# Setups: Safe & Safest

If you are the type of person that needs all the info before making a decision, read through the materials in the rest of the GitBook, then come back to this page.

However if you are the type of person that just wants the best security without all the info, follow the items outlined under these two options. Both SAFE and SAFEST are decent options, or a combination of the two. But we absolutely do not recommend doing anything less than the SAFE option.

## SAFE

1. [BITDEFENDER TOTAL SECURITY or PREMIUM + VPN](https://bitdefender.f9tmep.net/doqmoK)
   1. Note, BitDefender **WILL** work on Chromebooks if you chose to get a Chromebook\
      You just need to install it from the Google Play store and then sign in to your account.
2. [TREZOR MODEL T](https://shop.trezor.io/product/trezor-model-t?offer_id=15\&aff_id=9883) for long holds/macro beliefs like BTC, ETH and others
   1. Personally, I keep a small stash stored on a hardware wallet and the rest are on Celsius or [NEXO](https://nexo.io/ref/r8mmvwcayd?src=web-link) earning interest.
3. SEED PHRASE / PRIVATE KEYS
   1. 2 copies on paper, stored in different places
   2. Never store these on your devices as text or images. Not even for a minute
4. DOUBLE-CHECK WALLET ADDRESS BEFORE SENDING OR RECEIVING
   1. Only the first four and last four digits of the address need to be checked regularly
   2. But they should be checked against the original record, not something you copied and pasted
5. [LAST PASS](https://www.lastpass.com/solutions/authentication) TO SAVE PASSWORDS
   1. Never use Chrome or another browser to save your passwords.
   2. Make your master password easy to remember and at LEAST 24 characters long
   3. LASTPASS can also be used to store SEED PHRASES and PRIVATE KEYS. However, it does pose risks. Of course, writing them on paper poses risks too.
6. 2FA WITH LASTPASS AUTHENTICATOR or [GOOGLE AUTHENTICATOR](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2\&hl=en_US\&gl=US)
   1. Never use an SMS (text message) authenticator option... EVER
7. USE [SIGNAL MESSENGER APP](https://signal.org/download/) TO SEND SENSITIVE INFORMATION
   1. Works on phones, tablets and computers and you can have one account synced to all.
   2. There are times when you may need to send yourself or someone else sensitive data. Signal is one of the only messenger apps that is encrypted end-to-end as well as on the device.
   3. Text, WhatsApp and FB Messenger are a big NO.
   4. Signal will NOT work on Chromebooks. Sorry.
8. For added security, you can use proton mail or any similar encrypted email service. Gmail, Outlook and other services are not natively encrypted. Don't ever send sensitive data over them if it can be helped.

## SAFEST

### Safest would include all of the above steps plus the following:

1. USE ONE DEVICE EXCLUSIVELY FOR CRYPTO.
   1. Believe it or not, the preferred device is a Chromebook. They are inexpensive and Chrome's OS natively "sandboxes" everything. So if one part of your system is compromised the malware, virus or hacker would find it near impossible to infiltrate anything else.
   2. Note, [BitDefender ](https://bitdefender.f9tmep.net/doqmoK)will work on Chromebooks, even though BitDefender says differently.\
      You just need to install it from the Google Play store and then sign in to your account.
2. USE A HARDWARE WALLET TO CONFIRM ALL TRANSACTIONS IN METAMASK
   1. Ledger
      1. Create a "ghost wallet"
         1. Buy a second wallet and copy the seed phrases onto it. This is in case you and your backup seed phrase perish, quite literally. Store in a safety deposit box or safe with instructions for a family member. Some people also leave instructions to open a support ticket in the Wolf Den so their family member or heir can have help learning how to access the assets.
   2. [TREZOR MODEL T](https://shop.trezor.io/product/trezor-model-t?offer_id=15\&aff_id=9883)
      1. Setup 16 SEED PHRASES, require multiple to recover wallet
      2. Hidden wallets to store long holds
      3. Create a "ghost wallet"
         1. Buy a second wallet and copy the seed phrases onto it. This is in case you and your backup seed phrase perish, quite literally. Store in a safety deposit box or safe with instructions for a family member. Some people also leave instructions to open a support ticket in the Wolf Den so their family member or heir can have help learning how to access the assets.
3. Have a second blank wallet setup in case your current wallet get compromised
   1. Best to have it setup and ready to go on a different device then the one your primary wallet is setup on
   2. Add any networks to it that you use and then don't touch it unless you believe your primary wallet has been compromised
