How to keep your crypto wallet safe
Most people do not lose funds to hackers breaking cryptography: they sign something they should not have. These rules stop the most common attacks.
Your seed phrase is the wallet
Anyone with your 12 or 24 words owns your funds. No website, support agent, airdrop or bot ever needs it. Never type it anywhere except in your wallet app when you restore it, and never store it in a screenshot or cloud note.
Read before you sign
Drainer sites copy real projects and ask you to sign a transaction that hands over your tokens. Check the domain, read what the wallet says the transaction will do, and reject anything you do not understand.
- Signing a login message (like Sign-In With Solana) costs nothing and moves nothing.
- A transaction that transfers tokens or sets a delegate does move or expose funds.
Fake airdrops and DMs
Unknown tokens and NFTs that appear in your wallet often link to drainer sites. Do not interact with them. Direct messages offering help, jobs or exclusive mints are almost always scams.
Separate your wallets
Keep long-term holdings in a wallet you never connect to new sites, ideally a hardware wallet. Use a second wallet with small amounts for trying new tokens and apps.
Clean up permissions
On EVM chains, revoke token approvals you no longer need with a tool such as revoke.cash. On Solana, check for token account delegates and close accounts you do not use.
Nemira will never ask for your seed phrase or private key. Logging in only asks you to sign a message, which moves no funds.
Scan a token