Your wallet is one of the most important security checkpoints when using a blockchain application.
A website can prepare a transaction, but you should understand what you are approving before signing it.
What does signing mean?
A blockchain wallet uses your private cryptographic keys to authorize actions.
You should never give a website your seed phrase or private key.
Instead, compatible applications request signatures through your wallet.
Why review the transaction?
Blockchain actions can move funds or permanently change token settings.
Examples include:
- Sending SOL.
- Creating a token.
- Revoking Mint Authority.
- Revoking Freeze Authority.
- Updating metadata.
- Making metadata immutable.
Some of these actions cannot be reversed.
What should you check?
Before approving a transaction, verify as much information as your wallet provides.
Pay particular attention to:
- The website you are using.
- The connected wallet address.
- The Solana network.
- The amount of SOL involved.
- The action you intended to perform.
- Unexpected warnings or instructions.
If something does not match what you expected, reject the transaction and investigate first.
Never share your seed phrase
A legitimate wallet connection should not require you to type your seed phrase into ForgeMyToken or another ordinary dApp website.
Your recovery phrase and private key should remain private.
Slow down for permanent actions
Authority revocations and immutable metadata changes deserve extra attention because they are intentionally difficult or impossible to reverse.
ForgeMyToken shows the selected action before asking the connected wallet to approve supported transactions, but the final decision to sign always remains with the wallet owner.