WalletConnect is a method to make transactions via Web3 services on your browser, while keeping your private keys securely in a wallet you already trust.
How to connect
- If you're using the Koala Wallet Browser Extension, start by opening it in its own tab. Unless extensions are in a tab, they will be automatically closed after you navigate out of them. This step is not needed on the Mobile version.
- Open a Web3 website and look for the button to connect your wallet and choose "WalletConnect".
- Go to Koala Wallet's "Eco" section, then press the "WalletConnect" button at the top right hand corner of the screen
- If you're using the Koala Wallet Browser Extension, using a browser on the same mobile device as Koala Wallet or in case of camera issues, press the button to copy the QR code to the clipboard and press "Paste" in Koala Wallet.
If you're using Koala Wallet on mobile and opening the dApp on a different device, press the "Scan" button and scan the code - If you have multiple wallets of the same blockchain, or multiple blockchains supported by the dApp, select which one you want to connect with, then accept the connection on Koala Wallet
- Authenticate in Koala Wallet with your PIN or biometric
- Done, the website will automatically load your address and detect any supported assets.
How to send NFTs, make swaps, bids etc
- Use the website's interface to initiate a swap, transfer, auction etc.
- The intent will be communicated to Koala Wallet where you will see a confirmation popup previewing the smart contract's actions.
- Review and confirm the actions, and authenticate with your PIN or biometric.
- The transaction will be signed and sent back to the website to be finalized.
Security considerations
This is a secure feature in the sense that it does not pose risk to your private keys. The website connects to your wallet app, the app signs transactions after your approval and transmits only the signature back to the website. Your private keys never leave your device.
Be aware that the website controls what information is being sent for your app to sign. Only connect your wallet to websites that you trust. As seen on the image above, the dApp can include a message describing each operation, along with the smart contract's method that will be executed, and what data will be used in each method. The infinite possibilities of smart contracts make it infeasible to have custom descriptions for every situation. The low level data is shown so you can verify the execution yourself.