Security Tips and Scam Protection
How do I export my private key?
About Private Keys
Before exporting your private key, it’s important to understand what it is. We recommend only exporting your private key if you fully understand what you are doing.
A private key is a secret code that proves you own something and lets you access it. Think of it like a master password.
🔑 Anyone with your private key can access what belongs to you.
🔐 Keep it private—never share it with anyone.
💡 A public key (or address) can be shared to receive information, but your private key should only be known to you.
⚠️ If you lose your private key, you lose access permanently. There’s no way to recover it.
Where do I find my private key in World ID app?
- Tap your Profile icon at the top of the screen to access the Settings menu
- Select Privacy & Security (iOS)
- Open Private Key
How can I unlock and export my private key?
Once you perform the steps listed above to find its location, proceed as follows:
- To initiate the unlocking process, tap Unlock private key
- Once you read and acknowledge the risk warnings, select the Understood button
- Follow the prompts to confirm your request to unlock the key
- Once confirmed, an unlocking period will begin
- A countdown timer will show you the time left to unlock the key
- This period is set to prevent potential attackers from stealing your private key
- When the private key is unlocked, it will be available for display for 72 hours
- You’ll see the options to either copy or reveal the key. Select your desired action
After 72 hours have passed, the key will be locked again. If needed, a new unlocking process must be performed.
REMEMBER: Any action involving your private key is risky. Never share it with anyone. Our Support team will never ask you for your private key.
Frequently Asked Questions
1. Can I access my private key even if some features are blocked in my World ID app?
-
Yes, you can tap the Export Private Key option as shown in this example:
2. How can I keep my private key safe?
The best way to keep your private key safe is to never export it. Since there is only one private key linked to your account, it is essential to store it securely.
To prevent this, we recommend:
- Never sharing your private key with anyone. Storing it in a safe place, such as a secure password manager or offline storage. Using a trusted and secure cryptowallet that protects your private key.
By keeping your private key safe, you ensure that only you have control over your assets.
3. Can I generate a new private key?
No. only one private key exists per account.
IMPORTANT: World ID app does not have access to your private key. Users are responsible for the risk of loss of their private keys and neither TFH nor World ID app is able to recover such keys.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
What are best practices to avoid airdrop scams?
An airdrop is when a project distributes free tokens directly to users’ crypto wallets. While legitimate projects use airdrops for promotions, they are also commonly exploited in scams.
Scammers create fake airdrops to trick users into connecting their wallets and approving transactions. If the smart contract behind the airdrop is malicious, this can put your funds at risk or allow unauthorized access to your wallet.
Best practices to avoid airdrop scams
Only interact with verified projects: Before claiming an airdrop, confirm the project is legitimate by checking its official website and multiple verified social media channels.
Be cautious when connecting your wallet: Avoid connecting your wallet to unfamiliar or unverified smart contracts. If something doesn’t feel right, do not proceed.
Double-check links and URLs: Always review the URL carefully before clicking or tapping on it. Make sure it leads to the official website and has been shared through an official announcements channel.
Do your own research: Look for feedback from other users and community discussions to help determine whether the airdrop is legitimate.
Important: Only accept airdrops from verified profiles and sources you absolutely trust. If you are unsure, do not interact with the airdrop.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
How can I keep my World ID app safe?
Keeping your World ID app secure is essential. Protect your device, your backups, and your account login details by following these best practices:
1. Protect your phone
NEVER allow strangers to handle your phone.
No one should ask to handle your phone during verification, including anyone assisting you on site. If someone does, stop interacting with them and report the encounter to our Support team.
Always keep your phone locked when not in use.
Keep your operating system updated to the latest version.
Do not jailbreak (iOS).
Only download apps from official stores such as the Apple App Store or Google Play Store.
2. Enable biometric authentication
Adding biometric protection helps prevent unauthorized access.
-
On iOS (Face ID)
On your World ID app, tap your profile picture to open Settings.
Select the Privacy & Security option.
-
Enable Require Face ID.
-
On Android (Fingerprint or device biometrics)
Tap your profile picture to open Settings.
Select the Privacy & Security option.
-
Enable biometric authentication (such as fingerprint), depending on your device settings.
Note: Biometric options may vary depending on your device model.
3. Backup and recovery
- It is recommended that you add an available login method to your World ID app as soon as possible. This allows you to recover your account if your phone is lost, stolen, or replaced. You can find more details about login methods in this article: How do I sign in to my account?
- NEVER share your login credentials with anyone, including customer support. This may result in loss of access to your account and revocation of many World ID app features.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
What are phishing scams and how can I avoid them?
What is phishing?
- Phishing is a method for scammers to gain fraudulent access to your account or personal information.
- Avoid sharing personal information on Discord, Twitter, or any social network, not even with what appear to be official World or Tools for Humanity social media accounts. Only interact with World ID support through the World ID app.
- If you have been the victim of a phishing attack, please contact support. Also, please report suspicious messages via World ID app so that we may assist you and conduct an investigation.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.
How can I avoid Orb scams?
At Orb verification sites
World Operators are independent contractors who help people verify their unique humanness at an Orb.
Operators and members of their teams should NEVER:
- Ask for money, cryptocurrency, or gifts.
- Request for any personal information, such as a phone number, address, or email address.
- Offer money in exchange for anything.
- Handle your personal device or ask you to hand it over during verification.
Important: Verification must always be completed with you handling your own device. The Operator should guide you verbally but must not touch your phone at any point.
If an Operator or a member of their team tries to scam or deceive you, does not explain the project openly and transparently, or attempts to handle your device, stop interacting with them and submit a report via World ID app.
Orb verifications at other locations
Only verify your World ID at authorized Orb locations listed in World ID app.
- Be aware of impostor World representatives.
Do not trust individuals offering verification outside of locations shown in the app.
Do not verify in unofficial or unlisted places.
- If individuals are not at a location with working Orbs (the device used to claim Proof of Human) and are not wearing World-branded clothing, do not trust them and submit a report via World ID app immediately.
For more details, you can check out our article What should I expect when getting my World ID verified at an Orb location?
-
Safety tips when verifying with an Orb
World emphasizes the importance of users following the instructions provided in World ID app when verifying themselves. Each user is responsible for ensuring their own safety and privacy to avoid scams or misuse.
To ensure a safe experience, consider the following recommendations:
- Use your own phone and keep it secure: Complete the process only with your personal device and do not share it with others. After verification, keep your cell phone secure to ensure that only you can access your World ID, along with all of the benefits associated with being able to demonstrate your humanity and uniqueness.
- You must be over 18 years old to complete the verification.
- Verify only at authorized locations: Follow directions from official World Operators and ensure the site appears in World ID app. Avoid people offering verification nearby or in unlisted places.
- People offering exchanges around activation centers are not part of the World Team. Authorized Operators will not pressure you to act immediately.
- Legitimate World Operator Partners and representatives will never ask you to share your password, two-step verification codes, phone number, or private keys. If someone claiming to be from World asks you for this information, it is a scam.
Privacy commitment
World was conceived and is fully committed to protecting individual privacy. World does not want to know who you are; only that you are human. To be part of the World community and network, no personal information is required, such as email, phone number, address, name, etc. If you see that this is happening, please report it.
The project does not seek to collect and store data; participation is completely voluntary and aims to give people control over their own information.
Translations may differ slightly from the original English content. For the most accurate information, please refer to the article's English version if any discrepancies occur.