How to Set Up MetaMask: A Beginner's Guide
How to install MetaMask, create a wallet, and back up your secret recovery phrase — plus how to fund it and the phishing warnings to watch for.
Key takeaways
- MetaMask is a free self-custody wallet available as a browser extension and a mobile app, built mainly for Ethereum and Ethereum-compatible networks.
- Your MetaMask password only unlocks the wallet on that device — it is not your backup. The secret recovery phrase is what actually controls and recovers your funds.
- Write the recovery phrase on paper by hand, keep the word order, and never store it digitally or share it — MetaMask will never ask for it.
- The confirmation step (re-entering the words) is your chance to prove the backup works before you put money in — do not skip it.
- Download only from metamask.io or the official store listing by ConsenSys, and watch for fake apps and phishing sites.
MetaMask is a free self-custody wallet available as a browser extension and a mobile app, built mainly for Ethereum and Ethereum-compatible networks. Setting it up takes about five minutes: download from the official source, create a password, and write down your secret recovery phrase — the 12 words that are your actual backup.
The most important thing to understand before you start: your password is not your backup. It only unlocks the app on one device. The recovery phrase is what controls the wallet, and losing it means losing your funds.
What MetaMask is (and what it is not)
MetaMask is a hot wallet — its keys live on an internet-connected device, which makes it convenient but also exposed to malware and phishing. See what a hot wallet is for the full picture.
It is important to know its scope:
- It is self-custody. You hold the keys through the recovery phrase — no company can recover them for you. See what a private key is.
- It is Ethereum-first, but now multi-chain. It works out of the box with Ethereum and Ethereum-compatible networks, which you switch from the network dropdown. Native support for other ecosystems has expanded — Solana arrived in mid-2025 and Bitcoin in late 2025 — so the old rule that “MetaMask is Ethereum-only” no longer fully applies, though Ethereum remains its home turf.
- It is a hot wallet, not cold storage. It is the right home for everyday amounts, not life-changing savings — for those, see our hot vs cold wallet comparison.
For a beginner, MetaMask is a sensible first self-custody wallet because it is free, widely used, and gives you real experience with on-chain transactions using small, losable amounts.
Before you start: the two things to get right
Two mistakes account for nearly every MetaMask loss, and both happen in the first five minutes.
- Downloading a fake. Only install from metamask.io or the official browser/App Store listing by ConsenSys. Fake MetaMask apps and look-alike sites exist precisely to steal whatever you type in. Bookmark the real site.
- Treating the password as the backup. The password is just a door lock on one device. The recovery phrase is the actual key. If you only remember the password and lose the phrase, the wallet is gone.
Keep both in mind and the rest is routine.
How to set up MetaMask step by step
The setup flow is short. Take your time on the recovery-phrase steps — they are the ones that matter.
Step 1: Download MetaMask from the official source
Go to metamask.io and click Download, then choose your platform. On desktop you are redirected to your browser’s extension store (Chrome, Firefox, Brave, Edge); click Add to [browser] and confirm. On mobile, search “MetaMask” in the App Store or Google Play and verify the developer is ConsenSys — the real app has millions of downloads.
After installing, confirm the fox icon appears in your toolbar or home screen.
Step 2: Choose “Create a new wallet”
Open MetaMask, tap Get started, then choose Create a new wallet. Use Import wallet only if you already have a recovery phrase from a previous wallet.
Step 3: Set a strong password
Create a password of at least 12 characters with a mix of upper- and lower-case letters, numbers, and symbols. Use a password manager rather than reusing a password from another site.
Remember: this password only unlocks MetaMask on this device. It is not your recovery mechanism — if you lose it, you can reset it with your recovery phrase, but the reverse is not true.
Step 4: Write down your secret recovery phrase
MetaMask shows a 12-word recovery phrase. This is the single most important screen in the entire setup. Write the words down by hand, on paper, in the exact order shown.
Three rules that prevent nearly every loss:
- Never photograph or screenshot it. Photos sync to cloud accounts that get breached.
- Never store it digitally — no notes app, no cloud drive, no email, no password-manager “secure note.”
- Never share it with anyone. MetaMask will never ask for it; anyone who does is scamming you.
Store the paper somewhere physically secure, and consider a second copy in a second location. For the full rules, see how to protect your seed phrase.
Step 5: Confirm the phrase to verify your backup
MetaMask asks you to re-enter the words in order. This is not a memory test — it is a recovery test. It is your chance to confirm the words you wrote down actually restore the wallet.
Refer to your handwritten note and check every word. If you cannot read your own handwriting back, you just learned your backup is worthless — while the cost is still zero, before you have funded the wallet.
Step 6: Locate your wallet address
Your wallet is now live. You will see your public address (starting with 0x…) and a zero balance. That address is what you share to receive funds — it is public and safe to share, unlike the recovery phrase. See what a public key is.
How to fund your MetaMask wallet
There are three ways to get crypto into MetaMask:
| Method | Cost | Speed | Notes |
|---|---|---|---|
| Buy with a card | Card processing fee | Instant | Simplest, but the convenience costs more |
| Receive from another wallet | Network fee only | Minutes | Free on your side |
| Withdraw from an exchange | Exchange withdrawal fee | Minutes | Match the network |
If you are withdrawing from Binance or OKX, the network rule applies: your MetaMask address is an Ethereum-network address by default, so withdraw on the Ethereum network (or an Ethereum-compatible network you have added to MetaMask). Sending on the wrong network can lose the funds. See how to withdraw from Binance for the full flow.
For your first transfer, send a small test amount first, confirm it arrives, then move the rest.
What do gas fees have to do with it?
When you send a transaction from MetaMask, you pay a network fee called a gas fee, which goes to the Ethereum network — not to MetaMask. The fee varies with network congestion, and it can spike during busy periods. See what a gas fee is.
The practical points for a beginner:
- You need a little ETH in the wallet to pay for any Ethereum transaction — including moving tokens.
- Gas fees are separate from the amount you are sending, so check the total before confirming.
- On congested networks, sending at a busy moment costs more.
- One thing to know: MetaMask’s built-in Swap feature charges a service fee of about 0.875% on top of gas, folded into the quoted rate. Sending and receiving are free apart from gas — it is only the built-in swap that adds MetaMask’s own cut.
Using MetaMask with a hardware wallet
Once you hold an amount worth protecting seriously, the recommended pattern is to use MetaMask as the interface and a hardware wallet as the signer. You connect the hardware device to MetaMask, so the convenience of the app runs on keys that never touch your browser.
The benefit is real: on-screen transaction confirmations happen on the hardware device, which malware cannot fake — which matters most when a malicious site asks you to sign something. See our hardware wallet guide for how to choose a device and set this up.
MetaMask security: the habits that keep you safe
MetaMask cannot be made hack-proof, but these habits keep you out of the common traps:
- Bookmark the real site and type the URL by hand — never click a link in a message to “connect your wallet.”
- Never enter your recovery phrase anywhere except the MetaMask app itself, during recovery.
- Review what you sign. A malicious site will ask you to approve a transaction that drains your wallet. Read the request before approving — this is the single biggest drain risk.
- Revoke old token approvals. An approval you granted months ago can still let a compromised contract drain your tokens. Review and revoke unused approvals regularly through MetaMask Portfolio or a tool like Revoke.cash. See our wallet security guide for the full picture.
- Verify addresses — MetaMask has added built-in address-poisoning detection, but still check the first and last few characters yourself before sending.
- Set a short auto-lock timer (under five minutes) in Security & Privacy, so an unattended device does not stay unlocked.
The scale of the threat is real: security firms reported roughly $723 million in phishing losses across 248 incidents in 2025. For the full catalog of the attacks to watch for, read the most common crypto scams and our phishing field guide.
Common MetaMask problems and fixes
Most MetaMask trouble has a simple cause. The frequent ones:
- “I forgot my password.” Reset it with the recovery phrase — the password is just a device lock. If you also lost the phrase, the wallet cannot be recovered.
- “My transaction is stuck or pending.” It is likely waiting on the network. You can wait, or, where MetaMask allows, speed it up or cancel it by submitting a new transaction with a higher gas fee.
- “I do not see my tokens.” Tokens may need to be added or imported by their contract address before they display — and check the token is actually on the network you are viewing.
- “A site says my wallet is empty.” You may be on the wrong network. Switch networks with the dropdown and recheck.
- “Someone in a DM is offering to ‘help’ me.” Treat it as a scam. MetaMask has no support staff that DMs you first, and no one legitimate ever needs your recovery phrase.
The theme is the same as every wallet: most problems are recoverable as long as you hold the recovery phrase, and every “helper” who asks for it is a thief.
The bottom line
Setting up MetaMask is quick, but the recovery phrase is the whole game: write it on paper by hand, keep the word order, and never store it digitally or share it. Your password only unlocks the app on one device; the phrase is what actually controls your funds. Download only from the official source, verify the backup before funding, and treat MetaMask as a convenient hot wallet — move any amount you would genuinely miss into cold storage.
New to self-custody? Start with what a private key is and what a seed phrase is, then decide between hot and cold wallets.
Don't have a Binance account yet?Sign up nowenter the referral codeBN2688
Frequently asked questions
Is MetaMask free?
Is MetaMask safe for beginners?
What is the difference between my MetaMask password and the recovery phrase?
Can I store my recovery phrase in a password manager or cloud note?
Which networks does MetaMask support?
How do I fund my MetaMask wallet?
Editor-in-Chief & Lead Researcher
Editor of MyCryptoStart. Independent researcher of cryptocurrency exchanges, focused on fees, security, KYC, and onboarding — publishes step-by-step guides in plain English for beginners.
View author page →Some links on this page are affiliate links: we may earn a commission at no extra cost to you. This content is educational and is not financial, investment, or legal advice. Affiliate disclosure · Disclaimer.
Continue reading
Hardware Wallets Explained: Cold Storage Guide
What a hardware wallet does, when it's worth buying, how Ledger and Trezor differ, and the setup rules that keep cold storage secure.
Hot Wallet vs Cold Wallet: Key Differences
Hot wallets are connected to the internet and convenient; cold wallets keep keys offline and secure. A comparison of security, cost, and convenience.
Wallet Security: How to Keep Crypto Safe
The wallet security habits that prevent losses — protecting your seed phrase, reviewing token approvals, and spotting phishing — in one checklist.