Most people who get drained don't lose their savings to a clever hack. They lose it because they signed one transaction from the wrong wallet. The fix is boring and takes ten minutes: keep an airdrop wallet and a savings wallet completely apart, with separate seeds, separate balances, and separate jobs.
Treat them as two tools with two risk profiles. Savings holds value you can't afford to lose and stays offline or in a long-tested setup. The airdrop wallet is a disposable, low-balance address you connect to unfamiliar sites and expect to burn. The separation costs almost nothing to set up.
Two wallets, two different threat models
Savings and airdrops don't face the same attackers. Your savings wallet's main enemy is a compromised key or a phishing drainer that gets you to sign once. An airdrop wallet's enemy is every contract you touch, plus the project behind it. Mix the two and a single bad signature on a sketchy claim page can reach funds you never meant to expose.
What each wallet needs
- Savings wallet: a hardware signer, a seed phrase on paper, near-zero contract approvals. You touch it rarely.
- Airdrop wallet: a fresh address, small balances, permission to burn it. You touch it constantly.
Those needs pull in opposite directions. A wallet you connect to a new dApp every week shouldn't hold your emergency fund, and a wallet you check twice a month shouldn't be farming points across ten protocols.
Setting up the split
Two wallets cover most people. You don't need five and a spreadsheet.
Lock down the savings side
Pick a wallet you trust, generate the seed offline, and write it on paper. Not a screenshot, not a note in your phone. Fund it with what you'd be genuinely upset to lose, and keep it out of browser extensions that stay logged in all day. If you own a hardware device, this is where it lives.
Spin up a throwaway for airdrops
Generate a brand-new wallet with its own seed. Fund it with a small amount of gas, claim what you're eligible for, and move anything valuable to savings once it clears. Treat the balance as already spent. When a project turns out to be a drainer, you shrug and make a new one.
Never bridge the two
The split collapses the moment you import your savings seed into the airdrop wallet or copy approvals across. Keep seeds physically separate and addresses separate. Don't send from savings to airdrop using the address you claim with.
A $40 mistake instead of a five-figure one
Picture a savings wallet holding a few thousand dollars in stablecoins and a separate airdrop wallet holding about $40 in gas. A claim page asks you to approve an unlimited token allowance. You sign on the airdrop wallet because that's the one you're using. The contract turns out to be malicious and drains that address. You lose $40 and some gas. Annoying, not catastrophic.
Now replay it with everything in one wallet. Same signature, same drainer, but this time it reaches the stablecoins. The signature was going to happen either way. The blast radius is what you control.
Mistakes that quietly defeat the split
Reusing one seed across "separate" wallets
Two addresses from one seed phrase aren't separate. Compromise the seed and both fall. Generate independent seeds for each wallet.
Sweeping airdrop tokens into savings unchecked
Tokens from unfamiliar projects can carry transfer hooks or approval traps. Verify what you received before it goes anywhere near your main holdings. If you're not sure, leave it.
Leaving old approvals live
Revoke approvals on the airdrop wallet regularly. It costs gas, but a stale unlimited approval is an open door you forgot about. On the savings side, keep approvals to almost nothing.
Where exchange accounts fit
Some people park savings on an exchange instead of a self-custody wallet. That's a different trade-off: you're trusting a platform's custody and security practices rather than your own key management. Exchanges like BitMEX are places to trade and hold actively, not necessarily where you'd stash long-term savings you don't plan to touch. The same principle applies. Don't use the account you trade from to connect random airdrop contracts, and don't treat a trading balance as your safety net.
Frequently asked questions
Can I just use one wallet and be careful?
You can reduce risk, but you can't eliminate the moment you sign a transaction you didn't fully understand. Carefulness fails eventually, usually on a deadline or a rushed claim. Two wallets means a mistake costs the small balance, not the whole stack. It's the cheapest insurance in crypto.
How much should I keep in an airdrop wallet?
Enough for gas and a little buffer, nothing more. Think of it as money you've already written off. If a claim needs a bigger balance, fund it just before and sweep the remainder out afterward.
Do I need a hardware wallet for the airdrop side?
No. A hardware signer makes sense for savings you rarely touch, not for a wallet you're connecting to new sites weekly. Keep the device on the savings side and use a simple software wallet for the throwaway. Match the tool to the job.
Open your wallet list right now and check whether any two "separate" wallets share a seed phrase. If they do, generate a fresh one before your next claim.