> For the complete documentation index, see [llms.txt](https://docs.pixeljourney.xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.pixeljourney.xyz/education/antelope-ecosystem-guides/wax/security-tips.md).

# Security Tips

> **⚠️ Critical Safety Reminder**\
> WAX, like all blockchains, has risks. Scams, phishing, fake dApps, and malicious contracts are common. Always stay vigilant. DYOR. Never share private keys or seed phrases.

Security is especially important when engaging with the Pixel Journey ecosystem and the broader WAX economy.

## Core Security Principles

### 1. Protect Your Keys

* Never share your private keys or seed phrase with anyone or any website.
* Use a hardware wallet for significant holdings when possible.
* Store your seed phrase securely offline (never in cloud storage or screenshots).

### 2. Verify Everything

* Always double-check URLs before connecting your wallet.
* Verify contract addresses from official sources.
* Be extremely cautious of links in Discord, Twitter, or DMs.
* Bookmark official sites and use them directly.

### 3. Start Small

* Test new dApps, DEXes, or features with very small amounts first.
* Never commit large sums to anything you haven't thoroughly researched.

### 4. Manage Approvals

* Regularly revoke token approvals using trusted tools.
* Avoid unlimited approvals when possible.
* Revoke access for dApps you no longer use.

**Note for Collection Owners**: If you manage Atomic Assets collections, be aware of **notify authority** and other collection-level permissions. These are different from regular token approvals. See the dedicated guide:

→ [Atomic Assets Permissions & Notify Authority](https://github.com/pixel-journey/gitbook-docs/blob/main/education/antelope-ecosystem-guides/wax/security-tips/education/common-guides/atomic-assets-permissions-and-notify-authority.md)

### 5. Be Scam Aware

* Watch out for fake airdrops, giveaways, and "support" accounts.
* Never click suspicious links or download unknown files.
* If something sounds too good to be true, it almost always is.

## WAX-Specific Considerations

* Resource management (CPU/NET/RAM) can be targeted in certain attacks — keep some resources available.
* NFT scams (fake collections, malicious mints) are common — verify collections before interacting.
* Many popular tools and explorers exist — stick to well-known, community-vetted ones.

## Pixel Journey Security Recommendations

When using Px platforms and the broader WAX ecosystem:

* Use **Anchor** as your primary wallet.
* Connect through official Px sites and verified links.
* Be extra cautious when approving contracts for staking, swapping, or marketplace interactions.
* Regularly check your active sessions and approvals.
* Use PxWallet features (when available) for enhanced security and vault options.

## Recommended Habits

* Keep your software and wallet updated.
* Use strong, unique passwords where applicable.
* Enable any available 2FA or additional security features.
* Stay informed through official Pixel Journey channels (Discord, verified socials).

*This is educational content. Security is your responsibility. Always DYOR and stay cautious. Not financial advice.*