MetaMask is a free, self-custody software wallet built by Consensys, launched in 2016, and the most widely used browser extension for Ethereum and EVM-compatible chains. It is a hot wallet: private keys are encrypted and stored on the device, not inside a dedicated secure-element chip, so device hygiene matters more than with a hardware wallet. It can pair with a Ledger or Trezor for hardware-backed signing. We have not completed a hands-on test and publish no rating until confirmed against current facts.
Custody and where the keys live
MetaMask is self-custody: your 12-word secret recovery phrase and derived private keys are generated and encrypted on your own device — MetaMask/Consensys never holds them and cannot recover them if lost. That is the flip side of every hot wallet's convenience: because keys live in browser-extension or app storage rather than a certified secure element, the security of your funds depends heavily on keeping your device and browser free of malware.
MetaMask can connect to a Ledger or Trezor hardware wallet, using MetaMask purely as the interface while the hardware device holds the keys and signs — a common way to get MetaMask's dApp convenience with hardware-wallet custody.
Chains, dApps and everyday use
MetaMask's native support is Ethereum and EVM-compatible chains; other networks can be added manually as custom RPC networks, but that is a user-configured step, not native multi-chain support out of the box the way some newer wallets offer. It is available as a browser extension (Chrome, Firefox, Edge, Brave) and as an iOS/Android app, and is the default connector for the large majority of Ethereum dApps.
Staking is available only through third-party dApps and integrations MetaMask connects to, not as a native in-wallet feature. The wallet itself is free; any cost comes from network gas fees or optional in-app swap spreads, which change and are best checked live rather than quoted here.
Risks specific to a hot wallet
Because MetaMask is software, the two realistic attack vectors are phishing (a fake site or extension tricking you into signing a malicious transaction or revealing your seed phrase) and a compromised device. Neither is unique to MetaMask, but they are the trade-off every hot wallet accepts in exchange for convenience. Verify every transaction MetaMask asks you to sign, and never enter your recovery phrase anywhere except the wallet's own official setup/recovery flow.
Strengths & limitations
Strengths
- Free, self-custody and by far the most widely supported wallet across Ethereum/EVM dApps.
- Can pair with a Ledger or Trezor for hardware-backed key storage while keeping MetaMask's interface.
- Available as both a browser extension and a mobile app.
Limitations
- No dedicated secure element — keys are encrypted software storage, so device and browser hygiene matter.
- Native chain support is EVM-only; other networks require manually adding a custom RPC.
- Phishing (fake sites/extensions) is the dominant real-world attack vector, not a MetaMask-specific flaw.
Frequently asked questions
Is MetaMask safe to use?
It is self-custody software with encrypted on-device key storage — reasonably safe with good device hygiene, but it lacks the certified secure-element hardware isolation of a Ledger or Trezor. Pairing MetaMask with a hardware wallet combines both.
Does MetaMask support Bitcoin or Solana?
Natively, MetaMask supports Ethereum and EVM-compatible chains; other networks require manually configuring a custom RPC and are not first-class supported the way EVM chains are.
Is MetaMask free?
Yes, the wallet software is free. You still pay network gas fees for transactions, and any in-app swap feature may carry its own spread — check the live quote before swapping.
Can I lose access if I forget my recovery phrase?
Yes. MetaMask never stores a copy of your recovery phrase; if you lose it and lose device access, no one — including Consensys — can restore your wallet.