fomo is non-custodial: your wallet is yours alone, and keeping it safe is in your hands. You never have to write down a private key to use fomo, but someone could still try to get into your account. This checklist closes those doors.
Securing the app on your phone
Turn on multi-factor authentication (MFA). Open the Portfolio tab, tap the gear icon, then Security, then Multi-factor authentication.
MFA adds a second check after you log in and before every withdrawal, send and private key export.
Set up the authenticator app first. Once it is on, you can add a passkey, which lets you pass the check with Face ID, Touch ID or your fingerprint instead of typing a code.
There are no recovery codes, so keep the fomo entry in your authenticator app and make sure you could still reach that app if you lost your phone.
MFA is set on your wallet, not on one device. Turning it on in the app also turns it on for the web app.
The full walkthrough is in Multi-factor authentication (MFA).
Turn on Screen Lock. It sits on the same Security screen. When it is on, the app asks for Face ID, Touch ID or your fingerprint each time you open it, so nobody who picks up your phone can open fomo.
Keep your phone updated. Install iOS or Android updates as soon as they are available, along with fomo app updates.
Securing fomo on the web
If you trade on the web, use a browser profile that is only for fomo.
Create a separate browser profile just for fomo and use it for nothing else.
No extensions in that profile. An extension can read, and act from, a signed-in session without ever needing your login.
No bookmarklets or scripts. Only use bookmarks you created yourself, and never run a script, bookmarklet or extension someone else gives you.
Only use fomo.family and its subdomains. Check the address before you sign in.
Type fomo.family yourself rather than following a link, or use a bookmark you made yourself to https://fomo.family
Never paste code into the address bar or the developer console.
Turn on PIN lock and MFA under Settings, then Security. PIN lock asks for a six digit PIN when you open fomo in a browser. MFA is the same setting as in the app, so it is already on if you set it up there.
Keep your browser updated, and log out when you are done on a shared or public computer.
fomo will never ask you to install a bookmark, script or extension. If you ever land on fomo's Security warning page, work through its steps before signing back in: What the Security warning page means and what to do.
Securing your private key
Your private key gives full control of your wallet, so it stays with you. fomo does not use a seed phrase, so anyone asking you for one is not fomo.
Only export your key if you truly need to. Most people never do.
Never enter your key into any website, bot, app or form, and never share it with anyone, including anyone who says they are from fomo.
Only import it into a non-custodial wallet you trust. Every app that holds your key can move your funds.
Do not store your key in your notes app, screenshots, photos, email or cloud documents.
If you exported your key before and are not sure where it ended up, treat that wallet as exposed and move your funds to a wallet whose key has never left your hands. A key cannot be changed the way a password can. If you are unsure how, contact support from the app and we will walk you through it.
Securing your Apple or Google account
You sign in to fomo with Apple or Google, so your fomo account is only as secure as that login. Harden it:
Use a strong, unique password, ideally generated by a password manager, and never reused anywhere else.
Turn on multi-factor authentication there too. Avoid SMS codes, which can be taken over through a SIM swap. A hardware security key is the safest option, a passkey the most convenient, and an authenticator app sits between the two. Save that account's backup codes in your password manager.
Review your recovery email and phone number. The recovery email needs its own strong password and two-factor authentication; consider a separate email just for this, and avoid an old school or childhood address. Ask your carrier for a port-out PIN or account passphrase on the recovery number, or use a dedicated number.
Treat unexpected support calls as suspect. If you need help with your Apple or Google account, contact them yourself through their official support pages.
Open account alerts yourself. If you get a security email, go to your Apple or Google account settings directly rather than clicking the link.
Check where you are signed in. Every so often, review the devices signed in to your Apple or Google account and remove any you do not recognize.
Staying safe online
Go directly to fomo.family and bookmark it yourself rather than finding it through a search engine. Search results and ads can lead to lookalike sites, so check the domain of any site you connect a wallet to.
Avoid following links in emails. Check the sender, then type the site's address yourself.
Never volunteer information to a person or site when you are not sure why they need it or cannot confirm who they are.
Know what software is running on your devices. Software you did not choose can watch what you type or take data from you. Do not install extensions you do not understand, and do not save bookmarks on someone else's behalf.
Never share login codes, passwords or your private key with anyone, and never enter them on a site you do not recognize. fomo never asks for any of them.
Back up critical information, such as recovery passwords, in a password manager.
Never share your screen or give anyone remote access to your device while you are on a call with them. That is how someone offering help empties a wallet. Do not install a remote access app for anyone, and if a caller asks you to, hang up.
Take your time. If something feels urgent or pressured, pause and double check.
Nobody at fomo will DM you first, add you as a friend, ask you to send money or offer to trade for you, on any platform. Support only speaks with you inside a ticket you opened. If someone reaches out claiming to be fomo, it is not us.
Do not trust caller ID or display names. They can be faked. Rather than responding to an unexpected call or message from a company you use, contact that company yourself through its official support channels.
Reach out to support yourself to confirm anything you are unsure of. In the app, open the Portfolio tab, tap the gear icon, then Help and Support, then Contact support, or email [email protected].
Be cautious of unsolicited offers such as giveaways, rewards, airdrops, trading tools or help you did not ask for. When in doubt, do not click.
If you are ever unsure, step back and think it through. However urgent something feels, actions on a non-custodial wallet are usually irreversible, and you can always reach out to us with questions.