Wallet Security Basics
How to store keys safely, recognise phishing attempts, and choose between wallet types when studying Solana.
Managing your own keys is a fundamental part of using any blockchain network. This guide covers the security practices every Solana reader should understand before creating a wallet or signing a transaction.
Understanding seed phrases
When you create a wallet, you receive a seed phrase — typically 12 or 24 words — that generates all your private keys. Anyone with this phrase can control your funds. Write it on paper, store it in a secure physical location, and never enter it into a website, app, or message.
Hot wallets vs cold storage
A hot wallet runs on your phone or computer and connects to the internet. It is convenient for small amounts and daily use. A cold wallet (hardware device) keeps keys offline and is better suited for larger holdings. Many readers use both: a hardware wallet for storage and a hot wallet for interacting with applications.
Recognising phishing
Phishing attacks targeting Solana users often appear as:
- Fake airdrop websites asking you to connect your wallet and sign a transaction
- Direct messages on social media claiming to offer support
- Emails impersonating wallet providers with urgent security warnings
Legitimate projects rarely ask you to enter your seed phrase. If a site requests it, leave immediately.
Transaction signing awareness
Every time you approve a transaction, review what permissions you are granting. Some transactions give programs unlimited access to your tokens. Tools like transaction simulators can show you the expected outcome before you confirm.
Backup and recovery
Test your recovery process with a small amount before storing significant value. Ensure your seed phrase backup is readable and stored in at least one location separate from your primary device.
If something goes wrong
If you suspect your seed phrase has been compromised, transfer remaining funds to a new wallet immediately. No support team can reverse blockchain transactions or recover stolen funds.
Next steps
Once your security foundation is solid, explore our guide on Validators and Staking or continue along the Learning Path.