Bitcoin Core

When it may not be suitable

• Mobile-only usersDesktop clients require a computer and may be inconvenient for mobile use.Start with the App wallet category.
• Unable to maintain backupsUsers must manage local files, recovery phrases or private keys over the long term.Establish offline backups and test recovery first.
• Seeking one-click bridgingPC wallets typically do not cover as many DApp entry points as multichain App products.Compare App wallets when you need bridging access.
• Public-computer environmentInternet cafes, shared computers and untrusted devices are unsuitable wallet environments.Confirm device trustworthiness and system isolation before use.

Permission checks

1. Official domainUse the official domain to find downloads or device purchases, not group-chat links, advertising redirects or unfamiliar short links.Watch for fake websites, impersonated support and counterfeit download pages.
2. App-store or extension IDVerify the publisher, extension ID, version history, suspicious reviews and official announcements.Counterfeit apps and extensions with the same name can be misleading.
3. Recovery phrases and private keysKeep seed phrases, private keys, Keystore and recovery phrases offline. Do not screenshot, upload or send them to anyone.Possession of the recovery phrase gives control over the assets.
4. Signing promptsCheck the contract, chain ID, allowance, recipient and signed-message contents individually.A malicious permission request may not look like an ordinary transfer.
5. Revoke permissionsFind the relevant chain's allowance-checking and revocation tools, and regularly revoke unused DApp permissions.Persistent unlimited allowances increase exposure to future risks.
6. Small-amount testTest with a small amount before first use, changing devices, bridging or making a large transfer.Incorrect address formats, Memo/Tag or network selection can result in lost assets.