imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

imtoken

Wallet Security Center

Build long-term wallet security habits around seed phrases, private keys, devices, networks, DApp approvals and transaction checks.

On this pagecore security principlesbackup and custodysignatures and approvalsdevice and network environmentpre-transaction checks

Wallet Security Center: Build long-term wallet security habits around seed phrases, private keys, devices, networks, DApp approvals and transaction checks. Wallet security is built through repeatable habits rather than a single setting. When facing a signature, approval, transfer or recovery request, protecting sensitive information and reviewing details should come before convenience.

Security principle: In Wallet Security Center, imtoken does not ask users to enter a seed phrase, private key or wallet recovery phrase.
Offline backup and private key protection

core security principles

Check 1

When working with core security principles, place the concept back into a real transaction flow. Information on screen may come from on-chain state, local wallet records or a third-party page, so verify public details such as the network, address, transaction hash or contract before deciding what to do next.

Check 2

In Wallet Security Center, the section on core security principles connects directly to the page’s main task. Any page, person or remote-control request that asks for a seed phrase, private key or verification code should be treated as high risk. A safer first response is to stop entering sensitive information and verify the situation using public on-chain data.

Within Wallet Security Center, for core security principles, keep the decision reversible for as long as possible: verify information first, then authorize only the minimum action needed. If the request changes the network, transfers an asset, grants spending permission or interacts with a contract, review the exact target and expected result before confirming.

In Wallet Security Center, a good outcome for core security principles is not simply that an interface reports success. The useful evidence is whether the expected on-chain state appears on the correct network, under the correct address or contract, and with a transaction or permission record that matches the intended action.

backup and custody

Check 1

A common mistake with backup and custody is drawing a conclusion from a single field. A stronger check compares the active network, destination, asset identity and on-chain record together, especially for same-named tokens, cross-network activity or DApp interactions.

Check 2

In Wallet Security Center, the section on backup and custody connects directly to the page’s main task. Any page, person or remote-control request that asks for a seed phrase, private key or verification code should be treated as high risk. A safer first response is to stop entering sensitive information and verify the situation using public on-chain data.

Within Wallet Security Center, for backup and custody, keep the decision reversible for as long as possible: verify information first, then authorize only the minimum action needed. If the request changes the network, transfers an asset, grants spending permission or interacts with a contract, review the exact target and expected result before confirming.

In Wallet Security Center, a good outcome for backup and custody is not simply that an interface reports success. The useful evidence is whether the expected on-chain state appears on the correct network, under the correct address or contract, and with a transaction or permission record that matches the intended action.

signatures and approvals

Check 1

For signatures and approvals, a useful review pattern is source, scope and result. Source explains where the request came from; scope shows what the action can affect; result is then checked through transaction records, block confirmations or approval state.

Check 2

In Wallet Security Center, the section on signatures and approvals connects directly to the page’s main task. Any page, person or remote-control request that asks for a seed phrase, private key or verification code should be treated as high risk. A safer first response is to stop entering sensitive information and verify the situation using public on-chain data.

Within Wallet Security Center, for signatures and approvals, keep the decision reversible for as long as possible: verify information first, then authorize only the minimum action needed. If the request changes the network, transfers an asset, grants spending permission or interacts with a contract, review the exact target and expected result before confirming.

In Wallet Security Center, a good outcome for signatures and approvals is not simply that an interface reports success. The useful evidence is whether the expected on-chain state appears on the correct network, under the correct address or contract, and with a transaction or permission record that matches the intended action.

device and network environment

Check 1

device and network environment is not only a feature label; it also has a specific risk boundary. If a page conflicts with the wallet display or the request cannot be explained clearly, stop before signing, approving or transferring and verify through trusted public information.

Check 2

In Wallet Security Center, the section on device and network environment connects directly to the page’s main task. Any page, person or remote-control request that asks for a seed phrase, private key or verification code should be treated as high risk. A safer first response is to stop entering sensitive information and verify the situation using public on-chain data.

Within Wallet Security Center, for device and network environment, keep the decision reversible for as long as possible: verify information first, then authorize only the minimum action needed. If the request changes the network, transfers an asset, grants spending permission or interacts with a contract, review the exact target and expected result before confirming.

In Wallet Security Center, a good outcome for device and network environment is not simply that an interface reports success. The useful evidence is whether the expected on-chain state appears on the correct network, under the correct address or contract, and with a transaction or permission record that matches the intended action.

pre-transaction checks

Check 1

After completing an action involving pre-transaction checks, review the outcome again. Transaction status, approval targets, network confirmations and balance changes are stronger evidence than a page-level success message alone.

Check 2

In Wallet Security Center, the section on pre-transaction checks connects directly to the page’s main task. Any page, person or remote-control request that asks for a seed phrase, private key or verification code should be treated as high risk. A safer first response is to stop entering sensitive information and verify the situation using public on-chain data.

Within Wallet Security Center, for pre-transaction checks, keep the decision reversible for as long as possible: verify information first, then authorize only the minimum action needed. If the request changes the network, transfers an asset, grants spending permission or interacts with a contract, review the exact target and expected result before confirming.

In Wallet Security Center, a good outcome for pre-transaction checks is not simply that an interface reports success. The useful evidence is whether the expected on-chain state appears on the correct network, under the correct address or contract, and with a transaction or permission record that matches the intended action.

Important risk reminder

For Wallet Security Center, Remember: the user is responsible for safeguarding the seed phrase and private keys, and official staff will not ask for a seed phrase, private key or verification code. On-chain transactions generally cannot be reversed by a wallet alone, and third-party DApps or smart contracts may involve technical or fraud risks. Review the address, network, amount, approval target and permission scope before acting.

Related reading

Continue with imtoken

Continue from the imtoken download entry after reviewing the key checks in Wallet Security Center.

Download imtoken