Crypto Wallet Security Checklist: 24-Point Self-Check

Score your crypto wallet security in a few minutes. Tick 24 checks across recovery phrases, devices, 2FA, sending, approvals and planning, then fix the gaps.

How to use this calculator

1. Work through the six groups and tick only what is true today, not what you plan to do. If you are unsure whether an item applies, leave it unticked.
2. Watch the score and the Fix next list update as you go. The list shows up to five unticked items, critical ones first.
3. Come back later if you need to. Your ticks are saved only in this browser, and nothing is sent anywhere. Reset clears them.
4. Use Print if you want a paper copy for your records, but never write your recovery phrase on it.

Every item is explained in more depth in our complete crypto wallet security checklist.

How it’s calculated

Every item carries a weight:

• 3 points (critical, 5 items): a single failure here can empty a wallet or account. These are keeping the recovery phrase offline, never entering it into a website, using 2FA without SMS, checking the full receiving address, and never blind signing.
• 2 points (14 items): strong protections, such as a second backup, a SIM-swap lock and revoking old token approvals.
• 1 point (5 items): good habits, such as checking the network before sending and reviewing the list once a year.

Score = points for ticked items ÷ 48 × 100 (rounded to a whole percent)

The 48 is the total of all weights. Scores from 0 to 49 read At risk, 50 to 79 Fair, and 80 to 100 Strong. The Fix next list sorts unticked items by weight, keeping the checklist order within each weight.

The weights follow the advice of security bodies. Ethereum.org warns never to share a recovery phrase and describes SMS-based 2FA as vulnerable to SIM jacking, and CISA places phishing-resistant methods such as security keys at the top of its multi-factor authentication tiers.

Worked example

Suppose you tick 11 items: phrase stored offline (3), phrase never entered online (3), long-term holdings in cold storage (2), official wallet software (2), updated devices (2), unique passwords (2), full address checks (3), test transactions (2), network checks (1), bookmarked sites (2) and a private record of accounts (1).

• Score = 23 ÷ 48 = 47.9%, shown as 48%: At risk, even though 3 of the 5 critical items are done.
• Fix next lists 2FA without SMS (critical), no blind signing (critical), a second backup, a verified backup and a hardware wallet bought new.
• Tick the two critical items and the score rises by 6 points to 29 ÷ 48 = 60.4%, shown as 60%: Fair.
• Add a second backup, a backup check, a SIM-swap lock, an approvals review and recovery instructions a trusted person can find, 10 more points, and the score reaches 39 ÷ 48 = 81.25%, shown as 81%: Strong.

Tip: Work down the Fix next list in order. Critical items carry the most weight because they guard against the fastest ways to lose everything, such as a leaked recovery phrase or a malicious token approval.

Limitations

• It is a self-assessment. It cannot detect malware, a compromised device or a fake website.
• The weights are editorial judgment, not measured probabilities of loss.
• A high score is not a guarantee. One missed critical item can still cost everything.
• Some items may not match your setup. Leaving them unticked lowers the score on purpose, because it measures how many common protections are in place. Our comparison of hot and cold wallets explains the trade-offs behind the device items.
• Clearing your browser data erases saved progress.

This content is for education only and is not financial, investment, tax or legal advice. Crypto assets are volatile and you can lose money. Examples use hypothetical numbers. See our disclaimer and editorial policy.