> For the complete documentation index, see [llms.txt](https://support.ellipal.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.ellipal.com/docs/troubleshooting-and-support/loss-security-and-support/what-should-i-do-if-my-seed-phrase-is-compromised.md).

# What Should I Do If My Seed Phrase Is Compromised?

If your seed phrase has been exposed to anyone else, whether through phishing, a screenshot, or a leaked backup, you need to move your assets to a new wallet immediately. A compromised seed phrase can never be made safe again, even if nothing has been stolen yet.

***

### Why a Compromised Seed Phrase Is Dangerous

Your seed phrase is the master key to your wallet. Anyone who has it can restore your wallet on their own device and transfer out your assets, with no way for you to stop them. ELLIPAL is a decentralized, self-custody wallet: whoever holds the seed phrase controls the assets, and that holds true regardless of who it is. Once a seed phrase is exposed, it stays permanently unsafe. There is no way to patch or re-secure it.

***

### What to Do Immediately

1. Create a new wallet, which generates a brand-new seed phrase
2. Transfer all assets from the old wallet to the new one as soon as possible
3. Stop using the compromised seed phrase for good, and do not store it anywhere, even for reference

Every asset you move before anyone else acts is protected. Every asset left behind on the old seed phrase remains at risk until it is moved.

{% hint style="info" %}
**Good to know:**

* A compromised seed phrase can be exploited within seconds, so treat any exposure as urgent, even without signs of unauthorized activity yet.
* Seed phrases cannot be changed or revoked. Moving to a new wallet is the only fix.
* Never enter your seed phrase into a website, app, or device you have not verified. Phishing is the most common cause of seed phrase leaks.
* ELLIPAL will never ask for your seed phrase under any circumstances.
  {% endhint %}

***

### How to Confirm It Worked

Open your new wallet and check that the full balance appears on its addresses, then verify the same on a blockchain explorer. Once every asset shows up under the new seed phrase and the old one is no longer in use, the migration is complete and you can continue using the new wallet as normal.

***

### FAQ

<details>

<summary><strong>Can ELLIPAL help me recover my stolen assets?</strong></summary>

No. ELLIPAL is a decentralized self-custody wallet, so once assets are transferred out, the transaction cannot be reversed or recovered by ELLIPAL or anyone else.

</details>

<details>

<summary><strong>Can ELLIPAL freeze my assets to stop a theft?</strong></summary>

No. Blockchain transactions are decentralized and irreversible. ELLIPAL has no control over your assets and cannot freeze or block a transaction once it's broadcast.

</details>

<details>

<summary><strong>My cold wallet never left my possession. How were my assets transferred?</strong></summary>

This happens when your seed phrase itself was exposed. Anyone with the seed phrase can import your wallet into another device or software wallet and transfer assets without ever touching your ELLIPAL device.

</details>