Question 1

How do I verify a crypto wallet download is official?

Accepted Answer

Download the wallet only from its official website or GitHub release page. Then compare the SHA-256 checksum of your downloaded file against the official hash using WalletGuard's free in-browser verifier at walletguard.cc/verify.html. Matching hashes confirm the file is authentic.

Question 2

What is a fake crypto wallet?

Accepted Answer

A fake crypto wallet is a malicious application that looks identical to a legitimate wallet but captures your seed phrase or private keys when you enter them, sending them to attackers. They are distributed via search ads, phishing sites, and fake Chrome extension listings.

Question 3

How do I know if a MetaMask extension is real?

Accepted Answer

The official MetaMask Chrome extension ID is nkbihfbeogaeaoehlefnkodbefgpgknn. Always install from the official Chrome Web Store link on metamask.io and verify the extension ID matches before entering your seed phrase.

Question 4

What is a token approval and why is it dangerous?

Accepted Answer

A token approval (ERC-20 approve) grants a smart contract permission to spend your tokens. Unlimited approvals to malicious contracts can drain your entire wallet balance. Periodically audit and revoke unnecessary token approvals — most modern wallets let you manage approvals directly from their settings.

Question 5

What is SHA-256 and why does it matter for wallet downloads?

Accepted Answer

SHA-256 is a cryptographic hash function that produces a unique fingerprint of a file. If even one byte of a file is changed (e.g., malware injected), the SHA-256 hash changes completely. Comparing the hash of your downloaded wallet file against the developer's published hash confirms the file has not been tampered with.

Security guides

All guides

Stay ahead of wallet scams.

Security guides

Articles

All guides

Stay ahead of wallet scams.