Where to install from, avoiding fake extensions, updates, multiple browser profiles.
Desktop is convenient — and collects the same threats as a browser
A desktop wallet client lives next to extensions, downloads, and “open file from chat” habits. Take updates only from an official source. An OS backup shouldn’t quietly include a seed in a cloud Documents folder.
Desktop malware loves clipboards and process swaps. Verify addresses. Don’t keep a seed in a desktop text file “temporarily”.
Sessions and shared computers
A foreign or family PC is a bad home for a main wallet. If you must — separate OS user, quick sign-out, minimal balance. After — password changes and a review.
Browser extensions with full access are extra surface even if “the wallet is separate”. Split roles: browser for reading, client for signing, cold for large size.
---
A decision glossary for “extension”
When chat says “extension”, translate into actions: what to open, what to verify, what not to sign. “Desktop and extensions: a separate risk zoo” is a headline; decisions live in the preview and wallet choice.
Frame: Where to install from, avoiding fake extensions, updates, multiple browser profiles. Anything demanding a seed, prepaid “access”, or an “activation transfer” falls out of frame automatically.
Anchor words: pin, favorites, dust, spender, limit. If the talk has only urgency — you’re in someone else’s script.
Safety contour before any “extension” click
Device updated from normal sources. Wallet client too. Seed not in chats. Experimental balance separated. Not “paranoia before extension” — a table you can work on.
Public Wi‑Fi, foreign PC, screen share — bad background. Move large size to another moment. The topic can wait.
Entry checks: lookalikes next to “extension”
Two candidates beat one. Pin reference beside a feed link. Character by character. Aloud. Icons and “online” don’t count. One letter is enough error cost.
After verify — favorites. Don’t return to global brand search. Clones queue there specifically for “extension”.
Action, preview, aftercare
An action on “extension” without a readable preview is a lottery. State the operation type. Shrink size until it’s boringly clear. Dust. History. Balance.
After: revoke extra approve, delete temporary bookmarks, ensure you didn’t leave a session on a foreign device. The catalog may have helped find the entry; cleanup is yours.
Long distance: “extension” without season drama
Seasons come and go. Habits stay. Weekly short review: favorites, junk tokens, updates. Once a season — a careful look at seed backup without publishing words.
If “Desktop and extensions: a separate risk zoo” feels long — that’s intentional. Short taps already belong to attackers. Your edge is a slow Confirm and a calm refusal.
How “extension” links to other ecosystem habits
Even when today’s focus is “Desktop and extensions: a separate risk zoo”, seed hygiene, username anti-phishing, wallet separation, and exchange memo care still matter. You don’t need to learn everything at once. You need to not break the base while handling the special case “extension”.
Leave TON Web Search as an entry map. Maps can be closed. Keys and limits cannot.
“extension” practice: three kill-switches
First kill-switch — source. If the entry for “Desktop and extensions: a separate risk zoo” didn’t come from the pin or your favorites, you’re already in a higher-risk zone. Second — wallet: experimental for new, main for known and verified. Third — size: dust before volume. Three switches close most everyday failure stories around “extension”.
Reminder frame: Where to install from, avoiding fake extensions, updates, multiple browser profiles. Don’t turn the frame into a “hurry” slogan. Refusing also counts as being on time.
FAQ without fluff (about extension)
**Do I need the main wallet?** Usually no. An experimental limit is enough to learn “extension”.
**What if friends are already in?** Their deposit doesn’t insure yours. Source checks stay yours.
**What if the catalog card is online?** That’s an entry-availability snapshot, not an audit. Next — pin and preview.
**What if I already signed something weird?** Don’t enter a seed into “recovery helpers”. New contour, clean device, move remainder.