Skip to main content

Using Tezos applications (dApps)

Decentralized applications (dApps) are programs that, at their core, run independently, without any person or group in charge of them. These applications are:

  • Transparent, because the core of the application (what developers call the backend application) runs on Tezos, and data on Tezos is public, although this data can be very complicated
  • Persistent, because the backend applications cannot be shut down or blocked
  • Pseudonymous, because Tezos accounts are not linked to any public information about users and therefore users can use these applications anonymously
  • Secure, because users are authenticated through the private keys in their wallet applications instead of passwords

dApps can do almost anything that ordinary web applications can do and more. In particular, Tezos dApps can:

  • Use your Tezos account as your authentication to the application and save data that is tied to that account
  • Accept tez tokens as payment like you might use a credit card online
  • Perform tasks on Tezos on your behalf, like writing data and transferring tokens

However, you must be aware that most dApps use ordinary non-decentralized web applications as the user interface. These web applications have many of the same drawbacks as any web application. For example, malicious users can put up impostor web pages that can steal your information.

For an example of a Tezos dApp, see Staking.

Using dApps safely​

Like any other web application, you must interact with dApps with care. Here are some safety tips:

  • Verify that the application is authentic before using it.

    For example, make sure that the URL is correct; instead of clicking a link in an email or on social media, type the address of the application into a web browser manually to ensure that you are not on an impostor site. Beware of social engineering tactics that may try to get you to use fraudulent dApps by making promises that are too good to be true or tricking you into giving them your private key or wallet recovery information. You can also check user reviews of applications or verify on social media that other users are using the dApp.

  • Examine all actions that a dApp takes on your behalf before signing them in your wallet.

    For example, a malicious e-commerce site could offer to sell you something for 10 tez but send a transaction to your wallet for 100 tez. If you don't review the transaction in your wallet application carefully and approve it without seeing the mistake, it's unlikely that you can get your tez back. You can also view the transaction fees in your wallet before approving the transaction.

  • Use a secure wallet and manage your wallet information carefully.

    Consider using a hardware wallet for the best security. Whether you use a hardware wallet or software wallet, follow its instructions carefully to ensure that your private key and recovery information are not exposed when you use the wallet.

  • Verify transactions after they complete.

    Many wallets show the hash of transactions that dApps create on your behalf. You can copy this hash and look it up on a block explorer to see its details.

  • Use the correct account with a dApp.

    dApps may not provide a way to change accounts like traditional web applications may allow you to change the email address that you use to log in to the site. Therefore, you must be sure to connect to the dApp with the correct account.

Last updated on