Wallet Security Best Practices

Your Account Number is the Key

On XMR.Company, your 16-character account number is the only thing standing between your account and the world. Unlike traditional platforms, there is no password reset, no email recovery, no support agent who can restore access. Treat your account number like the master key that it is.

Critical: We cannot recover your account number. If you lose it, your account is gone permanently. Store it in a password manager, write it down and keep it in a safe place, or use encrypted cloud storage.

Session Management

Each device you log in from creates a session. You can view and revoke active sessions from your Account page. Regularly review your sessions and revoke any you don't recognize. Sessions expire after 30 days of inactivity.

• Use "Log out all devices" if you suspect your account is compromised.
• Check the device name and IP address of each active session.
• Log out of unused sessions promptly.

Use Reputable Wallets

For storing cryptocurrency, use well-reviewed, non-custodial wallets where you control the private keys. Hardware wallets (Ledger, Trezor) provide the highest level of security for long-term storage. For daily use, consider mobile wallets like Monerujo (XMR) or Cake Wallet.

Recognizing Phishing Attempts

Always verify you're on the legitimate XMR.Company website before entering your account number. Bookmark the official URL. XMR.Company will never ask for your account number via email, social media, or direct message. We have no support agents who need your number.

General Safety Tips

• Use unique, strong passwords for your email and password manager.
• Enable biometric authentication on your devices.
• Keep your operating system and apps updated.
• Avoid accessing your account on public or shared computers.
• Use a VPN for additional privacy when accessing XMR.Company.