1. Practice Good Password Hygiene - Ensure that you’re utilizing strong passwords that are unique to every service. Password managers like 1Password make this easy.

2. Enable Two-Factor Authentication (2FA) - Turn on 2FA for all your accounts including your CoinStrat account. We highly recommend utilizing an authenticator app or hardware authenticator tool, like a Yubikey.

3. Turn on Allowlisting for CoinStrat - We recommend this action even if you do not have a allowlisted address. Any time you wish to withdraw, you will have to add a new allowlisted address, which will trigger a 24-hour hold. This means that all withdrawals will be subject to a 24-hour hold, in addition to our standard one business day security hold. This significantly reduces the risk of being impacted by a bad actor.

4. Be Extra Vigilant of Scams - Be vigilant with various inbound communications. This can be via email, phone calls or text messages. If it is outside of the typical channel of communication you receive from CoinStrat, do not engage. If it seems too good to be true, it is.