imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.
imtoken

Home / Approval Security

imtoken

Approval Security

Approval Security is organized around real wallet actions, network differences and security checks so each step, permission and on-chain result can be understood.

Approval Security

Identify spender

Identify spender is a distinct part of understanding Approval Security. First identify the network, account and action involved, then compare what the wallet displays with what you actually intend to do. Familiarity with a workflow is not a reason to skip verification for transfers, contract calls or approvals.

Use a repeatable review sequence for identify spender: network and address first, then asset or contract, then request details, value and fees, and finally the on-chain result after submission. Cancel requests with unclear fields, unfamiliar contracts, unexpectedly broad allowances or pressure to act quickly.

Security is a continuing routine: offline backups, trusted devices, fewer unnecessary approvals, caution on public networks and skepticism toward unexpected requests. For important actions, keep a public address or transaction hash and verify the on-chain result with a block explorer. Stop when interface data conflicts with chain data.

Practical checks

  • Confirm the active network and account for identify spender
  • Verify the destination, contract or requested action
  • Never share a seed phrase, private key or verification code
  • Use a transaction hash to verify the result on-chain

Least allowance

Least allowance is a distinct part of understanding Approval Security. First identify the network, account and action involved, then compare what the wallet displays with what you actually intend to do. Familiarity with a workflow is not a reason to skip verification for transfers, contract calls or approvals.

Use a repeatable review sequence for least allowance: network and address first, then asset or contract, then request details, value and fees, and finally the on-chain result after submission. Cancel requests with unclear fields, unfamiliar contracts, unexpectedly broad allowances or pressure to act quickly.

Review the active network, account and target together rather than relying on a page label or icon. Similar address formats do not make networks interoperable. Before transferring, re-check the network, amount, gas and destination.

Practical checks

  • Confirm the active network and account for least allowance
  • Verify the destination, contract or requested action
  • Never share a seed phrase, private key or verification code
  • Use a transaction hash to verify the result on-chain

Persistent permissions

Persistent permissions is a distinct part of understanding Approval Security. First identify the network, account and action involved, then compare what the wallet displays with what you actually intend to do. Familiarity with a workflow is not a reason to skip verification for transfers, contract calls or approvals.

Use a repeatable review sequence for persistent permissions: network and address first, then asset or contract, then request details, value and fees, and finally the on-chain result after submission. Cancel requests with unclear fields, unfamiliar contracts, unexpectedly broad allowances or pressure to act quickly.

Seed phrases and private keys are account-control secrets and should never be sent through web forms, chats, email or remote-support sessions. After connecting to a DApp, inspect every signature, transaction and token approval independently; disconnecting does not necessarily revoke an on-chain allowance.

Practical checks

  • Confirm the active network and account for persistent permissions
  • Verify the destination, contract or requested action
  • Never share a seed phrase, private key or verification code
  • Use a transaction hash to verify the result on-chain

Review and revoke

Review and revoke is a distinct part of understanding Approval Security. First identify the network, account and action involved, then compare what the wallet displays with what you actually intend to do. Familiarity with a workflow is not a reason to skip verification for transfers, contract calls or approvals.

Use a repeatable review sequence for review and revoke: network and address first, then asset or contract, then request details, value and fees, and finally the on-chain result after submission. Cancel requests with unclear fields, unfamiliar contracts, unexpectedly broad allowances or pressure to act quickly.

For important actions, keep a public address or transaction hash and verify the on-chain result with a block explorer. Stop when interface data conflicts with chain data. Security is a continuing routine: offline backups, trusted devices, fewer unnecessary approvals, caution on public networks and skepticism toward unexpected requests.

Practical checks

  • Confirm the active network and account for review and revoke
  • Verify the destination, contract or requested action
  • Never share a seed phrase, private key or verification code
  • Use a transaction hash to verify the result on-chain
Seed phrases and private keys remain under user control; imtoken will never ask for them. On-chain transactions generally cannot be reversed unilaterally by a wallet.

Start with a clear verification workflow

After downloading, complete backup and network checks before transfers, signatures or approvals.

Download imtoken