1. Connect
Connecting shares your public wallet address with the site, a bit like telling a shop your account number. It cannot move your funds by itself. Still, only connect to sites you trust, because what comes next matters.
2. Switch network
A Base app may ask to switch your wallet to Base (chain ID 8453). That is normal and safe.
3. Sign a message
Some sites ask you to sign a plain text message to prove the wallet is yours, for example to log in or link a game account. A readable message that mentions the site is normal. Be careful with messages full of unreadable data or anything called a "permit", which can approve spending of your tokens.
4. Approve a token
Before a swap can sell a token for you, the swap contract needs permission to move it. This approval is normal for swaps, but check two things: the contract is the real swap, and the amount is what you meant. Unlimited approvals are convenient but riskier.
5. Confirm a transaction
This is the action itself: a swap, a transfer or a mint. Your wallet shows what will leave your wallet and the fee. If what you see does not match what you clicked, reject it.
Red flags
- A site asking for your recovery phrase. Always a scam.
- An approval for a token you were not trying to use.
- A "claim" that asks you to sign or pay before you get anything.
- Pressure: countdowns, "last chance", "only 5 spots left".
Good habits
- Bookmark the sites you use instead of clicking links.
- Keep a separate wallet with only small amounts for trying new apps.
- Check and remove old approvals now and then.
- Disconnect sites you no longer use in your wallet settings.