Use DApps safely

A DApp is an app that runs on a blockchain, such as a decentralized exchange or a lending protocol. Open one from the Discover tab and FxWallet connects to it directly; for a DApp in your computer's browser, use WalletConnect. FxWallet lists DApps for your reference, but it doesn't run or endorse them and isn't liable for losses from using them, so check each one before you sign anything.

Before you connect or sign

• Check the website's address, letter by letter. Fake DApps copy the names and designs of real ones, and links in messages, replies, airdrop posts and search ads often lead to them. FxWallet's browser shows the page's title at the top, not its address: to see the address, tap ⋯ → Copy Link and paste it somewhere you can read it. Open a DApp from the project's official website, or add it to Discover yourself (see below).
• Never enter your mnemonic phrase or private key. A DApp never needs them, so a site that asks for either is a scam.
• Read each request: what you're signing, the network and the fee. See What is a signature request?
• Be careful with approvals. An unlimited approval lets the DApp's contract spend all of a token. See Token approvals.
• Heed FxWallet's warnings. If it shows High risk website alert for a site, tap Go Back. For a site it doesn't know, it shows Redirecting notice. Don't tick Do not show again for this website unless you trust the site for good: FxWallet then stops checking it, even if it's flagged later. Before you confirm a transaction, it warns you when a contract "has been identified as risky" or is "uncatalogued". A site or a request without a warning isn't necessarily safe.

If a DApp asks to add or switch networks

A DApp can switch FxWallet to another network that's already in your wallet, without asking you. That moves nothing, but check the network on every request you confirm.

A DApp you open in Discover can also ask to add a network that FxWallet doesn't have: FxWallet asks "Wallet has not added chain …, add and continue?". Add it only if it's a network you meant to use. The DApp supplies the network's RPC URL, which can show you balances that aren't real. See Fake balances on a custom network. DApps connected with WalletConnect can't add networks.

Add a DApp that isn't listed

In the Discover tab, open Explore, tap +, and enter the DApp's name and URL. Take the URL from the project's official website or documentation, not from a search ad or a message: phishing sites buy ads and use addresses that look almost the same.