> For the complete documentation index, see [llms.txt](https://docs.leather.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.leather.io/wallet-and-security/secure-crypto-wallet.md).

# How To Secure My Crypto Wallet

The basic steps that keep a crypto wallet safe, and the Leather features that support them.

A self-custodial wallet such as Leather leaves security to you. Bitcoin and Stacks transactions cannot be reversed, and nobody can restore a wallet whose recovery phrase is lost. These steps prevent the most common losses.

## Back up your recovery phrase

Your recovery phrase, called the Secret Key in Leather, restores the wallet on any device. With a safe backup, a lost, broken or stolen device does not cost you your assets.

* Write the phrase down and keep it away from the device you use the wallet on.
* Keep it where other people cannot reach it, such as a safe or a safe deposit box.
* Keep more than one copy, in separate places.
* Storing the phrase digitally, including in a password manager, exposes it to anyone who gets into that account.

See [Secure Your Secret Key](/wallet-and-security/secure-secret-key.md).

## Use a strong password

The password stops someone with access to your computer from opening Leather. Use a password nobody can guess from what they know about you. Leather requires at least 12 characters and checks the strength. See [How Leather Evaluates Password Strength](/wallet-and-security/leather-password-strength.md).

## Avoid public networks for transactions

On public Wi-Fi, for example at an airport or a café, an attacker can set up a fake network. The attacker then sees the traffic that passes through it. This is a man-in-the-middle attack. Send transactions from your own network or your mobile connection.

## Watch out for phishing

Scammers copy websites, emails and support accounts to get your recovery phrase or to make you sign a harmful transaction.

* No real support agent, Leather's included, asks for your Secret Key.
* Check the domain of every website before you connect Leather or enter anything.
* Do not open links or download files from messages you did not expect.
* Read what Leather asks you to sign before you approve it.

## Consider a hardware wallet

With a Ledger device, your keys never leave the device and every transaction needs approval on it. See [Connect Leather with Your Ledger Hardware Wallet](/get-started/connect-ledger.md).

## Related

* [Security](/wallet-and-security/security.md)
* [What is a Recovery Phrase?](/get-started/recovery-phrase.md)