MetaMask: the crypto wallet trusted by millions of users

100 million downloads. 30 million people opening it every month. Those are the MetaMask numbers as of mid-2025, per Blockworks. Trust Wallet has more total downloads (200 million+), but in the EVM world, the fox icon still runs the show. Phantom raised at $3 billion in January 2025 and Rabby grabbed 4.2 million users, but neither one has cracked MetaMask's grip on Ethereum.

What most people do not realize is how much MetaMask has changed in the last two years. Snaps turned it into a plugin platform. Blockaid added phishing protection. The Rewards program started handing out $30 million in tokens. ConsenSys might take the whole thing public in 2026. This is not the same extension you installed in 2021.

Below: how MetaMask works, what it costs, where it falls short, and what the alternatives look like in 2026.

What is MetaMask and how does it work?

Think of MetaMask as a browser inside your browser. ConsenSys built it in 2016, originally just for Ethereum. Joseph Lubin, one of Ethereum's co-founders, runs ConsenSys. The wallet started as a Chrome extension and grew into a mobile app. Today it handles any EVM-compatible chain: Polygon, Arbitrum, Optimism, Avalanche, BNB Chain, Base, you name it.

The key word is "non-custodial." Your private key stays on your device. ConsenSys cannot touch your money, freeze your account, or help you if you lose your seed phrase. You are the bank. That freedom is the whole point. It is also why people lose funds when they get careless.

MetaMask does three jobs. One: store crypto. Ethereum, wrapped bitcoin, stablecoins like USDC and USDT, meme coins, NFTs, whatever lives on an EVM chain. Two: send and receive digital assets. Three, and this is the big one: connect to web3. MetaMask is the gateway to the Ethereum blockchain and blockchain technology in general. DeFi lending, DEX trading, NFT marketplaces, blockchain games, governance votes. When a dapp says "Connect Wallet," it means MetaMask about 80% of the time.

How to set up MetaMask in five minutes

Five minutes. Maybe less. Install is free.

Desktop? Hit metamask.io, grab the browser extension. Works on Chrome, Firefox, Brave, Edge. A fox icon shows up in your toolbar. Click it. "Create a new wallet." Pick a password. Then the important part: MetaMask shows you 12 random words. Write them down. On paper. Not in your notes app. Not in a screenshot. Paper. Those 12 words are the only way to recover your wallet if something goes wrong. Lose them and nobody, not ConsenSys, not Apple, not God, can get your money back.

Phone? App Store or Google Play, same drill. The mobile version has a built-in dapp browser, which is nice because you can use DeFi protocols without switching between apps.

You get one wallet address per account. Want more? Add accounts inside the same MetaMask installation. Already have a wallet somewhere else? Import it with your seed phrase or private key.

MetaMask fees: what you actually pay

Free to download. Free to install. Free to hold tokens. That is where "free" ends, because moving money costs something at every turn:

That 0.875% swap fee is how ConsenSys pays the bills. Swap tokens or swap digital assets inside MetaMask, they take a cut. You can dodge it by going to Uniswap directly, but then you lose the aggregator that checks multiple DEXs to trade crypto at the best price. Most people pay the fee for convenience.

Gas is separate and MetaMask does not control it. Quiet day on Ethereum mainnet: maybe $0.50 for a simple send. Busy day: $15 or more. Arbitrum, Base, or Optimism? Same transaction, a few cents. That is why over 40% of MetaMask users migrated to L2s.

MetaMask security: is it safe?

Complicated question. The code? Pretty solid. MetaMask ran on an MIT open source license from 2016 to August 2020. ConsenSys switched to a proprietary license after that, which annoyed open source purists but did not weaken the actual security.

Late 2023: Blockaid integration. Now when you are about to sign a sketchy contract, MetaMask flashes a warning. "This transaction may drain your wallet." That one feature has saved people real money. Smart Transactions, a newer addition, route your swaps through a private mempool that protects against frontrunning and sandwich attacks, with a 99.995% success rate.

Here is the problem. January 2026. Signature phishing attacks hit 4,700 MetaMask wallets and drained $6.27 million in a single month. That was a 207% jump from December. Industry-wide, $3.4 billion in crypto got stolen in 2025. Not because MetaMask had a bug. Because people clicked links they should not have clicked and typed their seed phrase into websites that were not MetaMask.

Want real security? Plug a Ledger or Trezor into your setup. MetaMask connects to both. Your keys live on the hardware device, air-gapped from the internet. MetaMask just shows you the interface. Best of both worlds.

MetaMask Snaps: extending the wallet

September 2023: ConsenSys opened up MetaMask to third-party developers. The result was Snaps, a plugin system that lets anyone extend what MetaMask can do.

Before Snaps, MetaMask only talked to EVM chains. Now a Snap can connect it to Starknet, add Chainlink price notifications, create multi-sig account types, or bolt on custom transaction analytics. The directory at snaps.metamask.io keeps growing. Some Snaps are genuinely useful. Others are experiments that barely work. The quality varies.

What matters is the architecture. MetaMask is no longer stuck being "just an Ethereum wallet." In theory, a Snap could connect it to Bitcoin, Cosmos, or any blockchain that someone bothers to write a plugin for. The ecosystem needs time to mature, but the plumbing is there.

MetaMask supported networks and tokens

Fresh install: Ethereum mainnet only. Adding Arbitrum, Polygon, or any other EVM chain takes thirty seconds. Go to chainlist.org, click "Add to MetaMask," done. Or enter the RPC details manually if you want control over which node you connect to.

Chains people actually use with MetaMask: Ethereum, Arbitrum, Optimism, Base, Polygon, BNB Chain, Avalanche, Linea (built by ConsenSys), and zkSync Era. Over 40% of MetaMask users regularly interact with at least one L2, which cuts gas costs by 90% or more compared to mainnet.

Moving tokens between chains? MetaMask has a built-in bridge that scans multiple providers for the best route. Same 0.875% fee as swaps.

Token support is practically unlimited on EVM chains. Popular coins show up automatically. Obscure ones? Paste the contract address, hit add. Adding tokens takes five seconds. ERC-20, ERC-721 NFTs, ERC-1155 multi-tokens. You can buy, send, and manage everything directly in your wallet through the in-app interface. Bitcoin and Solana got native support in 2025, so you no longer need a Snap just to see BTC or SOL in your wallet. But the experience is still more polished for EVM tokens.

MetaMask vs Trust Wallet vs Phantom: how they compare

So who wins? Depends where you spend your time. Ethereum and L2s? MetaMask, no contest. Solana? Phantom was built for it and it shows. Need one wallet that covers Bitcoin, Solana, Ethereum, and BSC without installing plugins? Trust Wallet does that out of the box. Rabby is the dark horse: only 4.2 million users, but swap fees at 0.25% and excellent pre-signature transaction simulation that catches scams before you sign.

Common MetaMask mistakes and how to avoid them

People lose money on MetaMask all the time. Not because the wallet broke. Because they made one of these mistakes:

Unlimited token approvals. DeFi protocols ask for permission to spend your tokens. Most request unlimited by default. If that protocol gets exploited six months later, the hacker drains everything you approved. Go to revoke.cash after every DeFi session and clean up old approvals. MetaMask also has a spending cap feature now. Use it.

Fake download pages. Google "MetaMask download" and scam ads appear above the real result. They look identical. They install malware. Only download from metamask.io directly, or through the Chrome Web Store and official app stores.

Seed phrase in the cloud. Screenshots. iCloud Notes. Google Drive. An email to yourself "just in case." All of it is hackable. Paper. A physical piece of paper, stored offline. Some people stamp the words into metal plates. It sounds paranoid until you hear about someone losing $50,000 because they synced their notes across devices.

Wrong network selected. Sending ETH on Arbitrum when the other person expects mainnet Ethereum. Same address, different chain. The tokens are not lost but recovering them is annoying. Check the network dropdown before every send.

Gas fees set wrong. Too low: your transaction sits for hours, then fails. Too high: you overpay for nothing. Stick with MetaMask's "market" suggestion unless you know exactly why you are changing it.

MetaMask Rewards and the Linea connection

October 2025. ConsenSys finally did what everyone had been expecting for years: they launched MetaMask Rewards. Season 1 ran through January 2026 and handed out over $30 million in Linea tokens to active users.

How it works: use MetaMask, interact with Linea and partner protocols, accumulate points, receive tokens. Not a one-time airdrop. A recurring program that rewards consistent activity over weeks and months.

And the token question? It is no longer speculation. In September 2025, Joseph Lubin confirmed that a $MASK token is coming. A claims domain has been registered. Expected timeline: Q3-Q4 2026. If it launches, Rewards Season participants will almost certainly receive allocations. The community has been waiting since 2021 for this moment.

ConsenSys: the company behind MetaMask

Joseph Lubin founded ConsenSys in 2014. He is one of Ethereum's eight original co-founders. The company built most of the infrastructure that Ethereum runs on today: MetaMask for wallets, Infura for API access (10 billion daily requests from 430,000 developers), Linea for L2 scaling, Diligence for smart contract auditing.

The Infura connection matters more than most users realize. When you open MetaMask and it loads your balance, that data comes through Infura by default. If Infura has an outage, your MetaMask stops working until you manually switch to a different RPC endpoint. This is a real centralization problem for a product that markets itself on decentralization.

Money side: ConsenSys raised $450 million in March 2022 at a $7 billion valuation. Then came the cuts. 20% of staff gone in October 2024. Another 7% in July 2025. MetaMask's annualized revenue sits around $37.8 million as of Q4 2025, way down from the $200 million peak in 2021. The SEC investigated MetaMask Swaps, then dropped it in 2024. Latest reports from early 2026 say ConsenSys is prepping an IPO for mid-2026. JPMorgan and Goldman Sachs reportedly leading. Target valuation north of $10 billion. If it goes through, MetaMask becomes the first product you can buy stock in that you also use to buy crypto.

MetaMask for institutions: MetaMask Institutional (MMI)

There is a version of MetaMask you probably have not heard of. MetaMask Institutional, or MMI, is built for hedge funds, DAOs, and companies that need audit trails and approval chains before anyone moves money.

How it works: MMI plugs into custody providers like Fireblocks, BitGo, and Cactus. Assets stay in institutional cold storage. But the interface is the same MetaMask fox everyone knows. A fund manager sees the same swap screen you do. The difference is that hitting "confirm" on a $10 million trade routes through an internal approval workflow before anything actually executes.

Free to use. ConsenSys makes money through custody partnerships and protocol integrations, not from the wallet itself.

Privacy concerns and data collection

November 2022. ConsenSys quietly updated the privacy policy. Buried in the text: Infura logs your IP address and wallet address when you connect. Crypto Twitter went ballistic. A "self-sovereign" wallet routing all your data through a company server? People felt lied to.

The reality is more nuanced. Every wallet needs an RPC provider to read the blockchain. MetaMask uses Infura by default because ConsenSys owns Infura. You can switch to Alchemy, QuickNode, or any public RPC endpoint. You can even run your own Ethereum node. But how many people actually do that? Almost nobody. So in practice, Infura sees everything.

Rabby Wallet (by DeBank) and Frame (a desktop app) both avoid centralized RPC providers. Niche tools, but worth knowing about if you take the self-custody thing seriously enough to care where your data goes.

Marco Lucchetti

Marco Lucchetti is a senior content strategist and blockchain analyst at Plisio. With over 7 years of experience in cryptocurrency research, DeFi protocols, and payment technologies, Marco specializes in creating clear, data-driven content for a global crypto audience. His work focuses on transaction tracing, crypto compliance, and the future of blockchain infrastructure.