imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.

Wallet & Product

imtoken Web: Browser Connections and Account Requests

imtoken Web explains browser-based wallet connections, account access, signatures, approvals and disconnection so users can distinguish connection from consent to a transaction.

On this page
The boundary of a browser connectionAccount requests and network switchingSeparate signatures from approvalsDisconnecting and cleaning up permissions

The boundary of a browser connection

A wallet connection can let a site view approved account information, but it does not reveal the private key and does not mean later requests should be accepted automatically. Browser-based wallet use is mainly about connection context and visible permissions: account connection, message signing and transaction signing are different requests. For “The boundary of a browser connection,” first identify whether the relevant fact belongs to the local wallet interface, the selected network, or a contract permission. That distinction prevents an interface message from being mistaken for a final on-chain result.

It helps to separate interface behavior from on-chain facts. A wallet can organize accounts, prepare transactions and display results, while balances, nonces, confirmations and contract state belong to a specific network. In the context of “The boundary of a browser connection,” use a consistent order: establish the account and network, inspect the specific address, contract or request parameters, and only then authorize an action that can move assets or create permissions. After an action, keep independently verifiable references such as the transaction hash, network name and destination address. If the interface is slow to update, check network state before submitting the same action again.

After completing an action related to “The boundary of a browser connection,” verify the result rather than relying only on a success message. Check the network, transaction hash, balance change or permission state against the intended outcome. If something differs, stop repeat submissions until the on-chain facts are clear.

  • Verify the active account and intended network
  • Check the address, asset and amount
  • Read gas, signature or approval details
  • Use the transaction hash to verify status

Building the check into routine use

If “The boundary of a browser connection” behaves differently from expected, record the active network, account, requester and any transaction hash, then eliminate possible causes one at a time. Do not keep signing, approving or sending assets merely to repair an issue that has not yet been identified.

Account requests and network switching

A DApp may request account access or a network change; verify that the target chain matches the intended action and question unnecessary switching requests. Browser-based wallet use is mainly about connection context and visible permissions: account connection, message signing and transaction signing are different requests. For “Account requests and network switching,” first identify whether the relevant fact belongs to the local wallet interface, the selected network, or a contract permission. That distinction prevents an interface message from being mistaken for a final on-chain result.

After an action, keep independently verifiable references such as the transaction hash, network name and destination address. If the interface is slow to update, check network state before submitting the same action again. In the context of “Account requests and network switching,” use a consistent order: establish the account and network, inspect the specific address, contract or request parameters, and only then authorize an action that can move assets or create permissions. It helps to separate interface behavior from on-chain facts. A wallet can organize accounts, prepare transactions and display results, while balances, nonces, confirmations and contract state belong to a specific network.

After completing an action related to “Account requests and network switching,” verify the result rather than relying only on a success message. Check the network, transaction hash, balance change or permission state against the intended outcome. If something differs, stop repeat submissions until the on-chain facts are clear.

  • Verify the active account and intended network
  • Check the address, asset and amount
  • Read gas, signature or approval details
  • Use the transaction hash to verify status

Common mistakes and a better sequence

If “Account requests and network switching” behaves differently from expected, record the active network, account, requester and any transaction hash, then eliminate possible causes one at a time. Do not keep signing, approving or sending assets merely to repair an issue that has not yet been identified.

Separate signatures from approvals

Message signatures, transaction signatures and token approvals can have different consequences, so review the request, contract and permission scope independently. Browser-based wallet use is mainly about connection context and visible permissions: account connection, message signing and transaction signing are different requests. For “Separate signatures from approvals,” first identify whether the relevant fact belongs to the local wallet interface, the selected network, or a contract permission. That distinction prevents an interface message from being mistaken for a final on-chain result.

After an action, keep independently verifiable references such as the transaction hash, network name and destination address. If the interface is slow to update, check network state before submitting the same action again. In the context of “Separate signatures from approvals,” use a consistent order: establish the account and network, inspect the specific address, contract or request parameters, and only then authorize an action that can move assets or create permissions. It helps to separate interface behavior from on-chain facts. A wallet can organize accounts, prepare transactions and display results, while balances, nonces, confirmations and contract state belong to a specific network.

After completing an action related to “Separate signatures from approvals,” verify the result rather than relying only on a success message. Check the network, transaction hash, balance change or permission state against the intended outcome. If something differs, stop repeat submissions until the on-chain facts are clear.

  • Verify the active account and intended network
  • Check the address, asset and amount
  • Read gas, signature or approval details
  • Use the transaction hash to verify status

How to verify the result

If “Separate signatures from approvals” behaves differently from expected, record the active network, account, requester and any transaction hash, then eliminate possible causes one at a time. Do not keep signing, approving or sending assets merely to repair an issue that has not yet been identified.

Disconnecting and cleaning up permissions

Disconnecting the front-end session does not necessarily revoke token approvals already recorded on-chain, so unused permissions should be reviewed separately. Browser-based wallet use is mainly about connection context and visible permissions: account connection, message signing and transaction signing are different requests. For “Disconnecting and cleaning up permissions,” first identify whether the relevant fact belongs to the local wallet interface, the selected network, or a contract permission. That distinction prevents an interface message from being mistaken for a final on-chain result.

It helps to separate interface behavior from on-chain facts. A wallet can organize accounts, prepare transactions and display results, while balances, nonces, confirmations and contract state belong to a specific network. In the context of “Disconnecting and cleaning up permissions,” use a consistent order: establish the account and network, inspect the specific address, contract or request parameters, and only then authorize an action that can move assets or create permissions. In a multi-chain setting, identify the destination network before checking the address, token contract and gas asset. Similar address formats are not evidence that two networks are interchangeable.

After completing an action related to “Disconnecting and cleaning up permissions,” verify the result rather than relying only on a success message. Check the network, transaction hash, balance change or permission state against the intended outcome. If something differs, stop repeat submissions until the on-chain facts are clear.

  • Verify the active account and intended network
  • Check the address, asset and amount
  • Read gas, signature or approval details
  • Use the transaction hash to verify status

A pre-confirmation review

If “Disconnecting and cleaning up permissions” behaves differently from expected, record the active network, account, requester and any transaction hash, then eliminate possible causes one at a time. Do not keep signing, approving or sending assets merely to repair an issue that has not yet been identified.

Continue with imtoken

Download access is centralized on one page so the rest of the site can focus on product knowledge, network checks and security guidance.

Download imtoken