This is an open letter to all crypto writers and community managers.

Please stop advising your readers, investors and community members to look for the padlock in their browser toolbar. This advice is dangerous.

A padlock is the browser’s way of telling you that a website has installed an SSL Certificate. SSL Certificates are used to encrypt the transmission of data between your browser and the website — that’s it. This prevents a third-party from stealing your personal information as you type it into the website.

A padlock / SSL Certificate does not indicate that a website owner is who they claim to be — or that they can be trusted. SSL Certificates are FREE and are automatically issued. There is no verification process. You can not trust a website just because it has a padlock.

I have witnessed community managers responsible for groups with more than 20k members, provide this ill advice. And I’ve read many articles written by reputable publications too. Please stop!

If you witness someone providing this poor security advice, please provide them with a link to this post.

MetaCert protects more people in crypto than all other security companies in the world combined — so we have a good global perspective on crypto cybersecurity.

Over 90% of all data breaches start with phishing scams too — so almost every hack you hear about on an exchange, wallet, ICO or token company, has actually started with a member of their team falling for a phishing scam.

Thanks,

PaulMetaCert CEO

This is an open letter to all crypto writers and community managers. 🚫 was originally published in Hacker Noon on Medium, where people are continuing the conversation by highlighting and responding to this story.