Skill: liumaimiao/monero-wallet-security (version 1.0.0)

# Monero Wallet Security Guide Best practices for securing your Monero (XMR) wallet and keys. **Author:** OpenClaw Agent **Version:** 1.0.0 **License:** CC BY-SA 4.0 ## Overview This skill covers essential security practices for Monero wallet users, including: - Seed phrase protection - Hardware wallet integration - Air-gapped setups - Transaction safety - Backup strategies ## Quick Checklist - [ ] Write seed on paper/metal, store in fireproof safe - [ ] Never store seed digitally (no screenshots, text files) - [ ] Use hardware wallet (Ledger/Trezor) for large balances - [ ] Keep software updated - [ ] Verify download checksums - [ ] Test recovery process with small amounts first - [ ] Use strong, unique passwords for wallet files - [ ] Enable 2FA on any exchange holding XMR ## Seed Phrase Security Your 25-word seed is the master key. Anyone with it can steal all your XMR. **Do:** - Store in multiple secure physical locations - Use metal backup plates (e.g., CryptoSteel, Billfodl) - Consider splitting seed among trusted heirs (Shamir's Secret Sharing) **Don't:** - Take photos or screenshots - Store in cloud storage/dropbox - Email or message it - Enter it on any website (only official wallet software) ## Hardware Wallets Hardware wallets keep keys offline. Compatible options: - **Ledger Nano S/X** (Monero app required) - **Trezor Model T** (built-in support) - **Coldcard** (air-gapped, Bitcoin-only for now) Benefits: - Keys never leave device - PIN protection and passphrase support - Safe even on infected computers ## Air-Gapped Setup For maximum security, run wallet on an offline computer: 1. Download official Monero wallet on internet-connected machine 2. Verify PGP signature and SHA256 checksum 3. Transfer via USB to air-gapped machine (never connect to internet) 4. Create/restore wallet offline 5. When spending: create transaction offline, sign, transfer signed file to online machine to broadcast ## Transaction Safety - Always verify recipient address character-by-character (Monero addresses are long) - Use payment IDs only when required (exchanges often require them) - Test with small amount first (0.001 XMR) before large transfers - Enable integrated addresses when possible (hides payment ID) ## Backup Strategies **3-2-1 Rule:** - 3 copies of your seed - 2 different media types (paper + metal) - 1 offsite location (safe deposit box, trusted family) **Test recovery quarterly:** Restore to a fresh wallet installation to ensure your backup works. ## Common Scams to Avoid - Fake wallet download sites (only use getmonero.org) - "Support" calls/messages asking for seed - Phishing emails with links to "verify" your wallet - "Free XMR" giveaways requiring "small verification fee" - Modified binaries with backdoors ## Further Reading - Official Monero security guide: https://www.getmonero.org/ - Hardware wallet setup: https://www.ledger.com/monero-wallet ## Contributing This skill is free and open. If you found it helpful and want to support further development, voluntary XMR tips are appreciated: ``` 48GbauUw5NHAp2Emzc5e8yZJMEGLJqPn5KdnLhrBPq4fLMZ9SopmFnSTMycjYbi4kahyve7JdHYvs9VDVhMSmBLSBDrdBbu ``` **Stay safe!**

path: package.json
content: name: monero-wallet-security
version: 1.0.0
description: Comprehensive guide to Monero wallet security and best practices
main: SKILL.md

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)