imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.
imtoken Knowledge & Product Center

DApp Connection Guide

Use a deliberate DApp connection sequence: verify the domain, connect, review account requests, inspect follow-up signatures and disconnect when done.

Start with the basics →
Before you start

Prepare the context before following the steps

Confirm the intended account, network and destination first. Keep recovery information offline and stop whenever a request differs from what you expected.

Understand DApp domains and connection requests first

DApp Connection Guide is easier to use when the goal is not simply to find a button, but to understand what DApp domains, connection requests, and account scope represent. Use a deliberate DApp connection sequence: verify the domain, connect, review account requests, inspect follow-up signatures and disconnect when done. Names and icons can look familiar across different networks or applications, while the underlying chain, account, contract, or permission scope may be different. Context should be verified before an action is approved.

Consider DApp domains together with connection requests to identify the account, network, asset, or permission involved. Then review account scope to determine whether the wallet is only displaying information or asking you to sign, approve, or broadcast a transaction. If the context cannot be confirmed, stop rather than relying on a screenshot, a chat message, or a familiar-looking icon.

  • Identify the real DApp domains context
  • Distinguish connection requests from look-alike labels
  • Do not skip the account scope check

Check account scope before you begin

Before starting, define the task in plain language: what you expect to view, where an asset should go, which network should be used, and whether a third-party application is involved. Then verify connection requests, account scope, and finally signature requests. This turns a complex interface into a small number of checkable decisions and makes mismatched networks or unexpected permissions easier to spot.

At the confirmation stage, treat signature requests as a separate review item rather than focusing only on the final confirmation button. For actions with on-chain consequences, read the network, address, amount, contract, function, or permission details shown by the wallet. If the request differs from the task you intended to perform, cancel it and restart from a trusted source.

  • Define the intended task first
  • Confirm that account scope matches the plan
  • Cancel when the request looks unexpected

Review signature requests during the action

After submission, use disconnecting or other public on-chain information to verify the outcome. A wallet interface may take time to refresh, and a pending transaction does not automatically mean that another transaction should be sent. Check the network and transaction identifier first so that you do not create duplicate actions or unnecessary fees.

A common mistake in DApp Connection Guide is treating “connect”, “sign”, “approve”, and “send” as equivalent. They can grant very different permissions and produce different consequences. When a DApp or smart contract is involved, each request deserves a fresh review even if the wallet was connected moments earlier.

  • Review signature requests as its own decision
  • Read the on-chain details shown by the wallet
  • Do not rely on button text alone

Common mistakes and risks in DApp Connection Guide

Security boundaries remain important throughout the workflow. A legitimate website should not ask you to enter a seed phrase, private key, or recovery phrase, and official staff should not request those secrets. Verification codes, device unlock information, and remote-control access should also be kept away from unknown parties, regardless of how urgent a message appears.

When asking for help, share public diagnostic information such as a transaction hash, network name, public address, and the exact error message when appropriate. Do not share recovery information. Public data is usually enough to investigate issues involving account scope or signature requests without transferring control of the account.

  • Connection is not the same as signing or approval
  • Reject any request for a seed phrase or private key
  • Treat unfamiliar third-party services cautiously

Use disconnecting to verify the result

For long-term use, include DApp domains, account scope, and disconnecting in periodic reviews. Remove permissions that are no longer needed, re-check familiar networks when switching contexts, and compare transaction history with what you expected to happen. For unfamiliar or higher-risk activity, a smaller test and a careful review of protocol documentation can reveal mistakes before they become expensive.

The aim is a repeatable decision method: verify the source and objective, confirm the network and target, review fees or permissions, sign only when the request matches the task, and then validate the result with public on-chain information. That method remains useful across DApp domains, connection requests, account scope, signature requests, and disconnecting even as interface layouts change.

  • Verify with disconnecting or other public data
  • Confirm the network and public address
  • Remove permissions that are no longer needed

Practical checklist

  • Never enter a seed phrase, private key or recovery phrase into a website
  • Official staff will not ask for your seed phrase, private key or verification code
  • Check the address, network and amount before transferring
  • Review every DApp signature request separately
  • Review and revoke permissions you no longer need