SECURITY GUIDE

Your keys.
Worth protecting.

Self-custody is a responsibility at every step.
Build these habits before making your first transfer.

REMEMBER

Never share your recovery phrase. With anyone.

This includes anyone claiming to be LithKey support, technical staff, an airdrop provider or an asset recovery service. This website never asks for your phrase, private key or wallet password.

01

Keep backups offline

Record recovery words in order, verify them and store them safely. Avoid photo galleries, cloud drives, email, chats and online forms. Label separate wallet backups and never share them.

02

Check the complete address

Recheck an address after pasting it. Be alert to clipboard substitution and lookalike addresses. Verify the network and token; do not rely only on the first and last characters.

03

Authorize what you understand

Read the amount, network fee, recipient and final confirmation. Cancel when the purpose, contents or request source is unclear. Do not skip checks because someone is rushing you.

04

Protect your device and password

Keep your system updated and use a device lock and strong wallet password. Keep the device under your control. Avoid unknown installers, remote-control tools and screen sharing.

05

Verify on-chain confirmation

Submission is not proof of receipt. Check the network, hash and final status. Fee estimates and RPC data may become stale or unavailable. Investigate the original transaction before sending again.

06

Understand the limits

The platform cannot recover your phrase or reverse a completed on-chain transfer. Safeguards cannot remove all risks. The current version has not completed independent security acceptance or funded end-to-end acceptance.

Know your official destination.

The primary LithKey domain is lithkey.com; lithkey.app is a brand domain. Do not trust a download simply because it appears in a search ad or a direct message.