Seed Phrases and Private Keys
What you're actually protecting
When you create a Solana wallet, it generates two things: a private key and a seed phrase (usually 12 or 24 words). The seed phrase is just a human-readable backup of your private key. Whoever holds either one has complete control over the wallet — they can move every token and every SOL out of it, instantly, with no way to reverse it.
Your wallet address (the public one you share to receive funds) is fine to give out. Your seed phrase and private key are not. Ever.
Custody: who's actually in control
This is the core idea called custody. If you hold your own seed phrase, you have "self-custody" — nobody can freeze or access your funds but you. That's the whole point of a wallet like Phantom or Solflare on Solana.
But self-custody only works if you're the *only* one who ever sees that phrase. The moment you type it into a website, a "support agent," or a random app, you've handed over custody — even if the wallet still shows your name on it.
No exchange, no dApp, no support team, no legitimate Solana project will ever need your seed phrase. There is no valid technical reason for them to ask.
A concrete example
Say you're using a Solana DEX to swap USDC for SOL. Here's what happens under the hood:
- The app builds a transaction (swap X USDC for Y SOL).
- Your wallet extension pops up and shows you the details.
- You approve it by signing with your private key, which never leaves your device.
- The signed transaction gets sent to the Solana network.
At no point does the app see your private key or seed phrase. It only ever sees a signed transaction. If any app instead shows you a text box asking you to "import your wallet" by pasting your 12 words, that's not how Solana wallets are supposed to work — it's a red flag, full stop.
The common mistake
The most common way people lose funds isn't a hack of Solana itself — it's a fake support chat. Someone messages you on Discord or Telegram claiming to be from a wallet provider or trading platform, says your wallet has "an issue," and asks you to "verify" by entering your seed phrase on a link they send. It looks legitimate, uses real logos, and creates urgency ("your funds are at risk, act now").
The moment you type your phrase into that link, your wallet is drained — usually within seconds, automatically, by a bot watching for new phrases.
The fix is simple: no one legitimate will ever ask for your seed phrase, under any circumstance. Not to "fix" an account, not to "verify" a trade, not to "unlock" a bonus. If you're asked, it's a scam — close the chat.
On MAPLUStrade
MAPLUStrade is built around this same principle: you keep custody, always. When you connect your wallet to swap tokens, MAPLUStrade never requests your seed phrase or private key — there's no field for it anywhere in the platform, and support will never ask for it either.
Every trade you make on MAPLUStrade is a transaction your wallet asks you to review and sign yourself. Use your wallet's built-in transaction preview to check what you're approving — token amounts, destination, and permissions — before confirming. If a pop-up ever asks for your seed phrase while using MAPLUStrade, it did not come from us; close it and check you're on the correct URL.
Quick self-check
- Would you type your seed phrase into a website to "verify" your wallet? You shouldn't — not even ours.
- Do you know the difference between signing a transaction and revealing a private key? One is normal, the other should never happen.
Recap
Your seed phrase and private key control everything in your wallet — no legitimate app or person will ever ask for them. On MAPLUStrade, you only ever sign transactions in your own wallet; custody never leaves your hands.
Risk note: This lesson is educational only and not financial advice — trading crypto carries risk, including the risk of losing your entire principal.