Stay safe

Basement never needs a recovery phrase, a private key or a password from you, and nobody from Basement or B3 will ever ask for one, or for a sign-in code. This page covers the official addresses, how your B3 is protected, and what to do if something looks wrong.

Use the official addresses

Basement's official addresses are:

• basement.fun, where Basement runs.
• beta.basement.fun, its address before the move. It sends you on to basement.fun.
• docs.basement.fun, these docs.

Check the address bar before you sign in or deposit. A link that looks close but isn't one of these isn't Basement. Basement's emails come from a basement.fun address (today codes@send.basement.fun). They carry a code or a notice, never a link to sign in.

Nobody will ask for your codes or keys

Anyone who asks for a sign-in code, a recovery phrase or a private key is trying to take your account or your B3. That includes people who say they're Basement or B3 support. Only ever type a code into Basement itself.

Basement has no chat or private messages, so a message from "Basement staff" didn't come from inside the app. Players also can't take names that read as staff, such as Support, Admin, Mod, Team or Official, or any name with Basement or bsmnt in it. Names with words like airdrop or giveaway are blocked too. If a name in Basement looks official, it isn't.

How withdrawals are protected

• Withdrawals go only to addresses you added. Adding one needs your passkey, or a code sent to your email, and the check names the address in full.
• Every new address waits before it can receive B3: 2 hours with a passkey from a device you've used for a day or more, longer otherwise, up to 3 days by email when your account has a passkey. Basement emails you about each one, and the wait starts then. Withdraw B3 has the full table.
• Above 25,000 B3, a withdrawal needs the same kind of check, naming the amount and the address, unless you signed in with a passkey or an email code in the last 10 minutes.
• A sign-in ends 30 days after it started, or after 30 days without a visit, whichever comes first.

So someone who gets into your email, or picks up your phone while you're signed in, can't add their own address and empty your balance at once: the wait and the email give you time to stop it.

Check every character of an address you add, not only the start and end. The wallet warns you when a new address starts and ends like one you already have, because look-alike addresses are a common trick.

If something looks wrong

Got an email about a withdrawal address you didn't add, or see a banner about one? Open the wallet, go to Account & security and tap This wasn't me. It signs your account out everywhere, removes addresses added in the last 24 hours, sends withdrawals still in line back to your balance, and locks withdrawals for 24 hours. A withdrawal Basement has already started sending can't be stopped, and for up to 2 minutes it can still show In line. Lock withdrawals on the same screen stops new withdrawals and addresses until you turn them back on. See Account and security.

If someone got into your email, take back your email account first: change its password and sign out its other sessions. Basement's notices go to that inbox, so until then whoever is in it sees them too. Then tap This wasn't me, and contact us even if you can still sign in. With your inbox, someone can save a passkey or link a Google account to your Basement account, and only Basement can check for those.

If you can't sign in to act on it, contact us right away.

Never send B3 straight to the vault

The deposit screen links the vault on Basescan so you can check it. Use that link to look the vault up, and never to send B3 to it. Deposit B3 walks through the right way.

If you lose your phone

Sign in on another device and open Account & security. Tap Sign out everywhere: that signs your account out on every device, the lost one included. Then remove the lost phone's passkey, and sign in again on the device you're using.

A guest account lives only in the browser that made it. If that phone is gone, the guest account and its play credits are gone too, and nobody can recover them. To keep your account across devices, sign in.

If you lose access to your email

Basement can't move your account to a new email on its own say-so, and never does it on an email or a support message alone. Contact us: recovery needs proof that existed before you lost the inbox, at least 3 days older than the loss. That's a passkey saved on the account, or a withdrawal address you confirmed with a passkey. An account without either can't be recovered this way, so save a passkey now.

What a shared link contains

A link you share carries a code for that round and your invite code, which is how the invite bonus finds you after a friend's first pick. Neither code signs anyone in or shows your balance. The page your friend lands on never shows an amount or a pick that lost. A share clip carries your handle, and shows what you won only when your pick won.

Something look wrong? Report a problem, and see Play responsibly if the worry is about how much you're playing.