The First Hour After You Get Back In
A recovered wallet is not a safe wallet. Verify, move, back up, in that order.
The moment access comes back is the moment the danger changes shape. The phrase that just worked has usually spent the recovery process being typed, photographed, read aloud, carried between rooms and handled by more than one person. It is now the least private secret you own.
A recovery is therefore not finished when the balance appears. It is finished when that balance sits in a wallet whose phrase has never existed anywhere except on paper you wrote yourself.
In this order
- Confirm the balance on a block explorer you navigated to yourself. Not a screenshot, not somebody else's dashboard, not a link you were sent.
- Assume the old phrase is burned if it has ever been typed into a website, sent in a message, photographed to a cloud, or seen by anyone else. Assume it, rather than hoping.
- Generate a brand-new wallet on a device you control, and write the new phrase down by hand before it holds anything at all.
- Send one small test transaction to the new address and confirm it arrived, before moving anything that matters.
- Then move the rest.
- Sweep the stragglers. One seed usually holds several accounts, address types and chains, and a forgotten balance on any of them stays exposed forever.
- On chains that support token approvals, review and revoke the permissions granted from the old address.
- Retire the old phrase. Destroy it, or keep it clearly marked as a dead and compromised record, so that nobody ever restores it again by mistake.
The test transaction is not caution for its own sake. It is the only step that catches a mistyped destination while a mistyped destination is still cheap, and payments on these networks are final by design.
The new wallet
- The new phrase was written by hand, never photographed, and never typed into anything connected.
- Two copies, in two separate physical places, neither of which floods or burns with the other.
- Somebody I trust knows a backup exists, without knowing where it is or what it says.
- I have restored it once, on a wiped device, so I know the backup actually works.
- Nothing about this wallet has been posted publicly, including the fact that it holds anything.
A backup you have never restored is an untested assumption. Restoring it once, deliberately, on a device you then wipe again, is the only way to find out, and it is far better to discover a bad backup on a quiet afternoon than during the next emergency.
Before you close the file
- The old phrase is destroyed, or unmistakably marked as dead.
- Every account, address type and chain on the old seed has been checked and emptied.
- Old token approvals from the old address have been revoked.
- The attempt log has been destroyed too, if it named anything sensitive.
- If a service helped, the agreed share has been settled from funds I now control, and they still have never seen my phrase.
One last thing, permanently true: nobody legitimate ever needs your phrase. Not us, not a wallet maker, not support, not the person who helped you get it back. If anyone asks after this point, the whole exchange was about that.
Where to go next
Educational content, not financial advice. This worksheet structures a decision; it does not make one, and nothing in it is a recommendation to buy anything. We are not a broker, exchange, custodian or adviser, and we never take custody of your assets. We will never ask for a seed phrase or private key. See the full disclaimer.