# Safety and Protection

In the world of cryptocurrency, the security of your assets is of utmost importance. As a self-custody wallet, CornWallet gives you complete control over your assets. This means you are responsible for safeguarding your own assets. This chapter provides essential security knowledge to help you protect your digital wealth.

#### **Basics of Security**

> **Core Principle:** Your private key, your assets. In a self-custody wallet, whoever holds the private key (or its mnemonic phrase form) owns the assets. CornWallet cannot access your private key or freeze or transfer your assets. This grants you true ownership but also requires you to take full responsibility for safeguarding your private key.

#### **Private Keys and Mnemonic Phrases**

As emphasized in the "Quick Start" section, the mnemonic phrase is the highest authority credential for your wallet. Below are the golden rules for protecting your mnemonic phrase:

| **Description**           | **Guidelines**                                                                                                                             |
| ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ |
| **Never Share**           | Any individual or website asking for your mnemonic phrase is a scammer. CornWallet officials will never request your mnemonic phrase.      |
| **Physical Backup**       | Copy your mnemonic phrase onto paper or engrave it on a metal plate, and store it in multiple secure, fireproof, and waterproof locations. |
| **Avoid Digital Storage** | Do not store your mnemonic phrase on any internet-connected device in any form (e.g., text files, photos, emails, cloud storage).          |
| **Beware of Phishing**    | Never enter your mnemonic phrase into any suspicious website or application. Always access CornWallet through official channels.           |

#### **Password Management**

The password you set for the CornWallet application is used to protect app access and is different from your mnemonic phrase. This password is only valid on the current device.

* **Set a Strong Password:** Create a complex password that includes uppercase and lowercase letters, numbers, and symbols.
* **Change It Regularly:** Periodically update your app access password.
* **Difference Between Password and Mnemonic Phrase:** If you forget the app password, you can still use your mnemonic phrase to recover your wallet on any device. However, if you lose your mnemonic phrase, no one can help you retrieve your assets.

#### **How to Identify and Prevent Scams**

The crypto world is full of opportunities but also various scams. Below are some common types of scams and prevention methods:

| **Scam Type**                | **Prevention Method**                                                                                                                                                                                                                                                        |
| ---------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Phishing Websites/Emails** | Impersonate official websites or emails to trick you into entering your mnemonic phrase or private key. **Countermeasure:** Carefully verify website URLs and avoid clicking on links from unknown sources.                                                                  |
| **Airdrop Scams**            | Claim to have sent tokens to your address and guide you to a website to “claim” them, which will ask you to authorize transactions or enter your private key. **Countermeasure:** Stay vigilant about unsolicited tokens and avoid interacting with unknown smart contracts. |
| **Fake Technical Support**   | Impersonate official customer support on social media and request your mnemonic phrase under the guise of “helping to resolve issues.” **Countermeasure:** Only contact technical support through official channels and never disclose sensitive information.                |
| **Malware**                  | Steal information stored on your device by installing malicious software. **Countermeasure:** Keep your phone system updated and avoid installing applications from unverified sources.                                                                                      |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://corndex.gitbook.io/cornwallet/safety-and-protection.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.