Security｜imtoken

Build practical wallet-security habits around recovery secrets, approvals, phishing, devices and transaction checks.

On this page

The most sensitive secrets

To understand Security, place the most sensitive secrets inside the full on-chain workflow instead of treating it as an isolated label. The practical point is to verify the most sensitive secrets in the context of the selected blockchain network. The user should compare the request with the intended address, asset, account or contract before confirming. A wallet can organize information and submit requests, but the selected network and the blockchain determine the final state. On-chain state and a transaction hash provide stronger evidence than a delayed interface alone. Third-party DApps, services and smart contracts can introduce risks that need separate review. If the interface does not match your expectation, verify the network, address, contract and on-chain record before taking another action.

A practical way to approach the most sensitive secrets is to use a consistent review sequence. First, the practical point is to verify the most sensitive secrets in the context of the selected blockchain network. Next, the user should compare the request with the intended address, asset, account or contract before confirming. After a transaction, signature or approval is submitted, on-chain state and a transaction hash provide stronger evidence than a delayed interface alone. Finally, third-party dapps, services and smart contracts can introduce risks that need separate review. This sequence gives each confirmation a clear reason and helps reduce wrong-network transfers, address mismatches, unnecessary permissions and repeated actions caused by a delayed interface.

The practical point is to verify the most sensitive secrets in the context of the selected blockchain network
The user should compare the request with the intended address, asset, account or contract before confirming
On-chain state and a transaction hash provide stronger evidence than a delayed interface alone
Third-party DApps, services and smart contracts can introduce risks that need separate review

Recognize high-risk requests

To understand Security, place recognize high-risk requests inside the full on-chain workflow instead of treating it as an isolated label. The practical point is to verify recognize high-risk requests in the context of the selected blockchain network. The user should compare the request with the intended address, asset, account or contract before confirming. A wallet can organize information and submit requests, but the selected network and the blockchain determine the final state. On-chain state and a transaction hash provide stronger evidence than a delayed interface alone. Third-party DApps, services and smart contracts can introduce risks that need separate review. If the interface does not match your expectation, verify the network, address, contract and on-chain record before taking another action.

A practical way to approach recognize high-risk requests is to use a consistent review sequence. First, the practical point is to verify recognize high-risk requests in the context of the selected blockchain network. Next, the user should compare the request with the intended address, asset, account or contract before confirming. After a transaction, signature or approval is submitted, on-chain state and a transaction hash provide stronger evidence than a delayed interface alone. Finally, third-party dapps, services and smart contracts can introduce risks that need separate review. This sequence gives each confirmation a clear reason and helps reduce wrong-network transfers, address mismatches, unnecessary permissions and repeated actions caused by a delayed interface.

The practical point is to verify recognize high-risk requests in the context of the selected blockchain network
The user should compare the request with the intended address, asset, account or contract before confirming
On-chain state and a transaction hash provide stronger evidence than a delayed interface alone
Third-party DApps, services and smart contracts can introduce risks that need separate review

Device and network hygiene

To understand Security, place device and network hygiene inside the full on-chain workflow instead of treating it as an isolated label. The practical point is to verify device and network hygiene in the context of the selected blockchain network. The user should compare the request with the intended address, asset, account or contract before confirming. A wallet can organize information and submit requests, but the selected network and the blockchain determine the final state. On-chain state and a transaction hash provide stronger evidence than a delayed interface alone. Third-party DApps, services and smart contracts can introduce risks that need separate review. If the interface does not match your expectation, verify the network, address, contract and on-chain record before taking another action.

A practical way to approach device and network hygiene is to use a consistent review sequence. First, the practical point is to verify device and network hygiene in the context of the selected blockchain network. Next, the user should compare the request with the intended address, asset, account or contract before confirming. After a transaction, signature or approval is submitted, on-chain state and a transaction hash provide stronger evidence than a delayed interface alone. Finally, third-party dapps, services and smart contracts can introduce risks that need separate review. This sequence gives each confirmation a clear reason and helps reduce wrong-network transfers, address mismatches, unnecessary permissions and repeated actions caused by a delayed interface.

The practical point is to verify device and network hygiene in the context of the selected blockchain network
The user should compare the request with the intended address, asset, account or contract before confirming
On-chain state and a transaction hash provide stronger evidence than a delayed interface alone
Third-party DApps, services and smart contracts can introduce risks that need separate review

Transaction and approval checks

To understand Security, place transaction and approval checks inside the full on-chain workflow instead of treating it as an isolated label. Approvals can give a contract permission to use tokens within a defined scope. The spender or operator address and amount should be checked before signing. A wallet can organize information and submit requests, but the selected network and the blockchain determine the final state. Disconnecting a DApp does not automatically revoke an on-chain approval. Unused permissions can be reviewed and revoked with a new on-chain transaction. If the interface does not match your expectation, verify the network, address, contract and on-chain record before taking another action.

A practical way to approach transaction and approval checks is to use a consistent review sequence. First, approvals can give a contract permission to use tokens within a defined scope. Next, the spender or operator address and amount should be checked before signing. After a transaction, signature or approval is submitted, disconnecting a dapp does not automatically revoke an on-chain approval. Finally, unused permissions can be reviewed and revoked with a new on-chain transaction. This sequence gives each confirmation a clear reason and helps reduce wrong-network transfers, address mismatches, unnecessary permissions and repeated actions caused by a delayed interface.

Approvals can give a contract permission to use tokens within a defined scope
The spender or operator address and amount should be checked before signing
Disconnecting a DApp does not automatically revoke an on-chain approval
Unused permissions can be reviewed and revoked with a new on-chain transaction

Download imtoken Read FAQ →