Account Security

Security isn’t optional in Web3. Your wallet is your identity, your ownership, your everything. Lose it and there’s no customer service hotline, no password reset, no second chances. Let’s make sure that never happens.

The Golden Rule: Bloom Protocol staff will NEVER ask for your seed phrase, private keys, or passwords. Anyone requesting this information is a scammer. No exceptions.

The Basics You Can’t Ignore

Your Security Checklist

✓ URL verified (bloomprotocol.ai only)
✓ Wallet from official source
✓ Seed phrase written down offline
✓ Two-factor enabled (email users)
✓ No suspicious browser extensions

Miss one? You’re vulnerable. Get them all? You’re ahead of 90% of users.

Wallet Security Deep Dive

The Non-Negotiables

Never means never:

Never share your seed phrase

Never type it on any website

Never store it digitally

Never photograph it

Never email it to yourself

These aren’t suggestions. They’re survival rules in the decentralized world.

Security Threat Matrix

Threat Level	What It Looks Like	Your Defense
🔴 Critical	”Enter seed phrase to verify”	Close immediately. Report. Run.
🟠 High	Unexpected transaction requests	Reject. Verify source.
🟡 Medium	Links in Discord DMs	Never click. Verify publicly.
🟢 Low	Public WiFi usage	Use VPN or wait for secure network.

Hardware Wallet Strategy

Serious about security? Here’s the progression:

Your Holdings	Recommended Setup	Why
Exploring	Browser wallet	Convenience for learning
Active User	Mobile wallet + backup	Balance of security and access
Significant Value	Hardware wallet	Cold storage protection
Whale Status	Multi-sig setup	Institutional-grade security

Not using a wallet? Your email becomes your fortress.

Lock It Down

Email security = Account security. Your email provider becomes your single point of failure. Treat it accordingly.

Security Layer	Implementation	Priority
Strong Password	20+ characters, unique	Essential
2FA	Authenticator app (not SMS)	Critical
Recovery Backup	Alternative email/phone	Important
Login Monitoring	Check activity weekly	Recommended

What We Protect (And What We Can’t)

Our Security Stack

Platform Security:
├── Industry-standard encryption
├── No private key storage
├── Cloudflare bot protection
├── Regular security audits
└── Secure authentication flow

The Hard Truth

We CANNOT:

Recover lost wallets
Reset wallet passwords
Override Cloudflare blocks
Restore accounts without credentials
Merge duplicate accounts

This is Web3. With great power comes zero recovery options.

Threat Detection Guide

Phishing Red Flags

Know the signs before you’re a victim:

Red Flag	Example	Your Action
Wrong URL	bloom-protocol.ai	Check spelling carefully
Urgency	”Verify in 24 hours or lose account”	Scam. We never threaten.
Too good	”You won 10,000 drops!”	If you didn’t earn it, it’s fake
Grammar errors	”Congratulation! You’re winner!”	Official = professional

Fake Wallet Apps

Before installing ANY wallet:

Check official website for links

Verify publisher in app store

Read recent reviews (look for scam warnings)

Compare download numbers

Never trust Discord/Telegram recommendations

Recovery Planning

Before Disaster Strikes

Set yourself up for success:

Backup Strategy:
Write seed phrase → Store in 2+ places → Separate locations
        ↓                  ↓                    ↓
    On paper         Physical only         Not together
        ↓                  ↓                    ↓
Metal backup? → Tell someone where → Test recovery
        ↓                  ↓                    ↓
 Fire/water safe    Never the words      Practice run

The Authentication Truth

Login Method	Account Recovery	Important Note
Wallet	Impossible without seed	Your responsibility entirely
Email	Via email provider	Depends on email security
Different wallet	Creates new account	Cannot merge or transfer

Remember: Switching authentication methods = new account. The system sees different wallets as different people. Choose your method and stick with it.

Emergency Procedures

Suspected Compromise

STOP. BREATHE. ACT FAST.

Disconnect from platform immediately
Check wallet for unauthorized transactions
Move funds if possible (wallet compromise)
Change email password (email compromise)
Document everything
Report to support with evidence

Lost Access Scenarios

Situation	Can We Help?	Your Options
Forgot wallet password	No	Check wallet provider’s options
Lost seed phrase	No	If wallet’s locked, it’s gone
Email account hacked	Maybe	Work with email provider first
Changed phones	Yes	Re-install wallet with seed phrase

Staying Ahead of Threats

Your Daily Habits

Make these automatic: Quick checks:

URL before connecting
Transaction details before signing
Wallet permissions monthly
Login activity weekly

Red lines:

Seed phrase requests = scam
Unexpected tokens = suspicious
Rush tactics = manipulation
Too good to be true = it is

Information Sources

Channel	Trust Level	Use For
Official Website	✅ Verified	Announcements
Official Twitter	✅ Verified	Updates
Discord Announcements	✅ Verified	Community news
Discord DMs	⛔ Never	Nothing. Ever.
Telegram Messages	⛔ Never	Scammers paradise

The Security Mindset

Think Like a Target

Because you are one. Every wallet is a target. Every user is a potential victim. The question isn’t if someone will try to scam you — it’s when. Your defense: Paranoia with a smile. Verify everything. Trust cautiously. When in doubt, don’t.

Community Protection

See something suspicious? Say something. Your report might save someone else.

Report suspicious activity:
→ Discord: #report-issue
→ Include screenshots
→ Don't engage with scammers
→ Warn others publicly

Getting Started

Product Updates

Onsite Missions

Social Missions

Platform Features

Open API

Support

The Basics You Can’t Ignore

Your Security Checklist

Wallet Security Deep Dive

The Non-Negotiables

Security Threat Matrix

Hardware Wallet Strategy

Lock It Down

What We Protect (And What We Can’t)

Our Security Stack

The Hard Truth

Threat Detection Guide

Phishing Red Flags

Fake Wallet Apps

Recovery Planning

Before Disaster Strikes

The Authentication Truth

Emergency Procedures

Suspected Compromise

Lost Access Scenarios

Staying Ahead of Threats

Your Daily Habits

Information Sources

The Security Mindset

Think Like a Target

Community Protection

​The Basics You Can’t Ignore

​Your Security Checklist

​Wallet Security Deep Dive

​The Non-Negotiables

​Security Threat Matrix

​Hardware Wallet Strategy

​Email/Google Login Security

​Lock It Down

​What We Protect (And What We Can’t)

​Our Security Stack

​The Hard Truth

​Threat Detection Guide

​Phishing Red Flags

​Fake Wallet Apps

​Recovery Planning

​Before Disaster Strikes

​The Authentication Truth

​Emergency Procedures

​Suspected Compromise

​Lost Access Scenarios

​Staying Ahead of Threats

​Your Daily Habits

​Information Sources

​The Security Mindset

​Think Like a Target

​Community Protection

The Basics You Can’t Ignore

Your Security Checklist

Wallet Security Deep Dive

The Non-Negotiables

Security Threat Matrix

Hardware Wallet Strategy

Email/Google Login Security

Lock It Down

What We Protect (And What We Can’t)

Our Security Stack

The Hard Truth

Threat Detection Guide

Phishing Red Flags

Fake Wallet Apps

Recovery Planning

Before Disaster Strikes

The Authentication Truth

Emergency Procedures

Suspected Compromise

Lost Access Scenarios

Staying Ahead of Threats

Your Daily Habits

Information Sources

The Security Mindset

Think Like a Target

Community Protection