Adding security to your wallet with a 2FA, email and/or SMS for withdrawing or deposit

I have had my wallet for approximately two years, and I’ve done almost nothing with it, except keeping it for when I might need it. For a long time, I didn’t have anything in my wallet, but there were two new projects I joined as an early investor. About a year ago, I invested significantly in these projects, which have only just launched.

Every month, I receive an X number of tokens on the dashboards of these projects that I can claim and send to my wallet. When I tried to do this last weekend, I first sent a small amount of ETH and POL to pay the transaction fees. To my surprise, these tokens suddenly disappeared. I discovered that my wallet has a sweeper bot.

I have never visited suspicious websites or connected my wallet to untrustworthy platforms. As I mentioned, I rarely used MetaMask, except when I needed to provide an address for these projects. These are legitimate projects, so I was not hacked by any of them.

I would kindly but urgently request the MetaMask team to add 2FA verification as soon as possible, to confirm transactions when tokens are deposited in or transferred out of a wallet, for example via email or SMS verification codes. With this method, the sweeper bot or other hacking techniques would be unable to take any tokens from your wallet, as a confirmation would first be required through email, Google Authenticator, or SMS. Other platforms, such as KuCoin, Binance etc do have this already if you want to login.

This is a simple addition that could help tens of thousands, if not hundreds of thousands, of users recover their tokens. Currently, I can do nothing with these tokens, even though their value has increased significantly. I sincerely hope MetaMask can add this. Security is one of the primary reasons crypto and blockchain exist. However, in my opinion, external platforms like wallets and exchanges could be much better secured.

Thank you in advance!

Hey @Mo-dric19, welcome to the MetaMask community! :fox_face:

Please see here on our Knowledge Base for more info on 2FA:

1 Like

Thank you for the quick reply!

I understand that MetaMask may be more secure than 2FA in certain cases, but the concern lies with the many accounts that have already been compromised, leaving users unable to take any action. For example, a sweeper bot can drain all tokens from an account. Such a bot already has access to the key phrase, which automatically grants it permission to transfer all tokens.

For these accounts, a 2FA system for outgoing transfers would be ideal. It would ensure that no tokens can be moved without email or SMS confirmation, effectively preventing the bot from stealing the tokens.

If needed, users could pay a small transaction fee of just a few cents for each transfer. This isn’t about the cost itself; the goal is to ensure that hacked accounts can regain access to their tokens. Such as me, I cannot claim my tokens of the two projects on their website. I cannot even sent a small ETH or POL to my wallet to pay the gasfee…

This indeed a solution to all these Wallet Compromisation, will safe newbies

1 Like