Wallet Safety

<aside> ❗ BEWARE: NEVER share your wallet's private keys, seed phrases, or secret recovery phrases, in any situation.

</aside>

Do not share them with other community members, or anywhere on Discord or any other tool. If members of the DAO request them, or links from websites, this should be reported.

Be cautious when connecting to dApps as some of them will try to trick you into handing over your private keys or seed phrases.

<aside> ❗ BEWARE: MetaMask shares a seed phrase behind the scenes. If one account is compromised, so are all the others in the wallet.

</aside>

Web3 wallets manage blockchain accounts, which each have their own unique address. Accounts are comprised of a cryptographic key pair, one public, one private. The public key is generated from a private key and the address is derived from the public key.

Untitled-2021-03-27-1050.png

When you create an account in MetaMask, it uses the same private key to generate the public key and addresses of all the accounts created within the wallet. If a malicious actor were to get a hold of your seed phrase or private key, they could use it to sign transactions for any account they'd like. In practice, they could drain all assets in all of your accounts.

Pasted_Image_11_27_21__6_57_PM.png

<aside> ❗ BEWARE: if you lose you seed phrase, you will not be able to recover your assets

</aside>

Since accounts are comprised of public/private key pairs, if you lose your seed phrase you will not be able to sign transactions for your account, meaning your assets are essentially frozen. In addition, most wallets (i.e. apps allowing you to interact with your account) require your seed phrase for login, so you will not be able to access these either. Make sure you backup your seed phrases and private keys!

<aside> 💡 TIP: Custodial vs. non-custodial wallets

</aside>