---
title: "Keeping your account and wallet safe"
description: "Security basics for ClubAffili members: passwords, phishing, seed phrases, contract addresses and what ClubAffili will never ask for."
url: https://help.clubaffili.com/en/articles/38-keeping-your-account-and-wallet-safe
collection: "Account, Security & Support"
updated: 2026-09-29
language: en
---

# Keeping your account and wallet safe

Security basics for ClubAffili members: passwords, phishing, seed phrases, contract addresses and what ClubAffili will never ask for.

**Quick answer:** Use a unique password, never share your wallet seed phrase, only trust the contract and staking addresses shown inside your logged-in dashboard, and treat any DM offering help or "support" with suspicion.

## ClubAffili will never

-   Ask for your wallet seed phrase or private key
    
-   Ask for your password
    
-   Send you a contract address, staking address or payment request by direct message
    
-   Ask you to pay a fee to release a withdrawal
    

## Protect your login

-   Use a long, unique password and a password manager.
    
-   Turn on two-step verification in Menu → Security.
    
-   Log out on shared devices.
    
-   Check the address bar: make sure you're on the official ClubAffili domain before logging in.
    

## Protect your wallet

-   Write your seed phrase down offline. Anyone with it controls your tokens.
    
-   Read every wallet prompt before approving. A stake transfer goes to the staking address shown on the Staking page — nothing else. The wallet verification signature never moves tokens.
    
-   Verify the Club Token contract address from the Club Token page in your dashboard before swapping on Uniswap.
    
-   Consider a hardware wallet for larger balances.
    

## How ClubAffili protects you

-   Stakes are matched to you only when they come from a wallet you have verified with a signature, and withdrawals are sent only to your verified payout wallet.
    
-   Every on-chain transfer is verified by ClubAffili's own servers before it counts.
    
-   Withdrawals are checked by an authorised operator and the amount comes from ClubAffili's records, not the browser.
    
-   Login attempts are rate-limited and sensitive admin actions are audit-logged.
    

## If you think you've been compromised

1.  Change your ClubAffili password immediately (Menu → Password).
    
2.  Move tokens to a new wallet you control and set it as your payout wallet in Menu → Payout destination.
    
3.  Contact support so we can put a hold on withdrawals while you secure the account.