Make a card

Safety

Is MetaMask safe

MetaMask is safe to use if you keep your Secret Recovery Phrase to yourself and check what you sign. People who lose money with it are almost always tricked into one of those.

Published · Updated

Make a group cardNotes and money, in one link.

What MetaMask is

A self-custody wallet made by Consensys, for the browser and the phone. MetaMask never holds your keys and cannot recover them.

Source: MetaMask, a self-custodial wallet.

How people lose money

  • Typing the Secret Recovery Phrase into a fake site or a fake support chat.
  • Signing a message that hands over a token, on a site made to look real.
  • Approving a contract to spend everything of one token.
  • Copying a look-alike address from their history.

Has MetaMask been hacked

We found no breach of MetaMask's own code. In 2022 a browser flaw called Demonic could leave a typed-in phrase on disk; MetaMask, Phantom and Brave fixed it.

Source: Halborn, the Demonic disclosure.

How to use it safely

  • Never type the phrase anywhere but MetaMask itself, on your own device.
  • Read what a site asks you to sign. If you do not understand it, do not sign.
  • Set a spending limit when a site asks for approval, not unlimited.
  • Take back old approvals you no longer use.
  • Keep large amounts in a hardware wallet.

What MetaMask will never do

Ask for your Secret Recovery Phrase. Anyone who does is a scammer.

Source: MetaMask, basic safety tips.

MetaMask and tbfcrypto

MetaMask connects to tbfcrypto on Robinhood Chain, to chip in to a card or to claim one.

The front of the card

For Ravi · Leaving the team · 7 November

Collection pot15 people chipped in 470 USDG

  • Six years and you never signed a thing you had not read.

    Nina

  • Thanks for the approvals talk. I revoked 40 of them.

    0xpaul

  • Good luck out there. Stay safe.

    Gita

Robinhood Chain

An example card. The names are made up.

Questions

Is MetaMask safe?

Yes, if you keep your Secret Recovery Phrase private and check what you sign.

Has MetaMask ever been hacked?

We found no breach of its own code. Users have lost money to phishing and bad approvals.

Who makes MetaMask?

Consensys.

Can MetaMask get my money back?

No. It never holds your keys, so it cannot reverse a payment.

Will MetaMask support ever ask for my phrase?

No. Anyone who asks is a scammer.

More guides