Anti-phishing checklist

Five checks before any password field.

  1. Onion came from a saved source
  2. Phrase matches your baseline
  3. No seed-phrase prompts
  4. No urgent “support migration” chat
  5. Second mirror ready if this one dies