A request for recovery phrase words should stop the workflow and return the user to a known Ledger entry. The check is simple: where the request appeared, whether Ledger Wallet shows the same task, what the device screen says, and whether any form asks for private backup content.
Recovery phrase requests belong outside forms
Record the page or message path and the exact request. Recovery phrase words are backup material, not form content, support text, or message text. If a page asks for those words, stop the page path and return to a known Ledger entry.
The recovery phrase explainer is the stable reference for what belongs in private backup records.
Ledger Wallet context should be checked separately
Open Ledger Wallet from the known path and read the workflow shown there. A normal app workflow should not require the user to type backup words into a web form or chat field. Keep app context and form requests separate.
- Record the page path and requested field.
- Compare Ledger Wallet state from a known entry.
- Keep backup words out of webpages, chats, and screenshots.
Device screen can be read without sharing backup content
The hardware screen may show setup or confirmation wording, but the user can read it locally without sending backup content anywhere. The entry verification checklist helps keep source path, app state, device state, and record separate.
End with a private backup-boundary record
Close with entry path, app state, device-screen wording, requested field, and final decision. The record should confirm the boundary without copying the recovery phrase itself.
