EIP-712
EIP-712 is the Ethereum standard for signing structured, typed data, so that a wallet can show the named fields of a message instead of an unreadable hash.
What Is EIP-712?
EIP-712 is the Ethereum standard for signing structured, typed data instead of an opaque string of bytes. An application sends the wallet a message with named fields, such as token, spender, amount and deadline, and the wallet can show those fields before the user signs.
Each message includes a domain: the application's name and version, the chain ID and usually the address of the contract that will check the signature. This binds the signature to one application on one network, so it cannot be replayed elsewhere.
EIP-712 signatures are not transactions. They cost no gas and nothing appears on-chain when they are signed, yet they can carry real authority: token permits, marketplace orders and smart-account approvals all use them. A signed permit lets a third party move tokens later, which is why wallet drainers often ask for such signatures.
On a hardware wallet, the benefit depends on what the screen shows. If the device decodes the message and lists its fields, the user can check them. If it shows only a domain hash and a message hash, the user is blind signing and has to trust the computer.
Ethereum is a decentralized blockchain platform that enables smart contracts and decentralized applications (dApps). Its native cryptocurrency is Ether (ETH).
Read full definition: EthereumA token is a digital asset on a blockchain that represents value, ownership, utility, or access rights. Examples include ERC-20 tokens on Ethereum.
Read full definition: TokenA wallet drainer is a phishing kit that tricks users into signing approvals or transfers that empty their wallet.
Read full definition: Wallet DrainerA hardware wallet is a dedicated device that keeps private keys offline and signs transactions internally, so the keys never reach an internet-connected computer or phone.
Blind signing is approving a transaction that the hardware wallet cannot decode and display, so the user confirms a hash or raw data on trust.
Read full definition: Blind SigningReal-World Examples
Example 1: A site asks a user to sign a token permit. The hardware wallet lists the spender, the amount and the deadline; the user sees an unlimited amount for an unknown address and rejects the request.
Example 2: Listing an NFT for sale on a marketplace is an EIP-712 order, not a transaction. The seller reviews the price and the collection contract on the device and pays no gas for the listing.
Example 3: A device shows only two hashes for a typed message. The user cannot tell what they authorise and declines to sign.
A token is a digital asset on a blockchain that represents value, ownership, utility, or access rights. Examples include ERC-20 tokens on Ethereum.
Read full definition: TokenA hardware wallet is a dedicated device that keeps private keys offline and signs transactions internally, so the keys never reach an internet-connected computer or phone.
An NFT (Non-Fungible Token) is a unique digital asset stored on a blockchain, representing ownership of a specific item, such as artwork, music, or virtual goods.
Read full definition: NFTFrequently Asked Questions
Can signing an EIP-712 message cost me tokens if it is not a transaction?
Yes. Signing costs no gas and nothing appears on-chain at that moment, but the signature can carry real authority. A signed token permit lets a third party move tokens later, which is why wallet drainers often ask for such signatures. Check the spender, amount and deadline before you sign.
What should I do if my hardware wallet shows only two hashes?
If the device shows only a domain hash and a message hash, you are blind signing and have to trust the computer. When you cannot tell what you are authorising, declining is the cautious choice. A device that decodes the message and lists its fields lets you check them on its own screen.
Why does an EIP-712 message contain a domain?
The domain names the application and its version, the chain ID and usually the address of the contract that will check the signature. This binds the signature to one application on one network, so it cannot be replayed elsewhere.
Ready to Choose a Secure Wallet?
Use our tools to find the right hardware wallet for your needs.