Introduction
Before using ImToken, it's crucial to understand five key concepts that protect your blockchain assets:
- Wallet Address
- Password
- Private Key
- Recovery Phrase (Mnemonic)
- Keystore
Think of these components like a bank account:
- Address = Account number
- Password = ATM PIN
- Private Key = Account number + PIN (full access)
- Recovery Phrase = Alternate form of private key
- Keystore + Password = Encrypted private key
1. Wallet Address
What It Is
A 42-character string starting with 0x (e.g., 0x71C7656EC7ab88b098defB751B7401B5f6d8976F).
Key Features
- Unique & Unchangeable: One address per wallet for all tokens.
- Usage: Receive/send crypto (same address for ETH, EOS, etc.).
- ⚠️ Caution: Double-check addresses when transferring to exchanges.
2. Password
Purpose
- Required to send transactions or import via Keystore.
- Minimum 8 characters (use symbols/numbers for security).
Important Notes
- Passwords are device-specific. Resetting on one device doesn’t affect others.
- Forgotten password? Use your recovery phrase or private key to reset.
3. Private Key
What It Does
A 64-character string granting full wallet control.
Security Tips
- Never share: Anyone with it can steal your funds.
- Backup offline: Write it down and store securely.
👉 Learn how to store keys safely
4. Recovery Phrase (Mnemonic)
Overview
12–24 words serving as a human-readable private key.
Backup Rules
- Only displayed once during wallet setup.
- Test restore: Verify backup by importing to a new device.
5. Keystore
How It Works
An encrypted version of your private key, locked with your password.
Usage
- Import wallets via Keystore + original password.
- Changes: Updating your password generates a new Keystore.
FAQs
Q1: What if I lose my password?
A: Use your private key or recovery phrase to reset it.
Q2: Is sharing my wallet address safe?
A: Yes—it’s public, like an email address.
Q3: Can I recover funds without a backup?
A: No. ImToken cannot retrieve lost keys or passwords.
Security Checklist
✅ Backup private key/recovery phrase offline
✅ Use strong, unique passwords
✅ Never digitize keys (no cloud/email storage)
🚨 Leaked key? Transfer funds immediately!
For advanced security: