How to Set Up MetaMask Step by Step

What MetaMask Is (and Isn't)

MetaMask is a self-custodial crypto wallet that runs as a browser extension and mobile app. It lets you store Ethereum and thousands of tokens, and — crucially — connect to decentralized applications (dApps) like Uniswap, NFT marketplaces, and DeFi protocols. Because it is self-custodial, you hold the keys. MetaMask cannot freeze your funds, but it also cannot recover them if you lose your recovery phrase.

Golden rule: MetaMask will never ask for your Secret Recovery Phrase. Anyone who does — a "support agent," a pop-up, a website — is trying to rob you.

Step 1 — Install From the Official Source Only

Fake MetaMask extensions are a common attack. Install only from:

• The official site: metamask.io (type it directly — don't trust search ads).
• Your browser's verified extension store (Chrome, Firefox, Brave, Edge).
• The official app stores for mobile (check the developer is "MetaMask").

Verify the publisher and the number of downloads before installing. Learn to spot clones in our phishing guide.

Step 2 — Create a New Wallet

1. Open MetaMask and click Create a new wallet.
2. Set a strong password. This password only unlocks the app on this device — it is not your backup.
3. MetaMask will reveal your Secret Recovery Phrase (SRP) — 12 words. This is the master key to everything.

Step 3 — Back Up Your Secret Recovery Phrase Correctly

This is the most important step in the entire guide. Your 12-word phrase can restore your wallet on any device — which means anyone who sees it can steal everything.

• Write it on paper (or stamp it into metal for durability). Store it offline.
• Never take a screenshot, save it in notes/email/cloud, or type it into any website.
• Consider two copies in two secure locations in case one is destroyed.
• Confirm the words in the correct order when MetaMask asks.

Warning: A screenshot on a synced phone is one cloud breach away from a drained wallet. Keep the phrase strictly offline.

Step 4 — Understand the Interface

Once set up, you'll see:

• Account address — your public address (starts with 0x). Safe to share to receive funds.
• Network selector — top of the window; switches between Ethereum and other chains.
• Assets / Activity tabs — your token balances and transaction history.

Step 5 — Add Networks and Tokens

MetaMask ships with Ethereum. To use cheaper Layer-2s or other chains (Arbitrum, Base, Polygon, BNB Chain), add the network:

1. Click the network selector → Add network.
2. Choose from the popular list, or add custom RPC details from the chain's official docs.
3. To see a token that doesn't auto-appear, click Import tokens and paste the official contract address.

Tip: Always get contract addresses from official project sources. Scam tokens use look-alike addresses to trick you into buying worthless coins.

Step 6 — Fund Your Wallet

Send crypto from an exchange (see how to buy your first crypto) to your MetaMask address. Remember: you need the network's native gas token ($ETH on Ethereum, etc.) to pay transaction fees. Send a small test amount first, then the rest.

Step 7 — Connect to a dApp Safely

1. Visit the dApp and click Connect Wallet.
2. MetaMask pops up — check the site URL matches the real project.
3. Approve the connection (this only shares your public address — it does not move funds).

Approvals: Where Beginners Lose Money

When you trade or interact with a contract, you'll sign token approvals that grant the contract permission to move a token on your behalf. Malicious dApps request unlimited approvals to drain wallets. Protect yourself:

• Read every signature request — reject anything you don't understand.
• Prefer setting a spending cap instead of unlimited.
• Periodically review and revoke old approvals using a reputable revoke tool.

Best Practices Going Forward

• Use a separate "burner" wallet for risky mints and airdrops, keeping your main holdings elsewhere.
• For large balances, connect MetaMask to a hardware wallet so keys never touch your browser.
• Bookmark dApps to avoid fake sites; never click wallet pop-ups you didn't trigger.

Final Thoughts

MetaMask is your passport to Web3, but with self-custody comes responsibility. If you install from the official source, back up your recovery phrase offline, and treat every signature request with suspicion, you'll have a secure foundation. When your holdings grow, pair MetaMask with a hardware wallet — see our hardware wallet guide.