imtoken Web

Learn browser connection, permissions, DApp usage, disconnection and anti-phishing practices.

Pre-connection Checks

Before using browser-based services, verify your device, browser version, network environment and destination domain. Avoid entering wallet connection pages through unknown direct messages or ads.

Connection & Permissions

Connecting a wallet is different from approving assets. A DApp may later request signatures, token allowances or contract interactions. Review each request carefully and do not sign anything you do not understand.

Disconnecting After Use

After use, disconnect the site and review authorization records. Unused permissions may be revoked or adjusted according to network rules, although revocation can itself require a network fee.

Protect Sensitive Information

A webpage should not ask for recovery phrases, private keys or private-key files. Treat any page claiming to “verify,” “sync” or “recover” a wallet by asking for these credentials as highly suspicious.