Connect

A DApp connection only opens a communication channel with an account. It does not justify automatically accepting later signatures, transactions, or approvals.

Sign

Verify the domain and active network, then inspect the account and contract involved in each request. A prompt that does not match the action shown on the page should be treated as a warning sign.

Before you continue
  • Network matches the intended asset or service
  • Address or contract has been independently checked
  • No seed phrase, private key, or code is being requested

Approve

Token and NFT permissions can persist beyond the browser session. Check the spender, allowance or collection scope, and whether the permission is still needed after completing an activity.

Interact with contracts

Smart contracts, bridges, front ends, and third-party infrastructure can all fail or be abused. Use trusted entry points, limit exposure, and avoid treating “gasless” or “one-click” as proof of safety.

Review after the action

Keep the transaction hash and confirm the network and final status after completing a transfer or contract interaction. After DApp use, also review whether a persistent approval remains. Breaking large operations into smaller verifiable steps can make problems easier to spot.

A non-negotiable security boundary

A normal wallet guide never requires you to send a seed phrase, private key, or verification code to another person. Public addresses and transaction hashes are enough for many support and troubleshooting questions.

Practical verification for Web3 Guides

A practical way to work with Web3 Guides is to separate preparation, review, execution, verification, and maintenance. Start by identifying the active network and account, then use Connect, Sign, and Approve as checkpoints for the address, asset, contract, fee, or permission involved. After an action is broadcast, keep the transaction hash and verify it on the correct network. When a DApp or smart contract is involved, also review persistent approvals after the session ends. Public addresses and transaction hashes are appropriate troubleshooting references; seed phrases, private keys, and verification codes are not. Any workflow that asks for those secrets should be stopped and independently rechecked.

Security reminder: imtoken staff will never ask for your seed phrase, private key, or verification code.

On-chain transactions generally cannot be reversed by a wallet provider. Review the address, network, amount, contract, and requested permissions before signing.

Related reading