Crypto Security Check

All Security Tips

As NGRAVE focuses on pioneering and perfecting digital protection, discover here the tips we give to the participants of our Security Self-Audit.

Key Management

Generate Private Keys Offline: Whenever possible, generate your private keys on an air-gapped device to ensure they are not exposed during creation.
Avoid Screenshots or Cloud Storage: Never store recovery phrases digitally or on devices connected to the internet.
Use Steel and Encrypted Backups: Protect recovery phrases from fire, water, and physical decay by using a steel backup. Use encrypted backups for an extra layer of security.
Store Backup in Multiple Locations: Store backups in physically secure places like fireproof safes or safety deposit boxes — and never keep them all in the same place.
Move Away from Mnemonic Phrases: Consider using more advanced solutions like the NGRAVE Perfect Key instead of traditional 12/24-word recovery phrases.

Recommended Partner Resources:

Send Funds from Exchange to Wallet: Locate the "Send" option on your exchange, input your wallet’s address, and transfer your assets — after triple-checking the address.
Use Hot Wallets with Caution: Never store large amounts in hot mobile wallets. Use them as “spending” wallets only.
Limit Dapp Approvals: Only approve contracts you trust and need, and use allowance checker tools to revoke old permissions.
Separate Wallets by Purpose: Use different wallets for trading, minting, storing, or experimenting — don’t mix them.
When in Need of an Exchange make sure it's one from this list

Recommended Partner Resources:

Use strong, unique passwords for all your wallets and accounts. Use Have I Been Pwned to check if your accounts are compromised.
Use a password manager (like Bitwarden or 1Password) and create unique, strong passwords.
Do not forget to configure 2FA (ideally via Google Authenticator) for ALL your crypto platforms.
Avoid SMS verification as SIM swap hacks are common.
Be cautious of phishing emails or websites pretending to be wallet providers or exchanges. Always double-check URLs and avoid clicking on suspicious links.

Recommended Partner Resources:

Don’t Let Hardware Wallets Collect Dust: If you own one, use it actively to move assets off exchanges or hot wallets.
Use Air-Gapped Wallets: For long-term storage, keep your keys offline with devices that have no internet or wireless connection.
Review Cold Wallet Strategy: Ensure your cold storage setup (air-gapped devices, steel backups) is not only implemented but tested and up to date.
Change Wallets if Compromised: If a seed phrase was ever shown, typed, or shared on a connected device, create a new wallet and transfer funds immediately.

Recommended Partner Resources:

Use Multisig for High-Value Accounts: Require multiple keys to authorize transactions to greatly reduce single-point-of-failure risk.
Combine Layers: Use a mix of air-gapped cold wallets, multisig, and steel backups for layered defense.
Split Key Backups: Consider NGRAVE GRAPHENE or similar methods to split backups securely.

Recommended Partner Resources:

Limit Who Knows You Own Crypto: Avoid discussing your crypto holdings publicly or revealing your setup, even to friends or family.
Beware of Social Engineering: High-value holders are targets. Be skeptical of any unsolicited contact asking for wallet info or action.
Think About Physical Safety: If your crypto stack is substantial, your real-world safety matters too. Consider physical OPSEC — alarm systems, safe storage, discretion.
Plan for Worst-Case Scenarios: Think about what would happen if someone physically threatened you for access. Build your setup to minimize what a single compromise could expose.

Recommended Partner Resources:

Create an Inheritance Plan: Ensure trusted loved ones can access your crypto in an emergency without compromising it prematurely.
Use Secure, Clear Instructions: Avoid hiding information so well that no one can find it. Use tamper-proof envelopes or trusted legal channels.
Regularly Revisit Plans: Life changes — so should your contingency plan.

Don’t Let Complacency Creep In: Just because your setup is solid doesn’t mean it’s perfect forever.
Fear of Forgetting: Have clear, documented procedures for backups so you’re not the single point of failure.
Understand Every Part of Your Setup: If you’re using multisig, steel backups, or anything advanced — be sure you truly understand it. Complexity can backfire if misunderstood.

Don’t Rely on Old Practices: Crypto security evolves fast. What worked in 2024 might expose you in 2025.
Review Security Regularly: Treat security like hygiene — it requires regular review, not a one-time setup.
Stay Informed on New Threats: Follow credible sources (e.g., security researchers, reputable crypto blogs, NGRAVE Newsletter) to keep up with evolving attack vectors.