MetaMask password recovery
Forgot your MetaMask password, or watched your wallet vanish after an update? In most cases the coins are still there, locked inside an encrypted vault on your own device. This guide covers MetaMask password recovery step by step — starting with the one mistake that makes it unrecoverable.
MetaMask has no “forgot password” button by design, which is why a forgotten password feels final — but it usually isn’t. MetaMask password recovery works because the wallet keeps an encrypted vault on your device, and your password only unlocks it. If that vault still exists, your password can be recovered. The danger is that a few panic actions can destroy the vault, so before anything else, read the next section.
Stop — what not to do first
The most common way people lose their coins for good is not the forgotten password — it is what they do next. If you are locked out:
- Do not uninstall or reinstall the MetaMask extension. Removing it can wipe the vault that holds your keys. If you have no seed-phrase backup, that is unrecoverable.
- Do not reset or “forget” the wallet, and do not clear your browser data, cache or profile.
- Do not upgrade the browser or extension until the vault is safely backed up.
- Do back up first. Copy the extension’s storage folder (details below) to a safe place before you experiment with anything.
If you still have your seed phrase, the safest move is to test it on a separate clean machine first — import it into a fresh MetaMask there to confirm it restores the right accounts. Only then reset on your main device. Never test recovery on the only copy you have.
How MetaMask stores your wallet (the encrypted vault)
Understanding the vault is what makes recovery possible. MetaMask does not store your password or your keys in readable form. It stores a single encrypted object — the vault — that looks roughly like {“data”:”…”,”iv”:”…”,”salt”:”…”}. Your password is run through PBKDF2 to derive an encryption key, and that key decrypts the data field with AES-GCM to reveal your seed phrase and accounts.
Two details matter for recovery. Older vaults used 10,000 PBKDF2 iterations; newer ones use 600,000, which makes each password guess slower and shapes how the search is run. And the vault is the only thing that needs to survive — not the interface, not your session. As long as that JSON exists somewhere, the wallet can be reopened with the right password.
Find your MetaMask vault
On a Chrome-based browser (Chrome, Brave, Edge), the vault lives in the extension’s local storage as LevelDB files, under a path like …/Local Extension Settings/nkbihfbeogaeaoehlefnkodbefgpgknn/ — that string is MetaMask’s extension ID. The folder contains .ldb and .log files; the vault JSON is inside them. On Firefox it sits in the profile’s storage; on mobile it is in the app’s protected storage.
MetaMask publishes an official Vault Decryptor tool that takes a vault plus the correct password and returns the seed phrase. It is genuinely useful — but only if you remember the password. When you don’t, extracting the vault from those LevelDB files is the first step, and searching for the password against it is the second. If digging through browser storage isn’t something you want to do yourself, this is exactly the part we handle.
How MetaMask password recovery works
Once the vault is in hand, recovery is a search problem, not a guessing game. We take everything you remember — the length, any fragments, the style of password you tend to use, old passwords you reused — and build targeted candidate lists with masks and rules. Those are tested against your vault with GPU tooling (MetaMask vaults have a dedicated hashcat mode, 26600), and the moment a candidate decrypts the data field cleanly, we have it.
As with every wallet, a lot of “wrong” passwords are correct but mistyped — a 0 for an O, a 1 for an l, a stray capital, or a special character in a different keyboard layout. We sweep those variations automatically. The decrypted vault yields your seed phrase as a byte array, which converts straight back to your standard 12 or 24 words.
“My MetaMask wallet disappeared after an update”
This is one of the most frightening and most recoverable cases. After a browser or extension update, people open MetaMask to find their accounts simply gone. Almost always the vault has not been deleted — the interface just lost its pointer to it, or loaded a fresh empty state. The encrypted vault is usually still sitting in the LevelDB data, or in an older copy of the browser profile.
The recovery is to locate that vault in the storage files (or a backup of the profile) and decrypt it with your password. This is why the “what not to do” rules matter so much: if you reinstall or clear data in a panic after the wallet disappears, you can overwrite the very vault that still holds your coins.
If you lost the seed phrase too
The seed phrase and the vault are two routes to the same keys. If you have the seed, you don’t need the password at all — import it into a fresh MetaMask and you’re in. If you have neither the seed nor the vault, no service can recover the wallet, because there is nothing left to decrypt. So the realistic cases we help with are: you have the vault but forgot the password, or the wallet disappeared and the vault is still on disk. A public address on its own is never enough.
Do it yourself vs. a recovery service
If you remember your password well and just need to reach the vault, MetaMask’s own Vault Decryptor may be all you need — try it first, for free. Consider a recovery service when the password is only partly remembered, when the vault has to be extracted from LevelDB or a disappeared wallet, or when the value at stake makes a wrong move too risky.
If you do seek help, protect yourself. A legitimate firm works no-recovery, no-fee and never asks for payment upfront. MetaMask itself will never DM you, and neither do we — anyone contacting you first on Telegram, Facebook, Instagram, Discord or X claiming to be MetaMask support or a recovery service is a scammer. And remember that coins sent to a scam or a wrong address cannot be reversed by anyone.
Frequently asked questions
Can I recover MetaMask without my seed phrase if I forgot the password?
Often yes, as long as the encrypted vault still exists in your browser or phone. MetaMask keeps an encrypted vault locally, and if you forgot only the password we can search password candidates against that vault. If both the vault and the seed phrase are gone, recovery is not possible.
Should I reinstall MetaMask if I am locked out?
No. Removing or reinstalling the MetaMask extension can wipe the encrypted vault that holds your keys, and without a seed-phrase backup that can make the wallet unrecoverable forever. Do not uninstall, reset, or clear browser data until the vault has been backed up.
Where is the MetaMask vault stored?
In the browser extension’s local storage. On Chrome-based browsers it lives in the Local Extension Settings folder for the MetaMask extension ID as LevelDB files. On mobile it is held in the app’s protected storage. The vault is a small JSON object containing data, iv and salt fields.
My MetaMask wallet disappeared after an update. Can it be recovered?
Frequently, yes. The accounts vanishing from the interface usually does not mean the vault is gone; the encrypted vault often still sits in the browser profile or a backup of it. We locate that vault in the LevelDB data and decrypt it with your password.
I only remember part of my MetaMask password. Is that enough?
That is the ideal case. The length, known fragments and your character habits let us build targeted masks and rules and test them against your vault, rather than attempting blind brute force.
How much does MetaMask password recovery cost?
Our fee is success-based: a percentage of the recovered value only if we succeed, and nothing if we fail. We never ask for upfront payment.
Locked out of MetaMask?
Tell us what you remember and whether the extension still has your vault. You’ll get an honest assessment within 24 hours, and you pay only if we recover access.