> For the complete documentation index, see [llms.txt](https://docs.solflare.com/solflare/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.solflare.com/solflare/security/digital-wallet-best-practices.md).

# Digital Wallet Best Practices

How to store your Solflare recovery phrase, separate wallets by purpose, use a hardware wallet and avoid scams. Security basics for every Solana user.

Keeping a self-custody wallet safe comes down to three habits: protect your recovery phrase, separate your wallets by purpose, and keep long-term holdings on a hardware wallet. The full security model is on the [Solflare security page](https://www.solflare.com/security/).

#### Protect your recovery phrase

Your recovery phrase is the master key to every wallet created from it. When you create a new wallet, Solflare gives you a 12-word recovery phrase. 24-word phrases, for example, from a Ledger device or another wallet, also work in Solflare. Never show the phrase to anyone, never type it into a website, and never share it with someone claiming to be support. [Nobody from Solflare will ever ask for your recovery phrase.](https://help.solflare.com/en/articles/9264203)

#### How to store your recovery phrase

The safest way to store a recovery phrase is offline, on paper or metal, where only you can reach it.

1. **Write the phrase down** on paper or a metal backup plate and keep it somewhere safe and private. You can make more than one copy, but keep every copy as secure as the first.
2. **Use Solflare's encrypted backup file** if you create your wallet on the web app. Solflare offers an optional encrypted file download of the phrase during setup. Store that file offline, for example on a USB drive kept somewhere safe, and do not forget its password.
3. **Do not store the phrase as a screenshot, in a notes app, in email, or in cloud storage.** Anyone who gets into those accounts can take your funds.

A step-by-step guide is in [How to back up your Solflare wallet safely](https://www.solflare.com/guides/how-to-back-up-your-solflare-wallet-safely/).

#### Use separate wallets for separate purposes

Using more than one wallet limits the damage if one is ever compromised. A common setup is one wallet for long-term holdings, one for everyday use, and one for connecting to new or untested apps. Solflare lets you create and switch between multiple wallets under one recovery phrase or several. See [How to create and manage multiple wallets in Solflare](https://www.solflare.com/guides/how-to-create-and-manage-multiple-wallets-in-solflare/).

#### Use a hardware wallet for long-term holdings

A hardware wallet keeps your private keys on a separate device, so every transaction needs a physical approval. Solflare works with Ledger, Keystone, and [Solflare Shield](https://www.solflare.com/hardware-wallet/), Solflare's own tap-to-sign hardware wallet card with an EAL6+ certified secure element. If you lose a Shield card, you can restore the wallet from its recovery phrase. Learn more in [What is a hardware wallet and when do you need one?](https://www.solflare.com/crypto-101/what-is-a-hardware-wallet-and-when-do-you-need-one/)

#### Check before you sign

Most wallet losses come from approving a malicious transaction, not from someone breaking the wallet. Only connect to sites you reached yourself, check the URL, and read what a transaction does before you approve it. Be wary of unexpected airdrops and "claim" links. More habits are in [Securing your Solflare wallet: best practices](https://www.solflare.com/crypto-101/securing-your-solflare-crypto-wallet-best-practices/).

#### If you think your wallet is compromised

If you think someone has access to your wallet, move any remaining funds to a new wallet with a new recovery phrase right away. The Help Center explains [how wallets usually get compromised](https://help.solflare.com/en/articles/9260258) and what to do next. Solflare support is available 24/7, but it can never reverse a transaction on the blockchain.