Skip to content

Commit

Permalink
Safety and Security Guide (#188)
Browse files Browse the repository at this point in the history
* add Safety and Security page
  • Loading branch information
gvzdv committed Jul 31, 2023
1 parent 1e4c190 commit efa9638
Show file tree
Hide file tree
Showing 2 changed files with 172 additions and 0 deletions.
86 changes: 86 additions & 0 deletions docs/protocol/security.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,86 @@
---
title: Safety and Security
sidebar_position: 5
description: Security and Scam Prevention
keywords:
- Security
- Wallet
- Password
---

import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';
import Link from '@docusaurus/Link';
import styles from '@site/src/pages/index.module.css';

Navigating the internet and being part of a crypto project can be exciting! But it's crucial to use good security practices. This way, we can protect our digital community from cyber attacks, and enjoy our Subspace journey with peace of mind.


## Wallet security

---

:::danger NEVER SHARE YOUR KEYS

Under any circumstances, do not share your 12-word seed phrase or private keys.
:::

### Use strong passwords

:::caution MOST ACCOUNT HACKS HAPPEN BECAUSE OF WEAK OR STOLEN PASSWORDS

Make sure to make your password long and mix letters, numbers, and special symbols.
:::

One of common hacking methods is called "dictionary attack". It happens when a password consists of common and related words.

Weak password example:
```
PickleRick!
```
Strong password example:
```
hvDn@Hy#Gp5@jC*WH7
```

Another way your password can get stolen is if you use information that can be found online or through social engineering (for example: your name, date of birth, or the city you live in).

Here's how to make a strong password:
* Make it as long as the system allows.
* Use both upper and lower case letters, numbers, and symbols.
* Don't use personal information.
* Avoid everyday words.

### Use unique passwords

Password leaks happen on various websites. Don't reuse any of your existing passwords for your wallet to increase the security of your assets.

### Use a password manager

Using a password manager is a preferable way to keep your passwords.

Popular password managers offer the following services:
* Encrypted password storage
* Strong password generator for new sign-ups
* Alerts of data breaches
* Free tiers

Example of a recommended password manager: [Bitwarden](https://bitwarden.com/).

### Use a hardware wallet

A hardware wallet is by far the most secure way to store your private keys. Unlike online exchanges and wallets, hardware wallets store keys offline and locally and drastically reduce the chance of being hacked.

The most popular hardware wallets are [Ledger](https://www.ledger.com/) and [Tresor](https://trezor.io/).


## Community security

---

:::caution WE NEVER DM FIRST

Remember: Subspace team members will never send you direct messages first. If that happens to you, ignore the message and block the sender.
:::

Do not click on any links on our forum, Discord, or Telegram if these links are not posted by one of team members. Scammers may easily change their malicious links to make them look like legit websites, so the easiest way to stay safe is to avoid such messages at all.
86 changes: 86 additions & 0 deletions versioned_docs/version-latest/protocol/security.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,86 @@
---
title: Safety and Security
sidebar_position: 5
description: Security and Scam Prevention
keywords:
- Security
- Wallet
- Password
---

import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';
import Link from '@docusaurus/Link';
import styles from '@site/src/pages/index.module.css';

Navigating the internet and being part of a crypto project can be exciting! But it's crucial to use good security practices. This way, we can protect our digital community from cyber attacks, and enjoy our Subspace journey with peace of mind.


## Wallet security

---

:::danger NEVER SHARE YOUR KEYS

Under any circumstances, do not share your 12-word seed phrase or private keys.
:::

### Use strong passwords

:::caution MOST ACCOUNT HACKS HAPPEN BECAUSE OF WEAK OR STOLEN PASSWORDS

Make sure to make your password long and mix letters, numbers, and special symbols.
:::

One of common hacking methods is called "dictionary attack". It happens when a password consists of common and related words.

Weak password example:
```
PickleRick!
```
Strong password example:
```
hvDn@Hy#Gp5@jC*WH7
```

Another way your password can get stolen is if you use information that can be found online or through social engineering (for example: your name, date of birth, or the city you live in).

Here's how to make a strong password:
* Make it as long as the system allows.
* Use both upper and lower case letters, numbers, and symbols.
* Don't use personal information.
* Avoid everyday words.

### Use unique passwords

Password leaks happen on various websites. Don't reuse any of your existing passwords for your wallet to increase the security of your assets.

### Use a password manager

Using a password manager is a preferable way to keep your passwords.

Popular password managers offer the following services:
* Encrypted password storage
* Strong password generator for new sign-ups
* Alerts of data breaches
* Free tiers

Example of a recommended password manager: [Bitwarden](https://bitwarden.com/).

### Use a hardware wallet

A hardware wallet is by far the most secure way to store your private keys. Unlike online exchanges and wallets, hardware wallets store keys offline and locally and drastically reduce the chance of being hacked.

The most popular hardware wallets are [Ledger](https://www.ledger.com/) and [Tresor](https://trezor.io/).


## Community security

---

:::caution WE NEVER DM FIRST

Remember: Subspace team members will never send you direct messages first. If that happens to you, ignore the message and block the sender.
:::

Do not click on any links on our forum, Discord, or Telegram if these links are not posted by one of team members. Scammers may easily change their malicious links to make them look like legit websites, so the easiest way to stay safe is to avoid such messages at all.

0 comments on commit efa9638

Please sign in to comment.