Typed Data Signing

Overview

How it works

It provides more context and replay protection than signing an opaque hash, but the displayed interpretation must still match the encoded payload. It should be distinguished from Offline Signing, Air-Gapped Signing, and Secure Signing. These concepts may interact in one workflow, but they identify different control points, records, or security assumptions.

Operationally, wallets validate domain, chain identifier, verifying contract, primary type, field values, nonce or expiry, and user-visible description. A production implementation should preserve the applicable blockchain network, asset or contract identifier, source and destination ownership, policy version, responsible roles, timestamps, transaction identifiers, and evidence used to authorize or reconcile the action. Exceptions should be visible in an operational queue rather than silently corrected.

The principal risk is that malicious schemas, deceptive field names, wrong domains, unsupported nested data, or blind display can produce dangerous authorizations. Teams should test normal and exceptional paths, including delayed confirmations, reorgs, unavailable custodians, signing-device failure, stale permissions, incorrect network selection, fee spikes, duplicate requests, compromised user interfaces, and incomplete recovery data. High-value actions should be independently reviewed before execution.

For governance and audit, document the exact meaning of Typed Data Signing in the relevant wallet, custody platform, smart contract, or internal ledger. Confirm who can create, change, approve, pause, reverse, or recover the associated configuration. Monitoring should cover privileged access, policy changes, address and key lifecycle events, balance movements, failed transactions, reconciliation differences, and unresolved customer claims. This converts the term from a product label into a testable operational control.

What matters in practice

Typed structured signing lets a wallet sign explicitly described fields—such as a spender, amount, nonce, deadline and domain—rather than an opaque free-form message. On Ethereum, EIP-712 defines domain-separated typed data, but a human-friendly signature prompt is still not guaranteed. The verifying contract, chain ID and message schema must be checked because malicious applications can request signatures authorizing token permits or orders. A signature need not immediately create an on-chain transaction; it can be submitted later by a third party.

Related glossary concepts

Offline Signing; Air-Gapped Signing; Secure Signing