MetaMask Security Guide

1. The 10 Security Rules

1. Use a Hardware WalletLedger or Trezor keeps your private keys offline. Even if your computer is compromised, your funds can't be touched without physical confirmation.
2. Never Share Your Seed PhraseNo support agent, no website, no "verification" tool needs your seed phrase. It's the master key to your wallet. Write it on paper, store it in a safe.
3. Revoke Token ApprovalsEvery dApp you interact with can hold approval to spend your tokens. Use revoke.cash or Etherscan's token approval checker to clean up unused allowances.
4. Verify Contract AddressesHackers deploy fake tokens with similar names. Always cross-check the contract address on CoinGecko, Etherscan, or the project's official website.
5. Bookmark Real dApp URLsPhishing sites rank above real ones in search results. Bookmark the exact URLs of Uniswap, OpenSea, Aave, etc. Never click ad links.
6. Check Pending TransactionsBefore signing, read what MetaMask shows you. If a gas estimate looks wrong or the contract interaction seems unfamiliar, reject it.
7. Avoid Clipboard HijackersMalware can swap your copied address with an attacker's. Always verify the recipient address character-by-character before sending large amounts.
8. Use a Burner Wallet for New dAppsKeep your main funds in a hardware wallet and use a separate hot wallet for testing unknown protocols or airdrop farming.
9. Enable "Phishing Detection" in MetaMaskMetaMask's built-in phishing blocklist catches many known malicious domains. Keep it enabled in Settings → Security & Privacy.
10. Stay Off Social Engineering ScamsNo "giveaway," "airdrop claim," or "customer support" will ever ask you to send ETH to verify your wallet. If it's too good to be true, it's a scam.

2. What's Included — The Full Guide (PDF)

This isn't just a checklist. The full MetaMask Security Guide is a printable PDF with detailed walkthroughs, real-world examples, and step-by-step instructions for every topic above. You get:

• Hardware wallet setup — Ledger & Trezor, from unboxing to first transaction
• Seed phrase security — Steel backups, multi-location storage, inheritance planning
• dApp safety workflow — How to safely interact with any smart contract
• Approval management — revoke.cash tutorial, batch revoking, monitoring tools
• Phishing identification — URL inspection, certificate checks, common red flags
• Social engineering defenses — Discord, Telegram, Twitter scam patterns
• Recovery plans — What to do if you suspect your wallet is compromised

Pay what you want. The suggested price is $1.

3. Get the Guide

Send exactly $1 in ETH or USDC (ERC-20) to the address below. The PDF download link is sent automatically after payment is confirmed.

Send only ETH or USDC on Ethereum mainnet (ERC-20). Minimum: $1. No refunds — digital goods are non-refundable. If the automated delivery doesn't arrive within 15 minutes, contact via the wallet you sent from.