> For the complete documentation index, see [llms.txt](https://argon-4.gitbook.io/argon-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://argon-4.gitbook.io/argon-docs/start-here/safety.md).

# Safety essentials

The handful of habits that keep a self-custodial wallet safe, and what Enclave does on your behalf.

Self-custody means the keys are yours and only yours. Enclave is built so that the dangerous things are hard to do by accident; the rest is a few habits.

## Your recovery phrase

* **Write it on paper.** Not a screenshot, not a note-taking app, not an email to yourself. Anyone with the words can spend everything, from any wallet, at any time.
* **Keep it somewhere you would keep a deed.** Fire, water, and theft are the realistic risks. Two copies in two places is reasonable.
* **Back up the BIP39 passphrase with it,** if you set one. Words without the passphrase open a different, empty wallet.
* **Never type it into a website.** Enclave asks for the phrase in exactly one place: the Restore screen of the extension itself. No page, message, support agent, or "verification" ever needs it.

## Your password and passkey

The wallet password encrypts the vault on this browser. It protects the keys against someone with access to your computer; it does not back them up. A passkey is a convenient second way to unlock the same vault on the same device. Neither replaces the recovery phrase.

Enclave locks itself after five minutes of inactivity by default. Shorten it under **Settings → Privacy → Auto-lock** if you share a machine.

## Read the review

Every transaction, swap, stake, vault, escrow step, message signature, and website request passes through the SureSign review. The review is produced by the component that signs, from the same bytes it will sign. Read the headline, the outputs, and the fee lines. If the review describes something you did not intend, or names a recipient you do not recognize, **Decline**. Declining costs nothing.

A **Blocked** seal means SureSign could not fully understand the request. It will not sign it, and neither should you want it to.

## Websites

A site that supports Kaspa or Igra wallets can ask Enclave to connect. Connecting shares an address; it never grants the ability to sign. Each transaction or message a site asks for is a separate review you approve or decline, and the review names the origin that asked. You can disconnect any site under **Connected sites**.

Enclave shows a warning when a request comes from a page embedded inside another page. Treat that with suspicion.

## Fees you should expect

* **Miner fee**, paid to the Kaspa network, on every transaction. Usually a fraction of a cent.
* **Enclave fee**, about US$0.20 in KAS, on some economic actions: swaps, bridges, stakes, supplies, and opening a vault or escrow. Never on transfers, receives, unlocks, or declines. Always a named line on the review. See [Fees](/argon-docs/using-enclave/fees.md).
* **Provider fees**, set by the bridge, pool, or protocol you are using, named separately on the review.

If a fee ever appears that the review did not name, something is wrong; decline and [report it](/argon-docs/developers/security.md).

## Indexed facts

KAS balances come from the Kaspa network. Token, collectible, and name balances come from indexers run by others. Enclave labels them accordingly and shows nothing when an indexer cannot answer. A token balance is a claim by an indexer; it becomes yours to spend only when SureSign can construct the transfer from Kaspa's own record.

## What Enclave never does

* Never sends your recovery phrase, keys, or password to websites, nodes, or indexers. Secret input and phrase display stay in the privileged wallet interface; private keys and signing stay in SureSign.
* Never signs without a review you approved, bound to the hash of that review.
* Never lets a website choose your change address, add hidden outputs, or sign an input you did not explicitly agree to.
* Never fetches executable code at runtime. Every protocol Enclave understands ships inside the extension and is reviewed with it.
* Never records analytics or telemetry.

## If something goes wrong

* **Lost password, have the phrase:** choose **Restore a different wallet** on the lock screen and restore with the phrase. The old vault on this browser is replaced.
* **Lost phrase, still unlocked:** open Security → **Reveal phrase** immediately and write it down.
* **Lost phrase, locked out:** no one, including the Developer, can recover the wallet. This is the price of self-custody.
* **A transaction did what the review said, but you regret it:** transactions on Kaspa are final. Enclave cannot reverse them.
* **A suspected security problem in Enclave itself:** see [Security reporting](/argon-docs/developers/security.md).

Support is only through the channels listed on the [home page](/argon-docs/readme.md#support). Anyone contacting you first, claiming to be Enclave support, is not.