EntryCrypto

Crypto security checklist

20 checks covering exchange account hardening, seed phrase storage, token approvals, phishing defenses and device hygiene. Progress is saved in your browser.

0 of 20 done.

Exchange account

Two-factor authentication uses an authenticator app, passkey or hardware key, not SMS. Guide
Exchange login email is unique, not reused elsewhere, and itself protected by 2FA.
Anti-phishing code is set so genuine exchange emails carry your secret phrase.
Withdrawal address whitelist is enabled with a 24h lock on changes.
API keys are IP-restricted and have withdrawal permission disabled.
Reviewed active sessions and devices this month; removed unknown ones.
Only trading capital stays on the exchange; long-term holdings are in self-custody.

Wallet and seed phrase

Long-term holdings live in a hardware wallet bought directly from the manufacturer. Guide
Seed phrase exists only offline (metal or paper), never in photos, cloud notes or password managers.
Recovery has been tested by restoring the wallet from the seed phrase.
A separate hot wallet with small balances is used for minting, airdrops and new dApps.
Token approvals reviewed and unused ones revoked in the last 90 days. Guide
Never sign a message or transaction you cannot read; hardware wallet shows decoded data.

Phishing and scams

Exchange and dApp URLs are bookmarked; never reached via search ads or DMs. Guide
Treat every unsolicited DM, "support agent" and airdrop claim as a scam by default.
Browser extensions audited; the wallet extension is the only one with page access on dApp sites.
Always verify the first and last 6 characters of an address after pasting.

Devices and identity

OS, browser and wallet firmware are up to date with automatic updates on.
Mobile carrier account has a port-out PIN to prevent SIM swapping.
Unique passwords via a password manager; breached passwords rotated.