What Is MetaMask? How the Wallet Works and How to Use It Safely

MetaMask is a self-custody crypto wallet made by Consensys. It first appeared in 2016 as a browser extension for Ethereum and is now also available as a mobile app. You use it to hold tokens and NFTs, send and receive crypto, and sign in to decentralized applications (dApps) without creating an account with a company.

The key idea is that MetaMask is an interface to the blockchain, not a bank. Your funds are not stored inside the app. They sit on the blockchain, and the wallet holds the private keys that prove you control them. When a dApp asks to connect, MetaMask shows what you are being asked to approve, and nothing moves until you confirm.

People commonly use MetaMask to:

• Store ETH and other tokens
• Swap one token for another
• Bridge assets between networks
• Connect to DeFi, NFT and gaming apps
• Sign messages to log in to a site

It is often the first wallet newcomers meet because most Ethereum apps have supported it for years, and many other wallets copy its connection standards.

When you create a wallet, MetaMask generates a Secret Recovery Phrase, usually 12 words. This phrase is the master backup from which all your accounts and private keys are derived. Anyone who has it can take everything in the wallet, and it cannot be reset by support staff. The app encrypts your keys locally and unlocks them with a password or device biometrics.

Each account has a public address, which looks like a long string beginning with 0x on Ethereum-compatible networks. You can share the address to receive funds. Sending funds requires a signed transaction, which the wallet creates only after you approve it.

To read balances and broadcast transactions, MetaMask talks to blockchain nodes through RPC endpoints. By default it uses a provider run by Consensys, and you can switch to other endpoints or add custom networks. This is how the same wallet can work on Ethereum, layer-2 networks and other EVM chains: each is just a different network setting, with the same address across them.

Feature sets change often, so treat this as a guide to what to look for in the app rather than a fixed list.

• Multi-network access: Ethereum, many layer-2s and sidechains, with the option to add more. Support has been growing beyond EVM chains, including Solana and Bitcoin, so check which are live in your version.
• Swaps: a built-in aggregator compares quotes across decentralized exchanges and may add a service fee.
• Bridging: moves tokens between supported networks through third-party bridge routes.
• Buy and sell: lets you purchase crypto with local payment methods through partner providers, subject to the provider's checks and fees.
• Hardware wallet support: you can connect a Ledger or Trezor so keys stay on the device.
• Snaps: add-ons that extend the wallet, for example with extra network support or transaction insights.
• Token and NFT display: shows balances and collectibles for the accounts you control.

Availability of buying, swapping and certain networks can depend on your country and the device you use.

MetaMask is non-custodial, so security rests on you. The software itself is widely used and has been audited, but most losses come from user-side mistakes, not wallet bugs.

Main risks

• Phishing: fake sites and fake support accounts that ask for your recovery phrase. No legitimate service ever needs it.
• Malicious approvals: signing a token approval can let a contract spend your tokens until you revoke it.
• Fake extensions and apps: counterfeit versions in search ads or unofficial stores.
• Device malware: a compromised computer can undermine any hot wallet.

Defensive habits

• Write your recovery phrase on paper or metal, store it offline and never photograph it or save it in cloud notes.
• Install only from the official site's links or the official app store listing.
• Read each signature request. If you do not understand it, reject it.
• Use a hardware wallet for larger balances and keep a separate account for experimenting.
• Review and revoke old token approvals periodically with an approval checker.
• Bookmark the dApps you use rather than following links from messages.

Setup takes a few minutes, but the backup step is the one that matters.

1. Get the official MetaMask extension for a supported browser or the official mobile app. Confirm the publisher before installing.
2. Choose to create a new wallet, or import an existing one with its recovery phrase.
3. Set a strong, unique password.
4. Reveal your Secret Recovery Phrase, write it down offline and confirm it when prompted.
5. Check your public address and send a small test amount before moving larger sums.
6. Pick the network you want from the network selector, and add others only from trusted sources.

After setup, connecting to a dApp usually means pressing a connect button on the site, choosing MetaMask and approving the connection. Connecting only shares your public address. Spending requires a separate approval each time. You can disconnect sites in the wallet's connection settings.

If you want to practice first, many networks offer test networks with free test tokens that carry no real value.

The wallet software does not charge a subscription. Costs come from elsewhere:

• Network (gas) fees: paid to the blockchain for every transaction. They vary by network and congestion, and layer-2s are usually much cheaper than Ethereum mainnet. MetaMask shows an estimate before you confirm.
• Swap fees: the built-in swap feature may add a service fee on top of the quoted rate and gas.
• Bridge fees: the bridge route charges its own fee, plus gas on both chains.
• Provider fees: buying with a card or bank transfer carries fees set by the payment partner.
• Slippage: the difference between the quoted and executed price on volatile or thinly traded tokens.

Because these figures change constantly, check the fee breakdown on the confirmation screen, and compare quotes if you are moving a large amount. Sending a small test transaction first helps avoid costly mistakes, especially when using a new address or network.

MetaMask is the access point; the dApps do the work. Bridges are a common example. Base Bridge is the canonical route between Ethereum and the Base layer-2, and cBridge connects many networks. Chains such as Fraxtal, an Ethereum layer-2, can be added as EVM networks. Yield platforms like Lagoon and Concrete use vault contracts you deposit into by signing transactions from your wallet.

Not everything runs through MetaMask. Noble is a Cosmos appchain, so it generally needs a Cosmos-compatible wallet rather than a standard EVM setup. Unit works with Hyperliquid, where you should confirm which wallet and network each deposit flow uses before sending funds.

For any dApp:

• Verify the network and contract address from the project's official channels.
• Start with a small deposit.
• Understand that DeFi carries smart contract and market risk, and returns are not guaranteed.

If you connect to a crypto casino, you must be 18 or older, or the higher legal age where you live, and online gambling must be legal in your jurisdiction. Follow the site's age and identity checks. Only gamble money you can afford to lose.

MetaMask suits people who want broad dApp compatibility and a long-established tool. It has trade-offs.

• Hot wallet exposure: keys live on an internet-connected device. A hardware wallet adds protection.
• Responsibility: there is no password reset or chargeback. Mistakes such as sending to the wrong address are usually permanent.
• Complexity: gas, approvals and network selection confuse beginners.
• Feature gaps: support for non-EVM chains depends on the current release, and some ecosystems still need their own wallets.

Alternatives include Coinbase Wallet, Rabby, Trust Wallet, Phantom (strong on Solana) and hardware wallets such as Ledger and Trezor, which can also be paired with MetaMask. Pick based on the networks you use, how much you hold and how comfortable you are with self-custody.

A reasonable approach is to keep long-term savings on a hardware wallet, use a separate MetaMask account for day-to-day activity and check the wallet's current network list and fee rules in the app before you move funds.