How to safeguard my crypto in Andriod Phone

[KingsDen]

Overall I'd say:

- Ignore DMs on Telegram and discord
- Never link your wallet (again if you're into web3) to any website you don't know.
- Avoid downloading things from unknown sources.

Compromises doesn't just happen, it happens because of the behaviour of the individual.

I once held BTC on a mobile phone for several years, and all was fine because there were no installed apps in the phone. No social media browsing, web3 stuffs.
Simply on the phone, connect to my secured network, perform transaction and switch off the mobile phone and all was fine .
So, individual's habit is the main factor here.

But my concern about Op's situation was when he mentioned cheap phone. How cheap will the phone be?

[Hazink]

On Unstoppable wallet, you can go for robbery protection which is very good, but this is only available if you go for premium subscription which many people will not advise you to do as they may see it not necessary.

Are these mentioned features similar to what we have in BlueWallet? I'm referring to the feature that enables the wallet owner to set addiction protection, where if you are forced to open your wallet under pressure, you can input the plausible deniability password which will give you access to a wallet which is not your main one but appears very convincing. Aside from the balance, everything else is the same.

[Stalker22]

Is this a secure way, or maybe we have better ways?

People keep repeating it for a reason - just get yourself a hardware wallet.  Seriously, dont try to make things complicated.  There are solid, no-frills models out there for around $50, and honestly, nothing comes close if you care about keeping your money safe.  Grab a hardware wallet and stop worrying.  That is all you need.

[coinlary]

That is also what I wanted to do, but in my case, I prefer to buy a new Samsung cheapest phone like A07, but it will get security updates for the next 5 to 6 years.
In your case, since you're using a very old phone where the security patches aren't updated, isn't it risky? If not, i may also use the old phone and save some more money  

You created a similar topic recentl, and I mentioned that you don't  have to buy a new phone If you will be using it for only your wallet.
Reset the device and install only your wallet on it, you should  be fine with that. But, i know you will definitely  need to browse and use social media so get a new device for that if you don't have one.

As long you're only using the necessary wallet , you don't need to worry about it. You only need to worry about  mobile device not beign  a good method for all your  Bitcoin holdings . Technology keeps evolving day by  day and we don't  know what will be the fate of mobile devices anytime in the future, find a  way to setup a cold storage for yourself .

[Asuspawer09]

You have the good idea of it, I think it wasn't really like dangerous for most of the time, this was just a safe recommendation most of the time, it's not really like your phone could easily be compromised, but you do connect it most of the time to public wifi. And there are a lot of viruses or applications that you could accidentally install, especially if you are not really aware of these kinds of things, I mean, it usually happens to my parents. You can see that there are already a lot of applications installed that are not really necessary, they usually just click everything and install everything without being aware of what it is.

Getting a new cheap phone was a good idea, get it a own sim for internet and never connect it to a wifi unless it's your own wifi, then only use it for transactions or if you're using your crypto wallet, use your main phone for everything else, it's already a good approach.

[UmerIdrees]

that is also one of the possible alternative solution, yes.

but as for me, i don't think you have read it properly, but i have said i can flash security patch if i wanted to. i am a custom ROM user. i have the power to change/modify the entire system, apps, update everything.

I read your message properly, but I ignored that part because I am not that techy to apply security patches on the ROM, etc. So in my case, I format my old phone, install only Unstoppable Wallet, restore my wallet on that phone, and keep it only for holding crypto. I make another wallet on my active phone and keep less crypto for day to day use there so i don't have to login my old phone often.

So this approach good with my only concern i using an old phone where there are no more security patches.

[tech30338]

Well, every now and then I hear that it is unsafe to keep a wallet on a mobile phone, especially the phones that we are using for day-to-day basis as a daily driver. So what can be done to secure our funds on Unstoppable and other Android wallets?

One option i have in mind is to buy one additional cheap phones and install our wallets in that phone and keep that phone offline most of the time and make it online only when you need to send the funds. We don't need the wallet to be online for receiving funds if we know the deposit address.

Is this a secure way, or maybe we have better ways?

As bad as it seems, when it comes to android the risk are higher than iOS, if you can't really use other ways or desktop for your wallet, make sure that seed phrase are not store in your phone, avoid clicking link, and personal messages, even if you knew who the sender is make sure you know what you are clicking, or not click a link at all.
Or the best way is just get the address of your example bitcoin address copy it, save in your phone don't install the application of the wallet in your phone, in that way you don't need to open the wallet every time , just check if the funds is received via bitcoin explorer

[NotATether]

Keep your phone in Airplane mode at all times, and that's really the only advice I can give you as nothing else will truly guarantee that you won't receive some kind of RCE zero-click exploit on your phone.

As bad as it seems, when it comes to android the risk are higher than iOS

This is a myth. The security on iOS is much more elaborate, but all that does is increase the price of iOS exploits on the black market.

[Outhue]

Well, every now and then I hear that it is unsafe to keep a wallet on a mobile phone, especially the phones that we are using for day-to-day basis as a daily driver. So what can be done to secure our funds on Unstoppable and other Android wallets?

One option i have in mind is to buy one additional cheap phones and install our wallets in that phone and keep that phone offline most of the time and make it online only when you need to send the funds. We don't need the wallet to be online for receiving funds if we know the deposit address.

Is this a secure way, or maybe we have better ways?

Today, a good android phone costs around $70+, that's more than enough to get a hardware wallet like Trezor, I believe that people like you just don't want to get involved with buying a hardware wallet, you guys prefer smartphones. There is no single reasonable excuse for anyone to avoid buying a hardware wallet in 2026 for your favourite coins, it's cheaper than some smartphones, sorry, no excuse can justify it.

I won't feel pity for anyone that lost their coins running a wallet on a Android phone, the warnings on this forum alone is high in numbers, no one should be talking about running a crypto wallet on a Android phone in 2026, since 2025 now the vulnerability that's showing up on android phones have skyrocketed compared to past years, it keeps getting worse.

[michellee]

in my case, I format my old phone, install only Unstoppable Wallet, restore my wallet on that phone, and keep it only for holding crypto. I make another wallet on my active phone and keep less crypto for day to day use there so i don't have to login my old phone often.

So this approach good with my only concern i using an old phone where there are no more security patches.

What you have done is good for you as you don't use your old phone for anything and just hodling your crypto. But buying a new phone should be better as you can follow the update from the firmware without any problem.

I use old phone too and don't have any problem till now and I also have a hardware wallet to store my coins there. If they wants to use phone storing crypto, they must know how securing it and not use it for their daily life.

[Taskford]

Well, every now and then I hear that it is unsafe to keep a wallet on a mobile phone, especially the phones that we are using for day-to-day basis as a daily driver. So what can be done to secure our funds on Unstoppable and other Android wallets?

One option i have in mind is to buy one additional cheap phones and install our wallets in that phone and keep that phone offline most of the time and make it online only when you need to send the funds. We don't need the wallet to be online for receiving funds if we know the deposit address.

Is this a secure way, or maybe we have better ways?

Much cheaper option is to use those wallet which let you save your private keys and don't pick wallet which only give you an option which you can sign up thru email and password only, so if there's instances that you wallet will be lost or other bad situation happen you can still access your wallet thru private key you save.

But if you have money to buy spare phone well yeah buying that gadget is also a best option to do, since you can use the spare smart phone for traveling and you can left your main phone in your house for safety purposes.

[SeriouslyGiveaway]

Keep your phone in Airplane mode at all times, and that's really the only advice I can give you as nothing else will truly guarantee that you won't receive some kind of RCE zero-click exploit on your phone.

It need to be air-gaped, no SIM card, with Airplane mode, and no connection to Internet. Even if you turn your phone to Airplane mode, you can still turn the Internet connection ON while it's risky and not recommended.

Old phone as cold storage?

[Ishicryptic]

Keep your phone in Airplane mode at all times, and that's really the only advice I can give you as nothing else will truly guarantee that you won't receive some kind of RCE zero-click exploit on your phone.

Thanks for this idea I've never thought of airplane mode relating to wallet security before and as you mentioned it makes a lot of sense to me as an alternative to keeping your wallet device offline. What is important is for your wallet device to be offline whether your phone is on airplane mode or the better option which is hardware wallet, your wallet device should not be connected online as much as possible. Online is a den for scammers and hackers so distancing your wallet as much as possible from online connection the better for you, also very important is not to save your seed phrase online.

[Joeboy]

Well, every now and then I hear that it is unsafe to keep a wallet on a mobile phone, especially the phones that we are using for day-to-day basis as a daily driver. So what can be done to secure our funds on Unstoppable and other Android wallets?

One option i have in mind is to buy one additional cheap phones and install our wallets in that phone and keep that phone offline most of the time and make it online only when you need to send the funds. We don't need the wallet to be online for receiving funds if we know the deposit address.

Is this a secure way, or maybe we have better ways?

OP the security of your seedphrase is all that matter, if if folks get separate device like in your suggestions, if they don't properly write down and store the seedphrase of that secondary device properly, then that could very well result in the loss of funds... So instead of folks worrying to much about getting a secondary offline device blah blah blah, they could very well just channel all their attention in ensuring that whatever device they use, the seedphrase of that their wallet is properly stored offline either through a metallic backup or any other ideal offline storage method...

[Razmirraz]

Storing a certain amount of funds on the main phone (daily driver) is indeed high risk because the phone is connected to the internet 24/7, besides, it is very vulnerable to malware, phishing, damage or loss of the phone. Choosing the option of using a second phone (regardless of whether it is cheap or expensive) that is offline most of the time is an excellent first step towards creating a standalone cold storage or warm wallet. It's important to note that if you buy a used phone to create a standalone warm wallet, you should reset the phone to factory settings before using it to ensure there's no built-in malware.

In addition, the cellphone must be used as originally planned, avoid using the cellphone for social media, browsing or other things that may be vulnerable to risks. However, if you want your assets to be stored more securely without any hassle, you can store most of your assets in a dedicated hardware wallet such as Trezor or Ledger.

[KiaKia]

Well, every now and then I hear that it is unsafe to keep a wallet on a mobile phone, especially the phones that we are using for day-to-day basis as a daily driver. So what can be done to secure our funds on Unstoppable and other Android wallets?

One option i have in mind is to buy one additional cheap phones and install our wallets in that phone and keep that phone offline most of the time and make it online only when you need to send the funds. We don't need the wallet to be online for receiving funds if we know the deposit address.

Is this a secure way, or maybe we have better ways?

If you can buy a smartphone, new or used, you can buy a good airgapped hardware wallet? People keep coming up with the idea of using a smartphone, it seems like they don't know how much a hardware wallet really costs?

If they know, they won't keep talking about buying a smartphone instead.

Hardware wallet aren't as costly like some people are making it to sound like, a Trezor model one is been sold for $49 to $69 range, Trezor safe 3 is been sold for $60.

Block stream jade plus is the cheapest airgapped hardware wallet, selling at $60 approximately.

[Cricktor]

And for those suggesting for a hardware solution, Trezor doesn't ship in my country so i prefer this andriod phone solution otherwise i know that there is nothing better than a hardware wallet.

Ah, ok, then this is a problem for commercial hardware wallets. How about SeedSigner and Krux hardware wallets? You can build SeedSigner yourself from parts which aren't directly associated with a crypto hardware wallet. Same for Krux. Might therefore be an option in your country, no?

Unstoppable wallet doesn't seem to support SeedSigner from a very brief look at it (maybe via PSBT and QR?, if Unstoppable supports this which I don't know as I don't use Unstoppable).

But there are other quite decent Android wallets that support SeedSigner and also Krux, according to a quick Google search:
Nunchuk, BlueWallet, Bitcoin Keeper, BULL Wallet, AirGap Vault

This is a myth. The security on iOS is much more elaborate, but all that does is increase the price of iOS exploits on the black market.

BTW, there's an exploit chain made completely public for IIRC all Apple OS (iOS, iPadOS, MacOS; Apple's fuck-up is in the WebKit browser engine and other parts) that allows RCE and full compromisation of the device without user interaction, simply by visiting a prepared website. Normally, this would be a very expensive exploit able to target all not properly updated Apple users.

IIRC, this exploit chain makes all Apple devices vulnerable which are below OS version 26.3.1(a).

Anyway TL;DR Apple users should update as soon as possible to 26.4.1 or enable Lockdown mode for devices which you can't update to currently latest 26.4.1 and that you still want to use to browse the internet.


Some users here still recommend Trezor when OP already wrote that they can't buy it in their country.