SECURE YOUR OKX WALLET

Protect the keys, approvals and transactions that control your crypto.

OKX Wallet is a self-custody Web3 wallet. Protect the recovery method that applies to your wallet, verify every DApp interaction and never sign a transaction or message you do not understand.

First, know which OKX Wallet you use.

OKX Wallet supports different wallet and account-management options. The security and recovery process can therefore depend on the wallet type and setup you selected.

If your wallet uses a traditional Seed Phrase, protect it as the master recovery credential. If your wallet uses another supported recovery method, follow the recovery process provided for that specific wallet.

What should I never share?

Never share your Seed Phrase, Private Key, wallet password or sensitive recovery credentials. Legitimate support should not need these secrets simply to help with an ordinary wallet problem.

What if someone says my wallet needs verification?

Stop. Be suspicious of any website, message or person telling you to enter your Seed Phrase or Private Key to verify, synchronize, unlock or secure your wallet.

Does changing my wallet password protect an exposed Seed Phrase?

No. If someone has your Seed Phrase or Private Key, changing a local wallet password does not remove their control. The safer response is to create a new wallet with new recovery credentials and move assets after carefully verifying the destination.

What is a token approval?

A token approval gives a smart contract permission to operate specified tokens from your wallet. Review approvals regularly and revoke permissions you no longer need.

OKX WALLET SECURITY

Protect the recovery method, then verify every interaction.

Work through these checks one at a time. Your wallet may provide warnings and security tools, but the final decision to connect, approve or sign remains yours.

Protect your wallet recovery method

OKX Wallet supports different wallet-management and recovery options. Identify the recovery method used by your wallet and protect the credentials that can restore access.

Click to see protection steps

Step-by-step

Open OKX Wallet only through the official application or browser extension.
Identify the recovery method used by your wallet.
If your wallet uses a seed phrase, secure the phrase in a private physical location.
If your wallet uses another supported recovery method, follow the instructions shown by the legitimate OKX Wallet application.
Keep recovery information away from unauthorised people.
Never store a seed phrase in an ordinary screenshot, email or unprotected cloud document.
Never give your seed phrase, private key or recovery credentials to another person.

VERIFY: Confirm that you know which recovery method your OKX Wallet uses and that the corresponding recovery credentials are safely protected.

Never share your Seed Phrase or Private Key

For a traditional self-custody OKX Wallet, the seed phrase or private key can provide control over the wallet. Anyone who obtains it may be able to move the assets.

Click to see protection steps

Step-by-step

Treat your Seed Phrase and Private Key as highly sensitive credentials.
Never enter them into a website because a message tells you to verify, synchronize or unlock your wallet.
Never send them through WhatsApp, Telegram, email or social media.
Never give them to someone claiming to be OKX Support.
Never enter them into a form supplied by someone offering to recover your crypto.
Only enter recovery credentials when you intentionally restore your own wallet through the legitimate OKX Wallet application.

VERIFY: If anyone has ever obtained your Seed Phrase or Private Key, treat the wallet as potentially compromised and follow the exposed-credential response below.

Use strong wallet authentication

A strong local security password or authentication method helps prevent another person with access to your device from opening or using your wallet.

Click to see protection steps

Step-by-step

Open OKX Wallet.
Open the wallet's Security settings.
Set a strong wallet password or available security credential.
Do not reuse an important password from another service.
Avoid passwords based on easily guessed personal information.
Never give your wallet password to someone claiming to be OKX Support.

VERIFY: Lock OKX Wallet and confirm that your configured authentication is required before protected wallet activity can be performed.

Enable biometric or device authentication

Where supported, biometric or device authentication can add another barrier to unauthorized local access to your wallet.

Click to see protection steps

Step-by-step

Open OKX Wallet.
Open the available Security settings.
Review the available biometric or device authentication options.
Enable the feature if it is supported by your device and wallet version.
Make sure your phone or computer itself has a strong screen lock.
Do not allow another person to register their biometric information on a device used for important wallet activity.

VERIFY: Lock OKX Wallet and confirm that the configured device authentication is required before protected wallet actions can be accessed.

Review wallet activity regularly

Regularly checking your wallet activity can help you identify unauthorized transfers, swaps or contract interactions.

Click to see protection steps

Step-by-step

Open OKX Wallet.
Review recent transaction activity.
Look for transfers, swaps or contract interactions you do not recognize.
Check the asset, amount, destination and network.
Use the relevant blockchain explorer when you need to investigate a transaction.
Preserve suspicious transaction hashes and wallet addresses if further investigation is required.

VERIFY: Confirm that recent wallet activity consists only of transactions and interactions you intentionally performed.

Review connected DApps

Connecting a wallet to a decentralized application allows the DApp to interact with your wallet in ways permitted by your approvals and signatures. Only connect to services you have independently verified.

Click to see protection steps

Step-by-step

Open OKX Wallet.
Review your connected DApps and websites.
Identify applications you no longer use.
Disconnect unnecessary or unfamiliar connections where supported.
Before connecting to a new DApp, verify its official domain.
Read the wallet connection request before approving it.
Never connect your wallet because someone says you must claim, verify, synchronize or unlock funds.

VERIFY: Confirm that every connected DApp is one you recognize and intentionally use.

Review and revoke token approvals

Token approvals can allow smart contracts to spend specified tokens from your wallet. Old or unnecessary approvals can increase your exposure.

Click to see protection steps

Step-by-step

Identify the token approvals associated with your wallet.
Review the token and spender for each approval.
Identify approvals you no longer need.
Revoke unnecessary approvals using a legitimate blockchain transaction.
Check the network and transaction details before signing the revocation.
Never sign a transaction simply because someone says it is necessary to secure your wallet.

VERIFY: Confirm that unnecessary approvals have been revoked and that remaining approvals belong to DApps you intentionally use.

Read OKX Wallet security warnings

Wallet warnings and risk indicators can help identify potentially dangerous DApps, addresses or transactions. A warning should be treated as a reason to stop and investigate.

Click to see protection steps

Step-by-step

Open OKX Wallet.
Pay attention to any risk warning or security alertdisplayed during a wallet interaction.
Read the warning before selecting Confirm.
Verify the address, token, contract and network.
If the warning indicates serious risk, stop the transaction.
Do not ignore a warning because someone in a chat says the transaction is safe.

VERIFY: Before continuing after a warning, confirm that you understand the risk and have independently verified the action.

Verify every transaction before signing

A wallet signature can authorize a transfer, token approval or smart-contract interaction. Never sign something simply because a website tells you to.

Click to see protection steps

Step-by-step

Stop before approving any transaction or signature.
Read the information displayed by OKX Wallet.
Confirm the recipient address.
Confirm the asset and amount.
Confirm the network.
Review any token approval or contract interaction being requested.
If you do not understand what you are signing, choose Reject rather than guessing.
For high-value transactions, independently verify the destination address through a trusted channel.

VERIFY: Only sign after you can explain what the transaction does, where the assets are going and why the action is necessary.

Verify the network before sending assets

The same asset can exist on multiple blockchain networks. Selecting the wrong network can create serious recovery problems.

Click to see protection steps

Step-by-step

Select the correct asset.
Confirm the network you are using.
Confirm that the receiving wallet or exchange supports that exact network.
Obtain the destination address from a trusted source.
Check the amount.
Confirm any required memo or tag.
Review the final transaction details before signing.
For a significant transfer, consider sending a small test transaction first when practical.

VERIFY: Before signing, independently verify the recipient, asset, network, amount and any required memo or tag.

Check the address before sending

A crypto transaction sent to the wrong address may be impossible to reverse. Never assume an address is correct simply because it was copied from a familiar conversation.

Click to see protection steps

Step-by-step

Obtain the destination address from a trusted source.
Verify that the address belongs to the intended recipient.
Compare the address carefully before confirming the transaction.
Check the beginning and ending characters where appropriate.
Be especially careful when copying addresses from messages or social media.
For important transfers, independently confirm the address through a trusted communication channel.

VERIFY: Confirm that the destination address belongs to the person, exchange or wallet you actually intended to send to.

Be careful with unlimited token approvals

Some DApps request permission to spend a large or unlimited amount of a token. Understand the permission before signing it.

Click to see protection steps

Step-by-step

Read the token approval request.
Identify the token.
Identify the spender or smart contract.
Check whether the requested allowance is reasonable for the action you are performing.
Prefer a limited allowance when practical and supported.
Review existing approvals periodically.
Revoke permissions you no longer need.

VERIFY: Confirm that the DApp has only the token-spending permission you intentionally granted.

Consider a hardware wallet for significant holdings

A hardware wallet can keep signing credentials isolated from an internet-connected device and can provide an additional security layer for substantial long-term holdings.

Click to see protection steps

Step-by-step

Decide whether the value of your holdings justifies a hardware wallet.
Purchase the device from the manufacturer's legitimate source.
Initialize it according to the manufacturer's instructions.
Secure the hardware wallet's own recovery phrase.
Never enter your existing OKX Wallet seed phrase into a hardware wallet simply because someone says it will make your funds safer.
Connect the hardware wallet using the official supported process.
Verify important transactions on the hardware device before approving them.

VERIFY: Confirm that the hardware wallet generates and protects its own recovery credentials and that important transactions require the physical device.

Keep OKX Wallet and your device updated

Current legitimate software helps reduce exposure to known vulnerabilities and ensures you receive current security improvements.

Click to see protection steps

Step-by-step

Update OKX Wallet through its legitimate application or extension source.
Keep your phone or computer updated.
Keep your browser updated if you use the OKX Wallet extension.
Avoid installing wallet software from unofficial websites.
Remove suspicious applications or browser extensions you do not recognize.

VERIFY: Confirm that OKX Wallet, your browser and your operating system are running current legitimate versions.

Recognize fake OKX Wallet support

Scammers may impersonate OKX employees, wallet support or community administrators and ask for wallet credentials or funds.

Click to see protection steps

Step-by-step

Be suspicious of unexpected messages claiming to be OKX Support.
Never provide your Seed Phrase, Private Key, password or recovery credentials.
Never send funds to a supposed verification or recovery wallet.
Never enter recovery credentials into a website supplied by a stranger.
Open the official OKX application or websiteyourself when checking a security message.
Use OKX's official support channel when you genuinely need assistance.

VERIFY: Before accepting help, independently verify the request through OKX's official support resources.

Recover a traditional seed-phrase wallet

If your OKX Wallet uses a traditional seed phrase, the phrase is the recovery credential for that wallet. Protect it before you ever need to restore access.

Click to see protection steps

Step-by-step

Install OKX Wallet from the official source.
Choose the option to import or restore an existing wallet.
Enter the Seed Phrase only inside the legitimate OKX Wallet application.
Enter every word in the correct order.
Set the required wallet password.
Confirm that the expected wallet addresses and balancesappear.
Never send the seed phrase to anyone claiming to help with recovery.

VERIFY: Confirm that the restored wallet address matches the address you previously controlled before sending or receiving significant assets.

If your Seed Phrase or Private Key is exposed

Changing a wallet password does not make an exposed seed phrase or private key safe again. Treat exposed recovery credentials as a potential compromise.

Click to see protection steps

Step-by-step

Stop using the compromised wallet for new deposits.
Do not enter the exposed credentials into another website.
Create a new wallet with new recovery credentials.
For significant holdings, consider using a hardware wallet.
Independently verify the new wallet addresses.
Move remaining assets to the new wallet after carefully verifying every destination.
Review and revoke suspicious token approvals.
Never reuse the exposed Seed Phrase or Private Key.

VERIFY: Confirm that valuable assets are controlled by a new wallet with new recovery credentials and that the exposed credentials are no longer trusted.

Secure your wallet after suspicious activity

If you signed something suspicious, connected to a malicious DApp or notice an unauthorized transaction, stop normal activity and investigate before doing anything else.

Click to see protection steps

Step-by-step

Stop signing transactions or messages.
Disconnect suspicious DApps and websites.
Review and revoke suspicious token approvals.
Check the wallet using a trusted block explorer.
Preserve suspicious transaction hashes and wallet addresses.
Secure your device if it may have contributed to the compromise.
If a Seed Phrase or Private Key was exposed, create a new wallet.
Move remaining assets only after independently verifying every destination.
Contact OKX through its official support channelswhen you need service-specific assistance.

VERIFY: Do not return valuable assets to a wallet whose Seed Phrase or Private Key may have been exposed.

Something does not look right?

If you discover an unfamiliar transaction, unexpected approval, suspicious DApp connection or another sign that your wallet may be compromised, stop normal activity and move to the recovery process.

I think my wallet is compromised →

Still need help?

Never give your Seed Phrase, Private Key, password or recovery credentials to someone promising to fix your wallet. Use OKX's official support resources for service-specific wallet problems.

For broader cybersecurity problems, you can also use the professional assistance pathway on this platform.

Need Professional Help? →

OKX Wallet security is not a one-time task.

Review your approvals, connected DApps and transaction activity regularly, especially after using a new Web3 service or receiving a suspicious message.

VERIFY BEFORE YOU TRUST.

← Back to Secure Your Accounts