By Daniel Carter
Self-custody means you are the security team. These are the security questions people ask me most about the Taccoin wallet, with straight answers about what the app protects and what stays your responsibility.
Q1: Where are my keys stored when I use Taccoin?
A: On your phone, encrypted. Taccoin is a self-custody wallet: the 12-word recovery phrase and the keys derived from it never live on a company server. The upside is that nobody can freeze or lose your funds for you. The downside is that nobody can recover them for you either.
Q2: How is the app itself locked?
A: With a PIN, which is also required to confirm a transaction. If your phone supports it, you can turn on biometric unlock in settings and use your fingerprint or face instead of typing the PIN to open the app.
Q3: Can malware or a nosy app screenshot my recovery phrase?
A: Screenshots and screen recording are blocked on Taccoin's backup screen, and on the PIN and send screens too. That stops the most common accidental leak: a screenshot of the phrase that quietly syncs to a cloud photo library.
Q4: What backup options does Taccoin give me?
A: Two, and you can use both:
- Write the 12 words down. The backup screen asks for your PIN before showing them.
- Save an encrypted backup file, protected with your PIN, to Google Drive, Files or any folder you choose.
The screen tracks your progress ("1 of 2 completed") and recommends keeping the phrase in two separate places, for example paper at home and the encrypted file in your own cloud storage.
Q5: How do I know I wrote the phrase down correctly?
A: When you create a new wallet, Taccoin runs a short quiz asking for specific words from your phrase. A wrong answer restarts it. It takes thirty seconds and catches a mistake while you can still fix it.
Q6: I lost my phone. How do I get my Taccoin wallet back?
A: Install Taccoin on the new phone and restore the wallet, either by entering your 12-word phrase or by importing your backup file. If the file is encrypted, you'll need the PIN you used to protect it. Without the phrase or a usable backup file, the wallet can't be recovered by anyone.
Q7: What if someone messages me as "Taccoin support" and asks for my phrase?
A: It's a scam. Restoring, verifying a payment or "unlocking" an account never requires your recovery phrase. Anyone who asks for it, by chat, email or a "connect your wallet" page, is trying to empty your wallet.
Q8: How do I avoid address-poisoning scams?
A: Attackers send tiny transfers from addresses that look like ones you've used, hoping you'll copy the wrong one from your history. Taccoin lets you save recipients as named contacts and shows the contact's name next to the address in the confirm dialog. Send from your saved contacts instead of copying from transaction history. The app doesn't flag look-alike addresses on its own, so that habit matters.
Q9: Can I keep an eye on cold storage without putting its keys on my phone?
A: Yes. Add the cold-storage address as watch-only. Taccoin shows its balance and history, but there's nothing on the phone that could sign a transaction from it.
Q10: What's the one habit that matters most?
A: Two backups in two places, checked once. Everything else in this list helps, but a correct, offline copy of your phrase is what decides whether a lost phone is an inconvenience or a total loss.
Learn more: wallet.taccoin.com
Disclosure: This article is sponsored by Taccoin and describes features that exist in the app today. Educational content, not financial advice. Written with AI tools.
Top comments (0)