Use a trusted device

Practical focus: Use a trusted device

The purpose of “Use a trusted device” is not to memorize a screen layout but to understand the decision process behind Device Security. Seed phrases and private keys represent control over wallet assets. Keep them under your own custody and prefer offline backups over screenshots, chats, or shared cloud storage. This distinction prevents many mistakes caused by familiar-looking interfaces.

Legitimate support should never require your seed phrase, private key, or verification code, and a website should not ask you to paste those secrets in order to “verify” a wallet. A practical review order is consistent across interfaces: confirm the active network, verify the address or contract, read the amount or permission scope, and then decide how the result will be checked on-chain. This keeps the workflow useful even when a product interface changes.

If something does not match expectations, avoid repeatedly submitting the same action. Preserve the transaction hash when available, verify the current network through a known block explorer, and review any recent approvals or network changes. Third-party DApps and contracts can introduce separate risks, so unusual prompts deserve an independent check.

Keep system and browser current

Practical focus: Keep system and browser current

The purpose of “Keep system and browser current” is not to memorize a screen layout but to understand the decision process behind Device Security. Legitimate support should never require your seed phrase, private key, or verification code, and a website should not ask you to paste those secrets in order to “verify” a wallet. In practice, verifying context before acting is more reliable than trying to repair an irreversible action later.

Public computers, open Wi‑Fi, remote-control tools, and clipboard tampering can increase operational risk. Important transfers are better performed on a trusted device and network. A practical review order is consistent across interfaces: confirm the active network, verify the address or contract, read the amount or permission scope, and then decide how the result will be checked on-chain. This keeps the workflow useful even when a product interface changes.

If something does not match expectations, avoid repeatedly submitting the same action. Preserve the transaction hash when available, verify the current network through a known block explorer, and review any recent approvals or network changes. Third-party DApps and contracts can introduce separate risks, so unusual prompts deserve an independent check.

  • Verify the active network and target
  • Never share a seed phrase, private key, or verification code
  • Keep the transaction hash or other useful on-chain verification details

Understand public network exposure

Practical focus: Understand public network exposure

The purpose of “Understand public network exposure” is not to memorize a screen layout but to understand the decision process behind Device Security. Public computers, open Wi‑Fi, remote-control tools, and clipboard tampering can increase operational risk. Important transfers are better performed on a trusted device and network. For on-chain activity, it helps to keep the network, target, and verifiable outcome in view at all times.

On-chain transactions generally cannot be reversed unilaterally by a wallet, so checking the address, network, and amount before sending is more effective than trying to recover afterward. A practical review order is consistent across interfaces: confirm the active network, verify the address or contract, read the amount or permission scope, and then decide how the result will be checked on-chain. This keeps the workflow useful even when a product interface changes.

If something does not match expectations, avoid repeatedly submitting the same action. Preserve the transaction hash when available, verify the current network through a known block explorer, and review any recent approvals or network changes. Third-party DApps and contracts can introduce separate risks, so unusual prompts deserve an independent check.

Watch the clipboard and remote-control tools

Practical focus: Watch the clipboard and remote-control tools

The purpose of “Watch the clipboard and remote-control tools” is not to memorize a screen layout but to understand the decision process behind Device Security. On-chain transactions generally cannot be reversed unilaterally by a wallet, so checking the address, network, and amount before sending is more effective than trying to recover afterward. These fundamentals directly affect the quality of decisions around transfers, signatures, and approvals.

Seed phrases and private keys represent control over wallet assets. Keep them under your own custody and prefer offline backups over screenshots, chats, or shared cloud storage. A practical review order is consistent across interfaces: confirm the active network, verify the address or contract, read the amount or permission scope, and then decide how the result will be checked on-chain. This keeps the workflow useful even when a product interface changes.

If something does not match expectations, avoid repeatedly submitting the same action. Preserve the transaction hash when available, verify the current network through a known block explorer, and review any recent approvals or network changes. Third-party DApps and contracts can introduce separate risks, so unusual prompts deserve an independent check.

  • Verify the active network and target
  • Never share a seed phrase, private key, or verification code
  • Keep the transaction hash or other useful on-chain verification details

Check the environment before important actions

Practical focus: Check the environment before important actions

The purpose of “Check the environment before important actions” is not to memorize a screen layout but to understand the decision process behind Device Security. Seed phrases and private keys represent control over wallet assets. Keep them under your own custody and prefer offline backups over screenshots, chats, or shared cloud storage. A repeatable review routine reduces errors caused by urgency or habitual clicking.

Legitimate support should never require your seed phrase, private key, or verification code, and a website should not ask you to paste those secrets in order to “verify” a wallet. A practical review order is consistent across interfaces: confirm the active network, verify the address or contract, read the amount or permission scope, and then decide how the result will be checked on-chain. This keeps the workflow useful even when a product interface changes.

If something does not match expectations, avoid repeatedly submitting the same action. Preserve the transaction hash when available, verify the current network through a known block explorer, and review any recent approvals or network changes. Third-party DApps and contracts can introduce separate risks, so unusual prompts deserve an independent check.

A final security principle

Your seed phrase and private keys should remain under your control. imtoken staff will never ask for them. On-chain transactions usually cannot be reversed by a wallet alone, and third-party DApps or smart contracts can carry independent risks.