Security — Stay Safe — Protect Your Wallet

Updated: Oct 2025

Recovery phrase (12 or 24 words)

  1. The recovery phrase is ”kind of” password to your blockchain account. It's unique and one-time only - you can't change it. Write it down safely offline and never share it with anyone.
  2. Each ”credit card” in the wallet's user interface symbolizes one blockchain account with its own recovery phrase.
  3. We don't keep your cryptocurrencies in our wallet. It's on the blockchain. Wallets are just a way to access your account.
  4. Having your recovery phrase means you can use it in any number of other wallets on any number of devices simultaneously.
  5. If you delete the wallet extension plugin or app nothing is lost — your account is still on a blockchain.
  6. But if you lost your phrase and delete all wallets - your cryptocurrencies will gone forever.
  7. If someone knows your phrase, it will take them a minute to empty your wallet.
  8. We don't know your phrase - it's generated on your device.
  9. No one will ever ask for your recovery phrase — if someone does, they are a scammer, even if they claim to be part of our team.
  10. Password entered at opening has nothing to do with it; it's a password specific to that particular plugin installation. If you use multiple devices, it's a good idea to create different passwords for each one. If you forgot this password - nothing happened as long as you remember the recovery phrase - just reinstall the plugin and set a new password.
  11. If you suspect that someone knows your phrase, just create a new account and transfer everything there.

Understanding the nature of security

  1. It's fair to say that modern cryptographic and platform technologies are highly refined and secure. Most successful breaches don't exploit cutting-edge crypto — they rely on simple, low-tech tricks and human errors, habits and rush.
  2. Fraud tricks are not created by hackers as the media promotes - they are so stupid and primitive that most people wouldn't even think of them - that's why they work.

Scammers

  1. If someone contacts you on Discord or elsewhere, pretending to be our staff, sending strange links, or asking you to open “tickets” on unfamiliar sites — it’s a scam. We only communicate openly on official public channels.
  2. Install extensions only from official marketplaces. Never install anything manually — especially if someone asks you to do it. This is a common scam attempt.

Malware

  1. Speaking of official marketplaces - be careful. Avoid installing random tools, downloaders, ad blockers, or even “harmless” add-ons like emoji keyboards or color pickers. Many of them contain hidden malware that maybe can't break its ”sandbox” but can spy on you which can be enough to compromise your security. Only keep extensions you truly trust and need or better use second ”clean” browser for crypto operations only.
  2. If your operating system is compromised, no wallet safeguards can protect you. Malware can record your screen, capture keystrokes, or steal files — giving attackers direct access to your funds. If you suspect an infection, stop using that device for crypto, run a full malware scan, and rebuild the system on a trusted device (secure OS reinstall).

Connecting and approving

  1. There are operations of connecting to canisters which you agree to by pressing the confirmation button - then you are bound by the rules defined by the creators of these services.

Official addresses

You can reach us via email at info@grindwallet.com

Discord: https://discord.com/invite/PRRb3MZ2JX

Official wallet website: https://(www.)grindwallet.com
Official website alias: https://(www.)grind-wallet.com
Domain registerer: OVH

Wallet Plugins:
Chrome Web Store: https://chromewebstore.google.com/detail/grind-wallet/homnkdmbblppiocmjpilekoeppjdhmmn

Canisters on the Internet Computer blockchain:
Grind DAO frontend & NFT assets: huptf-mqaaa-aaaao-qj4wa-cai
Grind DAO backend: hbici-nyaaa-aaaao-qj4vq-cai
Grind DAO NFT x1 minter @ ICRC-37: 5ywo2-uiaaa-aaaam-qdfya-cai
Grind DAO NFT x10 minter @ ICRC-37: std5z-6aaaa-aaaam-qddca-cai
Swap backend: 7buuz-7yaaa-aaaad-aajua-cai
Paml ($PML) token ledger: qjnuk-siaaa-aaaam-ad5fa-cai

Source Code: GitHub