How To Secure Your Metamask Account

The following are security recommendations to secure your Metamask account using both the Metamask browser extension and Metamask mobile app.Meta1 How To Secure Your Metamask Account

General best practice for security of your Metamask wallet

  • Never use the wallet on a shared computer
  • Use desktop rather than mobile wallet. It’s much easier to access/steal or compromise a phone than a laptop
  • Backup your seed phrase securely
    • Use a password manager such as Lastpass or KeePass to save password and seed phrase.
    • Also back up on paper or in your favourite book that you would never part with.
    • A good method for backing up is to store your secret phrase and password in 3 parts in different places
    • You can also “salt the password and secret phrase backup” E.G.
      • If your password is password1Secure then back it up as password15SecureSecret5 and write somewhere else your salt words: E.G. Secret 5
      • Similarly if your secret phrase is happy phone hammer radio then back it up as happy grass phone hammer blue radio and write somewhere else your salt words: E.G. grass blue
  • Generate a secure hashed password using password manager
  • Check your browser extensions. If you are not using a browser extension then turn it off. Browser extensions can record your screen or log your keyboard easily.
  • Run anti-malware and ant-virus programs regularly to check for key-logging software or spyware
  • Regularly clear your browser’s history and cookies
  • Lock your Metamask account when not in use
  • meta2 How To Secure Your Metamask Account
  • Deactivate/turn off the Metamask extension when not in use
  • If holding large amount of funds then consider creating several accounts in your wallet and split the stake between accounts
    • Also consider moving profits out of your wallet at regular intervals
  • NEVER EVER tell anyone your secret phrase or post it to any channel. If someone gets your secret phrase they can steal all your funds.
  • Your password can only be used on your device so treat your device like a vault to protect from theft and damage.

Recommended Metamask Security Settings

The following are recommended settings for using the Metamask browser extension and mobile app securely. Hopefully you will have many of these turned on by default but it is worth checking and making any changes.

Metamask wallet browser extension:

  1. Settings → Advanced → set Auto-Lock Timer to < 5 minutes
  2. Settings → Advanced → turn off any experimental features
  3. Settings → Advanced → select preferred ledger connection type if using a hardware wallet
  4. Settings → Security & Privacy → turn on Show incoming transactions
  5. Settings → Security & Privacy → turn on Use Phishing Detection
  6. Settings → Security & Privacy → turn OFF Participate in MetaMetrics
  7. Settings → See https://coinflex.com/support/2-2-9-flexdao/ for recommended Network settings for the FLEX DAO
  8. Settings → Alerts → turn on all alerts
  9. Settings → Experimental → turn off any experimental features

Metamask wallet mobile app:

  1. Mobile app → Settings → Security & Privacy → set Auto-Lock Timer to < 30 sec
  2. Mobile app → Settings → Security & Privacy → recommend to use password/passcode instead of face ID but if your password is weak then face ID is preferable
  3. Mobile app → Settings → Security & Privacy → turn on Privacy mode
  4. Mobile app → Settings → Security & Privacy →clear privacy data, browser history and cookies at regular intervals
  5. Mobile app → Settings → Security & Privacy → turn OFF Participate in MetaMetrics
  6. Mobile app → Settings → Security & Privacy →Mobile app → change password specific to mobile

Learn more

https://community.metamask.io/t/metamask-security-start-here/72

Helpful links for using Metamask to stake in the FLEX DAO

https://coinflex.com/support/2-2-9-flexdao/

https://coinflex.com/tutorials/how-to-stake-on-flexdao-tutorial

CoinFLEX Update: June 30, 2022

Dear CoinFLEX Community, We continue to talk with investors interested in rvUSD and commitments are growing. Once the token sale is fully committed, we will be able to communicate a clear path towards enabling withdrawals, but until then they will remain suspended. You will hear from us as updates become…

CoinFLEX Update on Withdrawals

Dear CoinFLEX Community, Due to extreme market conditions last week & continued uncertainty involving a counterparty, today we are announcing that we are pausing all withdrawals. We fully expect to resume withdrawals in a better position as soon as possible. We will fully communicate with you as we find out…