Security · FAQs
Frequently Asked Questions
What is the single most important thing to protect?
Your seed phrase (also called a recovery phrase). It is the list of words your wallet generates when you set it up, and it is the master key to your Malairte. Anyone who gets it can take your coins, and if you lose it nobody can restore your funds. Write it on paper, keep it offline in a safe place, never photograph it or store it in the cloud, and never enter it into any website. Protect the seed phrase and you protect everything.
What is the single most important thing to protect in my wallet?
Your seed phrase, also called your recovery phrase. It is the master key that can rebuild your entire Malairte wallet on any device, so anyone who obtains it can take all of your coins. It outranks your wallet password and even your individual private keys, because it can regenerate everything. Keep it offline, written on paper or metal, never photographed and never typed into any website or app that did not generate it. Your public address, by contrast, is not a secret and is safe to share when receiving coins. If you protect just one thing perfectly, make it the seed phrase.
Should I ever store my seed phrase on my phone or in the cloud?
No. A seed phrase stored on a phone, in a notes app, in cloud storage, in email, or in a screenshot is exposed to anything that can reach that device or account. Phones get lost, accounts get breached, and synced photos travel further than you expect. The safest place for a seed phrase is offline and physical: clearly written on paper or stamped into metal, kept somewhere secure. Make at least two copies in separate locations to guard against fire or loss. Keeping the phrase off the internet is the single habit that prevents the most common form of permanent crypto loss.
How do I know an official Malairte download is genuine?
Reach the official Malairte site yourself by typing the address or using a saved bookmark, never by clicking a link someone sent you. On that official page, find the published checksum, usually labelled SHA-256, and the download. After downloading, generate the checksum of your file using your operating system tools and compare it character for character with the official value. If a cryptographic signature is also offered, verifying it confirms the file came from the project. If the checksum matches, the file is intact; if it does not, delete it and download again. This routine defeats tampered and swapped files.
What is the difference between a hot wallet and cold storage?
The difference is internet exposure. A hot wallet runs on a device that is online, which makes it convenient for everyday use but reachable by malware and phishing. Cold storage keeps your private key offline, on a hardware wallet or an offline machine, so a remote attacker cannot touch it. Hot wallets suit small, frequently moved amounts; cold storage suits larger balances you intend to hold. Many careful holders use both, keeping spending money hot and sweeping the bulk into cold storage. Matching the storage type to the amount and how often you use it is a core security skill.
Will anyone legitimate ever ask for my seed phrase?
Never. No genuine wallet, no real support agent, no exchange, and no Malairte project member will ever ask you to share your seed phrase or private key. This is the most useful rule in all of crypto security because it has no exceptions. A seed phrase grants complete control of your coins, so any request for it, however official or helpful it appears, is an attempt to steal from you. If a website, app, message, or person asks you to enter or send your recovery phrase, stop immediately and walk away. Treat the request itself as proof of a scam.
How can I tell a phishing site from the real Malairte site?
Phishing sites are near-perfect copies designed to capture your keys. Defend yourself by reaching the site under your own steam, typing the address or using a bookmark rather than clicking links. Inspect the web address character by character, since scammers register lookalikes with swapped letters, extra words, or odd endings. Be suspicious of pressure to act quickly or to enter your seed phrase to unlock something. Hover over links to see where they truly lead. The real site never needs your recovery phrase. When anything looks even slightly off, stop and re-check against a source you already trust before entering anything.
Is my mining rig a security risk I need to worry about?
Yes, to a degree, because a mining rig is an ordinary computer that runs unattended for long periods, which makes it a target. The main risks are running unverified mining software that hides malware, and leaving the machine with weak remote access. Protect it by building on a clean, updated system, downloading miners only from official sources and verifying them, refusing pre-configured miners shared in chat groups, and keeping your wallet keys off the rig entirely. Mine to an address whose rewards you sweep to safer storage. Watch for dropped hash rate, unknown processes, and any changes to your payout address.
What should I do first if I think my wallet is compromised?
Stay calm and work out what was exposed. If your seed phrase itself may have leaked, the whole wallet is compromised and you must act fast: create a new wallet with a fresh seed phrase on a clean, trusted device, then move your coins to the new address quickly. Do not build the new wallet on a machine you suspect is infected. If only a device was lost but the seed phrase stayed private, secure related accounts and move any hot-wallet balance to safety. Afterward, find the root cause and fix it, and ignore any service promising to recover stolen coins for a fee.
How many backups of my seed phrase should I keep?
At least two, kept in separate secure locations, and ideally no more than three. Two copies in different places protect you against a single fire, flood, or misplacement, while keeping the number low limits the chance of theft. Each copy should be physical and offline, written clearly in order on paper or stamped into metal, never stored digitally. Avoid scattering many copies around, since every additional copy is another thing that could be found. A balanced approach defends against both losing the phrase and having it stolen, which are the two opposite dangers every backup plan must address at once.
Can a service really recover coins that were stolen?
No. Blockchain transactions are final and cannot be reversed, so no legitimate service can retrieve coins that have already been moved by a thief. Any company or individual that contacts you after a loss promising to recover your funds for an upfront fee is running a second scam that preys on desperation. They will take your payment and deliver nothing, or extract more details to steal further. The honest, protective response to a loss is to secure whatever remains, fix the root cause that allowed the theft, and ignore recovery offers entirely. Prevention through good habits is the only real protection that exists.