A wallet connection lets a Cardano application communicate with your wallet. It can be a useful first step for exploring decentralized applications, but connecting is not a reason to approve every request that follows. Slow down, check the site, and understand what your wallet is asking you to authorize.
This is general safety guidance, not a guarantee that any particular dApp or transaction is safe. Product capabilities and interfaces change; check the official Lace resources for current details.
A connection is not a blank check
A dApp may request a connection so it can identify an address or prepare a transaction for you to review. A connection by itself is different from signing or submitting a transaction. Read the prompt in your wallet and pay attention when an application asks for additional permissions or requests a signature.
Never treat a familiar-looking wallet window as proof that the transaction is harmless. The transaction details and the source that initiated them both matter.
Before you connect
- Verify the application’s domain character by character, ideally from a trusted project source.
- Look for independent, current information about the application and its team.
- Be suspicious of urgency, giveaway claims, unexpected support chats, or messages asking you to connect immediately.
- Use a separate wallet for experimentation if you understand how to create and manage one safely.
- Keep your browser and wallet software current, and do not install unofficial extensions to fix a problem.
Read each request in context
Before signing or submitting, inspect what the wallet displays. Check which assets are involved, what the transaction changes, and whether the action fits what you intended to do on the site. Some technical data can be difficult to interpret; if you cannot establish what a request will do, do not approve it until you have verified the details through trustworthy documentation.
A signature is not always just a harmless “login.” Requests can have different purposes, and an unfamiliar request deserves extra caution. Never enter or reveal your recovery phrase to connect a wallet.
When something looks wrong
Close the page if the domain seems off, the wallet prompt is unexpected, or a message claims your funds are at risk unless you act immediately. Navigate to official resources independently rather than following a link in a message. If you believe your credentials have been exposed, consult current official wallet guidance from a trusted device and act promptly; do not rely on an unsolicited “recovery service.”
Leave deliberately
When you are finished, use the wallet or application’s current disconnect controls where available. Understand that disconnecting a site is different from revoking an on-chain permission, if one was granted. The terms and tools vary by application and can change, so check trusted current documentation for the particular connection.
A careful connection routine does not guarantee safety, but it can help you spot common pressure tactics and unclear requests before you approve them. Verify first, review every prompt, and give yourself permission to walk away.
For official product details, visit Lace directly. Lace Notes is an independent publication and does not endorse or audit third-party dApps.