Sign-In with Ethereum (SIWE) Authorization

·

Sign-In with Ethereum (SIWE) enables secure authentication using your cryptocurrency wallet, replacing traditional usernames and passwords. Verified third-party apps can request access to your Monerium account—with your consent—via SIWE authorization.

Permissions Granted After Authorization

Before signing, carefully review the app’s terms of service, privacy policy, and requested permissions to ensure transparency and control. By approving, you authorize the app to:

  1. Read Profile Details
    Access basic information (e.g., name, identifiers) to personalize your experience.
  2. View Payment Details
    Analyze transaction history and payment data for financial insights.
  3. Access IBAN Information
    Manage linked IBANs for fund transfers or wallet reassignment.
  4. Initiate Outgoing Payments
    Trigger payments only with your explicit, per-transaction approval.

👉 Learn how SIWE enhances wallet security

How SIWE Works

Third-party apps generate a standardized message (EIP-4361) for your review and signature.

example.com wants you to sign in with your Ethereum account:  
0x5DA1EFC8dB7E32614d7ffb0B8b6bd86e85Ecc743  
Allow AppName to access my data on Monerium  
URI: https://example.com/callback  
Version: 1  
Chain ID: 100  
Nonce: 8YOaY6qkvyf7F5lx  
Issued At: 2024-08-22T10:00:00Z  
Expiration Time: 2024-08-22T10:05:00Z  
Resources:  
- https://monerium.com/siwe  
- https://example.com/privacy-policy  
- https://example.com/terms-of-service  

Key Message Components:

After signing, the app receives an access code at the callback URI.

👉 Explore blockchain authentication standards

FAQs

Q1: Is SIWE safer than passwords?
A1: Yes—it uses cryptographic signatures, eliminating phishing risks associated with passwords.

Q2: Can apps withdraw funds without my approval?
A2: No. Each payment requires your manual signature.

Q3: How do I revoke SIWE access?
A3: Disconnect the app via your Monerium account settings.

Q4: Which blockchains support SIWE?
A4: Ethereum (ID:1), Gnosis (ID:100), Polygon (ID:137), and other EVM-compatible networks.

Q5: What if a message expires before I sign it?
A5: The app must generate a new request with updated timestamps.