Device and browser hygiene for crypto

Keeping the computer and phone you use for crypto clean: updates, separate browser profiles, extensions, downloads and the habits that keep infostealers out.

Last reviewed 2026-10-27 · 2 min read

On this page
  1. The basics
  2. A separate browser profile for crypto
  3. Extensions
  4. Phones
  5. Public and shared devices
  6. Warning signs of an infection

Your wallet is only as safe as the device it runs on. Malware that steals browser data, wallet files and session cookies, often called infostealers, is one of the main ways crypto gets stolen without any phishing site involved.

The basics

  • Keep your operating system, browser and wallet apps updated. Most updates include security fixes.
  • Use a standard (non-admin) user account for daily work where your operating system supports it.
  • Do not install pirated software, cracks, cheats or "free" paid tools. They are a common way infostealers spread.
  • Do not run files or scripts from strangers, including job "tests" and game betas. See fake job malware.
  • Lock your screen and use full-disk encryption, especially on laptops and phones.

A separate browser profile for crypto

Create a dedicated browser profile, or use a different browser, just for your wallet:

  • Install only your wallet extension and, optionally, a password manager.
  • Do not use it for general browsing, email or social media.
  • Bookmark the sites you use, so you never need search results or links.

This limits what a malicious extension, a compromised website or an accidental click can reach.

Extensions

Browser extensions can see and change the pages you visit. Before installing one:

  • Check it is from the real publisher.
  • Ask whether you really need it.
  • Remove extensions you no longer use.

Phones

  • Install apps only from official stores, through links from the developer's official site.
  • Keep the phone updated and protected with a strong screen lock.
  • Be careful with apps that request accessibility permissions or screen recording: these can read what is on screen.
  • Do not take screenshots of seed phrases. Phone galleries often sync to the cloud automatically.

Public and shared devices

Never use a shared or public computer for crypto. Avoid entering anything sensitive on public Wi-Fi without a trusted connection, and never on a device you do not control.

Warning signs of an infection

  • Addresses changing when you paste them.
  • Unexpected logouts or new-login alerts from your accounts.
  • Wallet transactions you did not make.
  • New browser extensions you did not install.

If you see these, move funds from a clean device. See I've been hacked.