Recently I've come across a number of "security"/"educational" web apps that invite you to enter your seed phrase into a webpage — honestly, this is insane! 🤯
Generally, these services are targeted at security-minded users and feature a big warning telling you to turn off internet to stay safe. Here's how it could go wrong:
- A malware could be recording keystrokes for later harvesting.
- The webpage could be recording the seed phrase for later harvesting.
- A third-party analytics script could be recording keystrokes for later harvesting (some of these pages actually embed Google Analytics!!) 👀
- A hardware keylogger could be recording your keystrokes for later harvesting.
The general rule is simple: if you use a hardware wallet, never *ever* enter the seed phrase on a general computer; you'd be degrading your security to the level of a software wallet, defeating the point.
And if you need to generate or split a seed phrase without compromising on security, Penlock is there for you. 🛡️
npub1xl…lzcqv
2026-06-19 03:55:18 UTC
Author Public Key
npub1xlhmmmtmmk0v3l5heafjf4ktjqavhqwnkw455cnljettdamrzr3smlzcqvSeen on
wss://nos.lolPublished at
2026-06-19 03:55:18 UTCEvent JSON
{
"id": "0000b2a547e75444a69b80ac197a8eae795f830f66ddf62d4d72067b8e1954cc",
"pubkey": "37efbded7bdd9ec8fe97cf5324d6cb903acb81d3b3ab4a627f9656b6f76310e3",
"created_at": 1781841318,
"kind": 1,
"tags": [
[
"nonce",
"5774",
"16"
]
],
"content": "Recently I've come across a number of \"security\"/\"educational\" web apps that invite you to enter your seed phrase into a webpage — honestly, this is insane! 🤯\n\nGenerally, these services are targeted at security-minded users and feature a big warning telling you to turn off internet to stay safe. Here's how it could go wrong:\n\n- A malware could be recording keystrokes for later harvesting.\n- The webpage could be recording the seed phrase for later harvesting.\n- A third-party analytics script could be recording keystrokes for later harvesting (some of these pages actually embed Google Analytics!!) 👀\n- A hardware keylogger could be recording your keystrokes for later harvesting.\n\nThe general rule is simple: if you use a hardware wallet, never *ever* enter the seed phrase on a general computer; you'd be degrading your security to the level of a software wallet, defeating the point.\n\nAnd if you need to generate or split a seed phrase without compromising on security, Penlock is there for you. 🛡️",
"sig": "ade90f5845ad1fd9a0a57d65590795a6fb25f515cc0f7e83c72b833c1de71b9b16bd275383bd600278ba1bdc99ab19ce3fdba856311434d769a46b6fb90f17ff"
}