Step-by-step checklist
Never disclose a recovery phrase to websites or support agents
Review the actual information and its source for this step. If the request is unfamiliar, stop and verify independently.
Avoid screenshots, cloud storage, and email copies
Review the actual information and its source for this step. If the request is unfamiliar, stop and verify independently.
Understand the difference between device passwords and recovery credentials
Review the actual information and its source for this step. If the request is unfamiliar, stop and verify independently.
If exposure is suspected, assess a safe migration procedure
Review the actual information and its source for this step. If the request is unfamiliar, stop and verify independently.