SECURE YOUR TRUST WALLET

Protect the wallet that puts you in control.

Trust Wallet is a self-custody wallet. You control the recovery credentials and private keys, so protecting them, verifying what you sign and reviewing dApp permissions are central to protecting your crypto.

This is a self-custody wallet.

Trust Wallet does not control your private keys or Secret Phrase. That means you are responsible for protecting the credentials that control your assets.

Trust Wallet currently provides additional security features such as Security Scanner, encrypted cloud backups, hardware-wallet support and built-in token-approval management.

What should I never share?

Never share your Trust Wallet Secret Phrase, private key, wallet password or other recovery credentials. Treat them as the keys to your crypto.

What if someone says my wallet needs verification?

Stop. Be suspicious of any person or website asking you to enter your Secret Phrase to verify, synchronize, unlock or protect your wallet. Never send crypto to a supposed recovery or security wallet.

Does disconnecting a dApp revoke its token approval?

Not necessarily. Disconnecting a dApp and revoking a token approval are different actions. Trust Wallet now provides an Approvals section where supported so you can review and revoke permissions directly.

TRUST WALLET SECURITY

Protect the recovery phrase, then verify every interaction.

Work through these checks one at a time. With self-custody wallets, a single exposed recovery credential or unsafe transaction can have consequences that may not be reversible.

Back up your Secret Phrase

Trust Wallet is self-custody. Your Secret Phrase or private keys are what give you control over the wallet and its assets.

Click to see protection steps

Step-by-step

Open Trust Wallet only through the official mobile app or browser extension.
Open the wallet you want to protect.
Locate the wallet's Secret Phrase backup option.
Write the phrase down carefully in the exact order provided by Trust Wallet.
Store the backup in a secure physical location that only you can access.
Consider keeping a second secure physical backup if losing the only copy would permanently affect access.
Never store your Secret Phrase in an ordinary email, public note, screenshot or unsecured cloud document.

VERIFY: Confirm that your Secret Phrase is backed up correctly and that no untrusted person or service can access it.

Never share your Secret Phrase or private key

Trust Wallet cannot protect you if another person obtains the credentials that control your self-custody wallet.

Click to see protection steps

Step-by-step

Treat your Secret Phrase and private keys as confidential wallet credentials.
Never send them through WhatsApp, Telegram, email or social media.
Never enter them into a website because someone tells you to verify or synchronize your wallet.
Never give them to someone claiming to be Trust Wallet Support.
Never enter your Secret Phrase into a form supplied by an unknown person offering to recover your funds.
Only use your recovery credentials when you intentionally restore your own wallet through the legitimate Trust Wallet application.

VERIFY: If another person has ever seen or received your Secret Phrase or private key, treat the wallet as potentially compromised.

Set a strong wallet password or device lock

Your local wallet password or device authentication protects access to the wallet installation, while your Secret Phrase remains the critical recovery credential.

Click to see protection steps

Step-by-step

Open Trust Wallet.
Open the available Security settings.
Set a strong wallet password or passcode where your version of Trust Wallet provides one.
Avoid using a password or PIN that another person can easily guess.
Protect your phone or computer with a strong device screen lock.
Enable supported biometric authentication if appropriate for your device.
Never give your wallet password to someone claiming to provide technical support.

VERIFY: Lock Trust Wallet and confirm that the configured authentication is required before the wallet can be accessed.

Use encrypted cloud backup carefully

Trust Wallet provides encrypted cloud backup options for supported wallets. Use the feature only if you understand what is being backed up and how the recovery protection works.

Click to see protection steps

Step-by-step

Open Trust Wallet.
Review the available cloud backup or wallet-backup settings.
Read the recovery instructions before enabling the feature.
Make sure the Apple or Google account used for the backup is itself strongly protected.
Enable multi-factor authentication on that platform account where available.
Never share the backup password or recovery information with another person.
Keep an independent secure backup of your recovery information where Trust Wallet's instructions require one.

VERIFY: Confirm that you understand how your encrypted backup is protected and that the account controlling the backup is secure.

Keep Trust Wallet updated

Updates can provide security improvements and protect against vulnerabilities in the wallet and connected software.

Click to see protection steps

Step-by-step

Check the official App Store or Google Play for Trust Wallet updates.
If you use the browser extension, update it through the official browser extension source.
Keep your phone, browser and operating system updated.
Do not install Trust Wallet from an unofficial website or an unexpected link.
Remove suspicious browser extensions or applications that could interfere with your wallet.

VERIFY: Confirm that Trust Wallet and your underlying device or browser are running current legitimate versions.

Use Trust Wallet Security Scanner

Trust Wallet provides security warnings and scanning features that can help identify potentially risky transactions, addresses and dApp interactions.

Click to see protection steps

Step-by-step

Open Trust Wallet.
Start the transaction or dApp interaction you want to review.
Read the available Security Scanner or risk warning.
Pay attention to warnings involving suspicious addresses, malicious contracts or risky approvals.
If Trust Wallet presents a serious warning, stop rather than automatically approving the transaction.
Independently verify the destination and purpose of the transaction.
Remember that a security warning system is a helpful signal, not a substitute for your own verification.

VERIFY: Before signing, confirm that you understand the warning and can independently verify the transaction or dApp.

Review and revoke token approvals

Trust Wallet now provides built-in approval management so you can review and revoke token permissions without relying on an external approval website.

Click to see protection steps

Step-by-step

Open the latest version of Trust Wallet.
Open the Assets section.
Select the Approvals tab.
Review the active token approvals displayed.
Check which dApp or contract has access to each token.
Look for approvals you no longer need or that Trust Wallet flags as risky.
Select Revoke for an approval you no longer trust.
Review and approve the blockchain transaction required to revoke the permission.

VERIFY: Return to Approvals and confirm that unnecessary permissions have been removed.

Review connected dApps

Connecting a wallet to a dApp creates an active relationship that should be reviewed and disconnected when no longer needed.

Click to see protection steps

Step-by-step

Open Trust Wallet.
Review your connected dApps or WalletConnect sessions.
Identify services you no longer use.
Disconnect unnecessary sessions.
Verify the dApp URL before reconnecting to it later.
Remember that disconnecting a dApp does not necessarily revoke token approvals that were previously granted.
Review the Approvals section separately.

VERIFY: Confirm that remaining dApp connections are ones you recognize and intentionally use.

Verify every transaction before signing

A dApp may request a transaction, approval or signature that does something very different from what you expected.

Click to see protection steps

Step-by-step

Stop before approving any transaction or signature.
Read the information displayed by Trust Wallet.
Confirm the recipient address.
Confirm the asset and amount.
Confirm the network.
Review any token approval or smart-contract interaction being requested.
If you do not understand what the transaction does, select Reject.
For a large transaction, independently verify the destination before signing.

VERIFY: Only sign after you can explain what the transaction does, where the assets are going and why the action is necessary.

Verify the network before sending crypto

The same asset can exist on different blockchain networks. Selecting the wrong network can cause serious transfer problems.

Click to see protection steps

Step-by-step

Select the asset you intend to send.
Confirm the network currently selected.
Confirm that the receiving wallet supports that exact network.
Copy the destination address only from a trusted source.
Compare the beginning and ending characters of the destination address.
Check the amount carefully.
Review the transaction details inside Trust Wallet before confirming.
For a high-value transfer, consider a small test transaction first when practical.

VERIFY: Before signing, independently verify the recipient, asset, network and amount.

Use a hardware wallet for significant holdings

A hardware wallet can provide another layer of protection by keeping signing keys isolated from an internet-connected computer.

Click to see protection steps

Step-by-step

Consider whether your holdings justify a hardware wallet.
Purchase the device through the manufacturer's legitimate source.
Initialize it as a new wallet according to the manufacturer's instructions.
Securely record the hardware wallet's own recovery phrase.
Never enter your existing Trust Wallet Secret Phrase into a new hardware wallet simply to make it "safer."
Connect the hardware wallet to Trust Wallet using its official supported connection process.
Confirm important transactions on the hardware device itself.

VERIFY: Confirm that the hardware wallet has its own recovery credentials and that important transaction approvals require the physical device.

Recognize fake Trust Wallet support

Self-custody scams frequently rely on fake support agents who ask for recovery phrases, private keys or transfers to supposed recovery wallets.

Click to see protection steps

Step-by-step

Never give your Secret Phrase or private key to someone claiming to be Trust Wallet Support.
Be suspicious of unsolicited messages offering to recover, unlock or validate your wallet.
Never send crypto to a supposed secure or recovery walletbecause someone tells you to.
Do not enter your recovery phrase into a website sent by an unknown person.
Do not install remote-access software because a stranger claims to be helping with Trust Wallet.
Open Trust Wallet's official support resources yourself when help is required.

VERIFY: Before accepting support, independently open Trust Wallet's official support site rather than following a link supplied by a stranger.

Restore your wallet on a new device

A self-custody wallet can be restored when you have securely preserved the correct recovery credentials.

Click to see protection steps

Step-by-step

Install Trust Wallet from its official source.
Choose the option to restore or import an existing wallet.
Enter your Secret Phrase only inside the legitimate Trust Wallet application.
Enter the words in the correct order.
Set a new strong wallet password if Trust Wallet asks you to create one.
Confirm that your expected wallet addresses appear.
Check your expected balances before making any transaction.

VERIFY: Confirm that the restored wallet addresses match the addresses you previously controlled before sending or receiving assets.

If your Secret Phrase is exposed

An exposed Secret Phrase should be treated as a critical wallet compromise. Changing the local password does not make the exposed phrase safe again.

Click to see protection steps

Step-by-step

Stop using the compromised wallet for new deposits.
Do not enter the exposed phrase into another website or send it to anyone claiming to help.
Create a new wallet with a new Secret Phrase.
For significant holdings, consider using a hardware wallet.
Independently verify the new wallet's addresses.
Move remaining assets to the new wallet after carefully verifying the destination.
Review and revoke suspicious token approvals on the old wallet.
Never reuse the exposed Secret Phrase.

VERIFY: Confirm that valuable assets are controlled by a new wallet with a new recovery phrase and that the exposed phrase is no longer trusted.

Secure your wallet after suspicious activity

If you signed something suspicious, connected to a malicious dApp or noticed unauthorized transactions, treat the wallet as potentially compromised.

Click to see protection steps

Step-by-step

Stop signing transactions or messages.
Disconnect suspicious dApps and WalletConnect sessions.
Review the Approvals section.
Revoke suspicious or unnecessary token approvals.
If the Secret Phrase may have been exposed, create a new wallet.
Move remaining assets to the new wallet only after independently verifying every destination.
Review the blockchain using a trusted block explorer.
Preserve relevant transaction hashes and wallet addressesfor investigation.
Secure the device, browser and accounts used to access the wallet.
Contact Trust Wallet through its official support channelif you need assistance understanding the wallet or transaction.

VERIFY: Do not return valuable assets to a wallet whose Secret Phrase or private keys may have been exposed.

Something does not look right?

If you find an unfamiliar login, changed recovery information, unexpected security alerts or another sign that someone may have accessed your account, stop the normal security check and move to the recovery process.

I think my account is compromised →

Still need help?

If you have worked through the relevant settings and something still looks wrong, do not give your security secrets to someone promising to fix the account. Use the service's official support and recovery resources for service-specific account problems.

For broader cybersecurity problems, you can also use the professional assistance pathway on this platform.

Need Professional Help? →

Trustwallet is not a one-time task.

Review important account settings periodically, especially after a password change, device change, suspicious message or unexpected login alert.

VERIFY BEFORE YOU TRUST.

← Back to Secure Your Accounts