Security Practices
While Brava incorporates robust security measures—including our self-custodial infrastructure built on Safe and comprehensive Nexus Mutual cover—your personal security practices are equally critical for protecting your assets.
Essential Security Measures
Wallet Security
Never share your private keys or recovery phrases with anyone, including Brava team members
Store recovery phrases offline in multiple secure locations
Use hardware wallets (Ledger, Trezor) for managing larger positions
Enable biometric authentication and additional security features in your wallet
Phishing Prevention
Verify our URL: Always use https://app.brava.xyz (bookmark it!)
Be alert for red flags: Brava will never ask for your private keys, recovery phrase, or passwords
Beware of urgency: Legitimate platforms don't create artificial time pressure for "security" actions
Transaction Safety
Double-check before confirming: Verify recipient addresses, amounts, and contract interactions
Send test transactions for significant transfers
Review and limit token approvals: Use tools like Revoke.cash to manage permissions
Verify on hardware devices: Always confirm transaction details on your hardware wallet's screen
Secure Access
Keep software updated: Regularly update your operating system and browsers
Use trusted devices and networks: Avoid public Wi-Fi and computers for DeFi activities
Consider multi-signature setup: Brava's Safe infrastructure supports multi-sig for enhanced security
If You Suspect a Security Issue
Move remaining funds to a new, secure wallet created on a trusted device
Contact our support team immediately (but never share private keys)
Document the incident including suspicious transactions and communications
Quick Security Checklist
✅ Hardware wallet for large positions
✅ Recovery phrase stored securely offline
✅ Official website bookmarked
✅ Regular approval revocations
✅ Software and devices updated
✅ Transaction verification habit
Remember: Your security practices are the strongest defense against potential threats.
For more detailed security resources, visit CryptoScamDB, Ethereum Phishing Detector, or Web3 Security Resources.
Last updated