How do I keep my ENS name safe?

Protect the wallet that owns it: keep your seed phrase offline, use a hardware wallet, and never share your private key.

What are the most common ENS scams?

Fake expiry messages, fake support, fake airdrops, and lookalike domains that steal approvals or seed phrases.

What should I check before signing a transaction?

Check what the transaction actually needs, revoke unused approvals, and avoid unlimited allowances.

ENS Security Basics

GuideRead time: 6 min

Your .eth name is an asset, and like any asset it can be lost, stolen, or misused. The good news: most losses are preventable. Here is how to keep your names safe.

Protect your wallet

Your ENS name is controlled by the wallet that owns it. If your wallet is compromised, your name is too.

Keep your seed phrase offline - never enter it into a website, app, or anyone who asks.
Use a hardware wallet for names you care about.
Never share your private key with anyone, for any reason.

Manage contract approvals

Many attacks happen not by stealing your key, but by tricking you into signing an approval that lets an attacker move your assets.

Check what you are signing - only approve what the transaction actually needs.
Revoke unused approvals - if you approved a marketplace you no longer use, revoke it.
Avoid unlimited allowances - approve only the amount or collection you need.

Common scams to avoid

Fake "expiry" messages

Scammers send messages claiming your name is about to expire and you must renew now through a link. The link goes to a fake site that steals your approval or seed phrase. Real renewals happen on the official ENS app or trusted platforms - never through a random link in a message.

Fake support

Scammers pose as support in DMs, forums, or on social media. Real teams do not message you first to "help fix" a problem you did not report.

Fake airdrops

Offers of free tokens or names that ask you to connect a wallet and sign a transaction. The "free" thing is bait for a malicious approval.

Lookalike domains

Fake sites with slightly misspelled names. Always check the exact URL before connecting a wallet or entering a seed phrase.

If you hold many names

Consider a separate, more secure wallet for your highest-value names, and a lower-balance wallet for daily activity. This limits your exposure if the daily wallet is compromised.

The rule that prevents almost every loss: never sign anything you do not fully understand, and never share your seed phrase or private key with anyone.

Next steps

Learn about renewals so a scammer cannot catch you off guard with a fake expiry message, and understand subname ownership so you know who controls your names.