Short version: you should check connected sites regularly. Connected sites let dApps read your account address and request transactions. They cannot move funds without your signature, but approvals and signatures can be dangerous. I’ve been using MetaMask daily to connect to DEXes, staking UIs, and NFT marketplaces, and these checks saved me from several risky approvals.
Connected simply means the website can see your account address and ask MetaMask to prompt you for transactions or signatures. So, can a connected site hack you? No, not by mere connection. A site cannot send funds out of your wallet without an on-chain transaction you sign. But there are real risks:
In my experience, the biggest danger is approving token allowances you don’t understand. And yes, disconnecting a site does not revoke an allowance (more on that below).
Screenshot placeholder (extension connected sites):
This is the primary place to answer the search intent check connected sites MetaMask or metamask check if connected.
If you want to know from a dApp whether MetaMask is connected, run this in the page console (or build it into your app):
if (typeof window.ethereum !== 'undefined') {
ethereum.request({ method: 'eth_accounts' }).then(accounts => {
console.log('Connected accounts:', accounts);
});
}
If accounts is an empty array, MetaMask is not currently connected to that site (or the user has not approved access yet).
Mobile has the same concept but a slightly different path.
Screenshot placeholder (mobile connected sites):
For a mobile-specific walkthrough see the internal guide on connected-sites-mobile.
Disconnecting is easy but understand the effect. Steps above show where to remove a site. When you disconnect:
Step-by-step: open Connected sites -> locate domain -> Disconnect. If the dApp still shows you as connected, refresh the page and pick a different account (or re-open the tab).
If you want a guided walkthrough, check disconnect-and-remove-connected-sites.
Sometimes a dApp shows "wallet connection request pending MetaMask" and nothing happens. What then?
If a request is stuck and you never approved it, disconnect the site from Connected sites and clear the dApp's session (refresh or logout on the site). But remember: disconnecting a site that never completed a connection often just resets the UI; it does not affect on-chain allowances.
Disconnecting is not the same as revoking token approvals. A site you disconnected can still have an allowance granted on a token contract. To fully cut access:
But keep in mind: revoking requires a transaction (gas fees) on the relevant blockchain. If you see a suspicious approval, act quickly.
| Feature | Extension (desktop) | Mobile app |
|---|---|---|
| View connected sites | Yes (quick access) | Yes (in Settings) |
| Disconnect sites | Yes | Yes |
| Immediate prompt visibility | Generally faster (desktop) | Works well for WalletConnect and in-app browser |
| Convenience for daily dApp use | Good for multi-tab workflows | Best if you mostly use mobile dApps |
Who this software wallet is best for:
Who should look elsewhere:
Daily quick checklist I use:
Transparent testing so you can replicate:
To reproduce: run a local webpage that calls ethereum.request({ method: 'eth_requestAccounts' }), then follow the extension/mobile steps above to see the prompt and then inspect Connected sites.
Q: Is it safe to keep crypto in a hot wallet? A: Hot wallets trade security for convenience. Keep only what you use day-to-day in a hot wallet. Store long-term holdings in cold storage or a hardware wallet.
Q: How do I revoke token approvals? A: Disconnecting is not enough. Use an allowance-revoke tool or follow the step-by-step at token-approvals-and-revoke.
Q: What happens if I lose my phone? A: If you have your seed phrase, you can restore your wallet on a new device. See backup-and-recovery-seed-phrase and lost-phone-reset-recovery.
Checking connected sites MetaMask and disconnecting when you’re done is a small habit that reduces exposure. I believe a few minutes a week is worth it. Want deeper guidance? Read the walkthrough on connect-metamask-to-dapps, the guide for connected-sites-mobile, and the token safety tips at transaction-simulation-and-safety. For a focused walk-through on revoking allowances, open token-approvals-and-revoke.
If you only remember one thing: disconnect sites you no longer use, and revoke approvals you don't recognize. Simple. Effective. And it keeps your on-chain footprint smaller.