Your seed phrase is probably sitting in a .txt file on your desktop right now.
Info-stealers check notes apps, old .env files, and random text docs first. That's where most people get rekt.
Here's a 2-minute security sweep:
Paste this prompt into Claude Code from your home folder:
"Write and run a local script that scans my computer for secrets saved in plain text: API keys, passwords, private keys, .env files and crypto seed phrases (12 or 24 words from the BIP39 word list). Check Desktop, Documents, Downloads and my code folders. Skip node_modules and system folders. Never print, read back or show me any secret itself. Output only the file path, the line number, the type of secret and how risky it is. Then give me a plan: what to delete, what to move into a password manager, and which keys to rotate first."
The script only reports locations. Your actual secrets never touch the chat.
Takes 3 minutes. Do it before some random Discord link does it for you.
Info-stealers check notes apps, old .env files, and random text docs first. That's where most people get rekt.
Here's a 2-minute security sweep:
Paste this prompt into Claude Code from your home folder:
"Write and run a local script that scans my computer for secrets saved in plain text: API keys, passwords, private keys, .env files and crypto seed phrases (12 or 24 words from the BIP39 word list). Check Desktop, Documents, Downloads and my code folders. Skip node_modules and system folders. Never print, read back or show me any secret itself. Output only the file path, the line number, the type of secret and how risky it is. Then give me a plan: what to delete, what to move into a password manager, and which keys to rotate first."
The script only reports locations. Your actual secrets never touch the chat.
Takes 3 minutes. Do it before some random Discord link does it for you.