Follow the sequence, understand the risks.
Each point below is a principle to verify in the actual wallet workflow. Interfaces and network requirements can vary by device and version.
What a private key does
Private keys authorize blockchain activity; exposure can allow unauthorized transfers.
What a recovery phrase does
A phrase can often recreate wallet credentials and must be guarded over time.
What a password does
An app password controls local access; it cannot replace a safe recovery backup.