Self-custody wallet guide · 4 min read
Understand recovery phrases, cold wallets and dapp permissions—then use a read-only public-address tool inside the guide.
Remember these first
The essentials
The first four checks explain what your wallet can protect—and what still depends on your judgment.
A recovery phrase can recreate a wallet, and a private key can authorize actions for an account. Never type either into a website, send it to “support,” save it in a cloud note, or store it as a screenshot. A public-address checker does not need them.
A public address is different: it cannot sign, but its blockchain activity is public.
A cold wallet keeps signing keys offline; a hardware wallet is a common example. It can reduce key-extraction risk, but a wrong recipient, unfamiliar contract or excessive approval can still take effect if you confirm it on the device.
Connecting usually lets a dapp see your public address. Signing confirms a message or transaction. A token approval gives a contract a recorded spending allowance.
Disconnecting a site does not cancel an approval already recorded onchain.
A risky page may imitate a familiar project, or a previously legitimate site may be compromised. HTTPS, a logo and polished design are not proof of safety. Check the domain, network, contract, asset, recipient and allowance.
Put the guide into practice · optional tool
No wallet connection, signature or transaction. Results are limited to the listed networks, token standards and data sources.
Independent educational resource and public-data tool. It is not a wallet, exchange, recovery service or safety certification.
From evidence to action
These final three checks help you interpret an allowance without turning a data point into a verdict.
Some dapps request the maximum token allowance to avoid repeated approvals. The permission may remain until it is changed or revoked. This is not proof of wrongdoing; confirm that you recognize and still use the spender.
A signature is not always a transfer, but it may still grant permission or have onchain consequences. If the request does not match what you intended, cancel and verify through an independent official source.
Review every network you use after trying a new dapp, when you stop using one and as a regular habit. Unfamiliar does not mean malicious, and identified does not mean safe. Revoking is a separate onchain action that normally requires a network fee.
The tool organizes records returned by the named source. It does not inspect every token standard, prove a wallet is safe, or decide whether an approval should remain.
Original references
Use official documentation and reputable explorers when a permission or request needs more context.
A public address does not provide signing authority. It does expose public blockchain activity linked to that address, so do not treat it as private information.
No. It means the listed source does not clearly associate the spender with a named project. Review the address, transaction and dapp you used at that time.
No. This page is intentionally read-only. Changing or revoking an approval is a separate onchain action that should be reviewed in a trusted wallet or explorer.