The essentials
Check sources, device permissions, and the first-run process to reduce the risk of lookalike wallet apps.
Prepare
Use a source you have independently verified rather than an attachment in an unexpected message.
Review
Check the app identity and permissions before installing.
Verify
On first launch, never type your recovery phrase into a web form or support chat.
Follow through
Complete the backup process before reviewing your first transaction.
A useful safety boundary
Protecting wallet credentials is a personal responsibility. No message, call, or website verification request justifies disclosing a private key or recovery phrase.