Bảo vệ cụm seed (và làm gì nếu bị lộ)

Your seed is the account

There is no username, no password and no email reset that can restore an account without the seed. It is 16 characters in four groups. Anyone who has it can sign in. That makes storing it the single most important security decision you will make.

Where to keep it

• Write it on paper or metal and store it offline, away from your desk.
• Use a password manager if you trust one, as a secondary copy.
• Split it across two physical locations if you hold large balances.
• Never keep it in email, chat, cloud notes or a screenshot.

Turn on 2FA

Two-factor authentication with an authenticator app means a leaked seed alone is not enough. A code from your phone is also required. Set it up from Security in the dashboard — it takes under a minute and works with any TOTP app.

If your seed leaks

• Sign in immediately and move the balance out to a withdrawal address you control.
• Turn on 2FA if it is not already on, and change the email to a fresh address.
• Open a support ticket with the details so the team can watch the account.
• Assume the seed is burned: create a new account and move future activity there.