Secure Your Ronin Wallet in 5 Easy Steps
Ronin Wallet security comes down to five steps: install the wallet only from Ronin’s official sources, keep your seed phrase offline and private, secure your sign-in and consider a hardware wallet, treat every link, message and approval request as a possible trap, and remove approvals you no longer need. This guide explains each habit in plain English. Where a point comes from Ronin’s own documentation or blog, it says so. Where it is general wallet advice that applies to any crypto wallet, it is labelled as general.
Updated October 2026
Key takeaways
- Download Ronin Wallet from wallet.roninchain.com or the Apple App Store and Google Play listings that Ronin’s documentation links to.
- Nobody from Ronin, Sky Mavis or Katana needs your seed phrase. Anyone who asks for it is a scammer.
- Ronin’s documentation lists a Revoke tool that removes token approvals you gave to a dApp.
- Ledger and Trezor hardware wallets can be used with Ronin Wallet, according to Ronin’s own blog and wiki.
- The March 2022 Ronin bridge hack was a failure at the network level, not a wallet mistake, but it shows why you should not hold more on any bridge or app than you need.
Where should you download Ronin Wallet?
Start at wallet.roninchain.com, the address that Ronin’s own wiki uses for its “Install Ronin Wallet” link. For phones, Ronin’s documentation links to the Apple App Store for iOS and Google Play for Android, and says to download the wallet for iOS or Android from those listings.
Type the address yourself or open it from a bookmark. Do not follow links from search ads, replies under social posts or direct messages. A copy of a wallet site only has to look right for a few seconds to capture a seed phrase.
If you are still setting up, our beginner guide to getting started on Ronin and Katana covers the first steps.
How do you protect your seed phrase?
A seed phrase, also called a recovery phrase or passphrase, is the list of words that can rebuild your wallet on any device. Whoever holds it controls your funds. Ronin’s wiki guide states the rule directly: never share your private keys or seed phrase with anyone.
The same guide, a community post hosted on Ronin’s wiki and dated March 6, 2025, gives these points:
- Do not save the phrase on your phone, computer or a cloud service.
- Write it on paper or engrave it on metal, and keep it somewhere locked.
- Do not show it on a screen share or read it out loud.
- If you can choose, a 24-word phrase is preferred over a 12-word one.
General advice: never type the phrase into a website to “verify” or “sync” your wallet.
How should you set up passwords and account sign-in?
If you created your Ronin account with an email sign-in rather than a seed phrase, the same wiki guide recommends a long, unique password made with a password manager, and two-factor authentication through an authenticator app instead of SMS. It adds that, at the time it was written, Ronin did not let users change their account email, so the mailbox itself needs strong protection.
Can you use a hardware wallet with Ronin Wallet?
Yes. A hardware wallet is a small physical device that keeps your private keys offline and signs transactions only when you press a button on it. Ronin’s mobile wallet announcement describes Ledger Nano X support over Bluetooth as “the extra defense of a hardware wallet”, and Ronin’s wiki says the Ronin Wallet app is compatible with Ledger and Trezor.
The wiki guide adds two cautions. Buy the device directly from the manufacturer so it cannot have been tampered with, and remember that a hardware wallet is only as safe as the backup of its seed phrase.
General advice: a hardware wallet protects your keys, but it does not read the transaction for you. If you approve a bad request on the device, it still goes through, so the checks below still apply.
How do you check and revoke token approvals on Ronin?
When you use a dApp, you often grant its smart contract permission to move a token or NFT from your wallet. That permission is called an approval, and it stays active until you remove it.
Ronin’s documentation describes a tool called Ronin Token Revoke, hosted at ronin.axiedao.org/revoke. The steps it gives are:
- Open the Revoke tool and connect your Ronin Wallet.
- Review the approvals linked to your address, grouped by dApp.
- Select the approval you want to remove and click Revoke.
- Confirm the transaction in your wallet.
The documentation is clear about two limits. Revoke cannot remove signatures or dApp connections. And if you use that dApp again later, you will have to approve it again.
How do you spot phishing and fake Katana or Ronin sites?
Phishing means a fake site, message or app built to get your seed phrase or a signature. For Ronin users, the usual targets are fake wallet pages, fake swap pages and fake support accounts.
- Fake wallet sites: use only the sources in the download section above.
- Fake Katana sites: Katana DEX runs inside the Ronin app at app.roninchain.com/swap. Katana.so is an independent guide, not the exchange, and you cannot swap tokens here. Bookmark the real address and use the bookmark. Our Katana DEX swap guide shows the real flow.
- Fake support DMs: Ronin’s wiki guide says to always verify unsolicited requests for sensitive information, including from people posing as support teams, and to avoid screen sharing. General advice: a real support team does not message you first, ask for your phrase, or ask you to “validate” your wallet on a link.
How do you verify a token contract address?
A contract address is the unique on-chain identifier of a token. Scam tokens copy real names and logos, so the name on screen proves nothing. Check the address against the project’s official documentation or a block explorer before you swap or approve anything.
RON itself is the native coin of Ronin, so it has no contract address. Most people looking for one want Wrapped RON. Our page on the RON token contract address explains the difference and how to confirm the address yourself. For background on the chain, see our guide to Ronin Network.
What does the March 2022 Ronin bridge hack teach about security?
On March 23, 2022, an attacker drained the Ronin bridge, which moved assets between Ethereum and Ronin. TechCrunch reported on March 29, 2022 that the hack was found that morning, after a user could not withdraw 5,000 ETH. The losses were 173,600 ETH and $25.5 million in USDC, worth almost $625 million at the time of reporting. The attacker used hacked private keys to forge withdrawals.
The Block reported on April 27, 2022 that the attacker took four validator keys held by Sky Mavis and a fifth validator belonging to Axie DAO through a gas-free signature. That gave control of 5 of the 9 validators, enough to approve withdrawals.
The lessons for a regular user are general ones:
- Keys are the whole security model. One stolen key, or a few, can undo a system that looks safe.
- Do not keep more value on a bridge or in a single app than you need to move or use.
What are the five steps in short?
- Install only from wallet.roninchain.com or the official App Store and Google Play listings.
- Keep your seed phrase on paper or metal, offline, and tell no one.
- Use a unique password and an authenticator app, and consider a hardware wallet.
- Bookmark app.roninchain.com, and check contract addresses before you swap or approve.
- Revoke approvals you no longer use, and ignore anyone who messages you first about “support”.
FAQ
Is Ronin Wallet safe to use?
Ronin Wallet can be used safely if you follow good habits. General advice: the common user-side risks are sharing a seed phrase, signing a malicious request and using a fake site. Install from official sources, protect your phrase and review what you sign.
Does Ronin Wallet support Ledger or Trezor?
Yes. Ronin’s blog describes Ledger Nano X support over Bluetooth in the mobile wallet, and Ronin’s wiki says the Ronin Wallet app is compatible with Ledger and Trezor. Buy the device directly from the manufacturer.
How do I revoke approvals on Ronin?
Open Ronin’s Revoke tool at ronin.axiedao.org/revoke, connect your wallet, choose the approval you want to remove, click Revoke and confirm in your wallet. It cannot remove signatures or dApp connections.
Will Ronin or Katana support ever ask for my seed phrase?
No. Ronin’s wiki guide says never to share your private keys or seed phrase with anyone, and to always verify unsolicited requests for sensitive information. General advice: anyone who asks for the phrase is trying to steal your funds.
What happened in the Ronin bridge hack?
On March 23, 2022, an attacker used compromised validator keys to forge withdrawals from the Ronin bridge and took 173,600 ETH and $25.5 million in USDC. It was discovered on March 29, 2022.
