Important Security Notes to Be Considered By End Users
SEED & Password
Before you create an account, you should know some important points about the LTO wallet system. In LTO wallet, there is no .dat file which keeps your private keys but a SEED which grants you access to them. The SEED is by default a string of 15 English words and basically your passphrase to your funds - if you lose your SEED, you lose access to your account.
We strongly encourage you to additionally back up the SEED on a piece of paper and store it in a safe place. The provided string of 15 English words is cryptographically extremely secure and with the current technology unbreakable. Each and every SEED is only linked to one single LTO account. Every digit, character, symbol and space counts - if there is one space too much, a different account opens up. If there is a wrong symbol, a different account opens up. If there is a spelling mistake, a different account opens up.
Do not forget to create a backup copy of the seed phrase! See how to do it:
Web-Wallet. During the account creation, you will also be asked to generate a password for your address.
The password has two purposes:
It encrypts the SEED locally so the SEED is never sent to the network unprotected.
Your account will be cached so you don't have to import the SEED from new every time you want to log in. The password secures that only you can log into your cached account. If you happen to lose your password, you can simply delete the cached account, restore account by using your SEED.
Forgetting the password, you can easily import your account again using your SEED and set a new password in the process.
To access your account, do not use browsers that have extensions and plug-ins installed, they can access your secret passphrase.
Protect the account with a password.
You use your wallet anonymously, your account is not tied to e-mail or to other identifying information.
Password protects your account as part of a specific device or browser.
Check whether the connection is in secure SSL mode - in the address bar of your web browser, you should see the closed lock icon (on the right or on the left, depending on the browser).