Crypto wallet security checklist for Indian users

Seed phrase

• Write it on paper (or a metal backup). No screenshots, cloud notes, email or WhatsApp.
• Store it somewhere safe from fire and water, and consider a second copy in another place.
• Never enter it into a website, form or "validation" tool. Real apps never ask for it.

Separate wallets

Use at least two wallets:

1. Vault: long-term holdings. Rarely connects to apps. Ideally a hardware wallet.
2. Hot wallet: for airdrops, new apps and experiments. Keep only what you're willing to lose.

Hardware wallets

A hardware wallet keeps your keys off your phone and computer. Buy only from the maker's official store or authorised sellers, never second-hand. Set it up yourself and write down the seed it generates. How to set up a Ledger.

Exchange accounts

• Turn on an authenticator app for 2FA.
• Turn on withdrawal address allowlisting if your exchange offers it.
• Use a unique password and a separate email if you can.

Every transaction

• Check the network and the full address before sending.
• Send a small test amount first for large transfers.
• Read what you're signing. If a wallet pop-up asks for unlimited approval or "setApprovalForAll", stop and check.

Every few months

• Revoke old token approvals.
• Check your family knows how to access your crypto if something happens to you. Crypto inheritance guide.

Sources

• National Cyber Crime Reporting Portal (helpline 1930)
• Financial Intelligence Unit India (FIU-IND)

• security
• wallets