imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

DApp Connections

When using a DApp, confirm the domain and entry point first, then connect the wallet and review account, network and subsequent requests one by one.

Verify the domain and source before visiting

Verify the domain and source before visiting is a distinct part of understanding DApp Connections.

Within DApp Connections, verify the domain and source before visiting should not be treated as an isolated concept. Real actions often involve an account, a selected network, on-chain state and an explicit user decision. A reliable approach is to define the task first and then review every input that can change the outcome. A familiar interface or a sense of urgency is not a reason to approve a request you cannot explain.

When reviewing verify the domain and source before visiting, prefer information that can be independently checked. Network names, addresses, contract identifiers, transaction hashes and block-explorer records are usually more useful than screenshots or messages from third parties. A wallet can surface these details, but users still need to distinguish between being connected, signing a message, granting an approval and seeing a confirmed transaction.

A practical routine is to divide the process into before, during and after. Before the action, verify the source and environment. During confirmation, read the network, address, amount, permissions or contract target. Afterward, verify the result on-chain. This makes it easier to diagnose pending transactions, display issues or DApp state mismatches without guessing.

Practical check

  • Confirm that the action matches the goal of Verify the domain and source before visiting
  • Never provide a seed phrase, private key or verification code to anyone
  • Stop when a signature, approval or address change cannot be explained

Check account and network when connecting

Check account and network when connecting is a distinct part of understanding DApp Connections.

When reviewing check account and network when connecting, prefer information that can be independently checked. Network names, addresses, contract identifiers, transaction hashes and block-explorer records are usually more useful than screenshots or messages from third parties. A wallet can surface these details, but users still need to distinguish between being connected, signing a message, granting an approval and seeing a confirmed transaction.

A practical routine is to divide the process into before, during and after. Before the action, verify the source and environment. During confirmation, read the network, address, amount, permissions or contract target. Afterward, verify the result on-chain. This makes it easier to diagnose pending transactions, display issues or DApp state mismatches without guessing.

Within DApp Connections, check account and network when connecting should not be treated as an isolated concept. Real actions often involve an account, a selected network, on-chain state and an explicit user decision. A reliable approach is to define the task first and then review every input that can change the outcome. A familiar interface or a sense of urgency is not a reason to approve a request you cannot explain.

Practical check

  • Confirm that the action matches the goal of Check account and network when connecting
  • Never provide a seed phrase, private key or verification code to anyone
  • Stop when a signature, approval or address change cannot be explained

Do not auto-accept requests that follow a connection

Do not auto-accept requests that follow a connection is a distinct part of understanding DApp Connections.

A practical routine is to divide the process into before, during and after. Before the action, verify the source and environment. During confirmation, read the network, address, amount, permissions or contract target. Afterward, verify the result on-chain. This makes it easier to diagnose pending transactions, display issues or DApp state mismatches without guessing.

Within DApp Connections, do not auto-accept requests that follow a connection should not be treated as an isolated concept. Real actions often involve an account, a selected network, on-chain state and an explicit user decision. A reliable approach is to define the task first and then review every input that can change the outcome. A familiar interface or a sense of urgency is not a reason to approve a request you cannot explain.

When reviewing do not auto-accept requests that follow a connection, prefer information that can be independently checked. Network names, addresses, contract identifiers, transaction hashes and block-explorer records are usually more useful than screenshots or messages from third parties. A wallet can surface these details, but users still need to distinguish between being connected, signing a message, granting an approval and seeing a confirmed transaction.

Practical check

  • Confirm that the action matches the goal of Do not auto-accept requests that follow a connection
  • Never provide a seed phrase, private key or verification code to anyone
  • Stop when a signature, approval or address change cannot be explained

Disconnect sessions you no longer need

Disconnect sessions you no longer need is a distinct part of understanding DApp Connections.

Within DApp Connections, disconnect sessions you no longer need should not be treated as an isolated concept. Real actions often involve an account, a selected network, on-chain state and an explicit user decision. A reliable approach is to define the task first and then review every input that can change the outcome. A familiar interface or a sense of urgency is not a reason to approve a request you cannot explain.

When reviewing disconnect sessions you no longer need, prefer information that can be independently checked. Network names, addresses, contract identifiers, transaction hashes and block-explorer records are usually more useful than screenshots or messages from third parties. A wallet can surface these details, but users still need to distinguish between being connected, signing a message, granting an approval and seeing a confirmed transaction.

A practical routine is to divide the process into before, during and after. Before the action, verify the source and environment. During confirmation, read the network, address, amount, permissions or contract target. Afterward, verify the result on-chain. This makes it easier to diagnose pending transactions, display issues or DApp state mismatches without guessing.

Practical check

  • Confirm that the action matches the goal of Disconnect sessions you no longer need
  • Never provide a seed phrase, private key or verification code to anyone
  • Stop when a signature, approval or address change cannot be explained

Continue with imtoken

Start with wallet, network and security knowledge before moving into on-chain actions.

Download imtoken