MetaMask currently supports five lines of hardware wallet: AirGap Vault, Keystone, Lattice, Ledger and Trezor. These wallets are supported on Extension, and will be able to be added to Mobile in future updates.
Am I in the right place?
If you're looking for an explanation about what a hardware wallet is and why you should have one, keep reading.
If you're looking for support regarding your particular hardware wallet, scroll down to the corresponding section.
If you're setting up a hardware wallet for the first time, take a look at our User Guide for our recommended configuration.
What is a hardware wallet? And why should I have one?
Understanding hardware wallets means getting 'under the hood' of Ethereum a little bit. Let's first take a look at what we mean when we talk about a 'wallet'. At first glance, it's an intuitive concept: it's a digital container to hold digital money and other things. Just like, in a real wallet, you may have some currency and some pictures of your cat or your family; well, in your MetaMask wallet you have some currency and some CryptoKitties and an animated GIF of a zombie. Pretty similar so far.
Well, it turns out that calling it a 'wallet' is a bit of a metaphor. It's a good one in terms of how we experience it, but it doesn't accurately represent what's happening, technologically. The contents of your 'wallet' actually consists of the assets assigned to your address on the blockchain. When we send ETH 'to' someone, it doesn't go anywhere; it's simply deducted from the balance of ETH assigned to your address, and reassigned to the balance of the address you're sending it to. Remember, a public blockchain is also called distributed ledger technology, and all of our wallets are lines in that ledger; our balances, our holdings, are the columns, and the Ethereum Virtual Machine is our automated bookkeeper.
In this sense, MetaMask is 'simply' a web application that sends requests to the Ethereum blockchain: for information about what assets are assigned to your address; to 'send' tokens from one address to another, and so on. It does this by using your Secret Recovery Phrase.
Your public Ethereum address is one half of a pair: a cryptographic key pair, to be precise. The public half, your address, can be given to anyone without fear of them being able to hack in and steal your funds. The private half, the Secret Recovery Phrase (also known as a 'seed phrase'), authenticates whoever holds it as having full and complete access over the address and all accounts associated with it. Remember: "not your keys, not your coins".
Now, MetaMask is extremely secure, and as long as no one has access to your Secret Recovery Phrase (you wrote it down in a safe offline location, right?), your account should be secure. There are many other factors that are outside of the control of MetaMask and its security engineers: how safe your browser is, whether someone gets physical control over your computer, or takes over your computer using a virus, for example.
For this reason, we recommend that if you are storing any significant amount of value in your MetaMask wallet—or simply assets that are important to you—that you use a hardware wallet as a second line of defense.
With all that background out of the way:
A hardware wallet is a physical device outside of your computer that secures your wallet's keys, and acts as a firewall between attackers and the contents of your wallet.
In order to transact with funds secured by a hardware wallet, you will have to interact with the hardware wallet in order to approve the transaction. This way, even if someone somehow gains access to your MetaMask wallet, they will be stopped from moving things out of it.
- Binding your Keystone to your MetaMask Wallet
- How to connect Keystone to MetaMask Mobile and send ETH
- How to use Keystone with MetaMask Mobile for dApps through Wallet Connect
- How to configure EVM chains on MetaMask Mobile
- How To Benefit From Hardware Wallet Security Using Transparent QR Codes
- For an understanding of Keystone's security value-added proposition, see here.
- For advanced topics regarding Keystone's security features, including introducing custom entropy, read here.
- For first-time Lattice users, make sure you’re properly set up: https://gridplus.io/setup
- See GridPlus' documentation on getting started using MetaMask and a Lattice here.
Ledger has broad documentation for users of MetaMask. Here are some that will help get you started:
- Set up and use MetaMask to access your Ledger Ethereum (ETH) account
- I don't see my BEP-20 tokens in my Ledger Binance Smart Chain (BSC) account, what can I do?
- How to access your Ledger Polygon account via MetaMask
Having trouble connecting your Ledger to MetaMask in Firefox?
Due to changes rolled out in Firefox v112 onwards, you may have issues connecting your Ledger to MetaMask in Firefox. This is due to the connection method no longer being supported by Firefox. Ledger support describe a temporary workaround here. Alternatively, you could try switching to a Chromium-based browser for using MetaMask.
- See Trezor's documentation regarding operability with MetaMask here.