nexuscheckVerification checklists for Nexus Market, with pass criteria
18 checks across 5 moments
3 verified addresses
Overview Full checklist First time setup Every session Before funding On delivery Periodic review Addresses FAQ Scope

Checks > Every session > C-08

C-08: No page asked for the recovery phrase

IdentifierC-08
Weightcritical
AppliedEvery session (M2), Each time you sign in
StatementNothing during sign in requested your recovery phrase, seed words or private key.
Grading criteria
PASSOnly username, password and the two factor challenge were requested.
PARTIALA request appeared and you closed the page without complying.
FAILA recovery phrase was entered anywhere.
COSTThe phrase restores the account outright. Handing it over is the most complete loss available in a single action.

A rule without exceptions

No genuine market login asks for a recovery phrase. Not for verification, not to restore a session, not as a faster route in, not after a supposed security incident. The request itself is the evidence, and no other part of the page needs examining once it appears.

Why the wrapper is convincing

These requests do not arrive bluntly. They arrive as an account verification step, an emergency migration notice, or a recovery flow presented after a deliberately failed login. The framing is designed to make compliance feel like the careful response rather than the reckless one.

Related requests that fail this item

  • A page asking you to paste a private PGP key rather than sign a challenge
  • A form requesting wallet seed words for any stated reason
  • A support channel asking for the phrase to restore access
  • Any prompt to enter the phrase to prove ownership

After a failure

If a phrase was entered, the account should be considered gone rather than at risk, and anything of value on it should be moved immediately from a verified address if access remains. Change any wallet the phrase also protects, since seed reuse across a market account and a wallet is a compounding mistake.

Verified address set

Verified address set
[1]nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onion
[2]nexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onion
[3]nexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onion

Run C-07 before you type anything. Open in Tor Browser only, then compare the onion printed on the login screen against your browser address bar. A mismatch means the page is a copy and the tab should be closed.

Other checks in this group

C-06high
Address was copied, not typed or recalled
Applies: Every session (M2)
Passes when: Copied and pasted from a source held before this session.
The address you opened was copied from a saved source rather than typed, retyped or corrected from memory.
C-07critical
Login screen address matches the browser address bar
Applies: Every session (M2)
Passes when: Compared in full and identical.
The onion address printed on the login screen is identical to the address shown by your browser, checked before anything was typed.
C-09high
Address source predates this session
Applies: Every session (M2)
Passes when: Bookmark or saved note held in advance.
The address you used came from a source you already held before this session began, rather than one located during it.