from Sending Monero.

5. Keep Your Devices Healthy

Keep your operating system and wallet software updated.
Run reputable security tools and avoid sketchy downloads and pirated software.
Lock your devices with a strong screen password or PIN.
Be cautious on shared or public computers — never set up a funded wallet on one.

6. Match Your Storage to Your Stakes

How you store XMR should reflect how much you hold:

Small, spending amounts — a phone or desktop "hot" wallet is fine and convenient.
Larger savings — consider a hardware wallet that keeps your spend key offline, introduced in Monero Wallet Types and detailed in Hardware and Cold Storage.

A common setup is a small phone wallet for daily use plus a hardware-backed wallet for long-term holdings.

7. Consider an Optional Passphrase

For extra protection you can add a secret passphrase on top of your seed, effectively creating a separate hidden wallet. It is powerful but unforgiving — forget it and the funds are gone. Learn the trade-offs before using it in Passphrase and Extra Protection.

8. Stay Calm and Skeptical

Most losses come from social attacks, not broken cryptography. Slow down when something feels urgent. No legitimate person needs your seed, your password, or remote access to your computer. "Giveaways" that ask you to send coins first are always fake.

Your Day-One Checklist

Seed backed up offline and verified.
Wallet downloaded from an official source.
Strong, unique wallet password set.
Storage method matched to the amount you hold.
A habit of verifying addresses and testing new recipients.

Security in Monero is not about paranoia — it is about a few consistent habits that quickly become second nature. Get the seed backup right, download carefully, and verify before you send, and you have eliminated the vast majority of real-world risks. To go further into the mindset behind all this, continue to the next course with Self-Custody Philosophy, or test yourself with the wallets and keys quiz.