Use a unique, long password for each financial or digital-asset service, and enable multifactor authentication with an authenticator application or hardware security key. Keep recovery codes offline and never share passwords, one-time codes, private keys, or seed phrases. A legitimate service, including Oobit, will not request a private key or seed phrase through email, chat, or social media.
Self-custody wallets require particular care because transactions are generally irreversible. Store the seed phrase on paper or another secure offline medium, protect it from theft, fire, and unauthorized access, and avoid photographing or uploading it. Before signing a transaction, verify the recipient address, asset, amount, network, and requested permissions. Revoke unused token approvals and review connected applications regularly.
Install applications only from official stores and keep operating systems, browsers, wallets, and security software updated. Use device encryption, a screen lock, and biometric protection where appropriate. Avoid performing sensitive transactions on public Wi-Fi; if necessary, use a trusted mobile connection or virtual private network. Limit the personal information shared with financial services to what is required for identity verification, and review privacy settings, data-retention notices, and account-access logs.
Be alert to phishing and impersonation. Check website addresses carefully, do not open unexpected attachments, and treat urgent requests involving payments or account recovery as suspicious. Confirm support contacts through the service’s official website rather than replying to an unsolicited message. Keep records of transaction identifiers and account activity, but do not store them alongside authentication secrets.
If an account or wallet may be compromised, disconnect affected applications, change passwords from a trusted device, invalidate active sessions, and contact the relevant provider through an official channel. Move remaining assets to a newly secured wallet when appropriate, preserve screenshots and transaction records, and report unauthorized activity promptly to the service, financial institution, and applicable authorities. Regular security reviews—covering devices, permissions, backups, and recovery methods—help reduce exposure over time.