Official channels
Wallet users are phished through fake sites, fake extensions, and fake support. This page is the canonical list to check against — and to link from your own dapp when you point users at Core.
Official Core surfaces
| Surface | Address |
|---|---|
| Web app | core.app |
| Install links | join.core.app |
| This documentation | docs.core.app |
| Help Center | support.core.app |
| Extension | Chrome Web Store |
| iOS | App Store |
| Android | Google Play |
| Source & issues | github.com/ava-labs |
What Core will never do
- Ask for your recovery phrase — not in support chats, not in forms, not to "validate" or "sync" your wallet.
- DM you first about a problem with your funds.
- Ask you to install remote-control software.
For dapp developers
Link install flows to join.core.app rather than store-search results, and render wallet names and icons from EIP-6963 metadata rather than hardcoding lookalikes. Your users' safety margin is partly your UI.