Computer Security for Crypto: Hardening Your Device Against Theft
Most crypto thefts do not involve breaking the blockchain — they involve breaking into your computer. Keyloggers, clipboard hijackers, browser extension malware, and remote access trojans are how crypto gets stolen. Here is how to lock down your machine.
The most common phrase in Bitcointalk hack threads: "I don't know how they got into my computer." The answer is almost always one of these: a fake browser extension that stole wallet credentials, a clipboard hijacker that replaced your copied address with the hacker's address, a keylogger that captured your seed phrase when you typed it, a phishing site that looked identical to the real one, or a remote access Trojan (RAT) that gave the attacker full control of your computer. None of these attacks break cryptography. They bypass it entirely by targeting the weakest link: your computer. Crypto wallet types and security →
Operating System Hardening
Keep everything updated. This is the single most important step. Enable automatic updates for your OS, browser, and all software. Most crypto-stealing malware exploits known vulnerabilities that have already been patched. The WannaCry ransomware (2017) exploited a vulnerability that Microsoft had patched two months earlier — victims were simply running outdated software. Set your OS to install updates automatically. For Windows, use Windows Update with automatic installation. For Mac, enable "Install macOS updates" in System Settings. For Linux, set up unattended-upgrades.
Use a standard (non-admin) account for daily use. On Windows, create a standard user account and only use the Administrator account for software installation. On Mac, admin privileges are separate from your daily account. Malware that runs under a standard account has limited ability to infect the system. If you are running as admin full-time, any malware you click gets full system access. This one change blocks 80% of common malware infections.
Disable unnecessary services. Turn off Remote Desktop (RDP) if you do not need it. RDP is one of the most commonly exploited services for crypto theft — attackers scan for open RDP ports and brute-force passwords. On Windows, disable Remote Desktop in System Properties. On Mac, disable Remote Login and Remote Management in Sharing settings. Also disable Bluetooth when not in use — BlueBorne-style attacks can compromise devices via Bluetooth.
Browser Security
The browser is the most common attack vector for crypto theft. Install uBlock Origin (ad blocker) to block malicious ads that deliver malware. Install NoScript or uMatrix to block JavaScript by default on unfamiliar sites — many crypto drainer sites use JavaScript to detect wallets and prompt fake connection requests. Never install browser extensions that claim to "enhance" crypto trading or wallet functionality — many are malware that wait for you to log into a real exchange and then steal your session cookies. Only install extensions from the official Chrome Web Store or Firefox Add-ons, and even then, check the extension's review history and number of users. Extensions that suddenly ask for new permissions (like "read all data on all websites") have likely been hijacked.
Use separate browser profiles for crypto and everyday browsing. Create a dedicated browser profile (Chrome profile or Firefox container) that you only use for crypto exchanges, DeFi dApps, and hardware wallet interfaces. Do not use this profile for social media, news, or random browsing. This isolation means that even if your main browsing profile gets compromised by a malicious site, your crypto profile remains clean. On Chrome, use Profiles under Settings > You and Google. On Firefox, use Multi-Account Containers add-on.
Wallet Security Best Practices
Hardware wallet + passphrase: A hardware wallet (Ledger, Trezor) keeps private keys offline. The seed phrase never touches your computer. Even if your computer has malware, the hardware wallet cannot sign transactions without physical button confirmation. Enable BIP39 passphrase on your hardware wallet — this creates a "hidden wallet" that requires both the seed phrase AND the passphrase. If someone steals your physical Ledger, they still need the passphrase to access funds.
Never type your seed phrase on a computer. The seed phrase should only ever be entered directly on the hardware wallet device itself. Any website, software wallet, or recovery tool that asks you to enter a seed phrase on your computer is a scam or infected. If you have ever typed a seed phrase on your computer, assume it is compromised — keyloggers or clipboard malware may have captured it. Generate new wallets and transfer funds immediately.
Use Revoke.cash regularly. DeFi users should check token approvals weekly on Revoke.cash or Etherscan's Token Approval Checker. Many hacks exploit old, unlimited approvals that you granted to dApps years ago. Revoke any approval you no longer need. For active DeFi users, consider using a "burner" hot wallet for interacting with dApps and keep the majority of funds in a separate cold storage wallet that never connects to any dApp.
Detecting Compromise
Watch for these signs: browser extensions you do not remember installing, your antivirus or Windows Defender being disabled without your action, slow computer performance (crypto miners running in the background), unexpected popups, browser redirects, new toolbars or search engines, unexplained network activity (check Task Manager or Activity Monitor for processes using network bandwidth), your cursor moving or clicking on its own (remote access Trojan), login notifications for accounts you did not access, and emails about password changes you did not request. If you see any of these, your device may be compromised. Stop using it for crypto immediately.
The Dedicated Crypto Device Strategy
The most secure approach for serious crypto holders is a dedicated device used exclusively for crypto transactions. Buy a cheap Chromebook ($200-300), enable verified boot, and only use it for: logging into exchanges, connecting your hardware wallet, and signing transactions. Never install additional software, never browse social media, never check email, and never visit untrusted websites on this device. Factory reset it once a year and reinstall from scratch. This device should live in your home and never leave. For daily browsing and other activities, use your regular computer. This separation is nuclear-grade security that eliminates the vast majority of attack vectors. For holdings over $100,000, this is the minimum recommended setup.