Free for Windows, macOS & Linux · v1.0.1

Warden A firewall for your Solana wallet.

Before your wallet signs anything, Warden runs the transaction on your own computer and tells you what would really happen. Drainers, phishing sites and address poisoning are stopped before you sign.

Download free See what it stops
  • Never holds your keys
  • No account needed
  • Phantom, Solflare & Backpack
  • Everything stays on your computer
Warden in dark mode: protecting you, with today's checks, two blocked requests and the protection level
Known phishing sites
118k+
Check time
0.3 s
Price
$0
Keys held
0

Signing on Solana

One signature is all a drainer needs.

Wallet pop-ups ask you to approve what you can't read, on sites that look exactly like the real ones. Warden reads it for you, every time, before your wallet signs.

Signing blind

A wallet pop-up asks you to approve a transaction you can't read. Most people approve and hope it is what the site said.

01

Drainers dressed as airdrops

One signature hands a token account or an unlimited spending permission to someone else. The wallet is emptied later, quietly.

02

Phishing sites that look real

A copied page, a familiar logo and a Connect button, on an address that is one letter off.

03

A poisoned history

A fake address that starts and ends like one you use sits in your history, waiting for you to copy it.

04

How it works

Next to your wallet, not instead of it.

Keep the wallet you use. Warden checks what it is asked to sign.

  1. 1
    Install Warden

    The desktop app does the checking. It starts with your computer and lives quietly in the tray.

  2. 2
    Add the extension

    For Chrome, Edge, Brave or Firefox. It finds the app on its own: nothing to pair or configure.

  3. 3
    Sign as usual

    Each request is checked in about a third of a second. Safe ones go straight to your wallet; you only hear from Warden when something is wrong.

What Warden stops

Drainers, scam sites and fake addresses. Before you sign.

These screenshots are the real app and extension, checking real Solana mainnet data.

Every signature

See what a transaction does before you sign it.

When a site asks your wallet to sign, Warden runs the transaction in a private copy of Solana on your computer, with current account data, and looks at what would really change. A drainer asking for your token account is stopped, with the reason in plain words. A normal swap goes straight through.

  • Token accounts handed to someone else, unlimited spending permissions, a wallet given to a program
  • Messages that are really transactions, and sign-in requests for a different site
  • Brand-new programs, fake-looking tokens and sending your entire balance
  • Blocked, a warning, or nothing at all: safe requests never interrupt you
The Warden window after a site asked to sign a transaction: Blocked. Gives away one of your token accounts, holding 207.31 USDC.

Phishing sites

Known scam sites, blocked before they ask.

Every page is checked against more than 118,000 known phishing sites from the MetaMask and Phantom lists, downloaded to your computer and refreshed every six hours. Warden's own check also spots sites imitating 17 Solana brands, like raydium.network, before any list has them.

  • Any signing request on a listed site is blocked, whatever it asks for
  • The toolbar icon turns red on a known phishing page and amber on a lookalike
  • The sites you visit are never sent anywhere: the lists are checked on your computer
  • Trust the sites you use to skip routine warnings. Drainer blocks always stay
The Warden toolbar popup on raydium.network: Known phishing site, on the Phantom blocklist, every signing request blocked

Address poisoning

Fake copies of your addresses, caught.

Scammers make addresses that start and end like the ones you use, then send you a tiny amount so the fake lands in your history. Warden keeps the history of your wallets and blocks payments to a lookalike. The one shown here is real: it reached a test wallet a minute after the genuine address paid it.

  • Blocks payments to lookalikes of addresses you have paid, that paid you, or your own
  • Warns before the first payment to an address you have never paid
  • Every transaction in plain words: sent, received, swapped, staked, permissions given
  • Watch-only: Warden reads public history and never holds keys
Warden Activity: Received 0.000001 SOL from AoKJ...1UVX, marked in red as a fake copy of AoKJ...zUVX (address poisoning)

Token permissions

Every token permission, and a way to remove it.

Apps can ask your wallet for permission to move a token later without asking again. Drainers depend on it. Warden lists every permission on your wallets, read from the chain, and removes the ones you pick: your own wallet signs the removal, and Warden checks that too.

  • Spending permissions first, with how much each one can move
  • A desktop alert when a new permission appears on a watched wallet
  • Accounts someone else can close, explained in one line
Warden Approvals for a wallet: no open spending permissions, and 36 token accounts that someone else can close

Your rules

Your own rules, without writing code.

Three protection levels cover most people. For the rest, build rules from plain choices: warn when more than 5 SOL leaves, only pay my address book, never give token permissions, no message signing on new sites.

  • Standard, Strict and Relaxed protection levels
  • Warn, block, or quiet a warning you understand. Built-in blocks can never be lowered
  • Trusted sites, your own blocked sites, and exceptions for a list's mistakes
  • Desktop alerts for blocks, poisoning attempts and new permissions
The Warden rule editor: a rule called Only pay my address book that warns when funds go to an address outside the list

Works with

The wallets and browsers you already use.

Warden has been tested against the real Phantom, Solflare and Backpack extensions, including the older ways sites talk to them, so a phishing page can't slip past by asking the old way.

  • Wallets: Tested with Phantom, Solflare and Backpack. Other Solana wallet extensions that follow the Wallet Standard work the same way.
  • Browsers: Chrome, Edge, Brave, Vivaldi and Firefox. One app protects every browser on your computer.
  • Hardware wallets: A Ledger used through Phantom or Solflare is covered: the request still goes through the wallet extension.
  • Not covered: Web wallets that sign inside their own website, such as Solflare in a browser tab without the extension.

Everything else you'd expect

Done properly.

  1. 01

    Choose your RPC

    Solana's public endpoint to start, or your own Helius, Triton or QuickNode key for speed. Tested before it is used.

  2. 02

    Starts with your computer

    Protection only works while the app runs, so it starts quietly in the tray.

  3. 03

    Your choice if it is off

    If the app isn't running, signing either goes through as usual or is blocked. You decide.

  4. 04

    Activity and approvals

    In the app, and on a private page in your browser that only Warden can open.

  5. 05

    Plain words

    No program IDs or instruction dumps: what you send, what you get, and why something is wrong.

  6. 06

    Light & dark

    Themes that follow your system.

Private by design

Your wallets, your history, your computer.

  • Simulated on your computerTransactions run in a private copy of Solana on your machine. The RPC sees which accounts are read, never your keys.
  • Lists checked locallyPhishing lists are downloaded whole and checked here. The sites you visit are never sent anywhere.
  • Never holds keysWarden can't sign or move anything. Your wallet still signs; Warden only says go ahead, careful, or stop.
  • No account, no trackingNo sign-up, no telemetry and no Warden server. Your wallets' history stays on your computer.

Read Warden's privacy policy

Get Warden 1.0.1 · Free

Protected in two minutes.

Pick the file for your system. We'll email you a one-time code, and the download starts as soon as you enter it. Then add the browser extension.

First launch

Windows

If Windows shows "Windows protected your PC", choose More info, then Run anyway. On Windows 10, the installer adds Microsoft's WebView2 if it's missing.

macOS

Drag Warden into Applications. The first time, open System Settings, then Privacy & Security, and click Open Anyway. (On macOS 14 and earlier, right-click the app and choose Open.)

Linux

Install the .deb with apt or the .rpm with dnf, like any other package. The AppImage needs no install: make it executable (chmod +x) and run it.

Then

Add the browser extension below. Warden sets up the connection to your browsers by itself.

The first-launch warning appears because Warden is new and not yet widely downloaded; it only shows once. Updating: download the new version from this page and install it over the old one. Your settings, rules and wallet history are kept. Verify your download (optional): each file's SHA-256 checksum is in SHA256SUMS.txt.

Download Warden

Where should we send your code?

We'll email you a one-time code to start . No account, no spam.

Browser extension

Add Warden to your browser.

The extension catches signing requests and asks the Warden app on your computer. Install the app first.

Chrome Web Store Chrome, Brave, Vivaldi Add to browser
Edge Add-ons Microsoft Edge Coming soon
Firefox Add-ons Firefox Add to browser

The extension sends nothing to any server. Privacy policy

FAQ

Questions, answered.

Something else? Ideas or partnership enquiries? Email jamal@unravelers.tech.

Is Warden really free?

Yes. Every feature, for as many wallets as you like, with no account.

Can Warden take my funds or see my seed phrase?

No. Warden never asks for keys or seed phrases and can't sign anything. It only tells your wallet whether a request may go ahead. Wallet history is read from public chain data.

Which wallets does it work with?

Phantom, Solflare and Backpack are tested, and other Solana wallet extensions that follow the Wallet Standard work too. Web wallets that sign inside their own website aren't covered.

Do I need both the app and the extension?

Yes. The extension catches signing requests in your browser; the app checks them. The extension does nothing on its own, and the app sets up the connection to your browsers by itself.

What happens if the app isn't running?

By default, signing goes through as it would without Warden, and the toolbar icon shows OFF. Turn on "Block signing when Warden isn't running" in the extension to stop signing instead.

Does it slow me down?

A transaction check takes about a third of a second; messages are checked instantly. Safe requests reach your wallet without any extra window.

What does the RPC see?

Which accounts Warden reads to simulate a transaction, as your wallet's RPC already does. Never your keys or the transaction itself. Use your own RPC if you prefer.

What if Warden warns about a site I trust?

Warnings explain why and let you continue. Trust a site to skip routine warnings there, or add an exception if a phishing list got it wrong. Drainer blocks can't be overridden by rules.

How do I get new versions?

Download them from this page and install over the old one. Your settings, rules and wallet history are kept.

Why does Windows or macOS show a warning the first time?

Both systems double-check apps that aren't yet widely downloaded. It only happens on the first launch; the steps are in the download section above.

Before your next signature

Know what you're signing.

Warden is free for Windows, macOS and Linux. Install it, add the extension, and keep using your wallet as before.

Download Warden, free Talk to us