Security Center

imToken Security Center

Protect seed phrases, private keys, transfers, and DApp approvals before confirming any on-chain action.

01 Verified download source

Download from trusted app-store or website entry points. Avoid search ads, group links, and unknown QR codes.

02 Offline seed phrase backup

Keep seed phrases offline. Do not screenshot, upload, or share them; support will never ask for private keys.

03 Review every confirmation

Before transfers or approvals, review the network, address, amount, contract, and signing details.

Asset Protection

Stop risks before you confirm

Wallet security is a continuous process: download verification, offline backup, transfer review, approval control, and phishing awareness.

Check the network and address

The same token name may exist on Ethereum, BNB Chain, Polygon, TRON, and other networks. The sending and receiving networks must match.

Review approvals and signatures

Verify the DApp source before connecting. Do not approve signatures you do not understand, and avoid unlimited approvals for unfamiliar contracts.

Recognize phishing messages

Messages about frozen assets, upgrade verification, or support recovery often signal risk. Return to trusted entry points before taking action.

Safety Checklist

Five steps for safer imToken use

Verify the download sourceDo not install wallet apps from private messages, chat links, or unknown QR codes.
Back up the seed phrase offlineDo not screenshot, upload to cloud storage, or send it through messaging apps.
Double-check before transfersConfirm the network, receiving address, amount, and gas asset before sending.
Review token approvalsRevoke approvals you no longer need to reduce long-term contract exposure.
Reject fake support requestsStop any request for seed phrases, private keys, verification codes, screen sharing, or remote access.

FAQ

Security FAQ

These answers cover the most common mistakes before downloading, backing up, transferring, approving, or signing.

How can I verify an imToken download?

Use trusted website or app-store entry points, then verify the domain, app name, developer details, and source. Avoid packages or QR codes sent by strangers.

Can I screenshot or store my seed phrase in the cloud?

No. Write the seed phrase down offline and store it securely. Do not screenshot, upload, or send it through chats, and never provide it to anyone.

What should I check before approving a DApp?

Check the site source, contract permissions, and approval scope. Cancel signatures you do not understand and avoid unlimited approvals for unfamiliar DApps.

What should I do if someone offers asset recovery support?

Stop the interaction. Support will not ask for seed phrases, private keys, verification codes, or remote access. Requests for these details are high risk.

Official Download

Install imToken from a trusted source

Verify the source before installing, then create or import a wallet only after the app is confirmed.

Download imToken

Continue with related security resources

Use these related resources to connect download safety, help topics, network checks, and wallet terms.

imToken downloadInstall imToken from trusted entry points and avoid third-party packages or spoofed pages. Wallet security FAQFind answers about seed phrases, private key exposure, DApp approvals, and phishing risk. Public chain transfer checksReview networks, addresses, gas fees, and transaction hashes before transferring. EVM approvals and network checksUnderstand 0x addresses, network mismatch, and unlimited approval risks. Terms and risk noticesReview self-custody duties, third-party service boundaries, and disclaimers. Layer 2 safety checksBefore using a Layer 2 network, verify the bridge path, target network, and gas asset.