Skip to main content

Security Best Practices

Protecting your account is essential. This guide covers security for both FortisArena’s internal wallet and optional external wallets.

Account Security

Strong Passwords

Must have:
  • Minimum 12 characters
  • Uppercase and lowercase letters
  • Numbers
  • Special characters
Example strong passwords:
  • F7$mK9pL@vQ2#wX
  • G@m1ng!Is#My$L1f3#2026
Weak passwords:
  • password123
  • john1990
  • fortisarena
DO:
  • ✅ Use a password manager
  • ✅ Enable 2FA
  • ✅ Change password if suspicious activity
  • ✅ Use unique password for FortisArena
DON’T:
  • ❌ Reuse passwords from other sites
  • ❌ Share your password
  • ❌ Write passwords on paper
  • ❌ Store in unencrypted files

Two-Factor Authentication (2FA)

Always enable 2FA for maximum security. To enable:
  1. Go to Settings → Security → 2FA
  2. Choose your preferred method
  3. Follow setup instructions
  4. Save backup codes securely

FortisArena Internal Wallet Security

How Our Wallet is Different

FortisArena uses MPC (Multi-Party Computation) technology:

Your Responsibilities

You ARE responsible for:
  • Account password security
  • 2FA setup and backup
  • Email account security
  • Verifying withdrawal addresses
  • Reporting suspicious activity
You are NOT responsible for:
  • Private key management
  • Seed phrase backup
  • Wallet software updates
  • Blockchain node operation

Account Recovery

If you lose access:
1

Click Forgot Password

On the login page
2

Verify Identity

Email or SMS verification
3

Reset Password

Create new secure password
4

Access Restored

Same UID, same balances

External Wallet Security (If Used)

Only applies if you connect MetaMask, Trust Wallet, or other external wallets.FortisArena’s internal wallet does NOT use seed phrases.

Seed Phrase Security (External Wallets Only)

If you use MetaMask, Trust Wallet, etc.: DO:
  • ✅ Write on paper (not digital)
  • ✅ Store in secure location (safe, lockbox)
  • ✅ Make multiple copies
  • ✅ Consider metal backup (fire/water resistant)
DON’T:
  • ❌ Store on computer or phone
  • ❌ Take screenshots
  • ❌ Email or message to yourself
  • ❌ Store in cloud storage
  • ❌ Share with anyone

Hardware Wallets (Optional)

For large amounts:
  • Buy from official sources only
  • Never use pre-generated seed phrases
  • Verify device authenticity
  • Store in safe when not in use

Recognizing Scams

Common Scams

How it works:
  • Fake website looks identical to real one
  • URL is slightly different
  • Steals credentials when you log in
Examples:
  • fortis-arena.io (fake)
  • fortisarena.xyz (fake)
  • fortisarena.io (real)
  • app.fortisarena.io (real)
Prevention:
  • Bookmark official sites
  • Check URL carefully
  • Look for SSL lock (🔒)
How it works:
  • “Support agent” DMs you first
  • Asks for account info or wallet details
  • Offers to “help” with a problem
Red Flags:
  • Anyone DMing you first claiming to be support
  • Asking for your password
  • Asking you to connect to “verification” websites
  • Pressure to act quickly
Remember: Real FortisArena support will NEVER:
  • DM you first
  • Ask for your password
  • Ask for your seed phrase
  • Ask you to send crypto for “verification”
How it works:
  • “Send 1 FRT, get 2 FRT back”
  • Fake celebrity endorsements
  • Time pressure to “act now”
Reality:
  • If it sounds too good to be true, it is
  • No one gives away free crypto for sending crypto
  • Legitimate giveaways never require sending funds first
How it works:
  • Malicious browser extension
  • Fake mobile apps
  • Modified wallet software
Prevention:
  • Only download from official sources
  • Check reviews and download counts
  • Verify publisher identity

Red Flags - STOP Immediately If You See:

Never proceed if:
  • Someone asks for your password
  • Someone asks for your seed phrase (FortisArena doesn’t use these)
  • Promises of guaranteed returns
  • Unsolicited DMs offering help
  • Requests to install remote access software
  • “Verify” by sending crypto

Transaction Security

Before Confirming Any Transaction:

1

Check Website

Ensure you’re on official fortisarena.io
2

Verify Recipient

Double-check UID or wallet address
3

Review Amount

Confirm token type and amount
4

Check Fees

Review any network fees
5

Confirm 2FA

Enter 2FA code if required

Address Verification

Always verify before sending: Verify through:
  • Official documentation
  • Official social media
  • Cross-reference multiple sources
  • Ask in official Discord if unsure

Device Security

Computer Security

  • Operating system up to date
  • Browser updated
  • Antivirus software installed
  • Firewall enabled
  • Minimal browser extensions
  • No cracked/pirated software

Mobile Security

  • Biometric lock enabled
  • Auto-lock set to short time
  • Apps from official stores only
  • Remote wipe enabled
  • Regular backups

Network Security

Best Practices:
  • Avoid public WiFi for transactions
  • Use VPN if on public networks
  • Ensure home WiFi is secured (WPA2/WPA3)

What FortisArena Will Never Do


If You Suspect Compromise

Immediate Actions:

  1. Change Password
    • FortisArena password
    • Email password
  2. Check Recent Activity
    • Review transactions
    • Check login history
  3. Contact Support
  4. Enable/Reset 2FA
    • Remove old 2FA
    • Set up new 2FA

Security Checklist

Weekly:

  • Review account activity
  • Check for unauthorized logins
  • Update apps

Monthly:

  • Change password
  • Review connected apps/devices
  • Verify 2FA is working

Immediately:

  • After any suspicious activity
  • After using public WiFi
  • If you clicked a suspicious link

Emergency Contacts


Stay safe. When in doubt, contact support.