A wallet import flow is the setup process used to restore access to a cryptocurrency wallet. During this flow, a user enters a recovery phrase, seed phrase, or private key into a wallet app, browser extension, or device so the wallet can rebuild access to funds and accounts.
This step is highly sensitive because it handles the secrets that prove ownership. Attackers often target the import flow with fake wallet apps, malicious browser extensions, phishing pages, or malware that reads what the user types. If the secret is captured, the attacker may be able to take control of the wallet. Defenders reduce risk by verifying the publisher, avoiding browser-based imports on untrusted systems, using hardware wallets where possible, and never entering recovery phrases into software they do not fully trust.