Web3 Security Practices
It is best practice in Web3, and on the internet in general, to visit trusted sites only. Before visiting any sites, downloading anything, or connecting to any dApps (decentralized applications), there are a few easy methods to verify the correct URL:
Search for the site or dApp on Twitter and find their official Twitter page. Double check their Twitter ID (the name following the “@” symbol) and check their follower ratio
Ask trusted friends
Use a search engine to verify the proper address in multiple places, such as blogs or guides
Once you have found the proper site, it is recommended that you bookmark it in your internet browser to remove the chances of visiting the wrong site in the future.
Using a separate internet browser (Chrome or Brave) or creating a separate browser profile is a good way to keep your bookmarks organized and ensure that your crypto assets have a layer of separation from any strange sites you might visit on your own time.
Choosing a Crypto Wallet
We recommend using the Metamask browser extension crypto wallet. It is extremely popular, has a lot of support and guides online, and can interact with the popular blockchains networks used in the Web3 space currently. It is quick and easy to set up and remove and is compatible with popular hardware wallets (cold wallets).
We do not recommend using the Metamask mobile application, or any mobile crypto wallets, because sites or apps are not formatted properly on mobile. This can make it difficult to navigate them and verify important transaction data.
For more information on different wallet types, see the previous article here.
Creating a Metamask Wallet
1. Download the Metamask Browser Extension
We recommend using a separate browser or browser instance
We recommend using Google Chrome or Brave
Official Metamask website: https://metamask.io/
Google Chrome web store: MetaMask*
*check that the app is verified and comes from the official Metamask website!
2. Click “Get Started” and “Create Wallet.
You can agree or disagree to provide data to Metamask. The option on the left to “Import Wallet” will be used if you use another device to access this wallet or if use a hardware wallet in the future.
3. Create a password.
This password will be used only to log into the Metamask browser extension on only the device that you are currently using
If you forget your password or change devices you will use only your seed phrase, which will be generated during the next step
In other words, anybody with your seed phrase can access your wallet regardless of whether they know the password set here
4. Read the tips on the “Secure your wallet” page
5. Secret Recovery Phrase
Read the information about your “Secret Recovery Phrase” and click the box to reveal your unique seed phrase
Anybody with this seed phrase can access the funds in your account
Keep this seed phrase secret and safe
If your seed phrase is compromised you can create a new account and migrate your funds to that account
You will need to confirm this phrase during the next step, so please write it down or save it on your computer somewhere
6. Confirm your seed phrase and setup is complete!
The address we created for the tutorial is here:
You can click the area near “Account 1” to copy your full public key to the clipboard. You can now receive funds at your address!
If you have any questions about setting up your Metamask wallet, get in touch with us on Discord.
Don’t take our word for it, though! There are plenty of other tutorials online. If you are ever unsure of something you read on the internet, it’s always good to find a second opinion.