Safe browsing habits

Your security is only as strong as the environment you operate in. Even if you follow every other safety rule, a compromised browser or a careless click can undo your efforts. Safe browsing is the final protective layer.

​

Essential habits

• Always bookmark the official addresses of the decentralized apps you use and open them only through those bookmarks, never via search results, which can push sponsored phishing links to the top of the results page.
• Keep your browser and Jupiter Wallet updated. Security patches are released regularly and protect against known vulnerabilities. The extension updates itself; see Updates to check manually.
• Only install browser extensions from verified publishers with a significant number of users and positive reviews. Malicious wallet extensions are a common attack vector. The only official Jupiter Wallet is the Chrome Web Store listing published by [email protected].
• Avoid onchain activity on public Wi-Fi or shared computers. If you must, never save credentials or leave sessions open, and lock your wallet when you are done.
• Use a dedicated browser profile for crypto activity, one that has no other extensions installed and is not connected to your personal accounts.

​

Using Jupiter Wallet safely

Jupiter Wallet includes built-in protections that make safe browsing easier:

• Risk warnings: when a site asks you to approve a transaction, Jupiter Wallet has it scanned by Blockaid and shows a warning if it looks risky or malicious. Check the site and the balance changes before you approve. Approvals on jup.ag and other dApps the wallet trusts are not scanned. See Risk warnings.
• Transaction Protection: when a malicious browser extension slips a hidden transfer to a known malicious address into a transaction, the wallet filters it out before the transaction is submitted, on any website. See Transaction Protection.
• MEV protection: swaps you make in Jupiter Wallet route through Jupiter Ultra, which submits them privately. This reduces the risk of front-running; nothing can remove it entirely.
• Auto-lock: the extension locks itself after the delay you choose, so an unattended computer cannot become a point of vulnerability. The setting also offers Never: pick a short delay on a computer others can use. See Locking the wallet.
• Auto-Approve: off by default. If you turn it on for a site (Jupiter or Meteora), the wallet signs that site’s transactions without asking you. Leave it off if you want to review every transaction. See Auto-Approve.

For users holding significant assets, a hardware wallet adds a strong layer of protection: your private keys stay on the device, and you approve each transaction on it while using Jupiter Wallet. Ledger, Keystone and Trezor are supported, and the features available vary by device; see Hardware wallets.

​

Go deeper