Seed Phrase & Recovery — Backups, lost phone, and compromised wallets

Try Tangem secure wallet →

Seed Phrase & Recovery — Backups, lost phone, and compromised wallets

Table of contents


Quick summary: why the seed phrase matters

The seed phrase (also called recovery phrase) is the master key for a non-custodial software wallet. Lose it and you lose access forever. Expose it and someone else can empty your accounts. Plain fact. I’ve made backup mistakes before (and fixed them), so I’ll cut to what works.

Where to find MetaMask wallet seed (extension & mobile)

If you’re searching “where to find metamask wallet seed” or “where do i find my wallet seed in metamask,” here are the standard places the app keeps the option to reveal the seed phrase. UI text can change with updates; the flow below reflects the common paths.

Extension: step-by-step (where do I find my wallet seed in metamask)

  1. Click the MetaMask extension icon in your browser toolbar and unlock with your password.
  2. Open the account avatar (top-right) and choose Settings.
  3. Go to Security & Privacy.
  4. Click the option labeled something like Reveal Secret Recovery Phrase (you’ll be asked for your wallet password).

(That reveals your seed phrase on-screen.)

Note: If you don’t see these exact labels the extension may be updated; look for Security, Backup, or Recovery directions. Never enter the seed phrase into a web form or third-party site.

Mobile app: step-by-step (where to get MetaMask wallet seed on phone)

  1. Open the MetaMask mobile app and unlock it (PIN/biometrics).
  2. Tap the hamburger (top-left) and open Settings.
  3. Choose Security & Privacy and then Reveal Secret Recovery Phrase.
  4. Authenticate with your app PIN or biometrics and copy the words only to offline storage.

And write the seed phrase down physically. Don’t photograph it, don’t paste it into notes synced to the cloud unless you understand the risk.

Backup options — comparison and trade-offs

Here’s a practical table comparing common backup approaches.

Method Recovers if extension removed Security Ease
Physical seed phrase (paper/steel) Yes High (if stored offline) Moderate
Export private key (per account) Yes (account-specific) Medium (one key per account) Moderate
Encrypted cloud backup (Drive/iCloud) Yes Low–Medium (exposed if account compromised) Easy
Hardware wallet (use with software wallet) Yes Very high Moderate (needs device)
Smart-contract/social recovery wallets Varies Depends on design Varies

Notes: the standard MetaMask account (seed phrase + private keys) does not have built-in social recovery. You can, however, use smart-contract wallets or external services that offer social recovery—those are different account types and come with trade-offs.

Lost phone: what to do

Lost a phone? Don’t panic, but act fast. What you do depends on whether you backed up the seed phrase.

But there’s one more thing: if the lost phone might be accessible to someone else (stolen), revoke dApp connections from any devices where you still control accounts and consider moving funds to a fresh wallet immediately.

What to do if MetaMask is removed from chrome extension

If the extension is removed (accidentally or by the browser) you can reinstall it and restore using your seed phrase. Here are the steps and security checks:

  1. Reinstall the extension only from the official source (verify the URL—watch for lookalike domains).
  2. Open the extension, choose Import Wallet or Restore, and enter your seed phrase (on-device only).
  3. After restore, check your accounts and transaction history.

If you don’t have the seed phrase, reinstalling will not help—there’s no central MetaMask support team that can restore your wallet for you. So back up the phrase before you need it.

What to do if MetaMask wallet is compromised or hacked

What do you do if metamask wallet is compromised? Act quickly and methodically.

  1. Confirm the compromise (unauthorized outgoing txs, new approvals, strange balances).
  2. If you still control the wallet: create a fresh wallet with a new seed phrase on a clean device (preferably with a hardware wallet) and transfer funds immediately.
  3. If approvals were the problem: revoke token approvals from the compromised address (see revoke-approvals). Do that before moving tokens if you can sign from the compromised wallet.
  4. If you no longer control the wallet (attacker has the private keys): do not use that account anymore. Move anything that can be moved from other accounts you control, and assume the compromised address is lost.
  5. Report the theft to exchanges if funds were deposited there and file a police/incident report (paper trail helps if funds hit KYC platforms).

What if you’re not sure whether it’s a compromise or a dApp trick? Disconnect dApps, check the approvals list (and the originating contract addresses), and treat any unexpected approval as hostile.

In my experience the fastest mistake is trying to outsmart an attacker while using the compromised device. Stop using that device immediately.

Phishing phrasing and fake domains to ignore

Attackers copy UI and text. Watch out for messages like these (they are almost always scams):

And check domain names carefully. A site named “www.metamask wallet.com” (space or punctuation variations) is almost certainly malicious. If an email or page asks you to paste your seed phrase to ‘verify’ your account, close the window and report it.

See phishing-scams-and-email-frauds for examples and reporting steps.

Practical next steps: revoke approvals, hardware failover, and moving funds

FAQ

Q: Is it safe to keep crypto in a hot wallet?
A: Hot wallets are convenient for daily DeFi use. They are not as secure as hardware or cold storage. Use them for active funds and keep the majority of assets offline.

Q: How do I revoke token approvals?
A: Use the Revoke Approvals tool (see revoke-approvals) and check each approval before revoking (revokes cost gas).

Q: What happens if I lose my phone?
A: Restore on a new device using your seed phrase. Without the seed phrase you cannot restore.

Q: What to do if my MetaMask wallet is hacked?
A: Create a new wallet, move any remaining funds you control, revoke approvals (if possible), and report the incident. See the steps above for details.

Q: Where to find MetaMask wallet seed if the extension is removed?
A: Reinstall and restore with your seed phrase. If you never backed up the seed phrase you cannot recover the wallet.

Conclusion and next steps

Seed phrase management is the single most practical security step you’ll take. Back it up physically (steel or paper), avoid cloud photos, and prefer hardware devices for large holdings. If you want practical guides on restoring wallets or other recovery options, read restore-wallet and backup-and-recovery-options. For day-to-day safety, check security-best-practices and the revoke approvals guide.

If you don’t have a safe backup yet, stop reading and secure one now. And remember: no one can restore your seed phrase for you.

Try Tangem secure wallet →