MetaMask Security Center

Web3 wallet safety & crypto protection
Privacy

Be secure when using crypto

Protect your MetaMask wallet, Ethereum assets, DeFi positions, and NFTs with these essential security practices.

Security alert: MetaMask will never ask for your Secret Recovery Phrase. No legitimate support agent will DM you first. Never share your private key.

Guard your Secret Recovery Phrase

Write it on paper, store it offline, and keep multiple copies in secure locations. Never save it digitally or share it.

Recognize phishing sites

Fake MetaMask sites and browser extensions steal recovery phrases. Only download from the official browser store or metamask.io.

Verify transaction details

Before signing, check the recipient address, amount, and gas fees. Use a hardware wallet for large balances.

Revoke risky approvals

Token approvals can drain your wallet. Use a trusted revoke tool to remove unlimited allowances you no longer need.

Secure your browser

Use a separate browser profile for crypto. Keep extensions minimal, update Chrome, and avoid public Wi-Fi without a VPN.

Stay skeptical on Discord & X

Scammers impersonate support, founders, and influencers. Never click urgent links or download files from strangers.

Daily safety checklist

  • Lock MetaMask when not in use.
  • Check the site origin before connecting.
  • Read every signature and transaction request.
  • Disconnect unused dApps.
  • Use a strong password and 2FA for your device.