Connecting to dApps

How wallet connection works, what dApps can and cannot do, how to approve transactions, and how to disconnect.

Connecting Morsel to a dApp gives it read access to your public key. It does not give the dApp permission to move your funds — every transaction still requires your explicit approval inside Morsel.

The Connection Flow

  1. Visit a Cookie Chain or Solana dApp and tap Connect Wallet
  2. Select Morsel from the wallet list
  3. A Morsel popup appears showing the site requesting access
  4. Review the domain — make sure it matches the site you intended to visit
  5. Tap Connect to approve
Always verify the domain in the Morsel popup. Phishing sites copy the UI of real dApps but use a different URL. If the domain looks off, tap Reject.

What a Connected dApp Can Do

  • Read your public wallet address
  • Request your signature on transactions and messages
  • Know which network you are on

What a Connected dApp Cannot Do

  • Move funds without showing you an approval popup
  • Access your private key or seed phrase
  • Sign transactions silently in the background
  • Access other accounts you have not connected

Approving a Transaction

When a dApp wants to execute a transaction, Morsel opens an approval popup showing:

  • The site requesting the action
  • What the transaction does (token transfer, swap, NFT purchase, etc.)
  • The estimated network fee
  • The wallet address it will be sent from

Tap Approve to sign and broadcast the transaction, or Reject to cancel. The dApp cannot proceed without your approval.

Signing Messages

Some dApps ask you to sign a message instead of a transaction — typically to prove you own a wallet without spending gas. Common uses: login authentication, NFT allowlists, off-chain voting.

Message signing does not cost gas and cannot move funds. It only proves you control the wallet. Always read what you are signing before approving.

Viewing Connected dApps

  1. Open Morsel and go to Settings
  2. Tap Connected Sites
  3. You will see a list of every site that has active access to your wallet

Disconnecting a dApp

  1. Go to Settings → Connected Sites
  2. Find the dApp you want to remove
  3. Tap Disconnect
  4. The dApp can no longer read your public key until you reconnect

Disconnecting does not affect your funds or on-chain activity in any way. It only removes the site's read access to your wallet address.