Buying crypto is the easy part. Keeping it safe is where many beginners run into trouble. The good news: a few simple habits dramatically reduce your risk of losing your investment to hackers, scammers, or simple mistakes.
Here’s a plain-English checklist of the most important steps to protect your crypto.
1. Use a reputable exchange and keep it locked down
For most beginners, keeping crypto on a well-known exchange like Coinbase is the simplest option. These platforms have strong security teams and insurance on cash balances.
What you must do on any exchange:
- Use a strong, unique password — don’t reuse passwords from other accounts.
- Turn on two-factor authentication (2FA) — this means entering a code from your phone every time you log in. Even if someone steals your password, they can’t get in without your phone.
- Use the authenticator app option, not text message (SMS) 2FA — SMS can be intercepted.
2. Never share your login details or recovery phrase
This is the single most important rule in crypto security:
No legitimate company will ever ask for your password or recovery phrase.
If you ever receive an email, phone call, or message asking for these — it’s a scam, full stop. Coinbase, your bank, and any real company will never need this information from you.
3. Be suspicious of unsolicited contact
Crypto scams targeting seniors often start with:
- An unexpected call from someone claiming to be from Coinbase or your bank
- A social media message from someone offering investment advice
- A romantic interest online who eventually brings up crypto
- An email warning your account has been compromised (with a link to click)
When in doubt, hang up and call the company directly using the number on their official website.
4. Write down your recovery phrase — and store it offline
If you use a crypto wallet (separate from an exchange), you’ll be given a “recovery phrase” — usually 12 or 24 random words. This phrase is the master key to your crypto.
- Write it on paper — not in a document on your computer or phone.
- Store it somewhere safe — like a fireproof box or alongside your important documents.
- Never photograph it or email it to yourself — that creates a digital copy that can be stolen.
5. Verify before you send
Crypto transactions are irreversible. Once sent, the money is gone. Before sending crypto to anyone:
- Double-check the wallet address — even one wrong character sends it to the wrong place forever.
- Start with a small test transaction when sending a large amount for the first time.
- Confirm the recipient via a separate communication channel if you’re unsure.
Quick security checklist
- ☑ Strong, unique password on your exchange account
- ☑ Two-factor authentication enabled (authenticator app, not SMS)
- ☑ Recovery phrase written on paper and stored safely (if using a wallet)
- ☑ Email address for your exchange account is secured with 2FA
- ☑ No one else knows your password or recovery phrase
- ☑ You’re skeptical of any unsolicited contact about your crypto
Bottom line
Most crypto theft happens because of human error — clicking a phishing link, sharing a recovery phrase, or falling for a social engineering scam. The technology itself is secure. Following these basics puts you ahead of the vast majority of beginners when it comes to protecting your investment.