Understanding imKey Genuine Verification: How It Works, What It Checks, and Its Limits

imKey Genuine Verification checks a device’s identity to help identify counterfeit devices. When the page shows “Genuine Verification Passed,” it means the device has passed the relevant identity checks. It does not mean that all hardware components have undergone a comprehensive integrity check.

You can also use the device’s serial number (SN) to quickly check its activation records. These two methods provide different information and can be used together.

What Is Genuine Verification?

Genuine Verification checks a device’s identity using its device certificate and authentication mechanisms associated with its Secure Element. It is designed to verify that the device’s identity originates from an imKey-authorized source, helping identify counterfeit devices.

A Secure Element (SE) is a chip that stores security-sensitive material and performs security-related operations. Genuine Verification relies on cryptographic verification, rather than judging a device’s identity solely by its appearance, packaging, or serial number.

After connecting your device to imKey Manager and completing verification, you can view the Genuine Verification result and the device’s activation status.

How Genuine Verification Works

During production, imKey digitally signs device identity information using a certificate-signing private key held in a hardware security module. This creates a device certificate, which is then written to the Secure Element.

During verification, the client reads the device certificate and submits it to the imKey server. The server uses a pretrusted issuer public key to verify the certificate’s signature and the information it covers. This confirms the source of the identity information and checks whether that information has been altered.

A device certificate can be understood as proof of identity bearing the issuer’s digital signature. Verifying the certificate’s signature confirms where that proof came from. Related authentication procedures and permission checks within the Secure Element further restrict access to protected operations. Reading or copying a certificate alone does not complete the full authentication process.

The keys used for device identity and management serve different purposes from the wallet private keys used to manage your assets. Genuine Verification does not require your mnemonic phrase or wallet private keys.

How Genuine Verification Relates to Secure Activation

When a device is first set up, its identity must be verified before it can proceed to secure activation.

After the identity checks pass, imKey updates the Secure Element’s management credentials through an authenticated secure channel. Once activation is complete, the initial management credentials used during production no longer grant the corresponding management permissions. Anyone holding only those initial credentials can no longer use them to manage the activated device.

The two results shown on the page should therefore be interpreted separately:

• Genuine Verification: Checks the device’s identity.
• Activation status and first activation time: Help you check whether the device’s activation records match your actual use.

How Does an SN Lookup Differ from Genuine Verification?

You can first perform a quick activation record lookup, then connect the device to complete Genuine Verification.

An SN lookup is useful for quickly checking device records, but a serial number is not cryptographic proof of a device’s identity. Even if an SN returns normal records, that result alone cannot confirm that the device in your possession is genuine.

We recommend checking the SN both before and after the first activation. Before activation, the device should appear as not activated. After activation, it should appear as activated, and the first activation time should match when you activated it.

Further reading: How to Find Your imKey SN and Check Device Status

The Limits of Genuine Verification

Genuine Verification focuses on device identity and related authentication mechanisms. It does not inspect every hardware component, such as the casing, circuitry, and ports, for integrity.

If the original Secure Element remains in place and can complete authentication normally, unauthorized physical modifications to other components—such as the addition of a spying implant—may go undetected by Genuine Verification.

Therefore, “Genuine Verification Passed” is not proof that the device has never been opened or modified, that no components have been added inside it, or that it is free from other security risks.

If you notice anything unusual about the packaging, the device’s appearance, or its behavior during use, stop using it and contact official support, even if verification has passed.

Frequently Asked Questions

1. If my SN lookup results are normal, should I still complete Genuine Verification?

Yes, we recommend it. An SN lookup shows the activation records associated with that serial number. Connecting your device to imKey Manager for Genuine Verification allows its identity to be checked using the device certificate and related authentication mechanisms. Neither method replaces the other.

2. Does passing Genuine Verification mean the device has never been opened or modified?

No. Genuine Verification is not a comprehensive hardware integrity check. If the original Secure Element can still authenticate normally, physical modifications to other components may go undetected.

3. Does “Device Activated” mean the device is secondhand?

This status alone is not enough to determine that. If you have already activated the device, an “Activated” status is expected. If you have not activated it but the lookup shows it as activated, or if the first activation time does not match when you activated it, stop using the device and contact official support.

4. If verification is incomplete or fails, does that necessarily mean the device is counterfeit?

No. Network or device connection issues may prevent verification from completing. Follow the on-screen instructions to check the connection and try again. If the result explicitly states that verification failed, or the issue persists after retrying, do not transfer assets to the wallet. Contact official support for further investigation.

5. Do I need to enter my mnemonic phrase or wallet private keys during verification?

No. Never provide your mnemonic phrase or wallet private keys on any website, in any software, or in any support conversation claiming to offer “Genuine Verification,” a “security check,” or a “device repair.”

If you have questions about your verification results, contact support@imkey.im.