imtoken
What to check
01
Know what each credential does
A private key typically authorizes an account; a recovery phrase may restore a set of keys. The exact design depends on the wallet.
02
Reject credential requests
A website asking for your full private key or phrase to “verify” or “unlock” a wallet is a warning sign.
03
Reduce exposure
Avoid cloud clipboards, screen sharing and untrusted browser extensions when handling sensitive details.