Protect recovery phrases, local passwords, connected sites, devices, and hardware-wallet workflows.
The recovery phrase controls the wallet. Keep it offline, private, legible, and protected from loss. Noir Wallet cannot recover it for you.
The password encrypts wallet credentials on this browser profile. It is not a replacement for the recovery phrase and does not protect a device that is already compromised while the wallet is unlocked.
Configure a suitable auto-lock period in settings. Lock the wallet before sharing the computer or leaving it unattended.
Review dApp authorizations regularly and remove origins you do not recognize or no longer use. Always confirm the origin in the wallet prompt.
Keystone accounts use supported PCZT transaction flows. Some identity and message-signing capabilities are unavailable for hardware accounts.
Disconnect the site, lock the wallet, and close the browser tab.
If the recovery phrase is safe, change the local password on a trusted device.
Treat the wallet as compromised. On a trusted environment, create a new wallet and move remaining funds after independently verifying the destination.