WalletGuard
Security Guides
Download Phantom Safely and Verify It's Real
Official Phantom path, the real ghost-icon extension ID, and a local hash check so a cloned listing cannot pass.
Security guides
Official download paths, SHA-256/GPG checks, extension IDs, and exact install errors — each guide embeds the in-browser verifier.
Articles
Security Guides
Hashes Do Not Match: Do Not Install
The verifier’s fail string is literal: hashes do NOT match. This page is that error — not a generic “be careful” essay.
Security Guides
How to Spot a Fake Phantom Extension
MetaMask fakes have their own page. This one is Phantom: ghost icon, Solana ads, ID bfnaelmomeimhlpmgjnjophhpkkoljpa.
Security Guides
How to GPG-Verify an Electrum Release
SHA-256 says the file is intact. gpg --verify on Electrum’s .asc says ThomasV signed it. This page is the second check only.
Comparisons
MetaMask vs Trust Wallet: Which to Install
Not another feature list. This is which official installer to trust: metamask.io vs trustwallet.com, IDs, and the hash preset for each.
Security Guides
Play Protect Doesn't Recognize This App
The Play Protect string is the H1. The fix is the official package (Trust Wallet: com.wallet.crypto.trustapp), not a toggle that disables Protect.
Security Guides
Exodus Official Download and Checksum Check
Exodus is a closed-source desktop wallet. The only safe path is exodus.com/download plus a local hash — not Softonic, not a YouTube mirror.
Comparisons
Electrum vs Sparrow: Which Bitcoin Wallet
Both are serious Bitcoin desktops. The download jobs differ: Electrum’s download.electrum.org + ThomasV GPG vs Sparrow’s GitHub-signed assets.
Security Guides
This Extension Is Not Listed in the Chrome Web Store
H1 is the Chrome string. The fix is not a registry tweak — it is the official listing ID and a hash if you still have a .crx you should not load.
Security Guides
Trust Wallet Official Download vs Fake Apps
“Is Trust Wallet safe?” is a different question. This page is only: official store path, real package name, hash the APK if you sideload.
Security Guides
What a SHA-256 Checksum Cannot Prove
The unique 10%: our comparer only answers “do these hex strings match.” Here is the list of jobs it refuses — so AI Overviews cannot flatten this into “always verify checksums.”
Security Guides
Ledger Genuine Check Failed: What To Do
Genuine Check talks to the hardware. This page will not spoof it. Hash Live so you are not running fake software while you debug a device.
Security Guides
Download Rabby Wallet and Confirm the Real ID
Rabby’s scanner does not help you if the extension itself is a clone. Confirm acmacodkjbdgmoleebolmdjonilkdbch, then hash.
Security Guides
How to Revoke Risky Token Approvals
Approvals live on-chain. This site cannot click Revoke for you. The unique job: verify a clean wallet binary, then use a real revoke surface — with a loss table of what each surface cannot clear.
Security Guides
Electrum Official Download and GPG Verify
Electrum has been cloned for a decade. The real job is electrum.org → download.electrum.org → hash → gpg --verify on the .asc.
Security Guides
How to Spot a Fake Trust Wallet App
Not “is Trust Wallet safe.” This is the clone-app job: package name, Play listing, and hashing an APK you should not have sideloaded.
Security Guides
How to GPG-Verify a Sparrow Wallet Build
Sparrow ships signed release assets. Hash first with the sparrow_windows preset, then gpg --verify using the key Sparrow publishes — not a Discord key.
Security Guides
Ledger Live Official Download and SHA-256
A fake Ledger Live is how a real Ledger gets emptied. Official host, then hash — Genuine Check comes after, on the device.
Security Guides
Electrum BAD signature: What It Means
Good signature vs BAD signature is not a warning banner to click through. Hash the installer here, then treat BAD as a hard stop.
Security Guides
Trezor Suite Official Download and Verify
Trezor Suite is the official companion — and a popular fake-installer target. Official host, then hash. Never type a seed on the computer.
Security Guides
Verify a Wallet with certutil on Windows
PowerShell Get-FileHash is in the general guide. This page is the certutil -hashfile path for locked-down Windows images that still ship certutil.
Comparisons
Phantom vs Backpack: Official Install Paths
Two Solana extensions, two IDs. This page is not a TVL debate — it is how not to install a third ghost-icon clone.
Security Guides
Download Sparrow Wallet and Verify the Build
Sparrow is for people who already care about PSBTs. Download like one: official release assets, hash, then GPG — not a “Sparrow setup” from Bing.
Security Guides
GitHub Release vs Softonic Wallet Mirrors
Mirrors win search. Official Releases lose. The job: vendor org + Releases tag + hash. Electrum still prefers download.electrum.org over a random fork zip.
Security Guides
Package Is Invalid: CRX_HEADER_INVALID
The error string is the H1. Hash the file to see what you actually downloaded, then abandon sideload for the official Chrome listing.
Security Guides
Download Keplr Safely and Check the Store ID
Cosmos phishing loves fake Keplr popups. The install job is keplr.app plus ID dmkamcknogkgcdfhhbddcghachkejeap, then a hash if you have a file.
Security Guides
Verify a Wallet .dmg with codesign on macOS
shasum is in the generic guide. This page adds codesign / spctl for Ledger Live and Trezor Suite .dmg files after the hash matches.
Security Guides
Coinbase Wallet Official Download Path
Coinbase Wallet is self-custody. The Coinbase exchange app is not. Official path is coinbase.com/wallet and ID hnfanknocfeofbddgcijnmhnfnkdnaad.
Security Guides
How to Hash a Chrome Wallet .crx File
Chrome Web Store installs do not give you a hash UI. This page is for people who actually have a .crx and need to hash it without treating sideload as normal.
Security Guides
Download Rainbow Wallet and Verify the ID
Rainbow’s UX is the lure for clones. Official site rainbow.me, Chrome ID opfgelmcmbiajamepnmloijbpoleiama, then hash a file if you have one.
Reviews
Best Non-Custodial Crypto Wallets in 2026
Our top self-custody wallets for 2026, led by GaurdWallet — 20 networks from one seed phrase, keys encrypted on your device. Plus the best picks for DeFi, Solana and cold storage.
Security Guides
How to Choose a Trustworthy Crypto Wallet
The concrete criteria that make a wallet trustworthy — self-custody, local key encryption, open standards, readable approvals, verifiable downloads — and why GaurdWallet is our Editor's Pick.
News
Crypto Wallet Security in 2026: The Threats to Watch
Wallet software has never been more secure — yet losses keep coming. The threats defining 2026 — drainers, malvertising, fake apps, seed phishing, address poisoning — and how to shut each one down.
Comparisons
Ledger vs Trezor: Which Hardware Wallet Is Safer in 2026?
Ledger vs Trezor compared for 2026: secure element vs open source, coin support, the companion app, and how to buy and verify either hardware wallet safely.
Reviews
Is Trust Wallet Safe? A 2026 Security Review
Is Trust Wallet safe in 2026? An honest look at its self-custody model, the real risks like fake apps and approval scams, and how to use it securely.
Security Guides
How to Protect Your Wallet from Phishing & Drainers
The complete Web3 phishing-protection checklist: install the real wallet, guard your seed phrase, read every transaction before signing, and revoke old token approvals.
Security Guides
How to Spot a Fake MetaMask Extension
Learn to spot a fake MetaMask extension using the official extension ID, publisher, user count and icon tells — and what to do if you already installed one.
Security Guides
I Downloaded a Fake Wallet — What to Do Now
Installed a fake crypto wallet? Follow this calm, step-by-step recovery checklist: move funds to a fresh wallet, revoke approvals, and prevent it next time.
Security Guides
Wallet Drainers Explained: How They Steal Funds
What a crypto wallet drainer is, how malicious approvals and signatures empty wallets in one click, and how transaction simulation and verification stop them.
Security Guides
Seed Phrase Phishing: How It Works & How to Avoid It
Seed phrase phishing tricks you into revealing your recovery phrase. Learn the common lures, the one rule that defeats them all, and how to store your phrase safely.
Security Guides
How to Verify a Wallet APK on Android Safely
Sideloading a crypto wallet APK? Learn how to verify its SHA-256 hash and signing certificate on Android so you install the real app, not a trojaned copy.
Security Guides
How to Confirm a Browser Extension ID Is Official
A browser extension’s ID is the surest way to tell real from fake. Learn where to find it, how to verify it, and the official IDs of major crypto wallets.
Security Guides
Checksum vs GPG Signature: What’s the Difference?
Checksum vs GPG signature explained simply: a checksum proves integrity, a signature proves authenticity. Learn when each is enough and how to verify both.
Security Guides
Address Poisoning Explained (and How to Avoid It)
Address poisoning tricks you into sending crypto to a lookalike address from your history. Learn how the scam works and the habits that make you immune.
Security Guides
7 Crypto Download Mistakes That Get Wallets Drained
The seven download mistakes that get crypto wallets drained — from clicking search ads to skipping the checksum — and the exact fix for each one.
News
Are Crypto “Download” Search Ads Safe? The Malvertising Problem
Search ads for crypto wallet downloads are a top scam vector. Learn how malvertising works, why fakes outrank the real site, and the bookmark rule that stops it.
News
What Happened to Wallet Guard? Is the Extension Still Available?
The Wallet Guard browser extension (walletguard.app) was acquired by Consensys and sunset in 2025, its features merged into MetaMask. Here's what happened — and how WalletGuard.cc is a different, independent project.
Security Guides
How to Download MetaMask Safely (and Verify It's Real)
The only official MetaMask source, how to confirm the real extension ID (nkbihfbeogaeaoehlefnkodbefgpgknn), and a 30-second SHA-256 check so the wallet you install is the one the developers shipped.
Security Guides
How to Verify Your Wallet Download: A Complete 2026 Guide
Step-by-step instructions for verifying SHA-256 checksums and GPG signatures before installing any crypto wallet on Windows, macOS, and Linux.
Comparisons
MetaMask vs Rabby: Which Ethereum Wallet Should You Use in 2026?
A detailed head-to-head comparison of the two most popular Ethereum browser wallets — UX, security features, DeFi integration, and the Rabby pre-tx scanner.
Reviews
Sparrow Wallet Review: The Best Bitcoin Wallet for Privacy
Sparrow Wallet is arguably the most feature-rich Bitcoin desktop wallet available. We explore its coin control, PSBT support, and how to connect it to your own node.
Security Guides
Hardware vs Software Wallets: Which Do You Actually Need?
The classic debate answered with nuance. For most users, the right answer depends on how much crypto you hold and how often you transact. Here's the decision framework.
News
Top 5 Fake Wallet Scams in 2026 and How to Avoid Them
Phishing wallets are getting more sophisticated. We document the most common scam vectors — fake extension IDs, typosquatted domains, and compromised mirrors — and show you how to stay safe.
Reviews
Electrum 4.5.5: What's New and Why Bitcoin Users Still Love It
Electrum turned 13 years old and is still the gold standard for advanced Bitcoin desktop users. We review what changed in 4.5.5 and why the wallet remains uniquely trustworthy.
All guides
- Download Phantom Safely and Verify It's Real
- Hashes Do Not Match: Do Not Install
- How to Spot a Fake Phantom Extension
- How to GPG-Verify an Electrum Release
- MetaMask vs Trust Wallet: Which to Install
- Play Protect Doesn't Recognize This App
- Exodus Official Download and Checksum Check
- Electrum vs Sparrow: Which Bitcoin Wallet
- This Extension Is Not Listed in the Chrome Web Store
- Trust Wallet Official Download vs Fake Apps
- What a SHA-256 Checksum Cannot Prove
- Ledger Genuine Check Failed: What To Do
- Download Rabby Wallet and Confirm the Real ID
- How to Revoke Risky Token Approvals
- Electrum Official Download and GPG Verify
- How to Spot a Fake Trust Wallet App
- How to GPG-Verify a Sparrow Wallet Build
- Ledger Live Official Download and SHA-256
- Electrum BAD signature: What It Means
- Trezor Suite Official Download and Verify
- Verify a Wallet with certutil on Windows
- Phantom vs Backpack: Official Install Paths
- Download Sparrow Wallet and Verify the Build
- GitHub Release vs Softonic Wallet Mirrors
- Package Is Invalid: CRX_HEADER_INVALID
- Download Keplr Safely and Check the Store ID
- Verify a Wallet .dmg with codesign on macOS
- Coinbase Wallet Official Download Path
- How to Hash a Chrome Wallet .crx File
- Download Rainbow Wallet and Verify the ID
- Best Non-Custodial Crypto Wallets in 2026
- How to Choose a Trustworthy Crypto Wallet
- Crypto Wallet Security in 2026: Threats to Watch
- Ledger vs Trezor: Which Is Safer in 2026?
- Is Trust Wallet Safe? Security Review 2026
- How to Protect Your Wallet from Phishing & Drainers
- How to Spot a Fake MetaMask Extension
- I Downloaded a Fake Wallet — What to Do Now
- Wallet Drainers Explained: How They Steal Funds
- Seed Phrase Phishing: How It Works & How to Avoid It
- How to Verify a Wallet APK on Android Safely
- How to Confirm a Browser Extension ID Is Official
- Checksum vs GPG Signature: What's the Difference?
- Address Poisoning Explained (and How to Avoid It)
- 7 Crypto Download Mistakes That Get Wallets Drained
- Are Crypto "Download" Search Ads Safe?
- What Happened to Wallet Guard?
- How to Download MetaMask Safely
- How to Verify Your Wallet Download: A Complete 2026 Guide
- MetaMask vs Rabby: Which Should You Use in 2026?
- Sparrow Wallet Review: The Best Bitcoin Wallet for Privacy
- Hardware vs Software Wallets: Which Do You Need?
- Top 5 Fake Wallet Scams in 2026
- Electrum 4.5.5: What's New
Security Alerts
Stay ahead of wallet scams.
Release alerts, vulnerability disclosures, and new verification guides. No marketing. Security information only.
No spam · Unsubscribe anytime