> For the complete documentation index, see [llms.txt](https://help.tokenpocket.pro/en/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.tokenpocket.pro/en/security-knowledge/security-measure/verify-wallet.md). # How to verify the wallet app When using a decentralized self-custody wallet, one of the most important security prerequisites is to make sure that the wallet app you installed comes from official channels. Fake wallets usually disguise themselves as official websites, search ads, third-party APKs, or counterfeit apps. Once users import their mnemonic phrase, private key, or Keystore into a fake wallet, the address may be monitored. Once a large amount of assets is detected, the assets may be stolen immediately or permissions may be maliciously modified. *** #### How to Identify Fake Wallet Links Many users download wallets through search engines, community links, advertising pages, or installation packages sent by others. These are common ways fake wallets are spread. **Common Sources of Fake Wallets** Please pay special attention to the following download sources: * Advertisement links in search engines * Wallet download links sent through communities, private messages, or by strangers * APK installation packages provided by third-party websites * Download pages impersonating the TokenPocket official website * Websites with domain names similar to the official website but not official * Installation packages claiming to be a “new wallet version,” “exclusive version,” or “airdrop version” * Pages that require users to enter a mnemonic phrase for “verification,” “synchronization,” or “upgrade” *** #### Official TokenPocket Channels When downloading TokenPocket, please prioritize official channels for access and installation. **Official Websites** Please make sure you use the following official domains: * `https://www.tokenpocket.pro` * `https://www.tpwallet.io` * `https://www.tp.xyz` After visiting the official website, you should use the download entrance provided on the official website to access the corresponding platform download page.
*** #### Official Website Download and Verification When downloading an installation package from the official website, you should confirm that the download page comes from the TokenPocket official website and prioritize the verification methods provided by the official website to check app security. **Download from the Official Website** The operation steps are as follows: * Open the TokenPocket official website. * Click “Mobile Download” on the page or the download entrance for the corresponding system. * Enter the official download page. * Select the Android or iOS download method based on your current device system. * After the download is complete, continue to verify the app source and the integrity of the installation package. *** #### Google Play Version Verification If you use an Android device and Google Play is available in your region, it is recommended to search for and download TokenPocket through Google Play first. **How to Identify the Official App on Google Play** The operation steps are as follows: * Open Google Play. * Search for `TokenPocket` in the search bar. * Open the TokenPocket app details page. * Check the developer name, app rating, number of reviews, downloads, and app description. * Confirm that the download entrance comes from the official app details page.
Official apps usually have relatively complete app information, stable rating records, more reviews, and download data. Counterfeit apps often have a short release history, and their number of reviews, downloads, developer information, or app descriptions may appear abnormal. *** #### App Store Version Verification iOS users should download the official TokenPocket app through the App Store. Since regional policies and listing status may change, please refer to the current actual display in the App Store. **How to Identify the Official App on App Store** The operation steps are as follows: * Open the App Store. * Tap “Search” in the lower-right corner. * Enter `TP Wallet` or the app name currently displayed by the official channel in the search bar. * Open the app details page. * Check the developer information. * Confirm whether the app information, rating, reviews, and update history are normal. The original content of the current tutorial mentions that the developer information of the official app in the App Store should be: * `TP Global Ltd`
At the same time, earlier versions may have displayed: * `TOKENPOCKET FOUNDATION LTD` If you downloaded an older version from the App Store before October 8, 2022, and the developer is shown as `TOKENPOCKET FOUNDATION LTD`, it is also an earlier official version developed by TokenPocket and can be used normally. However, update services for this early version may be suspended later. *** #### Handling Suspicious Apps or Websites If you find that the app you downloaded may be a fake wallet, or if you have entered your mnemonic phrase, private key, or Keystore into a suspicious app or website, please stop using it immediately. If wallet key information has been leaked, the corresponding wallet address should be considered unsafe. Please create a new wallet through the official TokenPocket app and transfer the remaining assets to the new wallet as soon as possible. *** #### Security Reminders Please keep the following safety rules in mind: * Do not download wallet apps through search engine ads. * Do not install APK packages sent by strangers or third-party groups. * Do not use wallet download links from unknown sources. * Do not enter your mnemonic phrase, private key, or Keystore on any suspicious page. * Do not trust pages that ask you to enter a mnemonic phrase for “verification,” “synchronization,” or “upgrade.” * Always download TokenPocket through official channels. * Always verify the domain name, app developer information, and installation package hash value. * If key information has been leaked, transfer assets to a new secure wallet immediately. *** #### Summary The key to identifying whether a TP wallet is official is to confirm the download source, website domain, app developer information, and installation package integrity. Fake wallets usually disguise themselves as official websites, search ads, third-party APKs, or counterfeit apps to obtain users’ mnemonic phrases, private keys, or Keystore information. Before downloading or importing a wallet, please carefully verify whether the channel is official. Once mnemonic phrases, private keys, or Keystore information are leaked, the assets in the wallet may be at risk of being stolen. TokenPocket will never ask users for mnemonic phrases, private keys, Keystore files, or wallet passwords in any form. Please protect your wallet key information properly.