Review every request
Before connecting to a dapp, check the website domain, requested wallet, requested network, and any permissions shown in the wallet approval screen.
Signing is not the same as sending
Some dapps ask for message signatures while others request transactions. Read approval screens carefully and reject requests you do not understand.
Disconnect stale sessions
If a dapp no longer needs access, disconnect the session and reconnect later only when you need it.