If you forgot your MetaMask password, the bad news is that MetaMask cannot recover it for you — there is no "forgot password" email link or server-side reset. The good news is that your password only locks the local app; your funds live on-chain, and your 12-word Secret Recovery Phrase (SRP) restores full access to every account and every cent.
Why Your MetaMask Password Cannot Be Recovered
MetaMask encrypts your vault locally on your device using your password as the key. That encrypted vault never leaves your browser or phone — MetaMask's servers hold no copy of it, and ConsenSys has no way to decrypt it on your behalf. This is confirmed in MetaMask's own documentation.
This is a deliberate security design. If MetaMask could reset your password remotely, an attacker who compromised MetaMask's infrastructure could drain every wallet. The tradeoff is that you are the sole custodian of your credentials.
What the password actually does:
- Encrypts the vault file stored in your browser's local storage (or the mobile app's sandboxed storage)
- Prevents anyone with physical access to your device from opening MetaMask without it
- Has no relationship to your private keys or your on-chain funds
Losing the password does not mean losing your crypto. Losing your Secret Recovery Phrase does.
What You Need Before You Start: Your Secret Recovery Phrase
Your Secret Recovery Phrase (also called a seed phrase or mnemonic) is the 12-word sequence MetaMask generated when you first created the wallet. Every account inside that MetaMask instance derives from it.
If you have your SRP, you can restore everything in under five minutes. Follow the steps in the next section.
If you do not have your SRP, the situation is more serious. Check every location where you might have stored it:
- Physical paper backup kept off-device
- Encrypted notes app (Bitwarden, 1Password, etc.)
- A USB drive or external hard drive
- A photo stored in a cloud backup (not recommended practice, but worth checking)
If the device is still unlocked or the browser session is still active, you may be able to export your SRP right now without the password. In MetaMask, go to Settings → Security & Privacy → Reveal Secret Recovery Phrase while the session is live. Do this before the session times out.
How to Reset MetaMask Using Your Secret Recovery Phrase
This process wipes the locked local vault and re-imports your wallet from the SRP. You will set a new password in the process.
Step 1: Open MetaMask and click "Forgot password"
Open the MetaMask browser extension or mobile app. On the unlock screen — where it asks for your password — click the "Forgot password?" link at the bottom of the form.
Step 2: Understand what "Reset Wallet" means
MetaMask will show a screen titled Reset Wallet (extension) or prompt you to import using your SRP (mobile). Read the warning carefully.
Reset Wallet deletes the encrypted vault on this device. It does not delete your on-chain accounts, tokens, or transaction history. Those exist on the blockchain regardless of what happens locally. The reset only removes MetaMask's local knowledge of your accounts — your SRP re-imports all of it.
Step 3: Enter your 12-word Secret Recovery Phrase
Type each word of your SRP into the fields provided, in the exact order MetaMask assigned them. Words are lowercase and separated by spaces. A single misplaced word will produce a completely different wallet, so double-check each entry.
Step 4: Set a new password
Choose a strong, unique password of at least 8 characters. MetaMask enforces this minimum, but a password manager-generated passphrase of 16+ characters is strongly preferred. Enter it twice to confirm.
Step 5: Click "Restore" and verify your accounts
Click Restore (extension) or Import (mobile). MetaMask will re-derive your accounts from the SRP and unlock immediately. Confirm that your ETH address matches what you expected — if the first account address is correct, the restore succeeded. Token balances may take a few seconds to populate as MetaMask queries the chain.
Custom Accounts and Hardware Wallets: One Extra Step
MetaMask auto-restores only accounts that were derived sequentially from the SRP (Account 1, Account 2, etc.). Two types of accounts require manual re-addition after a reset:
- Imported accounts — accounts added via a standalone private key rather than derived from the SRP. You must re-import the private key for each of these.
- Hardware wallet accounts — Ledger or Trezor accounts connected via MetaMask. Reconnect your hardware wallet via Account → Add account or hardware wallet → Connect Hardware Wallet after the reset.
If you used multiple derived accounts (Account 1, Account 2 …), MetaMask will only show Account 1 initially. Add subsequent accounts manually via the account menu — MetaMask will recognize them by address and reattach their history.
Protecting Your Seed Phrase After Recovery
Now that you have access again, take 10 minutes to harden your backup before closing the browser.
Offline, physical backup (minimum viable):
- Write the 12 words on paper in numbered order
- Store that paper in a fireproof location (a home safe, a safety deposit box)
- Never photograph it and store the photo in cloud storage
Metal backup (recommended for significant holdings):
- Stamp or engrave the SRP onto a stainless steel plate — products like Cryptosteel or Bilodeau offer corrosion and fire resistance
- Store separately from your hardware devices
What to avoid:
- Emailing the SRP to yourself
- Storing it in plaintext in Google Docs or iCloud Notes
- Taking a screenshot and leaving it on your phone
MetaMask's Security Best Practices guide covers this in detail.
Preventing a Locked-Out Situation in the Future
A locked MetaMask with a forgotten password is one of the most avoidable crypto problems.
Use a password manager. Tools like Bitwarden (open-source, free tier available), 1Password, or KeePass generate and store strong passwords so you never need to memorize them. Save your new MetaMask password there immediately after this recovery.
Enable biometrics on mobile. The MetaMask mobile app (iOS and Android) supports Face ID and fingerprint unlock. This eliminates the need to type a password daily, reducing the chance of forgetting it.
Test your seed phrase backup. After storing your SRP, verify it works by importing it into MetaMask on a second device or browser profile. Confirm the address matches. Then delete that test import. Knowing your backup works before you need it is the entire point.
Set a MetaMask auto-lock timer you can live with. Under Settings → Advanced → Auto-lock timer, a shorter timer means more password prompts, which keeps the credential fresh in memory (or in your password manager).
FAQ
Q: Can MetaMask support reset my password for me?
No. MetaMask support cannot reset your password, access your vault, or recover your funds. MetaMask operates a non-custodial wallet, meaning no third party — including ConsenSys — holds your keys. Any message claiming to be MetaMask support offering a password reset is a phishing attempt.
Q: Will resetting MetaMask delete my crypto?
No. Your tokens, NFTs, and transaction history exist on the blockchain, not inside MetaMask. The Reset Wallet function only deletes the local encrypted vault on your device. Re-importing your Secret Recovery Phrase restores full access to your on-chain assets.
Q: What if I forgot both my password and my Secret Recovery Phrase?
If neither the password nor the SRP is available, and the MetaMask session has expired, there is no recovery path. The vault is encrypted with the password, and without the SRP there is no cryptographic way to derive the private keys. This is the irreversible scenario that makes offline SRP backup non-negotiable.
Q: How many accounts will MetaMask restore from my seed phrase?
MetaMask automatically restores the first derived account (Account 1). Additional sequentially-derived accounts must be re-added manually via the account menu — MetaMask will recognize each one by its address. Accounts imported via a standalone private key must be re-imported separately using that private key.
Q: Is it safe to type my Secret Recovery Phrase into MetaMask?
Yes, within the official MetaMask interface only. Never type your SRP into any website, third-party app, pop-up, or support chat. Only enter it into the official MetaMask extension (verified in the Chrome Web Store or Firefox Add-ons) or the official MetaMask mobile app from the App Store or Google Play.
