imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

imtoken

Create & Backup

Start with wallet creation or import, then understand seed phrases, private keys, offline backup and recovery checks.

On this page

Understand Create a wallet first

The key to Create & Backup is connecting what the interface shows with the actual on-chain state and reviewing the details before submission. Create a wallet tells you what is being reviewed now, while Import a wallet and Seed phrase backup provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.

A reliable Create & Backup workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Create a wallet, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.

After an action involving Create a wallet, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.

What to review in practice

  • Confirm the active network is the one you intended and understand how Create a wallet relates to the action.
  • Verify addresses, contracts and request origins rather than trusting names or icons alone.
  • Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.

How Import a wallet changes the workflow

To understand Import a wallet, place it back inside the full Create & Backup workflow. Import a wallet tells you what is being reviewed now, while Seed phrase backup and Private key protection provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.

A reliable Create & Backup workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Import a wallet, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.

After an action involving Import a wallet, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.

What to review in practice

  • Confirm the active network is the one you intended and understand how Create a wallet relates to the action.
  • Verify addresses, contracts and request origins rather than trusting names or icons alone.
  • Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.

Build a review sequence around Seed phrase backup

To understand Seed phrase backup, place it back inside the full Create & Backup workflow. Seed phrase backup tells you what is being reviewed now, while Private key protection and Recovery checks provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.

A reliable Create & Backup workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Seed phrase backup, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.

After an action involving Seed phrase backup, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.

What to review in practice

  • Confirm the active network is the one you intended and understand how Create a wallet relates to the action.
  • Verify addresses, contracts and request origins rather than trusting names or icons alone.
  • Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.

Risks and common mistakes involving Private key protection

To understand Private key protection, place it back inside the full Create & Backup workflow. Private key protection tells you what is being reviewed now, while Recovery checks and Create a wallet provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.

A reliable Create & Backup workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Private key protection, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.

After an action involving Private key protection, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.

What to review in practice

  • Confirm the active network is the one you intended and understand how Create a wallet relates to the action.
  • Verify addresses, contracts and request origins rather than trusting names or icons alone.
  • Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.

Turn Recovery checks into a repeatable habit

To understand Recovery checks, place it back inside the full Create & Backup workflow. Recovery checks tells you what is being reviewed now, while Create a wallet and Import a wallet provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.

A reliable Create & Backup workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Recovery checks, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.

After an action involving Recovery checks, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.

What to review in practice

  • Confirm the active network is the one you intended and understand how Create a wallet relates to the action.
  • Verify addresses, contracts and request origins rather than trusting names or icons alone.
  • Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.
Security principle: Users remain responsible for their seed phrases and private keys. imtoken will never ask for a seed phrase, private key or verification code. Third-party DApps and smart contracts can carry risk, so review each signature and approval separately.

Related reading

Ready to use imtoken?

All download actions go through the dedicated download page.

Download imtoken