Practical habits for keeping a self-custody wallet safe while using Web3 apps.
Seed phrase offline
Your recovery phrase should never be typed into a website, chat, or email - only into your wallet app itself.
Verify before signing
Read what a transaction actually does (which contract, which function, how much value) before approving it in your wallet.
Limit approvals
Token approvals grant a contract permission to move your tokens - review and revoke unused approvals periodically.
Use a fresh wallet for testing
When trying an unfamiliar contract, consider a wallet with only the funds you're willing to risk.
Every action this app can perform is limited to what your wallet explicitly approves - it cannot move funds without your signature, and it never asks for your seed phrase.
The single biggest cause of self-custody losses is not smart-contract bugs but phishing: fake sites, fake support agents, and malicious links that trick people into approving something they didn't intend to.
Will this app ever ask for my seed phrase or private key?
No, never. No legitimate Web3 app needs it - wallet connections use your browser extension or WalletConnect, which never exposes your private key to the site.
Want to see the math with numbers you control?
Open the simulator