Enkrypt is non-custodial, so the recovery phrase is the wallet. The app password, browser profile and Mac app are conveniences around that fact. If the phrase is exposed, a thief does not need your computer or your password. If it is lost, no support team can rebuild it for you.
Phrase offline
A physical backup outside the computer
Password local
A lock for this device, not a backup
Approvals checked
Every prompt read before signing
How the security model works
A recovery phrase encodes the key material from which your accounts are derived. Enkrypt stores an encrypted wallet on your device and asks for a password to unlock it. When you send a transaction, the wallet signs locally and broadcasts the signed transaction to the network.
That means three different things can go wrong: someone can obtain the phrase, someone can trick you into signing a harmful transaction, or you can lose access to the device and the phrase at the same time. Security is mostly about keeping those three paths closed.
Protect the recovery phrase
Write the words on paper or a metal backup. Keep at least one copy physically separate from the computer and from the wallet app. Do not photograph the screen, email the words to yourself, paste them into a notes app or store them in a browser password manager.
A password manager is appropriate for the Enkrypt app password. It is not appropriate for the recovery phrase. The distinction matters because the phrase is a bearer credential: anyone who reads it can move the funds, even without your computer.
Do
- Write words by hand, in order, and check them twice.
- Use a second physical location for a spare copy.
- Consider a metal backup for long-term holdings.
- Test restoration with a small amount before relying on it.
Never
- Screenshot the phrase or save it in cloud notes.
- Type it into a website, chat or support form.
- Share it with a “wallet migration” or “airdrop” service.
- Keep the only copy in the same bag as the computer.
Verify downloads and updates
Install Enkrypt from enkrypt.com, an official browser store listing or the Mac App Store listing sold by MyEtherWallet, Inc. Search ads and social messages are not reliable distribution channels.
- Check the publisher name, not only the logo and extension title.
- Bookmark the official site after you have verified it, and use the bookmark next time.
- Review permission changes when an extension updates. A wallet should not suddenly need permissions unrelated to its job.
- Keep the browser, operating system and extension updated; old software is its own attack surface.
Read approvals before you sign
A connection request and a transaction request are not the same. Connect usually shares your public address with a dApp. Approve or Sign can let a contract move tokens or make a state change. The second prompt deserves the closer read.
Malicious sites often ask for an “unlimited” token approval because it saves them a future transaction. That approval may remain usable after you leave the site. Prefer a limited amount when the interface offers one, and revoke old approvals through a reputable approval checker when you no longer need them.
- Check the site domain in the browser before opening the wallet.
- Confirm the network, contract and amount in the wallet prompt.
- Reject a transaction you did not initiate, even if the page looks legitimate.
- Close suspicious popups instead of clicking their “Cancel” or “Support” links.
Recognize the common phishing patterns
The fake support account
A reply on social media offers to “sync” or “validate” your wallet. It asks for the phrase or sends you to a wallet-connect site that requests it.
The sponsored search result
An ad uses the right name and a lookalike domain. The download is a modified extension or an installer that captures the phrase.
The urgent airdrop
A page says you must connect and sign to claim tokens. The signature is actually a token approval or a transfer.
The clipboard switch
You copy a recipient address, but pasted text differs. Malware replaced it. Compare the beginning and end, or use a hardware screen.
The fake mobile app
Enkrypt's official help documents it as a browser extension. A phone app using the name is unverified unless announced by MyEtherWallet.
Use a hardware wallet for meaningful holdings
Enkrypt supports Ledger and Trezor accounts. The keys stay on the device and each transaction must be confirmed there. That does not make a malicious transaction safe; it gives you a second screen on which to read the destination and amount before approving it.
Hardware wallet accounts are separate from Enkrypt's own recovery phrase. Back up the hardware wallet's phrase according to its manufacturer's instructions. Adding the account again later requires the device and its own recovery material.
If something goes wrong
You forgot the Enkrypt password
Use the reset option only when you have the recovery phrase. Resetting removes the local wallet, and the phrase is how you restore it. If you do not have the phrase, do not reset.
You think the phrase was exposed
Create a new wallet and move the assets to new addresses as soon as you can. Do not keep using the exposed phrase for new funds. If the assets are on multiple networks, move each network's assets separately and account for network fees.
A transaction was approved by mistake
Revoke the approval through a reputable tool, then consider moving the remaining assets to a fresh wallet. A confirmed transaction cannot be reversed by wallet support.
The security checklist
- Official download and publisher confirmed
- Recovery phrase written offline, with a separate copy
- No phrase stored in screenshots, cloud notes, email or chat
- Local password unique to this wallet
- Networks and recipients checked before every transaction
- Hardware wallet used for amounts that matter
- Old token approvals reviewed periodically
- Browser and extension kept current
Still deciding whether Enkrypt is the right wallet?
Compare its multichain strengths with MetaMask's EVM focus.
Sources: MyEtherWallet Help Center, Enkrypt.com and the Enkrypt GitHub repository.
This guide is independent and educational. Wallet features and store listings change; verify details with the official Enkrypt site and MyEtherWallet Help Center before acting. Nothing here is financial advice.