Security

Staying safe.

How to tell a real message from us apart from a phishing attempt, and how to keep your account and wallet secure. Something look wrong? Email info@onchainsuite.com.

What we will never ask for

OnchainSuite will never call, email, or text you asking for your password, a one-time passcode, a 2FA code, or a wallet seed phrase or private key. No one from our team needs any of these to help you, and we will never ask you to share your screen while you enter them. Any message that asks for one is not from us - no matter what the sender name, logo, or reply address looks like.

How we actually contact you

Product and account email from us is sent from an onchainsuite.com address. We will never ask you to move the conversation to a personal phone number, a DM, or a chat app to resolve an account issue. If a message pressures you to act immediately, threatens to suspend your account within minutes, or sends you to a login page over a shortened link, treat it as a phishing attempt and check with us first.

Wallets stay non-custodial

OnchainSuite monitors on-chain activity read-only and is non-custodial: we never take custody of funds and never need your seed phrase or private key. We will never ask you to approve a transaction, sign a message, or connect a hardware wallet in order to 'verify', 'restore', or 'unlock' your account. A request like that is always fraudulent, even if it appears inside a page that otherwise looks like ours.

Securing your account

Use a long, unique password that you do not reuse anywhere else, and add a passkey from Settings → Profile → Security. A passkey is bound to this site, so a lookalike domain cannot phish it even if the page looks identical. Change your password straight away if you think anyone else has seen it. If you share an organisation with teammates, review member access periodically and remove people who no longer need it.

How contact data is handled

Personal channels such as email are linked to a wallet only when that wallet opts in through a zero-knowledge identity bridge, so we never hold data a wallet has not chosen to share. Contact identifiers are encrypted and blind-indexed on our side. See the legal page for the full privacy, terms, and compliance picture.

Report something suspicious

If you receive a message you think is impersonating OnchainSuite, or you believe your account has been accessed by someone else, email info@onchainsuite.com and change your password straight away. Forward the suspicious message rather than acting on it, and include the sender address and any links exactly as you received them.

Read the legal & compliance page for privacy, terms, and compliance · © 2026 OnchainSuite Incorporated