Phantom, Solflare, Backpack or a hardware pairing: pick by what you defend against, checked against solana.com's own wallet directory on 15 October 2026.
Check a Trezor Suite installer with GPG before you run it: the v26.9.2 filenames, the SatoshiLabs key fingerprint, and what a good signature cannot catch.
Yes, if it was strong and never leaked with the seed. The BIP-39 mechanism, which theft scenarios a Trezor passphrase survives, and the ones it does not.
Sender checks failed twice: mailing@trezor.io via Brevo, then help@trezor.io auto-replies. The checks that survive, in one table, plus Trezor's own rules.
The STM32 entropy alert is phishing sent through Trezor's breached Brevo account on 9 September. What BitBox and CoinTracking received, and what to do.