In this track: Explore safely
beginner · 3 MIN READ

Recognize a recovery phrase scam

A request for the master backup is a request for control.

LET’S PICTURE IT

Someone asking for every spare key to “check your mailbox number” is asking for far more than the task needs.

SEE IT FOR YOURSELF
From a public address to a verified signatureStep 1 / 4
From a public address to a verified signaturePublic address0x0000…0001Share to receiveAnother personCan read the addressCannot sign for youPublic identifier ≠ secret authorizationLocal signerPrivate key stays hereSign the chosen requestSigned requestMessage + signatureSecret key not includedThe moving packet represents a signature, not a keySignatureCheck the exact messageCheck the signing contextVerificationAuthorization checkedIntent still mattersValidity and safety are different questionsWallet interfaceReads public dataRequests authorizationNetwork stateBalances and recordsIndependent verificationNo wallet is connected in this local illustration

An address is public receiving information. It is not the private key that authorizes actions.

Animated local teaching model. No wallet, RPC or live blockchain data. Some labels and hashes are abbreviated for readability.

The disguise can change

A phrase request may be presented as synchronization, validation, recovery or a security upgrade. Those labels do not change what the phrase can do. The capability being requested matters more than the wording.

Public information and secrets differ

A transaction hash and receiving address are public identifiers. A recovery phrase can recreate account authorization material. Do not treat these as interchangeable support fields on a form.

A form can look familiar

An imitation wallet page can copy colors, illustrations and wording. A padlock indicates a protected connection to the displayed site, not that the site is the correct organization or that its request is safe.

Learn without entering real secrets

EtherTools never asks for a phrase. Its tools accept public addresses and example data. For actual recovery, use the wallet’s official process and understand its requirements rather than following an unsolicited link.

QUICK CHECK · NO PRESSURE

What does entering a real recovery phrase into an attacker’s form risk?

Your progress stays in this browser.
Keep exploring the original referenceethereum.org ↗

Original explanations by EtherTools. Examples are educational and source-linked; this site is independent of the Ethereum Foundation. Our approach.