<aside> 🙋 Take a few important steps to secure your wallet.

</aside>

1) Revoke permissions

So, make sure to revoke accesses you gave via Metamask by signing in your wallet when accessing Web3-based sites: revoke.cash or https://etherscan.io/tokenapprovalchecker

2) Avoid blind signatures

Don’t trust web3 marketplaces you don’t know (do your own research before signing in Metamask to give access to your wallet) and don’t “sign” if you don’t know what it is you’re signing.

3) Beware of phishing emails

The mix of web2 tools and web3 platforms can be dangerous so make sure that the sender email address is accurate and that the information is confirmed on the platform itself.

4) Store most of your cryptocurrency and NFTs in a cold wallet

... like Ledger or Trezor. Cold means that they are not linked to the Internet, like Metamask, which is a hot wallet.

5) Make sure that the NFT you get is from a verified collection or account.

Opensea uses a checkmark like Twitter for the large collections or make sure the collection you consider acquiring is from a reliable source.

6) Save your private key offline

... or in a secure password management system. The safest is still to write down the 12 words on a piece of paper saved in your safe or at your notary.

Further reading:

OpenSea Hack: Key Takeaways on Web3 Security

Beginner's Guide: How to Safeguard Your NFT Collection Against Hacks