Device-Level Hygiene
- Enable full-disk encryption (default on modern iOS and Android with a strong passcode).
- Use a long alphanumeric passcode rather than a short PIN or pattern.
- Keep the OS and wallet app updated; disable automatic installation of unknown sources.
- Review app permissions — wallets rarely need continuous location or contact access.
Backup Discipline
The recovery phrase is the only reliable path back after device loss. Write it on paper or stamp it in metal. Store at least two copies in separate secure locations. Never store the phrase in screenshots, email, cloud notes, or password managers that sync to the same phone.
Biometrics & App Locks
Biometric unlock is convenient but should be paired with a strong device passcode. Some wallets allow an additional app-level PIN. Treat biometrics as a convenience layer, not the sole protection.
Immediate Steps After Phone Loss or Theft
- Use Find My / Google Find My Device to lock or erase the phone if possible.
- From another device, restore the wallet using your seed into a clean environment (preferably a hardware wallet or a freshly reset phone).
- Move remaining funds to a new seed that has never been on the lost device.
- Revoke any active sessions or API keys associated with the old setup where applicable.
When Larger Amounts Are Involved
Consider keeping only spending balances on mobile. Move long-term holdings to a hardware wallet whose seed is stored offline. Test a recovery process with a small amount before you need it in an emergency.