Security Guide

Use OpenClaw safely to protect your data and privacy

Permission Management

  • •Don't run OpenClaw with Root permissions
  • •Set up Human-in-the-loop review for sensitive operations
  • •Regularly review permission configurations

API Key Protection

  • •Never upload configs to public GitHub repos
  • •Use environment variables to store API keys
  • •Rotate API keys regularly

Account Safety Guidelines

  • •WhatsApp: Avoid sending large volumes of automated messages
  • •Use separate test accounts for experiments
  • •Telegram is more bot-friendly

Risk Warnings

  • •Never let AI access cryptocurrency private keys
  • •Never let AI handle bank passwords or sensitive info
  • •Regularly backup important data