On this page
Understand Browser connections first
Working with imtoken Web is less about memorizing button locations and more about understanding what each action represents on-chain. Browser connections tells you what is being reviewed now, while Account requests and Signatures and approvals provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.
A reliable imtoken Web workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Browser connections, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.
After an action involving Browser connections, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.
What to review in practice
- Confirm the active network is the one you intended and understand how Browser connections relates to the action.
- Verify addresses, contracts and request origins rather than trusting names or icons alone.
- Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.
How Account requests changes the workflow
To understand Account requests, place it back inside the full imtoken Web workflow. Account requests tells you what is being reviewed now, while Signatures and approvals and Session management provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.
A reliable imtoken Web workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Account requests, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.
After an action involving Account requests, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.
What to review in practice
- Confirm the active network is the one you intended and understand how Browser connections relates to the action.
- Verify addresses, contracts and request origins rather than trusting names or icons alone.
- Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.
Build a review sequence around Signatures and approvals
To understand Signatures and approvals, place it back inside the full imtoken Web workflow. Signatures and approvals tells you what is being reviewed now, while Session management and Disconnecting provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.
A reliable imtoken Web workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Signatures and approvals, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.
After an action involving Signatures and approvals, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.
What to review in practice
- Confirm the active network is the one you intended and understand how Browser connections relates to the action.
- Verify addresses, contracts and request origins rather than trusting names or icons alone.
- Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.
Risks and common mistakes involving Session management
To understand Session management, place it back inside the full imtoken Web workflow. Session management tells you what is being reviewed now, while Disconnecting and Browser connections provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.
A reliable imtoken Web workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Session management, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.
After an action involving Session management, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.
What to review in practice
- Confirm the active network is the one you intended and understand how Browser connections relates to the action.
- Verify addresses, contracts and request origins rather than trusting names or icons alone.
- Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.
Turn Disconnecting into a repeatable habit
To understand Disconnecting, place it back inside the full imtoken Web workflow. Disconnecting tells you what is being reviewed now, while Browser connections and Account requests provide context for whether the next action makes sense. Before proceeding, confirm that the wallet and network are the ones you intended to use, then review the address, contract or request origin. If the purpose is unclear or the network does not match, stop rather than guessing.
A reliable imtoken Web workflow keeps verifiable references such as the network name, address or contract address, transaction hash, block-explorer status and the exact permission being requested. Asset names and icons are useful hints but are not a substitute for on-chain identifiers. With Disconnecting, avoid confirming something simply because it looks familiar; spoofed pages, wrong networks and malicious requests are designed to exploit that shortcut.
After an action involving Disconnecting, review the result. If a transaction was created, use its hash to check broadcast, block inclusion and confirmations. If a DApp session or approval was created, identify the connected origin and permission scope, and consider disconnecting or revoking access when it is no longer needed. This turns a one-time action into a process you can verify later.
What to review in practice
- Confirm the active network is the one you intended and understand how Browser connections relates to the action.
- Verify addresses, contracts and request origins rather than trusting names or icons alone.
- Before submission, review amount, gas, approval scope or signature details; afterward, keep verifiable on-chain references.