View Connected Sites on MetaMask Mobile — Manage dApp Permissions
Quick overview: what "connected sites" means
When a dApp asks your wallet to "connect", it gets a record linking your account address to that site. That connection lets the dApp ask for signatures, present balances, and request token approvals. Connected sites are not the same as token approvals (they don't themselves allow token transfers). But a connected site can prompt you to sign an approval — so managing connections is an early line of defense.
Why check them? Because some dApps persist long-lived connections you no longer use. And because old connections are a surface attackers can exploit (phishing pop-ups, malicious UX). Short answer: review connections periodically.
How to view connected sites on MetaMask mobile (step-by-step)
Below are the steps I used repeatedly while testing (iOS and Android). Follow them to see exactly which sites your mobile wallet has an active connection with.
- Open the MetaMask mobile app on your phone. (If you haven't installed it yet, see the mobile setup guide: [/install-metamask-mobile].)
- Tap the account avatar or the hamburger menu in the top-left corner to open the side menu.
- Choose "Settings."
- Scroll to "Security & Privacy" and tap it.
- Tap "Connected Sites." This opens the list of websites and dApps your wallet is currently connected to.
- Tap an entry to see the connected address and the option to disconnect.
If you prefer a screenshot guide, here's a placeholder image showing a typical list view.
That sequence answers the common searches: "how to view connected sites on metamask mobile", "how to check connected sites on metamask mobile", and "how to see connected sites on metamask mobile." Use it whenever you've used a dApp recently.
How to check MetaMask connected sites on mobile (WalletConnect vs in-app browser)
Connections created through the in-app browser appear in the Connected Sites list. But what about WalletConnect sessions? WalletConnect sessions are recorded separately and sometimes surfaced in the app under a WalletConnect section. If you used WalletConnect to connect a desktop site to your mobile wallet, check:
- The app's WalletConnect session list (often under Settings or the in-app browser menu).
- The active sessions inside the site you connected (some dApps show active sessions in their own UI).
Pro tip: if you can't find a WalletConnect session in the app, open the dApp that requested the connection and see whether it shows your wallet as connected (and gives a disconnect button). If unsure, revoke from the wallet side (next section) and double-check the dApp.
(If you use WalletConnect a lot, see our deeper notes on mobile sessions here: [/walletconnect-and-mobile-dapps].)
How to disconnect and how to remove connections on MetaMask mobile
Want to know how to disconnect sites MetaMask mobile? Or how to remove connections MetaMask mobile? Here's the short recipe.
- Open Settings → Security & Privacy → Connected Sites.
- Tap the dApp entry you want to remove.
- Choose "Disconnect" or "Remove" (the exact label depends on app version).
- Confirm the action.
If the connection was created through WalletConnect, find the WalletConnect session list and end the session there. That severs the handshake.
And if a dApp keeps prompting after you disconnect, clear the in-app browser cache (in Settings) and try again.
For token allowance revocations (a separate but related step), visit your token approvals page and revoke unlimited approvals. See the step-by-step guide here: [/token-approvals-and-revoke].
Hands-on testing methodology (replicate these steps)
Transparency: I tested this flow on both an iPhone and an Android phone using the mobile app available from the official app stores during 2024, with two test accounts.
My reproducible test steps:
- Create or import a throwaway account with a small testnet balance.
- Connect to a harmless test dApp (or a widely used public dApp) via the in-app browser and via WalletConnect from a desktop dApp.
- Perform a signature-only action (not a token transfer) so the dApp registers as "connected."
- Open Settings → Security & Privacy → Connected Sites and confirm the dApp appears.
- Disconnect from the app and verify the dApp can no longer read the address (open the dApp again).
Why test on testnets? Because you can repeat everything without risking funds. If you want screenshots, reproduce the steps, use a throwaway account, and take photos of your screen (or use the phone's screenshot function).
Practical tips and safety checklist
- Check connections monthly if you use many dApps. Short sessions reduce exposure.
- Review token approvals separately. Disconnecting a site doesn't automatically revoke token allowances. (See [/token-approvals-and-revoke].)
- Watch for misleading domain names (typo-squatted sites). If a site looks off, disconnect immediately.
- If you lose your phone, follow the recovery steps here: [/backup-and-recovery-seed-phrase]. And for daily safety habits, see [/security-and-safety].
But remember: disconnecting is a privacy step, not a full security control. If you approved an unlimited token allowance earlier, the attacker could still move funds until you revoke.
Quick comparison: MetaMask mobile vs extension vs hardware+mobile
| Feature |
MetaMask mobile |
Browser extension |
Hardware wallet + mobile |
| View connected sites list |
Yes (in app) |
Yes (in settings) |
Depends on companion app |
| Manage WalletConnect sessions |
Yes (app) |
Limited |
Yes (via app) |
| In-app dApp browser |
Yes |
No |
No (usually) |
| Disconnect without revoking approvals |
Yes |
Yes |
Yes |
| Best for on-the-go use |
Good |
Not applicable |
Requires hardware device |
This table helps decide where to act first when you notice suspicious activity.
Who MetaMask mobile is for — and who should look elsewhere
Who it's for:
- Users who regularly interact with DeFi on mobile and want an in-app browser for quick dApp connections.
- People managing multiple EVM-compatible accounts and L2s on the go.
Who should look elsewhere:
- Users holding large balances who want maximum safety should pair mobile use with a hardware wallet (see [/integrate-hardware-ledger-trezor]).
- If you only use desktop dApps and want fewer mobile features, the browser extension or a hardware signer may fit better.
I use the mobile app daily for small swaps and checks. But when I move large amounts, I prefer a hardware signer. That's just practical.
FAQ
Q: Is it safe to keep crypto in a hot wallet on my phone?
A: Hot wallets trade convenience for some exposure. Keep small-to-medium balances there for daily use. For larger holdings, use hardware keys and store the seed phrase offline. See more on daily practices: [/daily-security-practices].
Q: How do I revoke token approvals if I already approved a malicious contract?
A: Disconnecting a site doesn't revoke token allowances. Use a token-approval revocation tool (linked guide: [/token-approvals-and-revoke]) and revoke any unlimited allowances immediately.
Q: What happens if I lose my phone?
A: If you have your seed phrase backed up securely, you can import your wallet on another device. Otherwise, funds remain accessible to anyone with access to your phone and unlocked wallet. Read: [/backup-and-recovery-seed-phrase] and [/lost-phone-reset-recovery].
Conclusion and next steps (brief CTA)
Checking "how to view connected sites on metamask mobile" is a quick, effective habit. It takes less than a minute and cuts risk. If you followed the step-by-step above, try it now — and then check token approvals as a follow-up. For more guides on connecting dApps and safe mobile use, see [/connect-metamask-to-dapps] and [/disconnect-and-remove-connected-sites].
If you'd like, replicate my test steps on a throwaway account and post questions about anything that looked odd. I'm happy to help troubleshoot specific screens or session behaviors.
