Skip to main content

Security Guide

Introduction to non-custodial wallets and why security matters​

If you're new to cryptocurrency, congratulations on taking your first steps into a world where you can truly own and control your digital assets. A non-custodial wallet, unlike those offered by centralized exchanges, puts you in full charge: you hold the private keys (your secret seed phrase) that grant access to your funds, meaning no third party can freeze or seize them without your permission. Rumble Wallet supports Bitcoin (BTC), a decentralized digital currency; Tether (USDT), a stablecoin pegged to the US dollar for stability; and Tether Gold (XAUT), which represents ownership of physical gold backed by reserves. It also integrates with MoonPay, a service that lets you buy these assets with fiat currency (like USD or EUR) or cash out to your bank account, making it easier to enter and exit the crypto space.

However, with great control comes great responsibility. In a non-custodial setup, if you lose access to your wallet or fall victim to a scam, there's no "reset password" button or customer support to bail you out and your funds could be gone forever. Common threats include phishing attacks where scammers trick you into revealing your private keys, malware that steals information from your device, and physical theft of your recovery phrases. According to industry reports, billions in crypto have been lost to hacks and user errors, but most incidents are preventable with solid habits. This guide will walk you through essential security best practices, starting from setup and moving into daily management.

Setting up your wallet securely from the start​

Begin by downloading your wallet app only from Google Play or the Apple App Store. Avoid third-party links or email attachments, as they could contain fake versions laced with malware. Once installed, the wallet will generate a seed phrase—a series of 12 words that acts as the master key to recover your wallet if your device is lost or damaged. Write this phrase down on paper immediately, using a pen to avoid digital traces, and store it in multiple secure locations, like a fireproof safe at home and a safety deposit box at a bank. Never store it digitally on your phone, computer, or cloud services, as these can be hacked. If someone gains access to your seed phrase, they can drain your wallet from anywhere in the world.

For added protection, Rumble Wallet uses biometric authentication and passkeys. Since this wallet integrates with MoonPay, you'll verify your identity with them using legitimate documents. MoonPay will never ask for your seed phrase or private keys. Test your setup with a small amount of crypto first—say, $10 worth of USDT—to ensure everything works before transferring larger sums.

Passkeys​

Passkeys are encrypted "digital keys" that replace login-based passwords with biometric login methods such as facial recognition, fingerprint scanning, or personal identification number (PIN). Rumble Wallet uses passkeys for authentication such as:

  • Apple passkeys for iOS devices
  • Android passkeys for Android devices
Important

Rumble Wallet works best with built-in device or native OS passkey storage. Using third-party password managers may result in your seed-phrase not being accessible across different devices.

Safe Transaction practices and avoiding scams​

When sending or receiving crypto, double-check addresses meticulously. Wallet addresses for BTC, USDT, and XAUT are long strings of characters; even a single typo can send funds to the wrong place irreversibly. Use QR codes for scanning when possible, but verify the address matches what's displayed. Avoid clicking links from unsolicited emails or messages claiming to be from Rumble, Tether, or MoonPay support.

Scams are rampant in crypto, often disguised as giveaways, investment opportunities, or tech support. Remember, no legitimate entity will ever ask for your seed phrase; if they do, it's a red flag. Be wary of "dusting" attacks, where tiny amounts of crypto are sent to your wallet to track your activity. Ignore unsolicited small transfers. When cashing out to fiat via MoonPay, confirm the receiving bank details are yours and monitor for any unusual fees or delays that might indicate interference.

Monitoring, recovery, and long-term management​

Stay vigilant by regularly reviewing your transaction history within the app for any unauthorized activity.

In case of loss, your seed phrase is your lifeline—practice recovering a test wallet on a separate device to ensure you understand the process. If you suspect a compromise, transfer funds to a new wallet immediately, but only after verifying the new setup's security. Educate yourself ongoingly through reputable sources like the Bitcoin.org security page, and consider joining community forums (cautiously) for tips without sharing personal details.

By learning these practices, you'll build confidence in managing your non-custodial wallet. Security isn't a one-time task but a habit that protects your financial freedom.

Additional resources​