> For the complete documentation index, see [llms.txt](https://gothamcash.gitbook.io/bindowscash/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gothamcash.gitbook.io/bindowscash/misc/opsec-best-practices.md).

# OPSEC / Best Practices

Using a privacy tool like **BindowsCash** requires **good operational security (OPSEC)** to preserve your anonymity. This section outlines essential practices to ensure your deposit and withdrawal activities **cannot be linked** and your identity remains private.

***

#### 🔀 1. Use Fresh Wallets

* Always use a **new wallet address** for withdrawals.
* Never reuse the same wallet used for the deposit — this breaks anonymity.
* Optionally, use a **burner wallet** (wallet created and discarded after use).

***

#### 🕵️‍♀️ 2. Wait Before Withdrawing

* **Do not withdraw immediately after depositing**.
* Wait hours, days, or even weeks to **dilute your transaction** within the anonymity set.
* The more users deposit and withdraw in that time, the **harder it is to trace**.

***

#### 🌐 3. Use a Privacy-Respecting Network

* Avoid withdrawing the dApp from a **known or identifiable IP address**.
* Use **VPNs**, **Tor**, or **privacy-focused networks** (e.g. Tails, Whonix).
* Consider generating and using your note on an **airgapped** or offline machine.

***

#### 🧾 4. Never Share Your Note

* The **note** is your proof of deposit and your claim to funds.
* Anyone who has it can withdraw your funds.
* Store it **securely** and **offline** (password manager, encrypted drive, or paper backup).

***

#### 🧼 5. Sanitize Your Metadata

* Don't mix BindowsCash usage with other identifiable wallet interactions.
* Avoid connecting wallets that interacted with exchanges, KYC platforms, or Web3 profiles.
* Clear browser history or use **private/incognito** mode.

***

#### 🔐 6. Double-Check Contracts and URLs

* Always verify you're using the **official smart contract addresses**.
* Be cautious of phishing sites mimicking BindowsCash. The official URL is and remain `bindows.cash`
* Optionally, use the [offline version](/bindowscash/testnet-guide/offline-version.md) for extra safety.

***

#### 📦 7. Don't Deposit Straight from Exchanges

* Depositing directly from a **centralized exchange (CEX) wallet** links your identity to the deposit.
* Instead, first transfer to a **non-custodial wallet**, then deposit into GothamCash.

***

#### 🧠 8. Think Long-Term

* Your anonymity set grows over time.
* The **more users** and the **longer you wait**, the **stronger your privacy**.