1. Use cold wallets.
Cold wallets like Ledger, Trezor are not connected to the Internet, so they avoid most attacks.
This is the safest way to store cryptocurrency for the long term.
For: long-term investors, occasional traders.
2. Secure hot wallets.
If you use hot wallets like MetaMask, Trust Wallet, etc., you need to:
Enable two-step verification (2FA) with email, app (Google Authenticator).
Do not store recovery/seed phrases on online devices (email, cloud, notes).
Do not click on strange links - scammers often impersonate airdrops and technical support to trick you into giving up your private keys.
3. Remember and store your recovery phrase safely.
Do not share your recovery phrase (12/24 words) with anyone, even those claiming to be "support."
Write it down on paper, or use a metal wallet to avoid physical damage.
4. Carefully check contracts and websites.
Before connecting wallets, swapping tokens, or minting NFTs, please:
Verify the correct domain name.
Use analysis tools like Etherscan, DeBank, or RugDoc.
Check permissions (token approval) on dApps - you can use RevokeCash, Etherscan Token Approval Checker.
5. Diversify assets.
Do not put all assets in one wallet.
Use multiple wallets: trading wallet, long-term investment wallet, experimental wallet...
6. Use strong email and password.
The email registered for the exchange or wallet must have 2FA and a separate, strong password.
Avoid reusing passwords across multiple accounts.
7. Prioritize reputable exchanges.
If you leave cryptocurrency on an exchange (CEX), choose reputable exchanges like Binance, Coinbase, Kraken...
Withdraw to a personal wallet if you do not trade frequently.
8. Be careful with social media and friends.
Do not share wallet information, balance, and transactions publicly.
Scammers can exploit trust to carry out scams (social engineering).
9. Use personal devices, update regularly.
Trade cryptocurrency on trusted devices, do not use public computers.
Always update your operating system, antivirus software, and wallet.