MetaMask Extension — Access Secure Web
Fast guide for installing and using the MetaMask browser extension with an easy theme toggle for black (dark) and white (light) backgrounds.
What is the MetaMask Extension?
MetaMask is a browser wallet and Web3 identity manager. The extension stores private keys locally (encrypted), enables MetaMask Login to dApps, and lets you sign transactions while keeping full control of your keys.
Install & Create Wallet (Quick)
- Install the official extension: Use your browser’s web store or MetaMask's official website. Always verify the publisher before installing.
- Create or import: Open the extension → Create a Wallet or Import Wallet (use your 12-word Secret Recovery Phrase).
- Set a strong password: This encrypts your wallet locally — use a unique, high-entropy password.
- Secure your Secret Recovery Phrase: Write it down on paper, store offline. Never enter it into unknown sites or share it.
- Unlock (MetaMask Login): Click the extension icon, enter password, and you’re signed in — ready to connect to dApps.
Connecting to dApps — How Login Works
When a dApp requests connection (ethereum.request({ method: 'eth_requestAccounts' })), MetaMask prompts you to approve which account(s) to expose. Approvals share only public addresses — private keys never leave your device.
/* dApp connection flow (simplified) */
1) dApp calls eth_requestAccounts
2) MetaMask shows connect popup
3) User approves account(s) -> dApp receives public address
Security Best Practices
- Confirm site URL and never approve transactions from unknown sites.
- Keep extension/browser up to date and enable browser security features.
- Use hardware wallets (Ledger/Trezor) via MetaMask for high-value operations.
Protect Your Secret Recovery Phrase
Treat the 12-word phrase as the master key. Store it offline (physical backup, safe). No legitimate support will ever ask for it. If compromised, move funds and restore using a new wallet.
Troubleshooting Common Issues
- Extension not visible: Enable from browser extensions or pin the icon to toolbar.
- Forgot password: You must restore using the Secret Recovery Phrase; MetaMask cannot recover passwords.
- dApp won’t connect: Ensure MetaMask is unlocked and the network (Mainnet/testnet) matches the dApp.
- Phishing attempts: If asked for your recovery phrase via email/chat, it’s a scam — do not comply.
Advanced Tips
Use separate accounts for different purposes (small-balance daily use vs hardware-secured funds). Limit token approvals and periodically review connected sites under Connected Sites.