Passwords and MetaMask
MetaMask uses passwords in a way that you may not be used to. This mainly has to do with the fact that MetaMask is a self-custodial wallet (also called non-custodial, though we're phasing out this term); it's not a conventional cloud-based app where we keep track of your username and password.
Your MetaMask password slightly differs in function depending on whether you have connected your Google or Apple account to MetaMask, or if you access your wallet via your Secret Recovery Phrase.
Accessing your wallet via Google or Apple
If you access your wallet via Google or Apple, your MetaMask password is crucial to accessing your wallet. If you lose your password, you will lose access to your wallet. It does not matter if you have access to your Google or Apple account, you will not be able to reset your password without being logged into your MetaMask wallet.
If you have biometrics enabled for MetaMask Mobile, you can still access your wallet and reset your password. However, if you have not enabled biometrics, you will not be able to reset your password without being logged into your MetaMask wallet.
Accessing your wallet via your Secret Recovery Phrase
If you access your wallet via your Secret Recovery Phrase, your MetaMask password helps you access a specific instance of MetaMask. For example, if you download MetaMask Extension, create a new SRP, and import additional accounts, your MetaMask password will log you into that specific instance of MetaMask Extension that has all of those accounts in one place.
If you ever lose your password, you will lose access to that instance of MetaMask, and will have to manually add the accounts into a new instance. However, with your SRPs and private keys, you can easily create a new instance of MetaMask and manually add the accounts you want in the same place.
Password safety practices
Password safety is critical to your wallet security. Only you can decide the best password for you, but here are some best practices for your password:
- Use a strong, computer-generated password. Computer-generated passwords are more secure than passwords you create yourself.
- Use a unique password. Do not repeat passwords.
- Store your password in a secure, physical location. Do not use a password manager to store your password. While convenient, any password manager or cloud-based service can be hacked, and is not the most secure way to store your password.
- Change your password regularly.
- Never share your password with anyone. Anyone who asks for your password is trying to scam you. MetaMask Support will never ask for your password.
See also:
User guide: Secret Recovery Phrase, password, and private keys