A user installs MetaMask on a new device, or their browser crashes, or they switch computers entirely. The extension is gone, but their funds remain on the blockchain—untouched and waiting. The critical question is whether they kept their Secret Recovery Phrase safe, because that twelve-word sequence is the master key to restoring access to every account, every token, and every NFT associated with their wallet. Without it, recovery is impossible. With it, the process is straightforward but must be executed carefully to avoid sending funds to the wrong address or entering credentials into a phishing site.

MetaMask’s design as a self-custodial wallet means the user holds all responsibility for security and recovery. The company does not store private keys, does not have access to recovery phrases, and cannot reset a lost password or restore a forgotten seed. This design protects against centralized platform failures, account takeovers by third parties, and regulatory account freezes—but it places the burden of backup and safe storage entirely on the user. Understanding how to recover your MetaMask wallet extension properly is therefore not an optional skill; it is essential maintenance.

Understanding the Secret Recovery Phrase and private keys

The Secret Recovery Phrase is a twelve-word mnemonic that encodes the master seed from which all private keys in your MetaMask wallet extension are derived. It is not the password. It is not a backup code. It is the cryptographic root that generates every account address, every private key, and every transaction-signing capability associated with your wallet. Losing it means losing the ability to prove ownership of your funds to any blockchain.

When you first create a MetaMask wallet, the extension generates this phrase during setup. MetaMask displays it once, emphasizes its importance, and asks you to write it down. The phrase is never stored on MetaMask’s servers. It is never transmitted to the company. It is generated locally on your device and displayed only during initial wallet creation. After you close that screen, MetaMask never displays the full phrase again unless you explicitly request it from the wallet settings—and even then, only if you enter your local password correctly.

Private keys are derived from the Secret Recovery Phrase using a mathematical function. Each account address in your wallet has a corresponding private key, which is what actually signs transactions. You do not need to memorize or manually handle private keys if you have the recovery phrase, because MetaMask can regenerate them automatically. The private keys are stored locally on your device, encrypted with your MetaMask password. The password is different from the recovery phrase: it is a local access control that protects the encrypted private keys on your device, not a way to recover them if you forget.

This distinction creates a specific scenario: if you remember your password but lose your device, your encrypted private keys are gone forever, but your funds are not. The Secret Recovery Phrase will regenerate them on any device. Conversely, if someone obtains your recovery phrase, they can import your wallet on another device and spend your funds without ever needing your password. The recovery phrase is the ultimate security boundary.

Preparing to recover: verify you have the phrase safely stored

Before you begin the recovery process, you must confirm that you have your twelve-word Secret Recovery Phrase written down in a form you can read. Do not attempt recovery if the phrase exists only in your memory; the risk of misremembering even one word is too high. If your phrase is stored digitally—in a password manager, encrypted note, or backed-up file—retrieve it safely to a device you can reference during recovery.

Check the phrase against the following criteria. First, count the words. A MetaMask Secret Recovery Phrase contains exactly twelve words, always in the same order. If you have thirteen words, eleven words, or the words are scrambled, the phrase is either incomplete or incorrect. Second, verify that each word is a standard English word from the BIP39 word list, the cryptographic standard that MetaMask uses. Uncommon words, proper nouns, or slang do not appear in a legitimate recovery phrase. Third, confirm the exact order by reviewing your written backup. The sequence matters; word order is part of the cryptographic calculation.

Prepare a clean, offline device or a private notebook where you can write the phrase if needed during recovery. Do not paste it into a text editor, email, or messaging application, even temporarily. Do not screenshot it or copy it to the clipboard, where it could be exposed to clipboard-logging malware or system memory analysis. Do not use the phrase on any device while connected to untrusted networks or websites. The recovery process itself will ask you to enter the phrase into MetaMask; that is the only time it should be typed into any application.

Recovering on a desktop browser: the MetaMask wallet extension approach

To restore your MetaMask wallet extension on a desktop browser, begin by installing MetaMask from the official browser extension store for your browser—Chrome, Firefox, Brave, Edge, or Opera. Visit the official MetaMask website or the official extension store and install the extension. Do not download MetaMask from third-party websites, torrents, or unverified sources. Malicious versions exist, and installing one will expose your recovery phrase the moment you enter it.

After installation, the extension will open a welcome screen. Instead of clicking “Create a new wallet,” select “Import an existing wallet” or “Recover wallet.” MetaMask will prompt you to enter your twelve-word Secret Recovery Phrase. Type or paste the phrase carefully, one word at a time. MetaMask will auto-complete suggestions as you type; verify that each suggestion matches your phrase exactly. Do not accept auto-completions for words you did not intend.

Once you have entered all twelve words in the correct order, MetaMask will ask you to create a new password for this device. This is a local password that encrypts the private keys stored on your computer. It can be different from any password you used on your previous installation. Choose a strong password: at least twelve characters, combining uppercase, lowercase, numbers, and symbols. Write it down or store it in a password manager, but keep it separate from the recovery phrase. After you enter and confirm the password, MetaMask will complete the import and restore your accounts.

The accounts you see will be the same accounts that were in your wallet before, with the same addresses, balances, and transaction history. If you had multiple accounts in your original MetaMask wallet, they will all be restored in the same order. Your tokens and NFTs will appear as they were last recorded on the blockchain. If the list looks unfamiliar—different addresses or accounts you do not recognize—stop immediately and verify the recovery phrase is correct. Entering an incorrect phrase will generate a different wallet with different accounts.

Recovering on mobile: iOS and Android considerations

The MetaMask mobile app uses the same Secret Recovery Phrase system as the browser extension, but the installation and recovery steps differ slightly. On iOS, download MetaMask from the Apple App Store; on Android, download it from Google Play or the official MetaMask website. Open the app, tap “Import using Secret Recovery Phrase,” and enter your twelve words in the order you have them written down.

Mobile keyboards present a different usability challenge than desktop typing. The phrase entry screen may use a word-picker interface or allow free typing with autocomplete. Verify each word carefully before moving to the next, because mobile keyboards can introduce spelling errors or suggest incorrect words. Some mobile operating systems also have clipboard managers that store copied text; if you copy your recovery phrase onto the phone to reference it, that history may be recorded. Typing the phrase manually from a written backup is more secure, even if slower.

After entering the phrase, the app will ask for a local password and any additional biometric protection you prefer. MetaMask on mobile can use Face ID or fingerprint authentication as a convenience layer on top of the password. This adds usability without reducing security, because the biometric is local to the device and does not replace the underlying encryption. Once setup is complete, your accounts will appear, and you can access your wallet and interact with decentralized applications directly from the mobile app.

One important distinction: the mobile app and browser extension are separate installations, but they restore the same accounts because they use the same Secret Recovery Phrase. If you import your phrase on both devices, both will show the same addresses and balances. Any transaction sent from one will be visible in the other. This is by design—your wallet exists on the blockchain, not on any single device. Devices are just interfaces to access it.

Verifying your restored wallet and checking balances

After recovery completes, take time to verify that everything matches your expectations. First, compare the account addresses. Open your restored MetaMask wallet extension and note the first account address (a string beginning with “0x”). Compare it to any record you have: an old screenshot, an email confirmation from an exchange, or a blockchain explorer search you performed previously. If the address is different, you entered the recovery phrase incorrectly. Stop, and attempt recovery again with careful attention to word spelling and order.

Second, check the account balances. If you held Ethereum or tokens on the Ethereum network, the balance should be visible immediately in the main account view. If you held assets on other networks—Bitcoin on the Bitcoin network, Solana tokens on the Solana blockchain, or TRON assets on the TRON network—you may need to add those networks to your MetaMask wallet first. MetaMask’s default configuration usually includes Ethereum, but you can add custom RPC endpoints to view balances on other blockchains.

Third, verify token and NFT visibility. If you owned specific ERC-20 tokens or NFTs, search for them manually in MetaMask by their contract address or add them to your display. MetaMask should recognize well-known tokens automatically, but lesser-known tokens may require manual import. Your NFTs will appear in the NFTs tab if MetaMask recognizes the collection; some smaller or less-traded NFTs may not display but are still owned on the blockchain.

Fourth, review your transaction history. Open a blockchain explorer such as Etherscan and search for your restored address. The explorer will show every transaction associated with that address, including past transfers, token swaps, and contract interactions. Confirm that the transaction list matches your memory. If you see unexpected transactions or a completely different history, you may have entered the wrong recovery phrase and restored someone else’s wallet—in which case you should immediately delete the wallet from that device and try again.

Security practices after recovery

Recovery is a moment of vulnerability. Your Secret Recovery Phrase is vulnerable the moment you retrieve it from storage to enter it. Once recovery is complete, move it back to secure storage immediately. If you typed it into a device, clear the clipboard. If you wrote it temporarily in a document, delete that document. Do not leave the phrase sitting in an open text file or browser tab.

Review your MetaMask security settings after recovery. Check whether the MetaMask wallet extension or app has auto-lock enabled, which will require your password again after a period of inactivity. Enable this feature to reduce the window during which an attacker with physical access to your device could spend your funds. Check your connected sites: open MetaMask, navigate to Settings, and review which websites have permission to access your wallet. Remove permissions for sites you no longer use.

If you use hardware wallets—devices like Ledger or Trezor that hold private keys offline—you can connect them to MetaMask after recovery. MetaMask supports hardware wallet integration, allowing you to use the extension as an interface while the hardware device signs transactions. This adds a physical confirmation step that prevents unauthorized spending even if your computer is compromised. Import your hardware wallet using the same Secret Recovery Phrase if you originally set it up with that seed.

Consider whether the circumstances that led to recovery should change your backup strategy going forward. If you lost access because you stored the recovery phrase digitally and the device failed, create a physical backup. If you stored it physically and it was stolen, encrypt a digital backup and store it in multiple locations. If you forgot the phrase because you relied on memory, write it down. If you did not test recovery before this incident, test it now on a new device to confirm the phrase works—then delete that test wallet.

Troubleshooting recovery problems

If your restored accounts appear but show zero balances where you expect funds, verify the blockchain network. Many users restore their wallet but forget to switch from the Ethereum mainnet to other networks. If you held Bitcoin, Solana, or TRON assets, you must add those networks to your MetaMask configuration manually. Visit the MetaMask settings, select “Networks,” and add custom RPC endpoints for the blockchains you need. Once the network is added, MetaMask will query it and display balances.

If you receive an error message that the recovery phrase is invalid, review each word carefully. Compare your phrase to the official BIP39 word list to confirm each word is spelled correctly. MetaMask will not accept a phrase with spelling errors or words outside the standard list. If you are confident the spelling is correct, confirm the word order. A single word in the wrong position will cause the entire recovery to fail. Count through the words in your backup and match them exactly to the order you are entering them.

If you are certain the phrase is correct but the addresses are different from what you remember, consider whether you had multiple wallets in MetaMask. Some users create separate wallets for different purposes. If you imported the phrase but the account addresses do not match, you may have restored a different wallet or an older backup of the same seed. MetaMask will always generate the same accounts from the same Secret Recovery Phrase, so if the addresses are different, the phrase itself must be different.

If the recovery phrase works but you cannot remember which password you used on your previous device, the password cannot be recovered. Passwords are used only to encrypt the private keys on a single device; they are not stored anywhere. On the device where recovery fails, you can create a new password, which will re-encrypt the private keys locally. The new password does not affect your funds or your ability to access them from other devices using the same recovery phrase.

Preventing the need for recovery in the future

The best recovery is the one you never need. Create a robust backup strategy immediately after setting up your MetaMask wallet extension. Write your Secret Recovery Phrase on paper, store it in a physical safe or safety deposit box, and do not keep a digital copy unless encrypted with a passphrase you memorize separately. Some users use metal seed backup kits that can withstand fire and water damage; the cost is minimal compared to the value of the funds at risk.

Test your backup by attempting a recovery on a separate device before you need it. Create a new account on a test device, import your Secret Recovery Phrase, and verify that the accounts and balances match. Then delete the test wallet. This process confirms that your backup works and that you can execute recovery under normal conditions, not in a panic after losing device access.

Keep your password separate from your recovery phrase. Your password protects your wallet on the current device; your recovery phrase restores your wallet on any device. Storing them together defeats the purpose of separation. If someone finds your written recovery phrase but does not know your password, they cannot immediately spend your funds on that device—they would need to recover the wallet on their own device. Conversely, your password alone is useless without the recovery phrase.

Consider using a passphrase in addition to your Secret Recovery Phrase. MetaMask supports an optional passphrase feature that adds an additional word to your recovery phrase. If you enable this, you would need both the twelve-word phrase and the passphrase to recover your wallet. This provides security against someone finding your written phrase, but it also means you must remember or separately backup the passphrase. Document carefully where you store it—not with the phrase itself.