Keep the recovery boundary clear

A public address is safe to share for receiving funds. A private key or recovery secret gives control of the account and must stay private. Store an offline recovery copy and understand how to restore it before relying on a single browser or device.

A local password unlocks protected key material. A PIN or device prompt can approve an action within a supported signing session. Neither can recover a lost private key on its own.

Read what you approve

Before a transfer, check the network, full destination, amount, asset, and fee. For token approvals, check the spender and allowance. For a message signature, check the requesting site, account, purpose, and expiry. A request to sign is not always a transfer, but it can still authorize an important action.

The Grape wallet separates its signing surface from application pages. Generated Daxly previews do not get direct access to the signer. Mainnet deployment flows require the applicable checks and customer approval.

When an account does not match

If a coin’s recorded holder differs from the account open on your device, do not try to bypass the mismatch. Open the account that owns the asset or restore its recovery material through the official wallet. Seeing a project in Daxly is not proof that the device has its owner’s signing key.

Support should never need your private key. Use the official links and verify unexpected prompts before approving them.