Skip to Content
DocumentationCrypto BasicsSigning & Approvals

Signing and approvals

A signature authorizes a specific request using your wallet’s key. Depending on the request, that can send funds, grant a contract permission to spend tokens, or sign a message. A familiar app name is not enough to tell these apart.

What to check

For a payment, check the network, asset, full recipient address, amount and fee. For a token approval, check the token contract, spender and allowance. An unlimited allowance can remain useful to the spender after the transaction that created it.

A message can also authorize actions. Read the request; do not assume that a message is harmless because it is not presented as a payment.

What clear signing means

Clear signing presents an understandable interpretation of the request on the signing device. The important questions are what the device checked and where the interpretation came from.

Kind of reviewWhat it tells youLimit
Native interpretationFirmware recognizes a supported operation and displays its fields.Recognition covers specific formats and operations.
Provider contextA named provider supplies an explanation.In the 7.15 provider contract this adds to baseline review; it is not KeepKey approval.
KeepKey-approved interpretationThe 7.16 contract checks certified authority and binding before supported interpretation can replace opaque review.It does not certify a smart contract as safe or guarantee the transaction’s outcome.
Raw or unverified reviewThe device cannot fully explain the request.A hash or hexadecimal data is not a human-readable explanation of every effect.

See release status for the distinction between working candidates and published firmware. Do not assume that every screen or dApp has the same coverage.

When to cancel

Cancel if the destination, amount, network or permission differs from your intention. Also cancel if the device cannot show enough information for you to understand what you are authorizing. Enabling an advanced signing option does not make an unknown request safe.

For practical screen checks, continue to Verifying Transactions. To understand fees and confirmation, read Transactions and Fees.

Last updated on