Suggestions for Enhancing MetaMask Wallet Security, 2025

Dear MetaMask Team,

I hope this finds you well.

I recently got my wallet drained with no downloads, no signing ins on malicious sites, I don’t have my seed phrases digitally… So I don’t know what happened but it made me and a lot os people arround me think about this topic.

First, I want to express my gratitude for the incredible work you’ve done in creating a user-friendly wallet that has become a cornerstone for many in the crypto community. As a frequent user of MetaMask, I’ve been reflecting on ways to further improve wallet security and user experience. Below are a few suggestions, not only from me, that I believe could enhance the safety of the wallet:

Two-Factor Authentication (2FA):
Introduce an optional 2FA layer for critical actions like approving token swaps, withdrawals. This could be integrated with authentication apps like Duo Mobile.

“Trusted Wallets” Feature:
Allow users to designate “trusted wallets” that can receive transactions without additional verification. For transactions to non-trusted wallets, require users to enter a code sent to their phone via SMS or an authenticator app. This would provide an extra layer of protection against unauthorized transactions.

I’d love to hear your thoughts on these ideas and whether some of them align with your development roadmap. I genuinely believe these improvements would not only enhance wallet security but also boost user confidence in navigating the crypto space safely.

Thank you for taking the time to consider these suggestions. Please feel free to reach out if you’d like to discuss them further.

Best regards,
DeyvisMalta

Hey @DeyvisMalta sorry to hear this happened to you. To find out more information about what may have happened with your wallet, please contact the support team at https://support.metamask.io/ and click the Start a conversation button

This will connect you to a bot at first, answer some questions and it will open a conversation for you with a live agent.

In terms of 2FA, please see here on our Knowledge Base for more info: