Your wallet.
Your way.

Install from a
source you trust.

Go to the official Coinbase Wallet website and follow its link to the browser extension listing for your browser. Check that you are on the genuine site and verify the publisher and extension name before adding anything. Search results, sponsored placements, and direct messages can lead to convincing copies.

Keep your browser and operating system up to date. If an installation asks you to share a recovery phrase, stop: a legitimate setup should never need you to disclose it to a person, website, or support agent.

New wallet or
bringing one along?

Open the extension and follow its current on-screen setup. You may be offered the choice to create a new wallet or import an existing one. The exact prompts can change as the product evolves, so read each screen instead of relying on screenshots from old tutorials.

Creating a wallet establishes the credentials that let you approve transactions. Importing reconnects an already-existing wallet using its supported recovery method. Only import a wallet if you understand where its recovery phrase came from and you are confident your device is private and secure. Never enter a phrase into a link sent by someone else.

Set a strong local password if prompted. This protects access to the extension on that device; it is not a replacement for your recovery phrase, and it does not recover your wallet if your device is lost. Store credentials separately and avoid saving them in screenshots, email drafts, cloud notes, or shared documents.

Protect the phrase.
Protect your future.

If setup provides a recovery phrase, write it down accurately and keep it somewhere private and physically secure. Follow the wallet’s own verification steps. Do not photograph it, paste it into a chat, save it in a cloud drive, or store it alongside the device it unlocks. Consider the practical risks to your home and your records before deciding how to protect it.

Use a device screen lock, keep security updates current, and be cautious with browser extensions you install. If you think your phrase has been exposed, treat the wallet as compromised and seek guidance through official resources. Moving assets may involve fees and risks; never let a stranger take control while “helping.”

A familiar view
of a new world.

The wallet interface typically brings your assets, account controls, network details, and activity together in one place. Names and layouts may vary by version. A token balance is not a guaranteed dollar value: prices fluctuate, and displayed estimates can be delayed or unavailable. A balance also does not mean the asset is supported by every app or network.

Explore the menus before connecting to anything. Learn how to switch accounts and networks, review activity, and locate the wallet’s official support and security guidance. If you have multiple accounts, confirm which one is active before sending or connecting. Public blockchain addresses and transactions are often visible to others, so consider what your address may reveal about your activity.

Go slow. Check
every detail.

To receive, find the wallet address for the correct account and network, then share it only with the intended sender. Verify the network with them first. For a meaningful amount, consider a small test transfer when practical, while remembering that network fees may apply to each transaction.

To send, choose the intended asset and network, enter or scan the recipient address, and compare every character and detail on the confirmation screen. Malware can replace copied addresses, and transactions usually cannot be reversed once confirmed. Check the amount, destination, network, and estimated fee. If anything feels unexpected, cancel and investigate through trusted official sources.

Do not send funds because a stranger promises to multiply them, unlock an account, or return stolen money. A request to pay a “verification” or “release” fee in crypto is a warning sign. Take a breath, independently verify the recipient, and ask someone you trust before proceeding.

Give apps only
the trust they earn.

Some decentralized apps can connect to a wallet so you can interact with them. Before connecting, check the site’s address letter by letter and make sure it is the service you intended to visit. A connection may reveal your public address; it does not automatically mean you should approve a transaction or grant broad permissions.

Read every approval request. A signature can authorize an action even when no obvious token transfer appears, and token approvals may allow a contract to move assets. Understand what you are signing, what asset and amount are involved, and whether the request matches your goal. Decline unclear or unrelated requests. Revisit permissions and revoke access you no longer need using trusted tools and official instructions.

Beware of lookalike sites, fake support accounts, airdrop bait, and “limited-time” offers that ask you to connect quickly. Never follow a wallet link from an unexpected message. Navigate independently to a known official address.