Seed Phrases and Private Keys: Essential Wallet Security Rules

A recovery phrase is not an ordinary password

A recovery phrase—also called a secret recovery phrase or seed phrase—can give control of a self-custody wallet to whoever knows it. A private key can authorize transactions for an account. Someone who obtains either may be able to move assets, so do not send them to a person or website.

Clear protection rules

• Never share a phrase or private key with support, an exchange employee, or a friend.
• Do not enter it on a webpage reached from an ad or message. A legitimate support agent does not need it to verify your identity.
• Avoid photographing it or storing it in email or unprotected cloud storage.
• Keep a private, secure backup and understand the recovery process before you need it.
• Get wallet software from its official source and check the site address before connecting or signing.
• For custodial accounts, use a unique password and enable additional verification options where available.

If someone asks for it

Stop the conversation. There is no legitimate reason to send a phrase so someone can “check” a balance or recover funds. Scammers may impersonate support or clone a real website. If you entered the phrase on a suspicious site, follow the wallet’s official guidance from a trusted device and seek reliable security help; do not send the secret again.

A simple example

Hypothetical example: if someone claiming to be support asks for your recovery phrase “to verify ownership,” do not send it. Find the official support channel from a site you open yourself, not a link they sent.

Key takeaway

Treat a recovery phrase and private key as secrets that can control a wallet—not as support or identity details to share.

Related reading

• Custodial vs self-custody wallets
• How to avoid fake USDT tokens and links

Official source

• Ethereum security and scam prevention