Dan Nelson / Ed Hardie / Unsplash

Security DOS and DON'TS for exchanges and hot wallets

By LeftFooted | bitcoinea | 2 Sep 2023


HOT WALLETS - Dos and don'ts

1. Don't take screenshots of the 12- or 24-word seed phrase, and don't store it anywhere that's digital or even worse, connected to the internet.

2. Ideally, learning the seed phrase by heart is the most secure way but that's hard to, next best thing is to write it down on a piece of paper and keep it somewhere safe, like a bank safety deposit box or somewhere you have access to that's not directly connected to you. Ie, not your wallet, for example.

3. Hot wallets are constantly targeted by phishing attacks. The latest which consists of NFTs sent to your wallet, promising hefty rewards if you click on a link. Do NOT click on that link.

4. Generally speaking, never ever click on a link that comes from a text, social media or your email

5. Consider spreading your crypto across different wallets. Even though it makes it a bit more difficult for you to keep track and not lose seed phrase, it also makes it more difficult for anyone targeting you. Plus, in the unfortunate and hopefully unlikely event of you losing access to one of them, you've got the others


CEX (Centralized Exchanges) - Dos and don'ts

1. Do NOT use the same password for your CEX account and the email account connected to it, that's asking for trouble.

2. Change both passwords frequently.

3. Ideally, the best way to store a password is in your head. Learn it by heart if you can, write it down a piece of a paper if you can't. Storing it online or digitally makes you more vulnerable.

4. Your password doesn't need to be a 90-character combination of symbols, numbers and letters, but it MUST be complex. "123456789" ain't gon' cut it. Choose a password you can remember, but make sure it's complex and not easy to guess. On top of that, make sure to add numbers and symbols. You don't need to add many, adding one or two already 5Xs your security.

5. If you hear hoofs... nothing is 100 percent secure but the top CEXs are still more secure than random CEXs you never heard of.

6. Look at the CEO - we've learnt this the hard way with FTX, right? If you don't like or trust the CEO of the CEX you've stored your crypto in, consider moving your funds. The writing is usually on the wall.

7. Use 2FA. All CEXs allow you to set up 2FA, some use text messages to your phone and some use 2FA apps like Google Auth. Some use a combination of both. I personally don't like text messages, I think it's less secure than AUTH, but either way, 2FA makes it infinitely more complicated to hack you.

8. Consider spreading your crypto across different CEXs. 

How do you rate this article?

15


LeftFooted
LeftFooted

I’m a left-footed duck that loves writing. I write about cars, watches, craft beer and, you’ve guessed it, crypto Also active on read.cash


bitcoinea
bitcoinea

Let’s talk crypto 💎💠

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.