Address poisoning
Attackers send you a tiny transfer from an address that starts and ends exactly like one you use. Later, you copy it from your history – and send funds to them.
Do you check the middle of the address?
Free crypto security self-check
How well protected is your crypto? Find out in 60 seconds.
Answer 12 quick questions about how you store, send and sign. Get an instant security score and a personalized, step-by-step defense checklist you can start on today.
- No sign-up or email
- No wallet connection
- Answers stay in your browser
Educational tool. Your score is an estimate based on your own answers, not a security audit.
About 60 seconds12 multiple-choice questions
Private by designNothing is sent to our servers
30-step checklistPrioritized by your answers
IndependentNo affiliate links or product sales
Before you start
6 quiet tricks attackers use – and most holders never notice
Many crypto losses don't involve "hacking" anything. They rely on small habits, rushed clicks and familiar-looking screens. Here's what to watch for.
Clipboard swapping
Some malware watches your clipboard. When you copy a wallet address, it silently replaces it with the attacker's. Your paste looks normal at a glance.
Do you confirm on a separate screen?
The "helpful support" DM
You post a question online and a "support agent" messages you within minutes, asking you to "validate" or "sync" your wallet on a website. Real support never does this.
Would you recognize the script?
Unlimited approvals
A single "Approve" or off-chain "permit" signature can allow a contract to move certain tokens from your wallet – sometimes long after you've forgotten about it.
When did you last review approvals?
SIM swap takeover
A criminal convinces your mobile carrier to move your number to their SIM, then uses text-message codes to reset your email and exchange passwords.
Is your phone number a single point of failure?
The "recovery" second hit
After a loss, victims are contacted by "recovery experts" who promise to trace and return the funds – for an upfront fee. It's frequently the same type of scam, again.
Do you know who to report to?
10-second challenge
Can you spot the poisoned address?
You want to send funds to your own deposit address below. Three similar addresses appear in your transaction history. Which one is really yours?
Your real deposit address
0x7a3F9c21E4b8D06aB5e3C9f1240dE8a7b6C5d91E
Illustrative example only. These addresses are made up.
Common misconceptions
3 beliefs that leave holders exposed
Myth
"I have a hardware wallet, so I'm safe."
Reality
A hardware wallet protects your keys, but it can't stop you from approving a malicious transaction or from typing your recovery phrase into a fake website.
Myth
"SMS codes are good enough for 2FA."
Reality
Text-message codes are better than nothing, but they're tied to your phone number – which can be hijacked. Authenticator apps or security keys are stronger.
Myth
"A photo of my seed phrase is a safe backup."
Reality
Photos sync to cloud accounts, get backed up automatically and can be found by malware. Your recovery phrase should never exist in digital form.
How it works
Three steps. No strings attached.
Answer 12 questions
Multiple-choice questions about your backups, accounts, devices and sending habits. Most people finish in about a minute.
See your score
Get an overall security score plus a breakdown across six areas, so you know where your biggest gaps are.
Get your defense plan
Unlock the complete 30-step checklist with your priority fixes on top. Tick items off, print it, or save it as a PDF.
What you'll receive
Your full, personalized list of defense steps
When you complete the Self-Check, you'll unlock:
- Your security score and level, from "Needs attention" to "Well protected"
- Priority fixes – the specific gaps your answers revealed, with how-to steps
- The complete 30-step defense checklist across keys, wallets, accounts, transactions, devices and scam awareness
- A printable version you can keep offline
Our promise
What Keyward will never ask you for
Legitimate security education never needs access to your funds. If anyone claiming to be us asks for any of the following, it's a scam.
- Your recovery phrase (seed phrase), private keys or wallet passwords
- To connect your wallet or sign any transaction or message
- To send, move, "verify" or "sync" funds
- Remote access to your computer or phone
- Payment to "recover" lost or stolen crypto
FAQ
Frequently asked questions
Is the Self-Check really free?
Yes. There is no charge, no sign-up and no email required. You get your score and the full checklist immediately in your browser.
Do you store my answers?
No. The Self-Check runs entirely in your browser. Your answers are not sent to our servers. If you tick off checklist items, that progress is saved only on your own device so you can come back to it. See our Privacy Policy.
Will you ask me to connect my wallet?
Never. Keyward does not interact with any wallet, blockchain or exchange account. Be cautious of any website that asks you to connect a wallet just to "check your security".
Is this financial or investment advice?
No. Keyward provides general security education only. We don't recommend buying, selling or holding any asset. See our Disclaimer.
Can you help me get back stolen crypto?
No. We do not offer fund-recovery services, and you should be very cautious of anyone who promises they can recover stolen crypto for a fee. In the U.S., you can report crypto fraud to the FBI's Internet Crime Complaint Center at ic3.gov and to the FTC at reportfraud.ftc.gov, as well as to the platform involved.
Does a high score mean I can't be hacked?
No security measure is perfect. A high score means your answers reflect widely recommended practices. It's an educational estimate, not a guarantee or a professional audit.
Ready to see where you stand?
12 questions · about 60 seconds · a full defense plan at the end.