Electrum wallet - Update safely and avoid phishing wallets?Newbies - Read before using exchanges or investingIn case you decide to choose Electrum wallet, you should verify
GPG signatures after installing your wallet as well as anytime you download newest version to update your wallet.
GPG signatures are a proof that distributed files have been signed by the owner of the signing key. For example, if this website was compromised and the original Electrum files had been replaced, signature verification would fail, because the attacker would not be able to create valid signatures. (Note that an attacker would be able to create valid hashes, this is why we do not publish hashes of our binaries here, it does not bring any security).
In order to be able to verify GPG signatures, you need to import the public key of the signer. Electrum binaries are signed with ThomasV's public key. On Linux, you can import that key using the following command: gpg --import ThomasV.asc. Here are tutorials for Windows and MacOS. When you import a key, you should check its fingerprint using independent sources, such as here, or use the Web of Trust.
It is always the best to remember the address of Electrum site (or whatever site of wallets/ exchanges you use to store your huge funds). Each time when you want to check wallet versions or download newest version to upgrade, you must get it on official site, that you should manually type in browser address bar. BTW, using exchanges to store your crypto funds is always bad ideas, because most of exchanges or platforms don't give your seeds of your wallets. In case they give you seeds, it is still risky because there are at least you and those platforms have your seeds, and you have to trust them to protect your seeds and your funds. If those platforms do scam exits or there are abuse by their staffs (that you are unable to control) on customer data, your funds will be lost.
Bookmark is good, but there is still tampering risks on bookmark in case your computer already compromised.
In any case, verify GPG signatures will help you to know that the wallet version you download is a real Electrum wallet or fake one, and will help you to avoid fund losses.
As you can see, there are many warning threads on threats that target Electrum wallet.
⚠⚠️⚠~Beware on active phishing Electrum websites~⚠⚠️⚠ (Collection list updated) Warning: There is an ongoing phishing attack against Electrum usersIf you care about security for your funds, you should spend a few time to pratice those phishing quizzies.
[LEARN] Phishing Quizzes - Beginners & ExpertsNext time, whenever you make a threat, you should name your thread (topic) title better. If you care about more help from others for the thread, you also should rename its title too. This board is for Beginners & help, so the current title is unnecessary. Additionally, no one knows what you want to ask if they simply look at the title.
Please read more guide on topic title
Topic title style guideMake your topic title, posts more attractive