Skip to main content
Loading...

Sfaturi de bază pentru siguranță și securitate pentru MetaMask

Does this article need to be translated?

Contribute to the Help Center

Submit translations, corrections, and suggestions on GitHub, or reach out on our Community forums.

note

New to crypto and web3?

Accesează MetaMask Learn pentru o experiență de învățare simplă, concepută special pentru începători în web3. Este complet gratuit, disponibil în mai multe limbi și include instrumente utile cum ar fi simulările, pentru a te ajuta să capeți încredere în tine în timp ce utilizezi MetaMask.

What is a Secret Recovery Phrase and how do I back it up?​

Utilizarea unei seed phrase, denumită și frază secretă de recuperare, este un standard utilizat de majoritatea portofelelor cripto. Se generează aleatoriu când creezi portofelul MetaMask și oferă acces la toate conturile (adresele) din portofel.

Când creezi portofelul, primești fraza secretă de recuperare formată din 12 cuvinte. MetaMask nu are niciun control asupra datelor tale personale sau private de pe serverele noastre. Totul este criptat în browser și protejat prin parola MetaMask. Așadar, atunci când îți pierzi conturile MetaMask și trebuie să le restabilești, poți face asta doar cu fraza secretă de recuperare.

Când restabilești portofelul MetaMask folosind fraza secretă de recuperare, va restabili și conturile MetaMask, în anumite circumstanțe. Dacă ai conturi importate, va trebui să le imporți din nou.

De ce trebuie să stochezi fraza secretă de recuperare​

MetaMask nu este o soluție bazată pe cloud. Dacă dispozitivul tău se strică, este pierdut, furat sau datele sunt corupte, echipa de asistență MetaMask nu o poate recupera. Această frază secretă de recuperare este singura modalitate de a recupera conturile MetaMask.

Don't share your Secret Recovery Phrase and private keys​

Anyone who has your Secret Recovery Phrase or private keys can control your assets, and therefore send tokens out of your accounts. Never share them with anyone, including the MetaMask team or anyone claiming to represent us.

We will never ask you to provide your Secret Recovery Phrase. If someone claims that we do, insist on not sharing. If you encounter someone who claims to be a MetaMask or MetaMask Support team member, or asks for your Secret Recovery Phrase and/or private keys, report them by getting in touch with Support.

This applies to websites and apps, as well. The only legitimate situations where you'll need to enter your Secret Recovery Phrase are:

  • Când creezi portofelul, deoarece trebuie să introduci anumite cuvinte din frază pentru a confirma că ai înregistrat-o.
  • Dacă restabilești portofelul pe un dispozitiv nou sau dintr-o instalare nouă sau resetezi parola (un proces similar).

There are, however, scammers that try to simulate these two situations. See here for more information: How do I recognize the real MetaMask?

If you have a large value of tokens in your account(s), consider getting a hardware wallet.

Hardware wallets are commonly thought to be the safest way to store your tokens. They are often referred to as 'cold' wallets, since they're disconnected from the internet most or all of the time. This approach means your private keys are never reachable by bad actors online, with the hardware wallet itself required to sign (authorize) any transactions.

There is no such thing as too much safety. The basic guide here is by no means comprehensive. Always learn how to better protect your tokens, by learning from the community, informative materials or discussion channels.

Additional resources​

Here are some additional resources to keep your computer safe:

What are token approvals and why are they important?​

Token approvals grant permission for a dapp to access and move a specific type of token and token amount from your wallet. If you are not careful about what token approvals you are approving in your MetaMask wallet, then this could potentially be an attack vector for your wallet to get drained.

To avoid this from happening try and follow these guidelines:

  • Always check what a dapp is actually requesting before clicking 'approve '. In MetaMask, you can also adjust the amount that the dapp has access to. Even if you only provide access to 10% of your tokens, and the dapp turns out to be a scam, that's still a considerably better outcome than if you 'd granted unlimited access.
  • DYOR. The best time to get in the habit of performing due diligence on any dapp before interacting with it was six months ago; the second best time is today. Look out for misspellings, low-quality images/logos, and other giveaways.
  • Remember that if something seems too good to be true, it probably is. If you're being offered 498,563% APY, you're probably on thin ice.

For a more detailed explanation on token approvals and how to manage them please read the following article.

Last updated on by MetaMask Support Team