Reviewed September 10, 2026
Pause before every signature. Verify the site, device, network, account, recipient, asset, amount, fee, approval scope, and expected result. Never share a recovery phrase or private key.
At a glance
- A public address can be shared; a private key or recovery phrase must remain secret.
- A signature can authorize more than a transfer, including token approvals and contract actions.
- Self-custody replaces some counterparty risk with personal key and recovery responsibility.
- A hardware wallet protects keys from some online threats but cannot make a malicious request safe.
Step-by-step walkthrough
- Reach the application through a verified bookmark or independently confirmed domain.
- Confirm wallet account and network before reviewing the request.
- Verify recipient or contract address from a second trusted source.
- Read asset, amount, network fee, contract method, and token-approval limit.
- Use a small test transfer when operationally appropriate and understand that it does not prove later safety.
- Save the transaction hash and verify the result on the correct network.
A familiar interface asks for unlimited approval
The important question is what the signature authorizes.
| Signal | What it can mean | Important caveat |
|---|---|---|
| Correct logo and domain | Some identity checks passed. | A compromised interface can still create a bad request. |
| Unlimited token approval | The contract may spend more than the immediate amount. | Scope persists until changed or revoked. |
| Hardware-wallet confirmation | Keys stayed on the device. | The device signs the details the user approves. |
Common mistakes and edge cases
- Sharing a recovery phrase with a supposed support agent.
- Reading only the wallet popup headline instead of the transaction details.
- Assuming a successful small transfer validates every later address or contract.
- Leaving unnecessary approvals active indefinitely.
Reusable checklist
Checklist selections are temporary and are not transmitted or treated as a safety score.