Securing a Self-Custody Wallet
Last updated: October 29, 2026
A self-custody wallet puts the holder in full control of their funds, and in full charge of keeping them safe. The practices below apply to the Xverse extension and to self-custody crypto wallets in general.
Store the seed phrase offline
Write the recovery seed phrase on paper or a metal backup and keep it somewhere private, away from the computer. Never type it into a website, chat, or email, and never store it as a plain digital file or photo.
Watch for phishing attempts
Fake extension listings, lookalike websites, and messages posing as "Xverse support" are common. Verify URLs carefully, only install from the official browser web store, and remember that legitimate support never asks for a seed phrase.
Review extension permissions
Open the browser's extension management page occasionally and check which permissions Xverse and other extensions request. Remove extensions no longer in use.
Use a strong, unique password
The password that unlocks the extension on a device should be unique and not reused from another account. A password manager helps generate and store it.
Keep the browser and extension updated
Browser updates and extension updates often include security fixes. Allow automatic updates where possible, or check for updates periodically.
Double-check before approving transactions
Read the details shown in any transaction or connection prompt before approving it, including the destination address and the requesting site's domain name.
Warning
No legitimate service will ever ask for a seed phrase, request remote access to a device, or promise to "double" funds. Treat any such request as fraudulent.
If something looks wrong
Disconnect the wallet from the suspicious site immediately, review recent approvals in the extension, and avoid entering the seed phrase anywhere to "fix" an issue. See the FAQ for common troubleshooting questions.
Related articles