imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

Device Security

The device environment affects input, clipboard contents, screen exposure and connection safety. Public devices, remote-control software and untrusted networks require caution.

Keep the OS and browser in a trustworthy state

Keep the OS and browser in a trustworthy state is a distinct part of understanding Device Security.

Within Device Security, keep the os and browser in a trustworthy state should not be treated as an isolated concept. Real actions often involve an account, a selected network, on-chain state and an explicit user decision. A reliable approach is to define the task first and then review every input that can change the outcome. A familiar interface or a sense of urgency is not a reason to approve a request you cannot explain.

When reviewing keep the os and browser in a trustworthy state, prefer information that can be independently checked. Network names, addresses, contract identifiers, transaction hashes and block-explorer records are usually more useful than screenshots or messages from third parties. A wallet can surface these details, but users still need to distinguish between being connected, signing a message, granting an approval and seeing a confirmed transaction.

A practical routine is to divide the process into before, during and after. Before the action, verify the source and environment. During confirmation, read the network, address, amount, permissions or contract target. Afterward, verify the result on-chain. This makes it easier to diagnose pending transactions, display issues or DApp state mismatches without guessing.

Practical check

  • Confirm that the action matches the goal of Keep the OS and browser in a trustworthy state
  • Never provide a seed phrase, private key or verification code to anyone
  • Stop when a signature, approval or address change cannot be explained

Clipboard address substitution risk

Clipboard address substitution risk is a distinct part of understanding Device Security.

When reviewing clipboard address substitution risk, prefer information that can be independently checked. Network names, addresses, contract identifiers, transaction hashes and block-explorer records are usually more useful than screenshots or messages from third parties. A wallet can surface these details, but users still need to distinguish between being connected, signing a message, granting an approval and seeing a confirmed transaction.

A practical routine is to divide the process into before, during and after. Before the action, verify the source and environment. During confirmation, read the network, address, amount, permissions or contract target. Afterward, verify the result on-chain. This makes it easier to diagnose pending transactions, display issues or DApp state mismatches without guessing.

Within Device Security, clipboard address substitution risk should not be treated as an isolated concept. Real actions often involve an account, a selected network, on-chain state and an explicit user decision. A reliable approach is to define the task first and then review every input that can change the outcome. A familiar interface or a sense of urgency is not a reason to approve a request you cannot explain.

Practical check

  • Confirm that the action matches the goal of Clipboard address substitution risk
  • Never provide a seed phrase, private key or verification code to anyone
  • Stop when a signature, approval or address change cannot be explained

Boundaries around public Wi-Fi and shared computers

Boundaries around public Wi-Fi and shared computers is a distinct part of understanding Device Security.

A practical routine is to divide the process into before, during and after. Before the action, verify the source and environment. During confirmation, read the network, address, amount, permissions or contract target. Afterward, verify the result on-chain. This makes it easier to diagnose pending transactions, display issues or DApp state mismatches without guessing.

Within Device Security, boundaries around public wi-fi and shared computers should not be treated as an isolated concept. Real actions often involve an account, a selected network, on-chain state and an explicit user decision. A reliable approach is to define the task first and then review every input that can change the outcome. A familiar interface or a sense of urgency is not a reason to approve a request you cannot explain.

When reviewing boundaries around public wi-fi and shared computers, prefer information that can be independently checked. Network names, addresses, contract identifiers, transaction hashes and block-explorer records are usually more useful than screenshots or messages from third parties. A wallet can surface these details, but users still need to distinguish between being connected, signing a message, granting an approval and seeing a confirmed transaction.

Practical check

  • Confirm that the action matches the goal of Boundaries around public Wi-Fi and shared computers
  • Never provide a seed phrase, private key or verification code to anyone
  • Stop when a signature, approval or address change cannot be explained

Why remote control and screen sharing deserve caution

Why remote control and screen sharing deserve caution is a distinct part of understanding Device Security.

Within Device Security, why remote control and screen sharing deserve caution should not be treated as an isolated concept. Real actions often involve an account, a selected network, on-chain state and an explicit user decision. A reliable approach is to define the task first and then review every input that can change the outcome. A familiar interface or a sense of urgency is not a reason to approve a request you cannot explain.

When reviewing why remote control and screen sharing deserve caution, prefer information that can be independently checked. Network names, addresses, contract identifiers, transaction hashes and block-explorer records are usually more useful than screenshots or messages from third parties. A wallet can surface these details, but users still need to distinguish between being connected, signing a message, granting an approval and seeing a confirmed transaction.

A practical routine is to divide the process into before, during and after. Before the action, verify the source and environment. During confirmation, read the network, address, amount, permissions or contract target. Afterward, verify the result on-chain. This makes it easier to diagnose pending transactions, display issues or DApp state mismatches without guessing.

Practical check

  • Confirm that the action matches the goal of Why remote control and screen sharing deserve caution
  • Never provide a seed phrase, private key or verification code to anyone
  • Stop when a signature, approval or address change cannot be explained
Seed phrases and private keys remain under the user’s control; official staff will not ask for them. On-chain transactions usually cannot be reversed by a wallet alone, and third-party DApps and smart contracts may carry risk.

Continue with imtoken

Start with wallet, network and security knowledge before moving into on-chain actions.

Download imtoken