Metamask
MetaMask is a self-custodial software wallet and interface for blockchain applications. It began in 2016 as an Ethereum browser extension developed within ConsenSys and later expanded to mobile devices and additional blockchain networks. A wallet instance manages accounts, requests signatures and connects websites or apps to supported networks; it does not make a decentralized application trustworthy.[1]
The BitcoinWiki page title retains the historical spelling “Metamask,” but the product is styled MetaMask.
History and availability
The project was founded by Kumavis (Aaron Davis) and Dan Finlay and released in 2016. Its early design injected an Ethereum provider into supported browsers, allowing websites to request account access and ask the user to approve messages or transactions without the website directly receiving the private key. A mobile application later combined a wallet with an application browser.
MetaMask was initially focused on Ethereum and EVM-compatible networks. By 2026 the product also advertised support for Bitcoin and Solana alongside many EVM networks, while features and signing flows differ by network.[1] Its source code is published in repositories maintained by the project, though distributed builds and bundled services should be evaluated separately from source availability.
Feature evolution
MetaMask Snaps, opened to public use in 2023, provides a permission-based extension system through which separately installed modules can add interoperability, transaction insights and notifications. A Snap runs in an isolated environment and must request named permissions, but installation still expands the wallet's trusted software surface; inclusion in a directory is not a guarantee that every action is safe.[2]
The optional Smart Transactions service was introduced for eligible Ethereum Mainnet transactions in 2024. Instead of immediately broadcasting a signed transaction to the public mempool, the service submits it through MetaMask's routing system, monitors its status and may rebroadcast it. MetaMask described the design as reducing failed or stuck transactions and some forms of value extraction. It remains a routing service, not a change to Ethereum consensus, and users should distinguish its availability and data-handling assumptions from local key custody.[3]
Wallet and application interaction
MetaMask derives or imports accounts, displays assets known to the interface, and sends signed transactions through a configured RPC provider. Websites can request the currently selected account, propose a network, ask for a signature or submit a transaction for approval. The user should treat every request as untrusted and inspect the network, recipient, amount, fee and permission being authorized.
On Ethereum-compatible networks, token balances and decentralized applications are separate smart contracts. Adding a token to the interface does not create or endorse the asset. Token approvals may allow a contract to transfer assets later, so an approval can carry risk even when no immediate transfer is shown.
MetaMask has historically used ConsenSys's Infura infrastructure as a default RPC path for Ethereum, while allowing custom networks and alternative providers. A self-custodial key model and a hosted RPC dependency are not contradictory: the provider can relay and observe requests without possessing the signing key, but its availability and privacy properties still matter.
Keys and recovery
In the traditional setup, MetaMask creates a 12-word Secret Recovery Phrase (SRP) from which accounts are derived. The local password unlocks the encrypted wallet data on that installation; it is not a replacement for the SRP. Anyone who obtains the phrase or an exported private key can control the associated accounts, while MetaMask support cannot restore a phrase that the user loses.[4]
Newer extension onboarding also offers account-based access using Google, Apple or Telegram credentials plus a MetaMask password. In that model an SRP is encrypted and divided into shards, and recovery depends on the documented combination of credentials. It should not be described as identical to the traditional locally backed-up SRP flow. Users can reveal and separately protect the underlying SRP if the current product supports that setup.[5]
MetaMask can also connect to supported hardware wallets. The hardware device holds the signing key, while MetaMask supplies the interface and transaction request. Users must still verify transaction details on the hardware device.
Security and privacy
Common risks include fake extensions, phishing sites, malicious signature requests, unlimited token approvals, clipboard replacement, malware and disclosure of recovery material. A valid MetaMask signature only shows that the key approved the exact signed payload; it does not prove that a website, token or contract is safe. Compromised transactions generally cannot be reversed by MetaMask because the wallet is self-custodial.[6]
Browser extensions operate inside a browser security environment and expose some interaction metadata to websites and RPC services. Locking the wallet reduces accidental use but does not clean an infected device or revoke existing on-chain approvals. Recovery phrases and private keys should never be entered into a support chat or an unsolicited website.
Planned corporate separation
On 9 September 2026, Consensys Software Inc. announced that it expected to separate its businesses by the end of 2026. The existing company is planned to rebrand as MetaMask and hold the consumer platform, while a newly formed Consensys is planned to hold protocol and institutional products. Joseph Lubin is expected to serve as MetaMask's chairman and chief executive. The separation remained a plan at the time of the announcement.[7]
See also
External links
References
- ↑ 1.0 1.1 MetaMask, “MetaMask marks 10 years”, 14 July 2026.
- ↑ MetaMask, “MetaMask Snaps: Our First Step on the Road to Becoming Fully Permissionless”, 12 September 2023.
- ↑ MetaMask, “Introducing Smart Transactions”, 14 May 2024.
- ↑ MetaMask Help Center, “How to secure your Secret Recovery Phrase and password”, checked 16 September 2026.
- ↑ MetaMask Help Center, “How to create a new MetaMask wallet”, checked 16 September 2026.
- ↑ MetaMask Help Center, “I've been hacked or scammed”, checked 16 September 2026.
- ↑ Consensys Software Inc., separation announcement, 9 September 2026.