How to Set Up imToken: Setup and Security Guide
imToken launched in 2016, which makes it one of the longest-running wallets still in active use. It covers Ethereum, Bitcoin, Cosmos and EOS, and it has a large user base across Asia.
A long track record is worth something in this category. It means the wallet has survived multiple market cycles, several waves of attacks, and the scrutiny that comes with holding a lot of people's money for a long time.
Setting up
Download from token.im or the official stores.
- Install and choose to create an identity, which generates one phrase covering multiple chains
- Write down the recovery phrase
- Set a password — used locally and to encrypt keystore exports
The identity model is the thing to understand: one phrase derives your Ethereum, Bitcoin and Cosmos wallets together, so a single backup covers everything rather than one per chain.
Phrase and keystore
imToken offers two backup formats, and the distinction matters.
- The recovery phrase restores everything, in any compatible wallet. This is the primary backup.
- A keystore file is an encrypted single-chain key, protected by your password. Useful for moving one account between applications; useless without the password, and it does not cover your other chains.
Back up the phrase. Treat a keystore as a convenience rather than a substitute — a keystore whose password you have forgotten is as lost as a missing phrase.
Storing it
Paper, two copies, two locations. Never screenshot, never type it anywhere except a wallet import screen, and never share it with anyone at all.
Observation wallets
imToken can watch an address without holding its keys. You see balances and transactions and can sign nothing.
This is more useful than it sounds. It lets you monitor a hardware wallet from your phone without exposing anything, and it lets you keep an eye on an address you do not control. There is no risk in adding one, because there is nothing to sign with.
Mistakes that cost people money
Backing up only a keystore
A keystore covers one chain and depends on a password. If that is your only backup and the password goes, the account goes with it.
Fake support in group chats
imToken has a large community presence and the scams follow the users. Any request for a phrase or a keystore is theft, without exception.
Unverified token contracts
Take contract addresses from the project's own site or a block explorer, never from a forwarded message.
Where it fits
imToken rates 7.3/10 in our wallet rankings. It is solid and well-established, with narrower chain coverage than newer multi-chain wallets. For breadth see Trust Wallet; for long-term holdings see hardware.