Is it safe to connect your wallet to a chat app?
Read any wallet popup in ten seconds: the three prompt types, the four lines that matter, and what a chat app needs from your wallet.
Connecting a wallet hands a site one thing: your public address. Nothing leaves the wallet until you approve a second prompt, so the decision that matters arrives after the connection, in the popup asking for a signature. The question “is it safe to connect wallet to this site” comes up before every airdrop claim, every chart page and every new app, and one routine answers all of them: name the prompt type, read four lines, confirm you started the request. The worked example here is Cherry (cherry.fun), a wallet-to-wallet messenger and community app for crypto where signing in is a message signature with no gas and no custody.
Before you start
- Know which wallet you are about to connect, and which account is selected inside it. Expensive approvals are usually signed by the wallet holding everything.
- Keep a second wallet with a small balance for claim pages, new apps and anything you reached through a link someone sent you.
- Take one rule as settled: no honest app needs your seed phrase. Phantom’s help center says its support will never DM you or ask for your Secret Recovery Phrase, and a phrase typed into any site ends that wallet.
Step 1: Name the prompt type
Every wallet popup is one of three things, and sorting it decides most of the question.
| Prompt | What it does | What it can cost |
|---|---|---|
| A message to sign | Proves you control the address; nothing is sent to the chain | Nothing |
| A transfer or a swap | Moves a stated amount out of your wallet once, on approval | That amount, plus the network fee |
| A spending approval | Lets a program move that token for you later, up to a limit, until you revoke it | Your balance of that token, on any later day |
The third row is where the money goes. MetaMask’s explainer on token approvals describes an unlimited approval as one where the contract can reach your entire balance of that token “now and in the future, without ever needing another approval”, and says it stays active until manually revoked. Solana has the same shape under different names: the Token Program’s approve instruction sets a delegate on your token account with an approved amount, and a revoke instruction clears it.
You have finished this step when you can name the row without scrolling the popup.
Step 2: Read the four lines that matter
Wallet popups print technical detail beside the few facts that decide anything. Find these four.
- The site. Compare its spelling character by character with the site you meant to open. Sign In With Solana carries the domain inside the signed message for this reason; Phantom says it can examine that domain to judge a site’s legitimacy or flag suspicious activity.
- The account. Confirm the address in the popup is the one you meant to use, not the one left connected from last week.
- The token and the amount. A number longer than your balance, or a word standing in for all of it, is a stop.
- The other side. A transfer names where the tokens go; an approval names the program that gains the permission. An unfamiliar name on a page that is selling you nothing is a stop.
You know it worked when you can state in one sentence what changes in your wallet if you press approve.
Step 3: Confirm you started the request
A signature prompt you did not open is a reject. Every request should follow something you pressed a moment ago: connect, buy, claim, sign in. Prompts that arrive during a redirect, surface when an idle tab regains focus, or stack two and three deep after one click belong to a script working through a list. Close the tab, type the site’s address yourself, and try the action again.
What a chat app actually needs from your wallet
Your address, plus one signature proving the address is yours. Together they give a chat app an account to attach messages to and a way to check what you hold when a gated room asks. Neither moves a token. A messenger that wants a transfer, a spending approval or a network fee before you have sent a message is asking for more than its job requires, and that disproportion is the tell.
What Cherry asks you to sign
These are the prompts Cherry puts in front of a member, and what each one does.
- Signing in: one message. The web app’s screen is headed “Secure Authentication” and tells you to “Sign a message with your wallet to verify ownership and start your session” before the “Sign & Authenticate” button. Your wallet shows the site, your address, a one-line statement and a one-time code with a timestamp. Nothing reaches the chain and there is no network fee.
- Reading encrypted DMs: a second one-time message signature, which derives your encryption keys from the wallet. Your private key never leaves the wallet, and no phone number, email or KYC appears anywhere in that identity .
- Swapping from a chat: one transaction per swap, signed at the moment you swap, with the amount in front of you. There is no standing permission behind trading in chat , and Cherry never holds the funds.
- Joining a paid group: one transaction, with membership starting when it confirms on-chain.
- A recurring USDC membership: the one standing authorization Cherry uses. You authorize a single plan, a fixed amount for a fixed period in one group, and each period is pulled against that plan and nothing else. A price change creates a new plan and leaves your terms untouched. The rows sit in your profile under “Subscriptions”, where “Cancel subscription” holds your access until the paid period ends, as paid communities and channels sets out.
- An OTC trade in the mobile app: both sides fund an on-chain escrow, the program settles when both legs are funded, and a deal that passes its expiry refunds the sender. Cherry is not a counterparty and takes no fee, which is the point of OTC escrow .
Nothing on that list asks for an open-ended permission over a token balance, and nothing on it happens without a prompt you started.
Red flags that end the check early
- A verify link arriving by DM. Real gating reads the chain when you join a room; see how to tell an official crypto group from a copy for the rest of that pattern.
- Any request for a seed phrase, private key or recovery file, however worded, including a “validation” or “sync” screen.
- A spending approval you did not start, especially one attached to a claim, a mint or a “migration”.
- A domain one character off the real one, or a link opened from an unsolicited message. Phantom’s advice there is to avoid clicking and to check addresses carefully for misspellings and unusual domains.
- A page that keeps reopening the same prompt after you reject it once.
What to do after a bad signature
Move first, investigate later. Send your tokens and NFTs to a wallet created fresh on a device you trust, liquid balances first, then retire the old wallet for good: keep using it and you keep whatever permission you granted. Revoke the delegate on any token account that still holds something, knowing the limit MetaMask states directly: revoking removes a contract’s future ability to move the token and cannot reverse a transfer that already happened. If the seed phrase itself was typed anywhere, no revocation helps.
Troubleshooting
Your wallet shows a transaction where you expected a message. On Cherry’s web app that is hardware-wallet mode, set by the checkbox “Using a Ledger hardware wallet?”, the path for devices that do not sign off-chain messages. The screen’s own note explains it: you approve a transaction that can never be sent to the network and costs nothing, and your wallet may warn that it cannot estimate balance changes. Untick the box if you are not on a Ledger.
No popup appears. The sign-in screen waits with “Check your wallet for signature request” and offers a reset; inside a wallet’s own browser, reopening the tab is faster.
The popup names an address you do not recognise. Reject it, disconnect from the site, and check which account the wallet has selected before trying again.
Sign in at chat.cherry.fun and watch what your wallet is asked for: one message, and nothing else until you decide otherwise.
Related guides
- Are crypto mini apps safe? applies the same reading to apps that run inside a chat.
- How to spot a fake airdrop covers the claim pages this checklist was built for.
- What your wallet says about you explains what an address alone reveals to an app.
FAQ
Can connecting a wallet drain it?
Connecting on its own shares your public address and cannot move anything. A wallet empties only after someone approves a prompt that moves tokens or grants a program permission to move them, or after a seed phrase is typed into a site. The connection is not the risk; the next popup is.
Is signing a message the same as approving a transaction?
No. A message signature proves you control an address and sends nothing to the chain, so it costs no network fee and moves no tokens. A transaction either transfers an amount you can see or hands a program a standing permission over one of your tokens.
Is it safe to connect a wallet for an airdrop?
Only if you reached the claim page yourself and the prompt is a message to sign. A claim that asks for a transfer, a spending approval or a seed phrase is not a claim. Claiming from a wallet that holds little keeps the answer cheap either way.
What does connecting your wallet do?
It gives the site your public address and the right to ask you for signatures. Everything after that needs a separate approval from you, which is why reading each popup matters more than the connection itself.
Can a website drain my wallet without me signing anything?
Not on its own. It needs your signature on a transfer or a spending approval, or your seed phrase. This is why a page that opens signature prompts you did not ask for deserves a closed tab.
Sources
Try Cherry
Sign in with a wallet, DM any address, and join token-gated and paid communities. No phone number, email, or KYC.