Connect Your Wallet
Set up Phantom, MetaMask, or Google login and connect to Vezta
Vezta supports two ways to sign in. Both create real, fully usable accounts -- but they are separate accounts and do not share state.
| Method | Signs in with | Trading you can do | Notes |
|---|---|---|---|
| Wallet | Solana or EVM signature | Polymarket and Kalshi (via DFlow) | Uses your wallet for all signing |
| Google OAuth | Polymarket only | Backend creates a synthetic Solana wallet under the hood; you fund it via deposit |
Supported Wallets
Solana Wallets
Phantom, Solflare, and Coinbase Wallet are supported. Phantom is the most widely used Solana wallet and the recommended option for most users. Required for trading Kalshi markets through DFlow (you sign Solana transactions directly).
EVM Wallets
MetaMask and other WalletConnect-compatible wallets are supported. Connect using browser extensions or mobile wallet apps via QR code. Useful for users who already hold USDC on Ethereum, Arbitrum, Base, etc. -- you can deposit cross-chain into your Polygon Safe.
Google Login
One-click sign-in with Google. The backend issues a synthetic Solana wallet so you can still receive deposits, but you will not be able to sign Kalshi-via-DFlow transactions (those need a real Solana wallet you control).
Step-by-Step Connection (Wallet)
Install a Wallet
If you do not already have a wallet, install one:
- Phantom -- Browser extension for Chrome, Firefox, Brave, Edge; mobile apps on iOS and Android. Download from phantom.app.
- MetaMask -- Browser extension and mobile app. Download from metamask.io.
Follow the wallet's setup instructions to create a new wallet or import an existing one. Write down your recovery phrase and store it securely.
Visit Vezta
Open vezta.io in your browser. Make sure your wallet extension is active and unlocked.
Click Connect
Click Connect Wallet in the top navigation bar. A dialog will appear with available wallets. Select your wallet (Phantom, MetaMask, etc.).
Approve the Signature Request
Your wallet will prompt you to sign a verification message. This is not a transaction -- it does not cost gas or move any funds. It simply proves wallet ownership. Review the message and click Approve or Sign.
Enter Your Access Key
Vezta is currently in early access. You will be asked to enter an access key on first sign-in. Get one from an existing user's referral link or from official Vezta channels.
Start Trading
Once connected, your wallet address appears in the navigation bar. You are authenticated and can access the terminal, portfolio, copy trade, rewards, and more.
Sign In With Google
Click Sign In With Google
On the login page, click the Google button and choose your Google account.
Backend Creates a Synthetic Wallet
The backend creates a deterministic Solana wallet for your Google account so you have an address that can receive deposits. You do not control this private key -- it is managed in the backend's encrypted sub-wallet store.
Enter Your Access Key
Same access key flow as wallet sign-in.
Deposit USDC to Start Trading
Use the in-app deposit screen to send USDC from any external wallet to your Polygon Safe. See Fund Your Account for cross-chain options.
Sessions and Cookies
Vezta uses a three-cookie auth system on the web:
| Cookie | Purpose | Set by | Read by |
|---|---|---|---|
refresh_token (httpOnly) | 7-day refresh token, used to obtain new access tokens | Backend | Backend only |
logged_in=1 | Marker for middleware route protection | Frontend | Next.js middleware |
beta_access=1 | Beta gate for protected routes | Frontend | Next.js middleware |
Access tokens (15-minute JWT) are kept in memory only -- never localStorage -- to prevent XSS-based theft. The frontend automatically refreshes them when they expire.
Security Notes
Never share your wallet's recovery phrase or private key with anyone. Vezta will never ask for your private key. The only direct interaction with your wallet is signing the verification message at login and signing Kalshi-via-DFlow Solana transactions when you place a Kalshi trade. Polymarket trades are signed by the backend's per-user EOA, with funds custodied in your Gnosis Safe.
- Your session is secured with JWT tokens. Access tokens expire after 15 minutes and are automatically refreshed.
- The refresh token is an httpOnly cookie -- it cannot be accessed by JavaScript.
- You can disconnect your wallet at any time from the settings page; this clears your session cookies.