Keep your wallet and account safe
Protect the secrets, addresses and confirmations that nobody can recover for you afterwards.
TL;DR
- Nobody legitimate needs your 12-word recovery phrase, external-wallet seed phrase or private key.
- Verify the Base Chain network, full address, coin contract and wallet request before you approve anything.
- Use Settings to review sign-in methods and sessions, and replace the recovery phrase if it may be exposed.
Orbit actions can involve real ETH and irreversible blockchain transactions. Protect the access behind each action before money, account recovery or a signature is at risk.
Protect the secret that matches the account
Orbit account recovery
The Orbit recovery phrase restores your Orbit account. Write it down offline and enter it only in the recovery screen you intentionally opened from Orbit. Support will never ask you to send it.
External-wallet custody
A wallet seed phrase or private key controls that wallet and everything it holds. It is separate from the Orbit recovery phrase, but exposure can still cause permanent loss. Follow the external wallet’s own recovery and security process; Orbit cannot replace its seed phrase.
Keep every recovery secret out of chat, email, cloud notes and screenshots.
Slow down at the irreversible moments
Before a transfer
- Confirm the site and the action you opened yourself.
- Check Base is the intended network.
- Copy the address and compare the beginning and end after pasting.
- Read the asset, amount and recipient in the wallet request.
Do not send funds to the Platform Wallet. Use the Deposit control for the trading wallet address.
Before a trade
Match the coin contract address rather than trusting a name, ticker or image. Read the direction, amount, minimum received and every permission in the wallet request. After signing, check the transaction hash before deciding whether to repeat the action.
Respond when something feels wrong
Fake support often arrives first by direct message, asks to “verify” a wallet or sends a recovery link. Imposter coins reuse artwork and tickers. Social posts and livestreams may create urgency around a price move. None of these change the contract address or make a transaction reversible.
Verified links show control of that linked account or domain. They do not guarantee that every claim there is true or that the creator will deliver future work.
Check account access
Open Settings → Security to inspect passkeys, social accounts, linked wallets and active sessions. Sign out other devices and create a new recovery phrase if the old one may have been copied. For a self-custodied external wallet, use that wallet’s own security process as well—Orbit cannot replace its seed phrase.
On-chain means final
Orbit, a creator and Base Chain cannot cancel a confirmed trade, retrieve a transfer from the wrong address or restore a self-custodied wallet whose only key was lost.
Common questions
What should I do if my Orbit recovery phrase may be exposed?
Open Settings → Security from a trusted Orbit Moon session, replace the recovery phrase and end active sessions you do not recognise. Then review the access boundaries in Understand your account and wallets.
Which address should receive a Base Chain deposit?
Use the trading wallet address shown by the Deposit control, not the reserved Platform Wallet. Fund and withdraw safely explains the current receiving path and money-surface limits.
Can Support reverse a confirmed transfer?
No. Support can help you investigate, but it cannot reverse an on-chain result. Start from Talk to Support and share a public transaction hash, never recovery words or a private key.