imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

Approval Security

Approval risk can persist long after a DApp session ends. Reviewing token allowances and revoking permissions that are no longer needed reduces the number of contracts that retain spending access.

On-chain verificationSecurity guidanceNo wallet secrets requested

Start with the target and permission scope

Start with the target and permission scope is part of the risk-control process for approval security. Security comes from key custody, device hygiene, transaction checks and approval review rather than from one feature or an absolute promise.

For approval security, official personnel should never request wallet secrets. Shared devices and public networks deserve caution, and unexpected signing prompts, clipboard changes or unfamiliar approvals are reasons to stop and verify independently.

From a practical perspective, start with the target and permission scope also means knowing when to stop. If a page asks for wallet secrets, the request is unreadable, the active network is not the expected one, or urgency and reward claims are used to push approval, verify independently before continuing.

Unlimited approval increases exposure

Unlimited approval increases exposure is part of the risk-control process for approval security. Security comes from key custody, device hygiene, transaction checks and approval review rather than from one feature or an absolute promise.

For approval security, official personnel should never request wallet secrets. Shared devices and public networks deserve caution, and unexpected signing prompts, clipboard changes or unfamiliar approvals are reasons to stop and verify independently.

From a practical perspective, unlimited approval increases exposure also means knowing when to stop. If a page asks for wallet secrets, the request is unreadable, the active network is not the expected one, or urgency and reward claims are used to push approval, verify independently before continuing.

Revocation is another on-chain transaction

Revocation is another on-chain transaction is part of the risk-control process for approval security. Security comes from key custody, device hygiene, transaction checks and approval review rather than from one feature or an absolute promise.

For approval security, official personnel should never request wallet secrets. Shared devices and public networks deserve caution, and unexpected signing prompts, clipboard changes or unfamiliar approvals are reasons to stop and verify independently.

From a practical perspective, revocation is another on-chain transaction also means knowing when to stop. If a page asks for wallet secrets, the request is unreadable, the active network is not the expected one, or urgency and reward claims are used to push approval, verify independently before continuing.

Sessions and allowances are separate

Sessions and allowances are separate is part of the risk-control process for approval security. Security comes from key custody, device hygiene, transaction checks and approval review rather than from one feature or an absolute promise.

For approval security, official personnel should never request wallet secrets. Shared devices and public networks deserve caution, and unexpected signing prompts, clipboard changes or unfamiliar approvals are reasons to stop and verify independently.

From a practical perspective, sessions and allowances are separate also means knowing when to stop. If a page asks for wallet secrets, the request is unreadable, the active network is not the expected one, or urgency and reward claims are used to push approval, verify independently before continuing.

Important risk context

Seed phrases and private keys remain under user control. Official personnel will not ask for seed phrases, private keys or verification codes. Verify address, network and amount before transfers. Confirmed on-chain transactions generally cannot be reversed by a wallet, and third-party DApps or smart contracts can carry risk.

Continue with imtoken

Use the download page when you are ready, or continue through the related guides first.

Download imtoken