imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

Step-by-step Guide

Create & Backup

Before working through Create & Backup, identify the asset, the network and the type of on-chain request you expect to see. A useful approach is to separate the task into preparation, verification, execution and post-transaction review. This reduces the chance of approving a request simply because it looks familiar.

Understanding create or import

Create or import deserves its own verification step when working with Create & Backup. Do not rely only on a familiar label or a default selection in the interface. Consider the active network, the destination or contract, the current on-chain state and the result you actually expect. For transfers, signatures or approvals, review the address, network, amount, gas information, contract or permission scope before confirmation. Afterward, use the transaction record or an appropriate block explorer to verify what happened. On-chain transactions generally cannot be reversed unilaterally by a wallet, so prevention matters more than recovery.

In a real Create & Backup workflow, create or import should not be treated as an isolated field. Read it together with the active network, the source of the asset, the destination, the party initiating the request and the expected on-chain result. If any part differs from what you intended, stop before confirming and verify the source and parameters instead of trying repeated approvals.

Keep verifiable on-chain references such as transaction hashes, contract addresses and network names when they are relevant. A web page that asks for a seed phrase, private key or verification code should be treated as a serious warning sign. Legitimate support should not request those secrets, and a wallet cannot reset or recover a private key on behalf of the user.

How seed phrase backup affects the workflow

Seed phrase backup deserves its own verification step when working with Create & Backup. Do not rely only on a familiar label or a default selection in the interface. Consider the active network, the destination or contract, the current on-chain state and the result you actually expect. For transfers, signatures or approvals, review the address, network, amount, gas information, contract or permission scope before confirmation. Afterward, use the transaction record or an appropriate block explorer to verify what happened. On-chain transactions generally cannot be reversed unilaterally by a wallet, so prevention matters more than recovery.

In a real Create & Backup workflow, seed phrase backup should not be treated as an isolated field. Read it together with the active network, the source of the asset, the destination, the party initiating the request and the expected on-chain result. If any part differs from what you intended, stop before confirming and verify the source and parameters instead of trying repeated approvals.

Keep verifiable on-chain references such as transaction hashes, contract addresses and network names when they are relevant. A web page that asks for a seed phrase, private key or verification code should be treated as a serious warning sign. Legitimate support should not request those secrets, and a wallet cannot reset or recover a private key on behalf of the user.

  • Confirm that the action matches your goal for seed phrase backup
  • Verify the address, network and amount before a transfer
  • Review the target and permission scope before signing or approving
  • Check transaction history and on-chain status after completion

Working with private-key protection

Private-key protection deserves its own verification step when working with Create & Backup. Do not rely only on a familiar label or a default selection in the interface. Consider the active network, the destination or contract, the current on-chain state and the result you actually expect. For transfers, signatures or approvals, review the address, network, amount, gas information, contract or permission scope before confirmation. Afterward, use the transaction record or an appropriate block explorer to verify what happened. On-chain transactions generally cannot be reversed unilaterally by a wallet, so prevention matters more than recovery.

In a real Create & Backup workflow, private-key protection should not be treated as an isolated field. Read it together with the active network, the source of the asset, the destination, the party initiating the request and the expected on-chain result. If any part differs from what you intended, stop before confirming and verify the source and parameters instead of trying repeated approvals.

Keep verifiable on-chain references such as transaction hashes, contract addresses and network names when they are relevant. A web page that asks for a seed phrase, private key or verification code should be treated as a serious warning sign. Legitimate support should not request those secrets, and a wallet cannot reset or recover a private key on behalf of the user.

Recovery checks and risk checks

Recovery checks deserves its own verification step when working with Create & Backup. Do not rely only on a familiar label or a default selection in the interface. Consider the active network, the destination or contract, the current on-chain state and the result you actually expect. For transfers, signatures or approvals, review the address, network, amount, gas information, contract or permission scope before confirmation. Afterward, use the transaction record or an appropriate block explorer to verify what happened. On-chain transactions generally cannot be reversed unilaterally by a wallet, so prevention matters more than recovery.

In a real Create & Backup workflow, recovery checks should not be treated as an isolated field. Read it together with the active network, the source of the asset, the destination, the party initiating the request and the expected on-chain result. If any part differs from what you intended, stop before confirming and verify the source and parameters instead of trying repeated approvals.

Keep verifiable on-chain references such as transaction hashes, contract addresses and network names when they are relevant. A web page that asks for a seed phrase, private key or verification code should be treated as a serious warning sign. Legitimate support should not request those secrets, and a wallet cannot reset or recover a private key on behalf of the user.

  • Confirm that the action matches your goal for recovery checks
  • Verify the address, network and amount before a transfer
  • Review the target and permission scope before signing or approving
  • Check transaction history and on-chain status after completion