How do I keep my wallet and NFTs safe?

• Use a hardware wallet for items you intend to keep. Use a separate, low-value wallet for minting and trying new sites.
• Read every signature request. A sign-in message is plain text with no value. A listing shows an item and a price. Anything you do not understand: reject.
• Approve narrowly and revoke often. Approvals let a contract move your assets; revoke ones you no longer use — see How do I revoke token approvals?.
• Bookmark unvault.com and check the address bar every time. Look-alike domains are the most common attack.
• Never share your seed phrase. Unvault staff never ask for it, and there is no such thing as "wallet validation" or "sync".
• Keep your device clean — updated browser, no unknown extensions, no cracked software.

If something has already gone wrong, read What should I do if my wallet is compromised?.