Wallet sign-in
Your Solana wallet is your account. Signing in is a signed message, never a transaction.
Connect a wallet
Connect wallet lists the Solana wallets that follow the Wallet Standard, browser extensions and mobile wallets alike. Any Wallet Standard wallet connects.
The sign-in message
Signing in uses Sign In With Solana. wabi issues a fresh message for each sign-in, and your wallet signs it:
| Field | Value |
|---|---|
| Domain | wabi.is |
| URI | https://wabi.is |
| Statement | Sign in to wabi |
| Version | 1 |
| Chain ID | the Solana chain wabi runs on |
| Nonce | 16 random bytes, in base58 |
| Issued at | the time wabi issued the message |
| Expiration time | five minutes later |
- The message is valid for 5 minutes and works once. wabi refuses a signed message it has already accepted, even inside its window.
- Wallets that support
solana:signInsign the message directly. Others sign the same text withsignMessage. - Signing is a message, not a transaction. There is no fee, and nothing in it can move funds.
Your session
wabi checks the domain, the nonce and the times, and verifies the Ed25519 signature against your address. On your first sign-in it creates your account. It then sets an httpOnly session cookie that lasts 30 days. Signing out ends the session.
Your wallet is your account
The wallet you sign in with is your account. Your projects, services, plan and stake all belong to it. wabi never asks for or holds its private key. An account stays with the wallet that created it and can't be moved to another wallet.
An email address is optional. wabi uses it for notices: your term's end approaching (7, 3 and 1 days before), maintenance windows, and other service notices. A new address gets a verification link, and notices go to it once you open that link. You can change or remove it in the dashboard's settings.
Other messages your wallet signs
Besides signing in, your wallet signs three kinds of message on wabi. Each is signMessage over plain UTF-8 text, signed with your wallet's own key. None is a transaction, and none can move funds.
| Message | First line | When | What it's for |
|---|---|---|---|
| Variables manifest | wabi zkenv manifest v1 | each change to a service's variables | approves one version of them (details) |
| Owner key | wabi zkenv owner key v1 | once per session, the first time you save variables or use Reveal with wallet | derives the key that opens your read-back copies (details) |
| Keyless account | wabi keyless account v1 | turning keyless on for a service, and signing its policy changes, revokes and withdrawals | derives that service's salt and policy key (details) |
The transactions wabi asks your wallet to sign are payments and staking. See Plans and payment and Staking.