Wallet hygiene checklist: why separating spending, savings and burn wallets beats any security tool
A user loses their entire stack not because their cryptography failed, but because every coin they owned sat behind a single compromise. The seed phrase leaked on a hot device, and the savings went with the lunch money. That failure mode has a name in the security world: missing compartmentalization.
One wallet is one blast radius
The Bitcoin wiki has said it for over a decade: the best storage strategy separates what you use from what you keep, favoring hardware or cold wallets for anything you cannot afford to lose. The principle predates cryptocurrency entirely. Banks call it tiered custody; militaries call it compartmentalization. Every internet-connected wallet carries a nonzero probability of compromise, whether through malware, phishing or a buggy browser extension. If that probability applies to one wallet, applying it to your whole net worth is an arithmetic error. Compartmentalization caps the maximum loss of any single event.The three-wallet pattern
A workable baseline needs only three buckets. Each runs different software on different devices where possible, and none shares a seed phrase with another. The setup costs nothing but discipline. Spending wallet: a hot wallet holding roughly what you would carry in cash. It lives on your daily phone or browser, gets refilled as needed, and its total loss should be annoying rather than catastrophic. Savings wallet: keys generated and stored offline on a hardware device, ideally never having touched an internet-connected machine. Transfers flow one direction: surplus moves from hot to cold, rarely the reverse. Burn wallet: a disposable identity for signing up to unvetted services, testing sketchy dapps or receiving payments from strangers. When in doubt, burn it and generate a new one. The name is the instruction manual.Why this beats clever tooling
Vendors keep shipping smarter defenses, yet attackers keep pivoting to the human. Microsoft researchers coined the term "cryware" for malware that targets non-custodial hot wallets by swapping clipboard addresses, noting that no mechanism exists to reverse fraudulent crypto transactions once signed. A perfect tool still signs whatever the compromised host tells it to sign. The same asymmetry shows up in address poisoning, which Chainalysis dissected in a detailed analysis of the scam: criminals send dust from lookalike addresses so a fake destination lands in your transaction history, waiting for a careless copy-paste. No amount of multisig sophistication saves a user who pastes the wrong string into a savings transfer. Compartmentalization works precisely because it assumes tools fail. When the burn wallet's browser session turns hostile, the attacker finds pocket change instead of your retirement. Security engineering has a maxim for this: design for the breach, not against it.Address verification is part of hygiene
Separation limits damage; verification prevents it. Before any outbound transfer, confirm the full recipient address character by character on a trusted screen, preferably a hardware wallet display rather than the host operating system. First-and-last-four checks are exactly what lookalike attacks are built to defeat. For anyone moving Bitcoin or Monero regularly, our bitcoin validator and monero validator catch malformed addresses before they reach the network. They are a sanity check, not a substitute for reading the address yourself. Habits matter as much as architecture. Our earlier piece on password hygiene makes the same argument in a different domain: boring, repeated verification outperforms exotic countermeasures that get skipped under pressure.The working checklist
Run through this list once per quarter. It takes about twenty minutes, and most people discover at least one violation on their first pass.- Three separate seed phrases: spending, savings, burn. Zero shared words between them.
- Savings keys never typed into any internet-connected device, ever.
- Hot wallet balance capped at an amount whose loss you can shrug off.
- Seed backups on paper or metal, stored in two geographically distinct places.
- Full address verification on the device screen for every outbound transfer.
- A recovery rehearsal: restore each wallet from backup at least annually.