Login is where clones eat passwords
A login form is downstream of an address bar you checked yourself. In that order. If you got here by clicking an ad, reverse the order and start over.
Before the cursor touches a password field
- Paste the address from your own list and watch what loads. Don’t click through from a search result.
- Compare the full 56-character string: the first 8 characters,
hn2paw7z, and the tail equally. One wrong character out of 56 is a different site with a login form that looks identical. The address page shows why the eye misses the tail. - Look at the page that loaded. A real app prints its own onion in its banner or footer. Bar and banner should match character for character.
- Only now type credentials.
What a clone login eats
Your password, then your 2FA code, because a code doesn’t stop working after one use the way people hope. Sometimes a “deposit address” field appears, pre-filled, oddly convenient. And when a “login” asks for a 12-word seed phrase, that’s not a login at all. It’s a withdrawal in a costume.
What the real thing asks for
Username and passphrase, a second factor if you enabled one, then the usual screens: balance, orders, messages. That’s the complete list of what it needs from you. A form asking for more than the login needs is the tell; see how clones get built.
One line on hygiene
Password managers are for logins; seed phrases are for wallets, and the two don’t meet. Whatever asks for your seed phrase is asking you for a donation.