# Signing and approvals

A signature authorizes a specific request using your wallet's key. Depending on the request, that can send funds, grant a contract permission to spend tokens, or sign a message. A familiar app name is not enough to tell these apart.

## What to check

For a payment, check the network, asset, full recipient address, amount and fee. For a token approval, check the token contract, spender and allowance. An unlimited allowance can remain useful to the spender after the transaction that created it.

A message can also authorize actions. Read the request; do not assume that a message is harmless because it is not presented as a payment.

## What clear signing means

Clear signing presents an understandable interpretation of the request on the signing device. The important questions are what the device checked and where the interpretation came from.

| Kind of review | What it tells you | Limit |
|---|---|---|
| Native interpretation | Firmware recognizes a supported operation and displays its fields. | Recognition covers specific formats and operations. |
| Provider context | A named provider supplies an explanation. | In the 7.15 provider contract this adds to baseline review; it is not KeepKey approval. |
| KeepKey-approved interpretation | The 7.16 contract checks certified authority and binding before supported interpretation can replace opaque review. | It does not certify a smart contract as safe or guarantee the transaction's outcome. |
| Raw or unverified review | The device cannot fully explain the request. | A hash or hexadecimal data is not a human-readable explanation of every effect. |

See [release status](/docs/firmware/release-status) for the distinction between working candidates and published firmware. Do not assume that every screen or dApp has the same coverage.

## When to cancel

Cancel if the destination, amount, network or permission differs from your intention. Also cancel if the device cannot show enough information for you to understand what you are authorizing. Enabling an advanced signing option does not make an unknown request safe.

For practical screen checks, continue to [Verifying Transactions](/docs/desktop/verify-on-device). To understand fees and confirmation, read [Transactions and Fees](/docs/learn/transactions-and-fees).