Security Habits
Cyber Security & Privacy Tips
Best practices to protect your digital assets and personal information.
Security Starts With Your Daily Habits
Cryptocurrency security starts with you. While Coin IRA provides enterprise-grade cold storage access and custodial protection for your assets, your personal security practices are equally important. Follow these best practices to keep your investments and personal information safe.
Protect Your Accounts
Use Strong, Unique Passwords
Use a different password for every account, especially financial accounts. A password manager like Bitwarden, 1Password, or KeePass can generate and store complex passwords securely. Never reuse passwords across services - if one site is breached, all accounts sharing that password are compromised.
Enable Two-Factor Authentication (2FA)
Always enable 2FA on your accounts, especially financial accounts and email. Your Coin IRA account uses SMS verification codes, so protect the phone number on file with a carrier PIN (see SIM-swap attacks below). For your email and other accounts that offer it, use an authenticator app (such as Google Authenticator, Authy, or Microsoft Authenticator) or a hardware security key like YubiKey rather than SMS codes.
Know Our Official Websites and Email
Coin IRA operates only two websites: www.CoinIRA.com and secure.CoinIRA.com. Our email comes from addresses that end in @coinira.com. Any other website, app, or domain that uses the Coin IRA name is not affiliated with us. Scammers may attempt to copy our name and branding on lookalike sites, reach you through unsolicited text messages such as fake job offers, or send email from a domain that looks similar to ours, so check the sender address carefully. Do not send money or share personal information anywhere else. If you find a site or message that impersonates Coin IRA, contact us using the phone number and email address on this page.
Confirm Funding Instructions Before You Send Money
Our wire, ACH, and check instructions do not change by email. If you receive a message that says our bank details have changed, do not act on it. Call us at the number on this page and confirm the instructions before you send any funds.
Beware of Phishing
Never click links in unexpected emails or text messages claiming to be from financial institutions. Always navigate directly to websites by typing the URL in your browser. Look for HTTPS and verify the domain name carefully - attackers often use lookalike domains. Coin IRA will never ask for your password or private keys via email, phone, or text.
Secure Your Email
Your email is the gateway to all your accounts through password resets. Secure it with a strong, unique password and 2FA. Consider using a dedicated email address for financial accounts only - separate from your everyday email - to reduce your attack surface.
Protect Your Devices
Keep Software Updated
Install security updates for your operating system, browser, and apps as soon as they're available. These updates patch known vulnerabilities that attackers actively exploit. Enable automatic updates wherever possible.
Use Secure Networks
Avoid accessing financial accounts on public Wi-Fi networks (coffee shops, airports, hotels). Use a VPN if you must access accounts outside your home network. Your home Wi-Fi should be protected with WPA3 encryption and a strong password.
Watch for SIM-Swap Attacks
Contact your mobile carrier and set up a PIN or passphrase required for any account changes. SIM-swapping allows attackers to receive your text messages, including SMS verification codes. A carrier PIN blocks the number transfer that makes this attack possible, so set one up for the phone number linked to your Coin IRA account.
Stay Vigilant
Monitor Your Accounts
Regularly review your account activity for unauthorized transactions. Enable account notifications where available. Report any suspicious activity immediately to our customer support team at (866) 924-5421 or customersupport@coinira.com.
Be Skeptical of Unsolicited Contact
If someone contacts you claiming to be from Coin IRA or any financial institution asking for sensitive information, hang up and call the official number directly. Scammers often create urgency to bypass your judgment. Legitimate companies will never pressure you into immediate action.
Never Share Your Screen or Give Remote Access
Coin IRA will never ask you to install remote-access software or share your screen. Anyone who asks for this while claiming to help with your account is not from Coin IRA. End the call and contact us directly.
Be Wary of Unsolicited Investment Offers
Be cautious of anyone who contacts you online and encourages you to move retirement funds into a crypto platform they recommend, especially with promises of guaranteed returns. These schemes often build trust over weeks before asking for money. Coin IRA does not contact people with investment opportunities.
Secure Your Recovery Phrases
If you hold cryptocurrency in personal wallets outside of Coin IRA, never store recovery phrases digitally (screenshots, notes apps, email). Write them down and store them in a secure physical location. Anyone with your recovery phrase has full access to your funds.
Questions About Security?
Our team is here to help you keep your investments safe. With Coin IRA, your assets are secured through free Ledger Enterprise cold storage and qualified custody controls.
