A wallet secret is any sensitive material that gives control over a cryptocurrency wallet, such as a seed phrase, private key, recovery code, or other private access data. If an attacker learns it, they can usually sign transactions, move funds, or restore the wallet on another device.
Wallet secrets matter because they bypass normal account protections. Unlike a password, a wallet secret often has direct control over assets and is hard to revoke once exposed. Attackers target it through phishing pages, fake wallet apps, malicious browser extensions, clipboard stealers, and social engineering that tricks users into typing recovery material. Defenders reduce risk by keeping secrets offline, using hardware wallets, limiting browser extension permissions, and never entering recovery material into untrusted software.