imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.
imtoken Knowledge & Product Center

imtoken App

Understand how accounts, networks, assets, transactions and DApp access in a mobile wallet map to real on-chain state.

Download imtoken

Understand mobile wallet use and network management first

A practical model for “Understand mobile wallet use and network management first” is verify first, authorize second, and review afterward. Understand how accounts, networks, assets, transactions and DApp access in a mobile wallet map to real on-chain state. Verify “Identify the real mobile wallet use context”, understand “Distinguish network management from look-alike labels” before signing or submitting, and use “Do not skip the asset views check” to confirm the outcome. This keeps the concepts in imtoken App tied to observable actions rather than isolated definitions.

The same model applies to maintenance. Reassess permissions that are no longer used, re-check even familiar networks after switching, and keep the device and browser environment trustworthy. No normal workflow requires a seed phrase, private key, or verification code to be sent to support staff, a chat group, or a website form.A product page should also state the boundary of the wallet: it can display account data and prepare user-confirmed actions, but it does not control blockchain confirmation rules or unilaterally reverse a transaction after broadcast. In imtoken App, this check belongs specifically to “Understand mobile wallet use and network management first”, so the conclusion should remain tied to the account, network, target, and permission discussed on this page rather than being copied from another workflow.

  • Identify the real mobile wallet use context
  • Distinguish network management from look-alike labels
  • Do not skip the asset views check

Check asset views before you begin

The purpose of “Check asset views before you begin” is not to memorize where a control appears on one version of an interface. Start with a checkable sequence instead. In imtoken App, Understand how accounts, networks, assets, transactions and DApp access in a mobile wallet map to real on-chain state. Review “Define the intended task first” first, compare it with “Confirm that asset views matches the plan”, and then confirm “Cancel when the request looks unexpected”. Breaking the task into separate questions makes mismatched networks, targets, or permissions easier to spot before anything is submitted.A product page should also state the boundary of the wallet: it can display account data and prepare user-confirmed actions, but it does not control blockchain confirmation rules or unilaterally reverse a transaction after broadcast.

A familiar logo, token name, or address format is not enough evidence by itself. Write down the intended account, network, destination or contract, expected fee, and permission change. If one of those pieces cannot be explained, cancel the request and return through a trusted entry point rather than relying on a screenshot or instructions from an unknown contact. In imtoken App, this check belongs specifically to “Check asset views before you begin”, so the conclusion should remain tied to the account, network, target, and permission discussed on this page rather than being copied from another workflow.

  • Define the intended task first
  • Confirm that asset views matches the plan
  • Cancel when the request looks unexpected

Review transaction records during the action

A useful way to understand “Review transaction records during the action” is to work backward from the result you expect to verify. Understand how accounts, networks, assets, transactions and DApp access in a mobile wallet map to real on-chain state. That means treating “Review transaction records as its own decision”, “Read the on-chain details shown by the wallet”, and “Do not rely on button text alone” as one verification chain rather than concentrating only on the final confirmation button in imtoken App.

After the action, leave room for verification. Public information such as the network name, public address, transaction hash, block height, or contract address can help establish what happened. If the interface has not refreshed, check those records before submitting again. Recovery information follows the opposite rule: seed phrases, private keys, recovery phrases, and verification codes are not public troubleshooting data and should not be shared.A product page should also state the boundary of the wallet: it can display account data and prepare user-confirmed actions, but it does not control blockchain confirmation rules or unilaterally reverse a transaction after broadcast. In imtoken App, this check belongs specifically to “Review transaction records during the action”, so the conclusion should remain tied to the account, network, target, and permission discussed on this page rather than being copied from another workflow.

  • Review transaction records as its own decision
  • Read the on-chain details shown by the wallet
  • Do not rely on button text alone

Common mistakes and risks in imtoken App

Many mistakes around “Common mistakes and risks in imtoken App” come from treating different actions as if they were equivalent. imtoken App may involve viewing information, signing a message, approving a contract, or broadcasting a transaction. Understand how accounts, networks, assets, transactions and DApp access in a mobile wallet map to real on-chain state. Identify what “Connection is not the same as signing or approval” refers to, define the scope of “Reject any request for a seed phrase or private key”, and decide whether “Treat unfamiliar third-party services cautiously” can change on-chain state.A product page should also state the boundary of the wallet: it can display account data and prepare user-confirmed actions, but it does not control blockchain confirmation rules or unilaterally reverse a transaction after broadcast.

This distinction matters in multi-chain and Web3 use. The same address format does not prove that two networks share state, a token name does not identify a unique contract, and connecting a wallet does not automatically approve later signatures. Treat every new request as a separate decision and proceed only when it matches the action you intended to perform. In imtoken App, this check belongs specifically to “Common mistakes and risks in imtoken App”, so the conclusion should remain tied to the account, network, target, and permission discussed on this page rather than being copied from another workflow.

  • Connection is not the same as signing or approval
  • Reject any request for a seed phrase or private key
  • Treat unfamiliar third-party services cautiously

Use DApp connections to verify the result

The fastest way to make “Use DApp connections to verify the result” practical is to place it inside a real task. For imtoken App, define the objective first, review “Verify with DApp connections or other public data”, then inspect “Confirm the network and public address”, and make “Remove permissions that are no longer needed” the final pre-submit check. Understand how accounts, networks, assets, transactions and DApp access in a mobile wallet map to real on-chain state. This sequence reduces mistakes caused by switching networks, accounts, or applications halfway through a workflow.

When a third-party DApp, smart contract, bridge, or service is involved, verify the domain source, contract target, and requested permission separately. Previous connections, messages from friends, and familiar visual design are not substitutes for those checks. On-chain transactions are generally not reversible by a wallet provider, so careful review before submission matters more than trying to repair an avoidable mistake afterward.A product page should also state the boundary of the wallet: it can display account data and prepare user-confirmed actions, but it does not control blockchain confirmation rules or unilaterally reverse a transaction after broadcast. In imtoken App, this check belongs specifically to “Use DApp connections to verify the result”, so the conclusion should remain tied to the account, network, target, and permission discussed on this page rather than being copied from another workflow.

  • Verify with DApp connections or other public data
  • Confirm the network and public address
  • Remove permissions that are no longer needed

Practical checklist

  • Never enter a seed phrase, private key or recovery phrase into a website
  • Official staff will not ask for your seed phrase, private key or verification code
  • Check the address, network and amount before transferring
  • Review every DApp signature request separately
  • Review and revoke permissions you no longer need