AurusYour seed phrase is the one secret that matters. Anyone who has it has your funds. Lose it and nobody can get it back. Keeping it safe isn't hard. It's a few boring things done properly, once.
The rules
- Paper or metal, by hand. A physical copy can't be hacked. Metal survives a fire. Paper somewhere safe is a fine start.
- No photos. Nothing connected. No screenshots, no notes app, no password manager that syncs, no email draft to yourself. Phone photo libraries back up automatically and malware knows to look there.
- Two copies, two places. Fire, flood, or just losing it. Two private spots cover all three without really raising the theft risk.
- Never share it. No exceptions. Not in a support chat, not in a "verify your wallet" popup, not to "sync." Nobody from Aurus will ever ask. Anyone who does is robbing you.
The scams
Almost all phrase theft is social, not technical. The "support agent" that replies in Discord after you mention a problem. The site that looks like a wallet and asks you to "restore." The airdrop page that wants your words to "connect." A dapp, a claim page, or a support agent never needs your phrase. The only time a wallet should ask is when you're deliberately restoring one. Anything else asking, close it.
Where the phrase lives in Aurus
Your phrase exists on your phone and on whatever you wrote it down on. It never goes anywhere else. In the app it sits behind your unlock: you can view it again from settings after authenticating, and exporting a key takes the same step. The in-app browser keeps a blocklist of known phishing sites and flags risky transactions before you sign, which catches the "restore your wallet" pages. That's the security model: we look after what happens in the app, you look after the backup only you have.
