imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

Signature Requests

Distinguish message signatures from transaction signatures and review origin, content, network and expected result before confirming.

On this pageFrom visiting a DApp to connectingMessage and transaction signaturesToken approvals and permission scopeChecks before contract interactionManaging connections and approvals afterward

Web3 interaction is a sequence of separate decisions: connection, signing, approval and transaction execution. One step should never be treated as automatic approval for the next, especially when permissions or contracts are involved.

From visiting a DApp to connecting

Web3 interaction is a sequence of separate decisions: connection, signing, approval and transaction execution. One step should never be treated as automatic approval for the next, especially when permissions or contracts are involved. In this section, from visiting a dapp to connecting is treated as part of a complete workflow. A transaction signature can change on-chain state, so network, recipient, contract, amount and expected result all deserve review. The practical question is what information is visible before an action, what can change on-chain, and what independent evidence can be checked afterward.

A reliable review separates interface labels from protocol facts. Confirm the active network, account, asset or contract involved, then compare the request with the outcome you actually expect. A message signature can still carry meaningful authorization even when it does not pay gas. This approach is especially useful when different networks use similar address formats or when a DApp asks for permissions that remain active beyond one session.

Do not use urgency as a substitute for understanding. If a signature, approval, bridge, validator action or transfer cannot be explained in plain language, stop and verify the destination, network and permission scope before continuing. On-chain transactions are often not reversible by a wallet provider, so the strongest control is review before confirmation rather than recovery afterward.

Message and transaction signatures

Web3 interaction is a sequence of separate decisions: connection, signing, approval and transaction execution. One step should never be treated as automatic approval for the next, especially when permissions or contracts are involved. In this section, message and transaction signatures is treated as part of a complete workflow. A message signature can still carry meaningful authorization even when it does not pay gas. The practical question is what information is visible before an action, what can change on-chain, and what independent evidence can be checked afterward.

A reliable review separates interface labels from protocol facts. Confirm the active network, account, asset or contract involved, then compare the request with the outcome you actually expect. A transaction signature can change on-chain state, so network, recipient, contract, amount and expected result all deserve review. This approach is especially useful when different networks use similar address formats or when a DApp asks for permissions that remain active beyond one session.

Do not use urgency as a substitute for understanding. If a signature, approval, bridge, validator action or transfer cannot be explained in plain language, stop and verify the destination, network and permission scope before continuing. On-chain transactions are often not reversible by a wallet provider, so the strongest control is review before confirmation rather than recovery afterward.

Practical checks

  • Verify the active network and destination before confirming.
  • Treat every signature or approval as a separate decision.
  • Use transaction hashes and explorers to check on-chain state when relevant.
  • Keep seed phrases, private keys and verification codes private.

Token approvals and permission scope

Web3 interaction is a sequence of separate decisions: connection, signing, approval and transaction execution. One step should never be treated as automatic approval for the next, especially when permissions or contracts are involved. In this section, token approvals and permission scope is treated as part of a complete workflow. A transaction signature can change on-chain state, so network, recipient, contract, amount and expected result all deserve review. The practical question is what information is visible before an action, what can change on-chain, and what independent evidence can be checked afterward.

A reliable review separates interface labels from protocol facts. Confirm the active network, account, asset or contract involved, then compare the request with the outcome you actually expect. A message signature can still carry meaningful authorization even when it does not pay gas. This approach is especially useful when different networks use similar address formats or when a DApp asks for permissions that remain active beyond one session.

Do not use urgency as a substitute for understanding. If a signature, approval, bridge, validator action or transfer cannot be explained in plain language, stop and verify the destination, network and permission scope before continuing. On-chain transactions are often not reversible by a wallet provider, so the strongest control is review before confirmation rather than recovery afterward.

Security note

imtoken staff will never ask for your seed phrase or private key. Do not send seed phrases, private keys or verification codes to anyone.

Checks before contract interaction

Web3 interaction is a sequence of separate decisions: connection, signing, approval and transaction execution. One step should never be treated as automatic approval for the next, especially when permissions or contracts are involved. In this section, checks before contract interaction is treated as part of a complete workflow. A message signature can still carry meaningful authorization even when it does not pay gas. The practical question is what information is visible before an action, what can change on-chain, and what independent evidence can be checked afterward.

A reliable review separates interface labels from protocol facts. Confirm the active network, account, asset or contract involved, then compare the request with the outcome you actually expect. A transaction signature can change on-chain state, so network, recipient, contract, amount and expected result all deserve review. This approach is especially useful when different networks use similar address formats or when a DApp asks for permissions that remain active beyond one session.

Do not use urgency as a substitute for understanding. If a signature, approval, bridge, validator action or transfer cannot be explained in plain language, stop and verify the destination, network and permission scope before continuing. On-chain transactions are often not reversible by a wallet provider, so the strongest control is review before confirmation rather than recovery afterward.

Practical checks

  • Verify the active network and destination before confirming.
  • Treat every signature or approval as a separate decision.
  • Use transaction hashes and explorers to check on-chain state when relevant.
  • Keep seed phrases, private keys and verification codes private.

Managing connections and approvals afterward

Web3 interaction is a sequence of separate decisions: connection, signing, approval and transaction execution. One step should never be treated as automatic approval for the next, especially when permissions or contracts are involved. In this section, managing connections and approvals afterward is treated as part of a complete workflow. A transaction signature can change on-chain state, so network, recipient, contract, amount and expected result all deserve review. The practical question is what information is visible before an action, what can change on-chain, and what independent evidence can be checked afterward.

A reliable review separates interface labels from protocol facts. Confirm the active network, account, asset or contract involved, then compare the request with the outcome you actually expect. A message signature can still carry meaningful authorization even when it does not pay gas. This approach is especially useful when different networks use similar address formats or when a DApp asks for permissions that remain active beyond one session.

Do not use urgency as a substitute for understanding. If a signature, approval, bridge, validator action or transfer cannot be explained in plain language, stop and verify the destination, network and permission scope before continuing. On-chain transactions are often not reversible by a wallet provider, so the strongest control is review before confirmation rather than recovery afterward.

Continue with imtoken

Review the relevant network and security guidance before moving into asset or DApp operations.

Download imtoken