Bitcoin itself has never been hacked. People are the weak point — and almost every loss traces back to a short list of preventable errors.
Protect the recovery phrase above all
Anyone with your 12 or 24 words has your bitcoin, no matter what device they're on. Keep it offline, on paper or metal, in a place safe from fire, flood, and curious visitors.
Never store it in a photo, a notes app, an email, or a password manager you don't fully control. No legitimate support agent will ever ask for it.
Assume unexpected messages are scams
Fake support accounts, giveaway offers, romance-style investment pitches, and urgent "your wallet is at risk" alerts are the most common attacks. They all rely on urgency.
The rule that defeats nearly all of them: slow down, and never act on a message you didn't initiate.
Practice before it counts
Set up a wallet, send yourself a few dollars, wipe the wallet, and restore it from your written words. Doing this once — with tiny amounts — proves your backup works.
A backup you've never tested is a hope, not a plan.
Key takeaways
- Your recovery phrase is offline, private, and never shared.
- Urgency is the signature of a scam.
- Test your backup with small amounts before trusting it.
Ready to make it official?
These guides are the warm-up. The full Bitcoin-Learn course turns them into 60 bite-sized lessons with videos, knowledge checks, and three verifiable certificates you can share with employers.