imtoken will never ask for your seed phrase, private key or verification code. Always review the address, network and request details before transferring, signing or approving.
imtoken

DApp Connections

Learn the complete connection flow from domain verification and account choice to network context and disconnection, while distinguishing connection requests from on-chain approvals.

On this pagePrepare before you actFollow the critical steps in orderVerify the result after submissionCommon mistakes and how to correct themA practical security checklist

Prepare before you act

A practical way to understand DApp Connections is to begin with the facts that can be verified during a real action. Safe DApp use begins with the domain: verify the service first, then review the account, network and permission requests shown by the wallet. Before doing anything consequential, identify domain verification and account selection, then check how network matching applies in the active network. A wallet can organize information and prepare requests, but the network, contract and signature details remain facts that the user should verify independently.

A useful mental model separates the environment from the action. Start with domain verification, establish the context through account selection, and use network matching together with connection permissions to understand the result. Similar labels, familiar icons or matching address formats do not prove that two assets or networks are equivalent. If key details conflict, stop and resolve the mismatch before submitting anything.

Follow the critical steps in order

When evaluating account selection, avoid relying on one visual cue. Confirm the active account and network in the wallet, then compare that information with public chain data when available. If a transaction already exists, connection permissions becomes an important verification anchor. For DApps and smart contracts, also inspect the target contract, requested permission and whether the request is proportionate to the intended action.

A repeatable sequence is more dependable than memory: identify domain verification, verify account selection, inspect network matching, review the destination or permission immediately before approval, and finally use connection permissions or another public record to confirm what happened. If one stage cannot be explained, do not use a later transaction as an experiment. On-chain actions are generally not something a wallet can simply reverse for the user.

Key points

domain verification
Verify this item in its current network and action context.
account selection
Verify this item in its current network and action context.
network matching
Verify this item in its current network and action context.
connection permissions
Verify this item in its current network and action context.

Verify the result after submission

One recurring mistake is entering an unfamiliar site from an ad; another is continuing after connecting the wrong account. Both tend to happen when a familiar interface creates confidence while the network, contract or permission has changed underneath. A source–network–target–request–result checklist shifts attention away from appearance and toward facts that can be independently checked.

It is also important to avoid assuming disconnecting also revokes token approvals. When an outcome looks wrong, inspect chain state and connection permissions before deciding on another action. Repeated submissions can create extra fees, new transactions and a more confusing troubleshooting trail. One request followed by one explicit verification step is easier to reason about.

Verification sequence

01 domain verification
02 account selection
03 network matching
04 connection permissions
05 disconnecting

Common mistakes and how to correct them

The security boundary for DApp Connections is constant: seed phrases and private keys remain under the user’s control and should never be sent to another person. Verification codes should not be shared either. Third-party DApps and smart contracts can introduce risk, so signatures and approvals deserve their own review. Old approvals should be reconsidered, and shared devices, public networks and remote-control sessions warrant extra caution.

For DApp Connections, turn disconnecting into a routine instead of treating it as a one-time lesson. Begin by stating the active network and intended target, reread critical fields immediately before approval, and verify the result with public on-chain information afterward. Experience can make this faster, but it should not remove independent checks of addresses, networks, amounts, contracts and permissions.

Avoid these shortcuts

  • entering an unfamiliar site from an ad
  • continuing after connecting the wrong account
  • assuming disconnecting also revokes token approvals

A practical security checklist

For an unfamiliar network, asset or DApp, start with a limited action that can be verified. Learn the relevant rule, perform one controlled step, then compare the outcome with what you expected. That approach makes DApp Connections evidence-driven rather than dependent on prompts and also helps isolate whether a problem belongs to an account, network, transaction or third-party request.

For DApp Connections, the goal is not to remove every uncertainty; it is to maintain a clear and repeatable verification boundary. The practical objective is clarity: know where domain verification is shown, how account selection is confirmed, what network matching can change and how connection permissions can be used for verification. Consistently applying those checks reduces avoidable errors caused by haste, misunderstanding or risky third-party behavior.

Security reminder
Never send a seed phrase, private key or verification code to anyone. Review the network, destination and request before transferring, signing or approving. Third-party DApps and smart contracts can carry risk.