Token Safety
How do I export and use my private key?
Before exporting your private key, it’s important to understand what it is and how it works.
A private key is an alphanumeric code used to authorize transactions and prove ownership of a blockchain asset, mainly blockchain wallets. In simpler terms, a private key is like the master password to your cryptocurrency account —it’s what gives you control over your funds.
Your cryptocurrency itself is always stored on the blockchain, not within a wallet app. Instead, the wallet on your phone securely holds your private key, which allows you to manage your funds.
- 🔑 Think of it as the key to a safe: whoever has the private key can access the assets inside.
- 🔐 The private key represents the ownership of the wallet and should always be kept private. Sharing the private key means allowing anyone else to control your wallet.
- 💡 It’s different from a public key – your wallet address is also called a public key (you can share it to receive blockchain assets, like cryptocurrency), while the private key is your PIN (only you should have it).
- ⚠️ If you lose your private key, you lose access to your funds forever! There’s no "forgot password" option with self-custodial crypto wallets. Just like if you lose the key to your safe, you won’t be able to access the assets inside. As crypto wallets are secured by the latest cryptography, there won’t be a keysmith to help you out.
You can export your private key to your World Wallet. We recommend only exporting your private key if you fully understand what you are doing.
-
What are the uses of a private key?
1. Access Your Public Wallet
If you lose access to your World Money account, your private key can help you regain access to the funds in your public wallet address, but not to your World Money account. What you can do: Access your public wallet address and manage your funds. What you won’t be able to do: Access a World Money account or World Money features like Mini Apps. Some wallets allow you to import a wallet using the private key.
Example:
In MetaMask or Trust Wallet, you can go to Import Wallet, enter your private key, and gain access to a wallet. However, after importing the private key, you will see an EOA (Externally Owned Account) address—this is not your World Money address. This additional step was taken for extra security.The EOA address is generated by World Money, but it is not where your funds are stored. To access and manage your funds, you must link your MetaMask wallet to a Safe UI wallet. For step-by-step instructions, see the Frequently Asked Questions section at the end of this article.
-
2. Sign Transactions
When you send crypto, your private key is used to digitally sign the transaction. This proves that you own the funds and authorizes the transfer.
You don’t manually enter your private key—your wallet application does this in the background.
3. Connect to Decentralized Apps (DApps)
Some platforms allow you to sign in using your wallet address and require signing by your private key. Please make sure that the DApp in question uses a public-private key pair to authenticate you without exposing your private key.
Use your private key only when necessary (like wallet recovery), and keep it offline to protect your assets.
Follow the instructions described below to find and export your private key.
-
Where do I find my private key in World Money?
- Tap your profile icon to access the Settings menu
- Select Privacy & Legal (iOS) or Privacy (Android).
- Tap Request your wallet key
-
How can I unlock and export my private key?
Once you perform the steps listed above to find its location, proceed as follows:
-
To initiate the unlocking process, tap Request your wallet key
-
Once you read and acknowledge the risk warnings, select the Understood button
-
Follow the prompts to confirm your request to unlock the key
-
Once confirmed, an unlocking period will begin
- A countdown timer will show you the time left to unlock the key
- This period is set to prevent potential attackers from stealing your private key
- When the private key is unlocked, it will be available for display for 72 hours
- You’ll see the options to either copy or reveal the key. Select your desired action
After 72 hours have passed, the key will be locked again. If needed, a new unlocking process must be performed.
REMEMBER: Any action involving your private key is risky. Never share it with anyone, or you could lose your wallet funds to theft. World Money Support will never ask you for your private key.
-
-
Frequently Asked Questions
1. Why is there an unlocking period for my private key?
The unlocking period is set as a security feature, not a limitation. If someone steals your phone or gains access to your account, they cannot immediately export your private key and drain your wallet. This period is fixed and cannot be shortened or bypassed by anyone, including our Support team.
2. Can I access my private key even if some features are blocked in World Money?
Yes, you can tap the Export Private Key option as shown in this example:
3. How can I keep my private key safe?
The best way to keep your private key safe is to never export it.
Since there is only one private key linked to your account, it is essential to store it securely. Losing it may mean losing access to your funds permanently.
To prevent this, we recommend:
Never sharing your private key with anyone. Storing it in a safe place, such as a secure password manager or offline storage. Using a trusted and secure cryptowallet that protects your private key.
By keeping your private key safe, you ensure that only you have control over your cryptocurrency.
4. Can I generate a new private key?
No. only one private key exists per account.
5. How do I import my private key into a wallet?
Below is an example using MetaMask, but any non-custodial wallet that supports the Ethereum protocol can be used.
Step 1: Import the private key into MetaMask
Copy the private key from World Money Go to MetaMask (App or browser extension) Tap on “Account” on the upper part of the screen Choose “Add Account or Hardware Wallet” Press on “Import Account” Paste the World Money private key Tap on “Import”
Note: The address shown in MetaMask as imported is the EOA address of World Money, not the World wallet address (where the funds are).
Example:
To gain access to your World wallet address, you’ll need to link MetaMask (or other non-custodial wallet) to Safe. See Step 2 below for more details.
Step 2: Navigate to Safe and link your MetaMaskGo to Safe Tap on “Connect” Select the “WalletConnect” wallet icon Select “MetaMask” Safe will redirect you to MetaMask (or your wallet) to confirm Tap on “Connect” Navigate back to Safe The World wallet address will be shown under Accounts Tap on “World Chain” The World wallet address will show up in Safe
Example:
If you’re having trouble navigating MetaMask or any other external platform, please reach out to their support team here: https://support.metamask.io/
Step 3: Network Fees - Deposit and bridge native ETH to the EOA address
When performing crypto transactions with a non-custodial wallet, users need to hold sufficient native tokens of the blockchain network to cover the network fees needed to perform transactions.
World Money sponsors network fees for its users when performing crypto transactions on World Chain. However, once a user imports the private key into another non-custodial wallet, the user will sign transactions through that wallet and World Money will no longer sponsor these fees.
To cover the network fees and perform transactions like sending or swapping tokens, users will need to deposit ETH to their EOA address (the one imported into the non-custodial wallet).
To bridge native ETH to World Chain, you can use:
World Chain Superbridge provided by Superbridge, a website-hosted user interface (the "Interface") provided by Blob Engineering Pte. Ltd.: Withdraw ETH to the EOA address on any of the networks presented on Superbridge ( ETH network would be the preferred option).
To bridge native ETH to the EOA address, please follow these actions:
Using the Ethereum network, deposit ETH to the EOA address imported into MetaMask (or other non-custodial wallet) When your ETH reaches your wallet on the ETH network, navigate to https://world-chain.superbridge.app/ Connect your non-custodial wallet (MetaMask) to the World Chain Superbridge World Chain Superbridge will send an authorisation request to your MetaMask wallet; navigate back to MetaMask and approve the wallet connection to Safe Return to World Chain Superbridge and select the networks: From ETH To World Chain Fill in the amount Check the bridge order preview and ensure it corresponds to the amount you’ve chosen Tap on “Review Bridge” Review the bridging details one more time before tapping on “Continue” Acknowledge that the receiving wallet address (your imported EOA) supports World Chain Start the bridge
Example:
IMPORTANT: World Money does not have access to your private key, and does not maintain control over your wallet, digital tokens, or private keys. Users are responsible for the risk of loss of their private keys and neither TFH nor World Money is able to recover such keys.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
How can I avoid Orb scams?
At Orb verification sites
World Operators are independent contractors who help people verify their unique humanness at an Orb.
Operators and members of their teams should NEVER:
- Ask for money, cryptocurrency, or gifts.
- Request for any personal information, such as a phone number, address, or email address.
- Offer money in exchange for your crypto.
- Handle your personal device or ask you to hand it over during verification.
Important: Verification must always be completed with you handling your own device. The Operator should guide you verbally but must not touch your phone at any point.
If an Operator or a member of their team tries to scam or deceive you, does not explain the project openly and transparently, or attempts to handle your device, stop interacting with them and submit a report via World Money.
Orb verifications at other locations
Only verify your World ID at authorized Orb locations listed in World ID app.
- Be aware of impostor World representatives.
Do not trust individuals offering verification outside of locations shown in the app.
Do not verify in unofficial or unlisted places.
- If individuals are not at a location with working Orbs (the device used to claim Proof of Human) and are not wearing World-branded clothing, do not trust them and submit a report via World Money immediately.
For more details, you can see our article What should I expect when getting my World ID verified at an Orb?
-
Safety tips when verifying with an Orb
World emphasizes the importance of users following the instructions provided in World ID app when verifying themselves. Each user is responsible for ensuring their own safety and privacy to avoid scams or misuse.
To ensure a safe experience, consider the following recommendations:
- Use your own phone and keep it secure: Complete the process only with your personal device and do not share it with others. After verification, keep your cell phone secure to ensure that only you can access your World ID, along with all of the benefits associated with being able to demonstrate your humanity and uniqueness.
- You must be over 18 years old to complete the verification.
- Verify only at authorized locations: Follow directions from official World Operators and ensure the site appears in World ID app. Avoid people offering verification nearby or in unlisted places.
- About token transfers: After verification, you can find instructions on how to transfer your WLD tokens in the World Help Center. People offering exchanges around activation centers are not part of the World Team. They will not pressure you to act immediately or to transfer or redeem tokens.
- Legitimate World Operator Partners and representatives will never ask you to share your password, two-step verification codes, phone number, or private keys. If someone claiming to be from World asks you for this information, it is a scam.
Privacy commitment
World was conceived and is fully committed to protecting individual privacy. World does not want to know who you are; only that you are human. To be part of the World community and network, no personal information is required, such as email, phone number, address, name, etc. If you see that this is happening, please report it.
The project does not seek to collect and store data; participation is completely voluntary and aims to give people control over their own information.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
How can I stay safe with my World wallet?
Keeping your wallet secure is essential. As a self-custodial wallet, you’re responsible for protecting your device, your backups, and your account login details.
Follow these best practices to stay safe:
1. Protect your phone
Your phone is the key to your wallet.
NEVER allow strangers to handle your phone.
Orb Operators should never ask to handle your phone. If anyone does, stop interacting with them and report the encounter through World Money.
Always keep your phone locked when not in use.
Keep your operating system updated to the latest version.
Do not jailbreak (iOS) or root (Android) your device.
Only download apps from official stores such as the Apple App Store or Google Play Store.
2. Enable biometric authentication
Adding biometric protection helps prevent unauthorized access.
-
On iOS (Face ID)
- Tap your profile picture to open Settings.
- Select the Privacy & Security option.
- Enable Require Face ID.
-
On Android (Fingerprint or device biometrics)
- Tap your profile picture to open Settings.
- Select the Privacy & Security option.
-
Enable biometric authentication (such as fingerprint), depending on your device settings.
Note: Biometric options may vary depending on your device model.
3. Backup and recovery
- It is recommended that you add an available login method to World Money as soon as possible. This allows you to recover your account if your phone is lost, stolen, or replaced. You can find more details about login methods in this article: How do I sign in to my account?
- NEVER share your login credentials with anyone, including customer support. This may result in loss of access to your account and revocation of many World Money features.
4. How can I safely make deposits or withdrawals using World Money
- You should always default to depositing and withdrawing via the options provided within World Money.
- You should NEVER send local currency or cryptocurrency to an individual who offers deposit or withdrawal services unless they are promoted as a service provider within World Money in select countries.
-
Red flags for scams:
- Urgent requests for sensitive information
- Threats about account closure
- Requests to visit external links
- Anyone asking for recovery phrase or private key
- If you feel an individual is trying to scam or deceive you, you should stop interacting with them and submit a report to us via World Money support.
5. Frequently Asked Questions (FAQ)
How do I identify fake or scam tokens?
Red flags for scam tokens:
- Tokens you do not recognize appearing in your wallet
- Tokens with names similar to legitimate ones (slight misspellings)
- Tokens claiming free airdrops from unknown sources
- Tokens requiring you to visit external websites to claim them
What to do if you see suspicious tokens:
- Do NOT interact with them (no swapping, sending, or clicking links)
- Do NOT visit websites they direct you to
- Do NOT connect your wallet to unknown sites
- Safe tokens in World Money: Legitimate tokens supported in World Money are displayed in your wallet. These include WLD, USDC, and supported Local Stablecoins
- If you received suspicious tokens: You can safely ignore them. Interacting with scam tokens can sometimes trigger malicious smart contracts. When in doubt, contact our Support team before taking any action
I think I was scammed, what should I do?
Immediate steps:
- Stop all communication with the suspected scammer
- Do not send any more funds
- Document everything - screenshots of messages, transaction hashes, wallet addresses
-
Report the scam: Contact our Support team and submit a report with all the details you have. Include:
- How they contacted you
- What they promised
- What you sent and when
- Any wallet addresses or transaction hashes
- Important: Blockchain transactions cannot be reversed, so we cannot recover sent funds. However, your report helps us investigate the situation.
What information should I not share with the World Support team?
For your security, never share certain sensitive information - even with support. Never share these details when getting in touch with the Support team:
- Your full name
- Home address
- Government-issued IDs
- Your login details, passwords, or your private key
- Your credit card or bank account numbers
- Selfies or photos of humans
Our Support team will never ask for these, as they can help you without this information.
The Support team may ask for the following details:
- Your public wallet address
- Public transaction hashes
- Screenshots of error messages
- General description of your issue
Protect yourself going forward: Never share your login details or private key with anyone. Be suspicious of guaranteed returns or urgent requests, and always verify any World Money communications through official channels as listed here: How can I connect with World on Social Media?
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
What are phishing scams and how can I avoid them?
What is phishing?
- Phishing is a method for scammers to gain fraudulent access to your account or personal information.
- Avoid sharing personal information on Discord, Twitter, or any social network, not even with what appear to be official World or Tools for Humanity social media accounts. Only interact with World through support in World Money.
- If you have been the victim of a phishing attack, please contact support. Also, please report suspicious messages via World Money so that we may assist you and conduct an investigation.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
What are best practices to avoid airdrop scams?
An airdrop is when a project distributes free tokens directly to users’ crypto wallets. While legitimate projects use airdrops for promotions, they are also commonly exploited in scams.
Scammers create fake airdrops to trick users into connecting their wallets and approving transactions. If the smart contract behind the airdrop is malicious, this can put your funds at risk or allow unauthorized access to your wallet.
Best practices to avoid airdrop scams
Only interact with verified projects: Before claiming an airdrop, confirm the project is legitimate by checking its official website and multiple verified social media channels.
Be cautious when connecting your wallet: Avoid connecting your wallet to unfamiliar or unverified smart contracts. If something doesn’t feel right, do not proceed.
Double-check links and URLs: Always review the URL carefully before clicking or tapping on it. Make sure it leads to the official website and has been shared through an official announcements channel.
Do your own research: Look for feedback from other users and community discussions to help determine whether the airdrop is legitimate.
Important: Only accept airdrops from verified profiles and sources you absolutely trust. If you are unsure, do not interact with the airdrop.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.