{"id":7407,"date":"2022-11-29T05:30:46","date_gmt":"2022-11-29T05:30:46","guid":{"rendered":"https:\/\/cyberscrilla.com\/staging\/4768\/?p=7407"},"modified":"2022-11-29T05:30:52","modified_gmt":"2022-11-29T05:30:52","slug":"how-to-keep-metamask-secure","status":"publish","type":"post","link":"https:\/\/cyberscrilla.com\/staging\/4768\/how-to-keep-metamask-secure\/","title":{"rendered":"How to Keep MetaMask Secure from Hackers (11 Practical Steps)"},"content":{"rendered":"\n

Knowing how to keep your MetaMask wallet secure from hackers is essential to protect your digital assets. Failing to secure your wallet could lead to your assets being stolen and all of your funds drained. <\/p>\n\n\n\n

Having used MetaMask for years myself, I\u2019ve developed a list of actionable steps you can take to keep your MetaMask wallet safe from hackers.<\/p>\n\n\n\n

How to Keep Your MetaMask Wallet Safe<\/h2>\n\n\n\n

1. Only download MetaMask from the official site<\/h3>\n\n\n\n
\"MetaMask's
MetaMask’s official website<\/figcaption><\/figure>\n\n\n\n

Let’s start with the basics. The only place you should download both the MetaMask extension and mobile app is the official website, which is <\/strong>MetaMask.io<\/strong><\/a>.<\/strong><\/p>\n\n\n\n

If you download this wallet from any other location\u2014even your mobile device\u2019s app store\u2014you\u2019re putting your funds at extreme risk. <\/p>\n\n\n\n

Downloading a fake MetaMask wallet is the quickest way to get scammed.<\/p>\n\n\n\n

The moment you fund your wallet, you\u2019ll actually be funding someone else\u2019s pocket. <\/p>\n\n\n\n

Be sure to double-check that you\u2019re visiting the correct URL, especially if you type it into Google search as it could result in a fake website.<\/p>\n\n\n\n

2. Create a secure password<\/h3>\n\n\n\n
\"Components
Components of a strong password<\/figcaption><\/figure>\n\n\n\n

When you create your MetaMask<\/a> password make sure that it\u2019s secure as can be. If you create a password that\u2019s so complicated you can\u2019t even remember it, that\u2019s okay. <\/p>\n\n\n\n

You should create a password that you\u2019ve never used before.<\/p>\n\n\n\n

Moreover, make sure to use upper and lower case letters, various numbers, and symbols. The more random your password is the better. <\/p>\n\n\n\n

That said, it\u2019s best not to use words. Instead, keep it completely random and write your password down on a piece of paper and store it in a safe location.\u00a0<\/p>\n\n\n\n

Never store your password online or on your device. Hackers can gain access to it if your device is compromised. <\/p>\n\n\n\n

Don\u2019t worry if you forget or lose your password though, you can always reset it using your wallet\u2019s secret recovery phrase<\/a>. <\/p>\n\n\n\n

Believe me, I\u2019ve done this several times.<\/p>\n\n\n\n

3. Store your seed phrase offline<\/h3>\n\n\n\n
\"Store
Metal seed phrase plate<\/figcaption><\/figure>\n\n\n\n

Your wallet\u2019s seed phrase (secret recovery phrase) is the key to accessing your funds. Anyone who knows your seed phrase has full access and control over your wallet. <\/p>\n\n\n\n

This phrase is given to you when you create a new MetaMask wallet. You must record this phrase in the exact order as it\u2019s displayed during the creation of your wallet. <\/p>\n\n\n\n

Similar to your password, you should never store your secret recovery phrase anywhere online.<\/p>\n\n\n\n

A good option is to write your phrase down on a piece of paper (preferably multiple pieces of paper) and store it in various locations that you have access to, but are still safe. <\/p>\n\n\n\n

If you don\u2019t have a fireproof safe at home<\/a>, I highly suggest you get one and store it there.<\/p>\n\n\n\n

For further protection and longevity, I can\u2019t recommend a fireproof seed storage plate<\/a> enough. <\/p>\n\n\n\n

A piece of paper works fine. But recording your phrase on a nice chunk of metal ensures your phrase remains legible even in the harshest conditions.<\/p>\n\n\n\n

4. Never share your seed phrase<\/h3>\n\n\n\n
\"Fake
Scam comments on Twitter<\/figcaption><\/figure>\n\n\n\n

After securing your seed phrase make sure to never share it with anyone. Not your mom, your bank teller, your CPA, and especially not \u201cMetaMask Support\u201d.<\/p>\n\n\n\n

First off, the real MetaMask Support would never ask you for your secret phrase. If they do, they\u2019re not the real support. This is a common scam.<\/p>\n\n\n\n

The only reason someone would need to know your seed phrase is to access your wallet\u2019s funds. <\/p>\n\n\n\n

All transactions executed via your wallet can be viewed publicly on the blockchain, hence, no one would ever need your secret phrase to view such data.\u00a0<\/p>\n\n\n\n

5. Don\u2019t connect your wallet to random websites<\/h3>\n\n\n\n
\"Phishing
Phishing links in my Twitter DM<\/figcaption><\/figure>\n\n\n\n

One of the most common ways MetaMask wallets are hacked<\/a> is through a phishing link. These links direct you to a malicious website, that once connected, will drain your entire wallet.<\/p>\n\n\n\n

These links can appear almost anywhere, but the most common places are Twitter, Discord, and Instagram DMs and posts, emails, and spammy websites.<\/p>\n\n\n\n

Unless you are absolutely certain the site you\u2019re connecting to can be trusted, you should never connect your wallet to a random site. <\/p>\n\n\n\n

If you want to risk it, perhaps you should consider getting a separate wallet (we\u2019ll discuss this later) for situations like this.<\/p>\n\n\n\n

6. Always disconnect MetaMask from dapps<\/h3>\n\n\n\n

Even if you are connected to a trusted website or decentralized application (dapp), there\u2019s no guarantee that it can\u2019t be hacked. <\/p>\n\n\n\n

That\u2019s why it\u2019s important to always disconnect MetaMask from dapps when you are done.<\/p>\n\n\n\n

How do you disconnect MetaMask from websites? Follow the steps below.<\/p>\n\n\n\n

\"3<\/figure>\n\n\n\n