Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Act as if the wallet secret could be exposed until you establish otherwise. Stop entering recovery phrases, private keys, passwords, passcodes, or verification codes; do not approve a transaction suggested by an incoming message; and use only the wallet provider’s official app or website. Then determine whether the problem is a leaked recovery phrase, an unauthorized transaction, a malicious token approval, an Apple Account compromise, or physical access to the iPhone. Each requires a different response.
If a self-custodial recovery phrase or private key may have been disclosed, create a new wallet with a newly generated phrase and move remaining assets when the chain and wallet conditions allow. Changing only the app password does not make an exposed phrase safe. At the same time, secure the Apple Account and iPhone separately. A suspicious warning or message alone does not prove that iOS was exploited or that funds are gone.
Take these actions before investigating
- Stop interacting with the suspected threat. Close an unfamiliar site, reject unexpected signing requests, and do not approve a transaction to “verify” or “unlock” the wallet.
- Do not disclose secrets. Never type, photograph, email, or paste a recovery phrase or private key into a website, support chat, form, or message. Do not give anyone your iPhone passcode, Apple verification code, wallet password, or login details.
- Reach support independently. Open the wallet provider’s official app or type its known official address yourself. Do not use a phone number, link, or direct message supplied by someone who contacted you.
- Preserve useful evidence. Record transaction IDs, wallet addresses, dates and times, the dapp or recipient shown in the wallet, and screenshots that contain no secrets. Keep suspicious messages rather than replying to them.
Do not uninstall or reset the wallet before checking its official recovery instructions. In a mobile self-custody wallet, removing the app without a legitimate backup phrase can remove your ability to restore access.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Identify what was actually compromised
“My iPhone wallet was hacked” can describe several unrelated events. Use the wallet’s official transaction history and, where appropriate, the relevant blockchain explorer to compare what happened with your own activity. MetaMask’s guidance specifically recommends checking the transaction time, recipient, decentralized application (dapp), and value. A suspicious pop-up or message is not proof that a wallet was drained.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
| Evidence or symptom | What it may mean | First control to apply |
|---|---|---|
| Recovery phrase or private key was typed, photographed, stored in an exposed cloud note, or sent to another person | The secret may control every account derived from it | Create a completely new wallet and move assets that can be moved; stop using the old wallet |
| An unfamiliar confirmed transaction appears | A key may have been used, a signing request may have been approved, or someone with device access may have acted | Save the transaction details, secure any remaining assets, and contact the wallet provider through its official channel |
| An unfamiliar token approval or allowance appears, but no transfer has occurred | A dapp may have permission to move a specified token and amount | Review and revoke the permission through the wallet’s official guidance and a reputable, chain-specific approval interface |
| Unknown Apple Account sign-in, device, email change, phone-number change, or forwarding rule | The Apple Account or an associated recovery channel may be compromised | Change the Apple Account password, review security details and devices, and restore control of email and phone numbers |
| The iPhone is lost or stolen | Someone may have the device, even if the wallet phrase was never exposed | Mark the iPhone as lost immediately with Find My or iCloud.com/find; do not remove it from Find My after erasing it |
| Only an unexpected text, call, browser warning, or “support” message appears | It may be social engineering rather than a wallet or iOS compromise | End the conversation and verify the claim through an independently opened official channel |
Wallet procedures differ by product and account type. The recovery-phrase response below applies to self-custodial wallets, where you control the keys. A custodial exchange account normally requires that service’s account-recovery and fraud process instead; it may not provide you with a recovery phrase at all.
If a recovery phrase or private key may be exposed
A self-custodial recovery phrase is the root secret for the accounts it derives. Anyone who controls it can generally control those accounts. An app PIN, biometric lock, or password protects access to the app on one device; it does not invalidate a phrase that another person has copied.
1. Prepare a trusted environment
Use a device and network you believe are under your control, and obtain the wallet software from its official source. Follow the provider’s current instructions rather than importing the old phrase into another app. Do not use a phrase supplied by a “recovery specialist” or generated by a website.
2. Create a new wallet and record its new phrase
Generate a new wallet so it has a newly created recovery phrase. Write the phrase on paper or another offline medium according to the wallet provider’s instructions, and verify it using the wallet’s own confirmation flow. Never photograph it or store it in a message, cloud document, password-reset form, or support ticket. A new account derived from the old phrase is not a new security boundary; the old phrase still controls it.
3. Move assets only when the conditions are understood
If assets remain, transfer them to addresses in the new wallet when the relevant chain, asset type, network fee, and wallet support permit it. Check the destination address on the trusted device before confirming. Start with a small test transfer only if doing so will not expose funds to a known automated sweeper.
MetaMask warns against adding gas to an account when a sweeper may be operating. A sweeper can use incoming network fees to take assets as soon as they arrive, so sending more funds to the compromised address can increase the loss. If a transaction is being taken immediately, stop experimenting and ask the wallet provider for chain-specific guidance.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
4. Retire the old wallet
After moving what can be moved, discontinue use of the old wallet and every account associated with its compromised Secret Recovery Phrase. Do not create additional accounts from that phrase and call them safe. Do not keep using the old address for deposits, approvals, or “temporary” storage.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteNeither a self-custody wallet provider nor a blockchain can normally reverse a confirmed transfer. A provider cannot promise that funds will be recovered, and a new wallet protects future use of a clean phrase; it does not undo transactions already confirmed on-chain.
If an unauthorized transaction is already confirmed
First distinguish a confirmed blockchain transfer from a pending or rejected request shown in the wallet. Open the official wallet app and inspect the transaction record. Note the network, transaction ID, time, sender, recipient, token and amount, fee, and any dapp or contract involved. Compare those details with your own activity and save them for the provider or, where appropriate, law-enforcement report.
If a phrase or private key could have been exposed, follow the new-wallet process immediately rather than waiting for support to “freeze” a self-custodial address. If only a device or Apple Account appears affected, secure those accounts and determine whether the wallet itself was opened or a transaction was signed. The evidence determines which response is useful.
Be realistic about reversibility: a confirmed blockchain transaction is generally final. Anyone promising to reverse it for an upfront payment is presenting another scam. Do not send a stranger additional crypto for “gas,” “verification,” tracing, or recovery.
If the problem is a token approval rather than a leaked phrase
A token approval is a permission granted to a dapp. It can authorize that dapp to access and move a specified token and amount from an address. The approval is different from the wallet’s recovery phrase, and a suspicious approval does not by itself prove that the phrase was copied.
Rank #3
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Review the permission
Use the wallet provider’s official explanation of approvals and a reputable approval interface for the specific blockchain. Confirm that the network and address are the ones you use, identify the dapp and allowance, and revoke an unwanted permission through the wallet’s own signing flow. Chains and wallets do not share one universal revocation screen, so do not assume a tool for one network covers another.
Understand what revocation can and cannot do
- Revocation stops the permission from being used after the revocation is confirmed.
- It does not undo a transfer that already occurred.
- It does not make an exposed recovery phrase safe.
- It may require a network fee and a wallet signature, so verify every transaction before approving it.
If an unfamiliar approval and an exposed phrase are both possible, treat the phrase exposure as the higher-priority incident and create a new wallet. Removing an allowance alone is not sufficient.
Secure the Apple Account and iPhone separately
A wallet compromise and an Apple Account or iPhone compromise can overlap, but they are not the same diagnosis. Secure each layer independently.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsApple Account response
- Change the Apple Account password to a strong, unique password that is not reused by the wallet, email, or another service.
- Review the account’s security information and correct anything you did not add, including trusted phone numbers and email addresses.
- Review the device list and remove devices you do not recognize.
- Verify that you still control the associated email accounts and phone numbers. Check for unrequested forwarding or other changes that could redirect recovery messages.
- If you cannot sign in, use Apple’s account-recovery process rather than a link supplied by a caller or message.
These steps protect the Apple Account and its recovery channels; they do not replace creating a new wallet when a self-custodial phrase was exposed.
Stolen Device Protection
Apple’s Stolen Device Protection adds biometric checks for selected sensitive actions and a security delay for some account or device changes. Apple says it requires iOS 17.3 or later and must be enabled before the iPhone is lost or stolen. It can add protection when someone has both the phone and its passcode, but it is not a retroactive cure for a phrase that was already copied or for a transaction already confirmed.
If the iPhone is missing
Mark the device as lost promptly through Find My or iCloud.com/find. Follow Apple’s instructions for remote erasure if necessary. After an erase, do not remove the iPhone from Find My: Apple says doing so removes Activation Lock and can make the device easier for another person to use.
Rank #4
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
Protect yourself from recovery scams
People reporting a crypto theft are frequent targets for impersonators. A caller or direct message may claim to be wallet support, Apple, a blockchain investigator, or a security researcher. No legitimate helper needs your recovery phrase or private key to inspect a public transaction.
Apple’s support guidance states: “If you’re suspicious about an unexpected message, call, or request for personal information, such as your email address, phone number, password, security code, or money, it’s safer to presume that it’s a scam — contact that company directly if you need to.” Apply that rule to crypto messages as well.
- Do not pay someone who promises a guaranteed reversal or recovery.
- Do not share a one-time Apple code, wallet password, device passcode, private key, or phrase.
- Do not click a support link sent in an unsolicited message.
- Do not approve a transaction merely because a caller says it is a diagnostic check.
- Do not publish the phrase while asking a forum or friend for help.
Should you move to a hardware wallet?
A hardware wallet can be an optional longer-term custody choice for people holding higher-value assets. MetaMask describes such devices as storing private keys offline. It does not disinfect a compromised iPhone, reverse a theft, or make an exposed phrase safe.
If the old phrase was exposed, generate a fresh wallet through a trusted hardware-wallet setup or another trusted wallet process. Do not import the exposed phrase into a hardware device and describe the result as secure. Before choosing a device, verify that it supports the blockchain and assets you use, works with the wallet app on your iPhone, and has an official setup and recovery procedure. A hardware device is a new custody arrangement, not an incident-response shortcut.
A practical decision checklist
- Phrase or private key disclosed: create a new wallet with a new phrase, move what can safely be moved, and retire every account derived from the old phrase.
- Unauthorized confirmed transfer: preserve the transaction ID and details, secure remaining assets, contact official support, and assume the transfer may be irreversible.
- Unwanted token approval: review and revoke it through chain-specific official guidance; remember that revocation does not reverse transfers or replace a new wallet when the phrase is exposed.
- Apple Account warning or unknown device: change the Apple Account password, review devices and security details, and restore control of email and phone recovery channels.
- Lost or stolen iPhone: use Find My or iCloud.com/find to mark it lost and preserve Activation Lock after erasure.
- Only a suspicious message: stop responding and verify the claim independently; do not treat the message as proof of a wallet or iOS exploit.
The safest response is evidence-led: protect secrets first, determine which control was actually affected, and follow the wallet and Apple instructions for that specific condition. A clean, newly generated wallet can protect future funds, while Apple Account and device controls protect access to the phone; neither can rewrite a confirmed blockchain transaction.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
