MetaMask Guide: How to Set Up and Use It Safely

What is MetaMask?

MetaMask is the most widely used self-custodial crypto wallet — a free browser extension and mobile app, built by Consensys, that lets you hold your own keys, store tokens and NFTs, and connect to thousands of on-chain apps. It started as an Ethereum wallet and now spans EVM Layer 2s and, increasingly, non-EVM chains like Solana and Bitcoin. "Self-custodial" is the whole point: MetaMask never holds your funds, and only you can authorize a transaction. Last verified: 2026-06-21.

If you've done anything on-chain in the last several years — minted an NFT, used a DEX, claimed an airdrop — you've probably met the orange fox. MetaMask has been the default gateway to Ethereum since 2016, with well over 100 million lifetime users. It is the closest thing crypto has to a universal login.

The model is fundamentally different from an exchange account. On Coinbase or Binance, the company holds your coins and you log in with an email and password they can reset. With MetaMask, you hold the keys directly. That means no company can freeze your funds, censor your transactions, or lose them in a bankruptcy — but it also means there is no "forgot password," no support agent who can reverse a mistake, and no safety net other than the one you build. Understanding that trade-off is the single most important thing in this guide.

Bottom line: MetaMask gives you a self-custodial passport to the entire EVM world (and beyond) for free. The software is mature and audited; the risk lives almost entirely in how you handle your Secret Recovery Phrase and which transactions you sign.

Extension or mobile app — which should you use?

Use the browser extension for desktop dapp interaction (DeFi, NFTs, governance) and the mobile app for on-the-go access, scanning WalletConnect QR codes, and the MetaMask Card. They sync via the same Secret Recovery Phrase, so most people run both. Last verified: 2026-06-21.

You import the same wallet on both by entering your Secret Recovery Phrase. A common, safe pattern: extension on a desktop you trust for serious DeFi, mobile for balance checks and spending. Both are hot wallets, so neither replaces a hardware wallet for large sums.

How to install and set up MetaMask

Install from metamask.io (or the official app stores), create a wallet, and — before anything else — back up your 12-word Secret Recovery Phrase offline. Fund it with a small test amount first. Last verified: 2026-06-21.

1. Install from the official source. Type metamask.io directly, or get the app from the App Store / Google Play. Do not click MetaMask search ads, email links, or "download" buttons on random sites — cloned MetaMask installers are a leading cause of theft.
2. Create a new wallet and set a strong device password. This unlocks the app on this device only.
3. Reveal and back up your Secret Recovery Phrase. Write the 12 words on paper (or stamp them in metal). Store offline. See the next section — this step matters more than all the others combined.
4. Confirm the phrase by re-entering the words. MetaMask creates your first account (an Ethereum address usable on every EVM chain).
5. Add your networks (Base, Arbitrum, Linea, Polygon, etc.) and send a small test transaction before moving real size. Always keep a little native gas token on hand.

⚠️ The fatal mistake: funding a wallet before backing up the recovery phrase, then losing the device. Back up first, fund second. Always.

Your Secret Recovery Phrase: the one thing that matters

The Secret Recovery Phrase (SRP) is 12 words that generate and control every account in your wallet. It is the master key. Anyone who sees it can drain you on any device; if you lose it, no one — including Consensys — can recover your funds. Store it offline, never digitally, and never type it into a website. Last verified: 2026-06-21.

This deserves its own section because nearly every catastrophic MetaMask loss traces back to the SRP, not to a flaw in the app. Internalize these rules:

• MetaMask will never ask for your SRP — not by email, not by pop-up, not by "support." Any request for it is a scam, 100% of the time.
• Never type it into a website. You only ever enter the SRP into the MetaMask app itself, when restoring a wallet. A site asking for it is stealing it.
• Keep it offline. No screenshots, no cloud notes, no synced password managers, no photos, no email drafts. Paper or metal, stored physically.
• The password is not the SRP. Your device password is local and resettable with the SRP. The SRP is the account and is irreplaceable.
• Consider splitting storage. For large holdings, some users store backups in two separate secure locations so a single fire, flood, or theft doesn't wipe out access.

Mental model: the SRP is not a password you can change — it's the deed to your funds, written once. Treat the slip of paper like cash equal to everything you'll ever hold.

Adding networks: Ethereum, L2s, and beyond

MetaMask defaults to Ethereum mainnet but works across every EVM network — Layer 2s like Base, Arbitrum, Optimism, Linea, and chains like Polygon and BNB. Add networks from the network menu (many auto-populate), keep the right native token for gas on each, and verify network details before adding custom ones. Last verified: 2026-06-21.

Your single address works on every EVM chain — the same 0x… receives funds on Ethereum, Base, Arbitrum, and so on. What changes is which network you're "on" and which token pays gas:

To add a network, open the network selector — MetaMask suggests popular ones in a few clicks. For custom networks, only use parameters from the project's official docs or a trusted source like a verified chain registry; a malicious RPC can lie to you about balances and transactions. Beyond EVM, recent MetaMask versions add Solana and Bitcoin accounts — confirm support in your current app version, as features roll out gradually across extension and mobile.

Sending, receiving, and gas fees

Receiving is free: share your address or QR code. Sending costs gas — paid in the network's native token — which rises with congestion. MetaMask estimates gas for you and lets you set the priority; L2s cost cents, Ethereum mainnet can cost much more. Last verified: 2026-06-21.

• To receive: copy your address or show the QR. Make sure the sender uses the same network you expect — sending an L2 token to the wrong chain is a common, painful error.
• To send: paste the recipient, pick the amount, and review the gas fee before confirming. MetaMask shows a market estimate; you can speed up or save by adjusting priority.
• Gas reality: fees are paid to the network, not MetaMask. On Ethereum mainnet they can spike; on L2s (Base, Arbitrum, Linea) they're typically a few cents. Always keep a small gas reserve on each chain you use, or you'll be unable to move funds.

Address-poisoning warning: scammers send tiny "dust" transactions from look-alike addresses hoping you copy one from your history. Always verify the full address, not just the first and last characters.

Swapping tokens inside MetaMask

MetaMask Swaps aggregates quotes across DEXs and routes to the best price, charging a service fee of about 0.875% on top of gas and DEX spread. It's convenient and stays self-custodial, but compare against a dedicated aggregator for large trades. Last verified: 2026-06-21.

Swaps let you exchange one token for another without leaving the wallet or touching a centralized exchange. MetaMask polls multiple decentralized exchanges and aggregators, then routes your order to the best available quote.

What to keep in mind:

• The fee: roughly 0.875% of the trade, baked into the quote, plus network gas and the underlying DEX spread. Convenient, but not the cheapest venue for big orders.
• Slippage: for volatile or low-liquidity tokens, set a sensible slippage tolerance to avoid a bad fill or a failed transaction.
• Token approvals: swapping a new token first requires an approval transaction granting the contract permission to spend it. Approve only what you need and revoke stale approvals later (see security below).

For routine, modest swaps the built-in tool is excellent. For large size, it's worth checking a standalone aggregator to see if the savings beat the convenience.

Bridging across chains

MetaMask Bridge moves assets between networks — say ETH on mainnet to Base or Linea — by routing through bridge providers it aggregates. Bridging carries provider fees and takes anywhere from seconds to minutes; double-check the destination network and token. Last verified: 2026-06-21.

Because your funds live on specific chains, you'll eventually need to bridge — move value from one network to another. MetaMask's built-in Bridge compares routes across multiple bridge providers and executes the transfer for you, so you don't have to find and trust a bridge UI yourself.

Practical notes: bridges charge their own fees and have their own risk profiles; native bridges (e.g., an L2's canonical bridge) are generally the most conservative but can be slower, while third-party routes are faster but add a layer of smart-contract risk. Start small the first time, and confirm the exact token you'll receive on the other side — wrapped vs native versions are easy to mix up.

MetaMask Portfolio: track, swap, and stake

Portfolio (portfolio.metamask.io) is MetaMask's web dashboard — a single view of balances across all your accounts and chains, plus swaps, bridges, and staking. It reads your connected wallet without taking custody. Last verified: 2026-06-21.

The wallet itself is deliberately minimal. MetaMask Portfolio is the richer companion: connect your wallet in a browser and see every token, NFT, and DeFi position across networks in one place, with charts and history. From Portfolio you can also swap, bridge, and access staking — it's the "command center" view that the extension popup can't comfortably show. It's read-and-sign only: it never holds your assets.

Staking ETH through MetaMask

MetaMask offers ETH staking via Portfolio — including pooled/liquid staking that has no high minimum — letting you earn protocol rewards while staying self-custodial. Staking carries smart-contract and validator risk, and may lock or queue withdrawals. Last verified: 2026-06-21.

If you hold ETH and want yield without handing it to an exchange, MetaMask's staking (through Portfolio) lets you stake directly from your wallet. Pooled/liquid options remove the 32-ETH solo-validator barrier, giving you a liquid staking token that represents your staked position and accrues rewards.

Treat staking yield as real but not risk-free: you're trusting the staking smart contracts and validator infrastructure, rewards vary with network conditions, and unstaking can involve a withdrawal queue. It's a reasonable way to earn on ETH you'd hold anyway — not a place for funds you might need instantly.

The MetaMask Card: spending crypto in the real world

The MetaMask Card is a Mastercard debit card that spends stablecoins and crypto straight from your self-custodial wallet at ordinary merchants, settling on-chain (primarily via Linea). It's region-limited but turns MetaMask into a real-world spending account without giving up custody. Last verified: 2026-06-21.

Most "crypto cards" require you to deposit funds with a custodian first. The MetaMask Card's pitch is that you keep custody until the moment of payment — when you tap, the relevant amount is settled from your wallet on-chain. It runs on Mastercard's network, so it works anywhere Mastercard is accepted.

Caveats worth knowing: availability is limited by region and expanding gradually; settlement leans on Linea and supported stablecoins; and card spend also earns MetaMask Rewards points (next section). For anyone who wants to actually use crypto rather than only trade it, it's one of the more genuinely useful products in the MetaMask suite. See our best crypto cards roundup for how it compares.

MetaMask Rewards (one piece of the picture)

MetaMask Rewards is a free, opt-in loyalty program that pays points for swaps, perps, prediction-market trades, Card spend, referrals, and historical volume. It's legitimate — Season 1 distributed a cut of over $30M in LINEA — but it rewards trading you pay fees for, so only opt in for activity you'd do anyway. Last verified: 2026-06-21.

Rewards is a nice-to-have layered on top of the wallet, not a reason to use MetaMask by itself. The short version: you opt in once, then earn points automatically (roughly 8 points per $10 swapped, plus perps, prediction markets, and Card spend), with a one-time backfill of up to 50,000 points for past swap/bridge volume. Points map to seasonal perks — token allocations, perps fee discounts, and boosts (Linea swaps have carried a 2x boost).

The catch is that every point costs trading fees to earn, and point cash-value is season-dependent — so it's upside on volume you'd trade regardless, not cash-back. It's also geo-restricted (unavailable in the UK and some regions).

Go deeper: we cover the points math, tiers, referral mechanics, and whether it's worth it in our dedicated MetaMask Rewards review.

Snaps: extending what MetaMask can do

Snaps are permissioned third-party plugins that add capabilities to MetaMask — non-EVM chains, transaction-insight and scam warnings, notifications, and more. They run sandboxed and require explicit install permission. Only add Snaps from developers you trust. Last verified: 2026-06-21.

Snaps are MetaMask's app-store-style extension system. A Snap can teach MetaMask new tricks: support a chain it doesn't natively, add transaction-simulation warnings that flag a draining contract before you sign, push notifications, or integrate a specific protocol. They run in an isolated sandbox and must request permissions you explicitly approve.

The power cuts both ways: a Snap you install can request meaningful access, so treat installing one like installing any software — vet the developer, check reviews, and grant the minimum. Used well, security-focused Snaps are one of the better ways to reduce the chance of signing a malicious transaction.

Smart accounts and account abstraction

MetaMask has been rolling out smart-account features (via account-abstraction standards like ERC-4337 and EIP-7702) that can add gas payment in tokens, batched transactions, spending controls, and recovery options — upgrades over a plain key-pair account, where supported. Last verified: 2026-06-21.

A traditional wallet account is just a key pair: powerful, but rigid. Account abstraction turns the account into a programmable smart contract, which unlocks features that used to be impossible — paying gas in a stablecoin instead of the native token, batching several actions into one confirmation, setting spending limits, and friendlier recovery flows. MetaMask's smart-account direction (building on EIP-7702-style upgrades that let an existing address gain smart-contract abilities) brings these to mainstream users gradually. Availability depends on network and version, and the classic externally-owned account remains the default — but it's the clearest signal of where wallet UX is heading. For background, see our account abstraction guide.

Security: hardware wallets, approvals, and staying safe

Self-custody puts security on you. The highest-leverage moves: connect a hardware wallet for serious balances, review and revoke token approvals, verify every URL and signature, and never share your Secret Recovery Phrase. The software rarely fails — users get tricked. Last verified: 2026-06-21.

Pair MetaMask with a hardware wallet. You can connect a Ledger or Trezor to MetaMask and keep MetaMask's familiar interface while the hardware device signs every transaction offline. Even if your computer is fully compromised, an attacker can't move funds without physical confirmation on the device. For any balance you'd be upset to lose, this is the recommended setup. (See our Ledger guide.)

Manage token approvals. When you use a dapp, you often grant its contract permission to spend a token. Old or unlimited approvals are a standing risk — if that contract is later exploited, your tokens can be drained. Periodically review and revoke approvals you no longer need.

Watch for the classic scams:

• Phishing sites that mimic a dapp or MetaMask and ask you to "verify" your SRP or connect and sign a draining transaction. Always check the URL; bookmark the real ones.
• Fake support. No legitimate MetaMask support exists in your Twitter/Discord DMs. Anyone offering to "help" by asking for your phrase or screen-share is stealing.
• Malicious approvals and blind signing. Read what you're signing. A request to approve an unfamiliar contract or sign an opaque message is a red flag.
• Address poisoning. Verify full addresses, not just the ends, and don't copy addresses from transaction history.
• Fake tokens / airdrops. Random tokens appearing in your wallet that prompt you to visit a site are bait. Don't interact.

Fees: what MetaMask actually costs

MetaMask is free to install and use. You pay network gas on every transaction (to the blockchain, not MetaMask) and roughly a 0.875% service fee on in-wallet Swaps. Bridges and staking carry provider-side costs. Holding, sending, and receiving cost only gas. Last verified: 2026-06-21.

The headline: nothing is hidden, but the Swap fee and gas add up. For frequent or large trades, knowing the all-in cost (service fee + gas + spread) helps you decide when to use the built-in tool versus a specialized venue.

MetaMask vs other wallets

MetaMask wins on ubiquity, dapp compatibility, and feature breadth (Swaps, Card, Portfolio, Snaps). Rivals can beat it on specific axes — Rabby on transaction safety UX, Phantom on Solana, Coinbase Wallet on beginner polish — but none match its all-round reach. Last verified: 2026-06-21.

The honest take: most people don't choose between these. A very common setup is MetaMask as the daily driver, connected to a Ledger for cold storage of larger balances — best of both. See our best crypto wallets roundup for the full comparison.

Who MetaMask is for

Fits anyone who wants self-custodial access to Ethereum, L2s, and the broader on-chain world — from first-timers learning the ropes to power users running DeFi — provided they're willing to own their security. Last verified: 2026-06-21.

✅ You want self-custody and direct access to DeFi, NFTs, and dapps ✅ You operate across multiple EVM chains and want one wallet for all of them ✅ You'll use Swaps, the Card, Portfolio, or staking from a single place ✅ You're ready to back up your SRP and, ideally, add a hardware wallet ✅ You want the most broadly compatible wallet in crypto

Who should think twice

Reconsider if you want a custodial safety net, can't safeguard a recovery phrase, or only ever trade on a centralized exchange. Last verified: 2026-06-21.

❌ You'd rather a company hold your keys and offer password resets (use a regulated exchange) ❌ You can't reliably store a 12-word phrase offline — self-custody isn't safe for you yet ❌ You only trade on a CEX and never touch on-chain apps ❌ You want guaranteed recourse if you make a mistake — on-chain transactions are final

Common problems (and quick fixes)

Most MetaMask "bugs" are network, gas, or display issues — not lost funds. A stuck transaction can be sped up or cancelled, missing tokens usually just need importing, and "vanished" funds are almost always on a different network or account. Last verified: 2026-06-21.

If something looks wrong, stop before signing anything — many "fix it" instructions in DMs or search results are scams designed to make you panic-sign a draining transaction.

MetaMask quick-start checklist

A two-minute recap you can act on right now. Last verified: 2026-06-21.

• ☐ Install only from metamask.io or the official app store
• ☐ Set a strong device password
• ☐ Write your Secret Recovery Phrase on paper/metal, offline — before funding
• ☐ Send a small test transaction first
• ☐ Add the networks you use and keep gas tokens on each
• ☐ Add a hardware wallet once the balance matters
• ☐ Bookmark the dapps you use; never reach them via ads
• ☐ Review token approvals periodically and revoke stale ones
• ☐ Read every signature request — treat each as irreversible
• ☐ Opt into Rewards only for trading you'd do anyway

Final verdict

MetaMask is the default on-ramp to self-custodial crypto for good reason: it's free, mature, works everywhere in the EVM world, and now bundles swaps, bridging, a debit card, staking, Snaps, and smart-account features into one wallet. Its weaknesses — a higher swap fee and the fact that security rests entirely on you — are manageable with good habits and a hardware wallet. Last verified: 2026-06-21.

Recommended path: install from metamask.io, back up your Secret Recovery Phrase offline before funding, send a small test transaction, and add a hardware wallet once your balance is worth protecting. Use Swaps and the Card for convenience while staying mindful of fees, review your token approvals periodically, and treat every signature as irreversible. Opt into Rewards only if you already trade. Do that, and MetaMask is a safe, powerful key to the entire on-chain economy.

---

Related: MetaMask Rewards Review · Best Crypto Wallets 2026 · Best Hardware Wallets · Best Crypto Cards 2026 · What is Account Abstraction? · Best Ethereum L2s 2026