Crypto Security: Keys, Wallets, Scams and 2FA

Start with

Security & Privacy · Beginner
Seed phrases explained
What the 12 or 24 recovery words actually encode, and how to keep them out of reach.
6 min readBeginner

Security & Privacy · Beginner
Two-factor authentication (2FA)
SMS codes, authenticator apps, passkeys and security keys compared for bank and crypto accounts.
5 min readBeginner
Security & Privacy · Intermediate
Phishing and address poisoning
Lookalike sites and lookalike addresses: how both scams work and the habits that defeat them.
5 min readIntermediate
Security & Privacy · Intermediate
Token approvals and wallet drainers
What you allow when you click Approve, how drainers exploit it, and how to revoke old permissions.
5 min readIntermediate

Address
The public string that receives coins and tokens, how it is derived and how to check it.
Airdrop
Tokens sent to many wallets at once — the tax angle and the scam angle.
Block explorer
The search engine for a public blockchain, and how to read a transaction page.
Cold storage
Keeping private keys offline: hot vs cold wallets and the risks of each.
Hash function
The fixed-length fingerprint behind blocks, addresses and mining.
Multisig
Wallets that need several keys to sign, and what an m-of-n set-up protects against.