Skip to content
MSCAN

Practical guide

Seed phrase, private key and password: what you must never share

How wallet access credentials differ and which rules protect funds from phishing and theft.

Seed phrase, private key and access protectionWALLET SECURITYSEED · KEY · PASSWORDBACKUPCONTROLACCESS
A recovery secret, cryptographic key and password protect different security layers.

A seed phrase and private key provide technical control over funds. Anyone who obtains them can sign a transfer without the owner approving it.

Seed phrase

A set of words used to restore a wallet. Never enter it through a link in a message, send it to support or store it in an unprotected cloud document.

Private key

The secret for a particular address. Revealing it is equivalent to handing over control of that address.

SEED · KEY · PASSWORDMSCAN

Three secrets with different jobs

SEED
RecoveryControl of the whole wallet
KEY
SigningControl of an address
PASS
AccessApplication protection
A device password does not replace a seed phrase, and support never needs the seed phrase.

Application password

It usually protects access on a device or in a service but does not replace a seed phrase. The exact rules depend on wallet type.

If a secret is exposed

Treat the wallet as compromised. Create a new wallet on a clean device and move funds if still possible. Do not trust anyone claiming they can reverse a confirmed theft.

FAQ

Clear answers to common questions

Can this decision be fully automated?

No. Automation can collect and prioritise signals, but transaction purpose, documents, party explanations and the final decision require human assessment.

Is this approach useful for an individual user?

Yes. An individual usually needs fewer addresses and a lighter process, but network, payment-detail and source verification remain just as important.

What should happen when sources conflict?

Pause the action, record the conflict and locate a primary or independent source. A lack of clarity should not be replaced by a convenient assumption.

Can a seed phrase be shared with customer support?

No. Legitimate support does not need a seed phrase or private key. A request for either is a critical danger signal.

What changes when a company uses the same process?

Roles, retention rules, approval thresholds and a reconstructable decision rationale become necessary. The more people involved, the more important one current record becomes.

When should the information be reviewed again?

Review protection after a device change, exposure, change of responsible people or a recovery-plan test.

Which information should be checked first?

Identify the wallet type and separate the recovery secret, signing key and everyday access password. Do not move to a conclusion until the primary details and starting facts are consistent.

What should be retained for a later review?

Document a safe backup and recovery process, but never store the secrets themselves in MSCAN or an open procedure.

How is a password different from a seed phrase?

A password usually protects an application or device. A seed phrase restores cryptographic control over the wallet.

Where should someone start with “protecting a seed phrase, private key and password”?

Identify the wallet type and separate the recovery secret, signing key and everyday access password.

Is a test step needed before the main action?

Test a backup only in a trusted environment; never enter a live seed phrase into a random website.

What should happen if a seed phrase is exposed?

Treat the wallet as compromised, create a new one on a clean device and move funds safely if that is still possible.

This material is informational and is not legal, tax or investment advice.