The 20 Point Holder Security Checklist for Solana Tokens
How to use this list
Score yourself honestly and fix the gaps in order. No checklist makes a memecoin safe: tokens can fall to zero, and the QNT memecoin is independent of Quantinuum Ltd. This list covers only the custody side. For the market side, read QNT risk factors. Nothing here is financial advice.
A. Recovery phrase (1 to 5)
- Written by hand, offline. Trezor's guidance is to keep the seed offline and never store it digitally. See backup guide.
- No photos, screenshots, emails or cloud notes.
- Two copies in two places, readable and tested.
- Recovery tested with a small amount.
- If you use a passphrase or Shamir shares, each extra piece is backed up separately and documented for a trusted person.
B. Wallet and devices (6 to 10)
- Savings on a hardware wallet bought from the maker. See hardware wallets.
- Every address checked on the device screen before you send or share.
- Blind signing off unless you are doing one action you started yourself.
- A separate small hot wallet for new apps, never the same phrase as savings.
- Wallet apps installed only from official sites, with software and firmware updated.
C. Approvals and apps (11 to 14)
- Monthly approval review, following the routine.
- Old connected apps removed, remembering disconnecting is not revoking.
- Unlimited or unknown delegates revoked.
- Read every signing prompt, using the signing guide. If you cannot tell what it does, do not sign.
D. Scams and messages (15 to 17)
- Nobody gets your words, ever, including support. The FTC notes scammers pose as customer service to capture seed words.
- Unsolicited DMs, links and airdrops ignored. The FTC says free money promises are always fake. See the scams guide.
- No remote access for anyone claiming to help, per FBI guidance.
E. Accounts and phone (18 to 20)
- Authenticator app or security key on email and exchange accounts, not SMS alone. CISA ranks FIDO/WebAuthn strongest. See device hygiene.
- Carrier number lock or port-out protection requested, and your phone number not the only recovery path for email.
- A plan for loss: a note for family on where to start, no words in it, and a yearly review.
Scoring
| Score | Next step |
|---|---|
| 0 to 8 | Fix section A and E first. These stop most total losses. |
| 9 to 16 | Add the hardware wallet and approval routine. |
| 17 to 20 | Review again in a year, and after any life change. |
Three habits that tie the list together
Slow down. The FBI notes that scammers push victims to act fast, and nearly every item above is easier to follow when you pause before clicking or signing. Verify through a channel you chose. The FTC advises contacting a company with a phone number or website you already know is real, not the details in a message. Keep the blast radius small. Separate wallets, small test sends and monthly cleanups mean one mistake costs you one wallet, not everything. Put a reminder in your calendar for the monthly and yearly items, since habits that depend on memory tend to lapse.
If something goes wrong
Stop interacting, move remaining funds to a fresh wallet, revoke old approvals, and report at ReportFraud.ftc.gov and ic3.gov. Do not pay anyone offering recovery: the FBI says IC3 does not charge fees to recover funds. Pair this list with the first purchase checklist and risk management.
Sources and further reading
- FTC Consumer Advice: cryptocurrency and scams
- Trezor Learn: what is Shamir Backup
- CISA: implementing phishing-resistant MFA
- FBI IC3 alert I-041825-PSA
- Solana docs: revoke delegate
Reported as of 2026-10-09. Device support, menus and fees change, so check the vendor pages before relying on any detail. This is education, not financial advice, and nothing here predicts any price. The QNT memecoin is independent of Quantinuum Ltd, the real company.
Frequently asked questions
Which checklist item matters most?
Protecting the recovery phrase. Anyone who gets it can take the funds, according to Trezor's guidance.
Do I need all 20?
No. They are ordered by impact. Start with the recovery phrase and account items, then add the rest as your holdings grow.
Does following this make a memecoin safe?
No. It reduces custody risk only. Token price risk is separate, and this is not financial advice.
How often should I redo the checklist?
Yearly, and after changing phones, carriers or wallets.
Keep reading
- First Purchase Checklist: 12 Checks Before You Buy QNT
A 12 point checklist to run before your first QUANTUM (QNT) purchase: wallet, contract address, liquidity, fees, scams and risk. - How to Store QNT Safely: Wallets and Security
Learn how to keep your QNT tokens secure on Solana: choose a wallet you control, back up the seed phrase offline and avoid common ways people lose funds. - Memecoin Risk Management: Basic Rules to Protect Your Money
Simple, educational rules for managing risk when trading memecoins: sizing, fees, scams and emotions. Not financial advice. - Phishing, Fake Airdrops and Fake Support: Telegram and Discord Scams Explained
Regulator guidance on phishing and impersonation applied to crypto: fake airdrops, fake wallet support, recovery scams and what to do if you clicked.
All How to buy and stay safe guides | Back to top | Search the site
Main pages: What is QNT? | Token information | How to buy | FAQ