ANON
Privacy, without the mythsEthereum is public. Your identity is the missing piece. Build a privacy threat model before picking tools Address reuse and ENS can turn separate moments into a profile
Your wallet. Your boundaries.What your Ethereum wallet can reveal before you send anything Token approvals: disconnecting a dapp does not revoke its allowance Recovery phrase security: private, recoverable backups
Inside the privacy stackZero knowledge is a proof property, not a privacy guarantee The RPC connection is part of your privacy model Stealth addresses: private receiving, with caveats
ETH priceAboutEditorial policy

Recovery phrase security: private, recoverable backups

A recovery phrase can restore control over wallet accounts. Protect it from theft and accidental copies while keeping your backup recoverable. Follow the wallet maker’s backup-check process; never test the phrase in a website or support chat.

A durable metal backup case sits beside a separate wallet device.

Check a backup without exposing it

Keep recovery words out of the test plan

A recovery phrase is a set of secret words used by many wallets to restore access. A safe backup plan answers two questions: can someone steal it, and can you recover it when needed? Use the wallet maker’s backup-check method. A website that asks you to type the words is not a safe way to test them.

  • Record the method: Keep non-secret notes about which wallet and recovery process apply.
  • Check the storage: Consider who can reach the backup and what fire or water could do to it.
  • Plan for change: Review access when you move home or change devices.

Keep in mind: If your wallet uses a different recovery system, follow its own instructions. Do not assume every wallet has a recovery phrase.

Plan for losing a device

An app password and a backup solve different problems

Suppose a phone stops working. Knowing its wallet password may not restore accounts on a replacement device. The recovery method must work without the old installation. Record the wallet type and where to find its official recovery instructions in non-secret notes. Keep the secret recovery material separate from those notes.

A new password does not invalidate leaked recovery words

If someone has copied a recovery phrase, changing the app password does not remove that copy or change the accounts derived from it. Stop using the words in online forms and consult the wallet maker’s verified guidance for a compromised backup. An allowance review addresses a different problem: it cannot remove another person’s ability to sign with a stolen key.

What can a recovery phrase control?

Many wallets derive multiple accounts from one recovery phrase. Anyone who gets that phrase may be able to recreate those accounts and sign transactions. A wallet password usually protects a local installation; it is not a substitute for protecting the recovery phrase itself.

Avoid accidental copies

Photographs, email drafts, shared notes, and cloud clipboard histories can create extra copies. Each copy adds another place to secure. Store a durable offline backup in a location appropriate to your circumstances, considering theft, fire, and access by other people. Do not improvise encryption you cannot reliably restore.

How can you check a backup safely?

Use the wallet or hardware device’s documented backup-check procedure. Never test a phrase in a website or send it to support. Some wallets use different recovery systems, so follow the actual product’s instructions. Record enough non-secret context to know which recovery method applies.

Plan for the unavailable owner

A backup inaccessible to everyone can become a permanent loss if the owner cannot act. Think about an appropriate recovery plan without spreading the phrase widely. More sophisticated multisignature or social-recovery arrangements introduce their own trust and operational requirements; complexity is useful only when the people involved understand it.

Check the source

Ethereum.org documentation

This is an original, AI-assisted educational explanation. Sources and limitations are provided for verification; it is not personalized financial advice. Read the editorial policy or report a correction.

What your Ethereum wallet can reveal before you send anything

See what an Ethereum wallet can reveal through RPC requests, connected apps, and telemetry. Learn which settings and permissions to review separately.

Token approvals: disconnecting a dapp does not revoke its allowance

Understand Ethereum token approvals, how allowances differ from dapp connections, and why disconnecting a site does not remove its spending permission.