Key principles
Understand, then verify
Keeping signing credentials locally can reduce custody dependence, but puts more responsibility on device security and backup.
Protect access
Use device locks and timely security updates.
Minimize exposure
Avoid exporting keys or entering phrases into unknown websites.
Plan recovery
Maintain offline recovery records and know how to use them.
Never share a private key or recovery phrase. Pause on unfamiliar signing requests or websites.
