Edge Add-ons
14Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

983 indicators in this extension

983 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

MetaMask, used by 2,845,019 people, is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages and can observe network requests. It comes from a publisher with 58 extensions and was last updated in February 2026.

MetaMask

MetaMask Edge extension security report

ID: ejbalbakoplchlghecdalmeeeajnimhm

Supported Languages

🇪🇹Amharic
🇸🇦Arabic
🇮🇳Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇨🇦French
🇮🇪ga-IE
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇱he-IL
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇮🇳Kannada
🇰🇷Korean
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇮🇳Malayalam
🇮🇳Marathi
🇳🇴nn-NO
🇮🇷Persian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇧🇦Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇸🇪Swedish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
13.42.0
Size
21.28 MB
Rating
3.5/5
Reviews
269
Users
2,845,019
Type
Extension
Updated
Feb 4, 2026
Category
Productivity
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
58extensions
All still listed

Publisher Contextual Analysis

Author
MetaMask
Website
Visit
Extensions
58
Active
32
Obsolete
0
Listed
58
Unlisted
0
Users
3,470,403

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6
Screenshot 7

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
http://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
Dangerous Permission Combination: cookies,webRequest,identity
Risk Factor
Critical
Allows extensions to intercept web requests, manage cookies, and access identity or certificate-related functionalities, potentially compromising secure access and authentication processes.
clipboardWrite
Permission
High
This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Dangerous Permission Combination: scripting,cookies,webRequest
Risk Factor
High
Enables extensions to interact with scripts, modify files and downloads, and alter browsing history and bookmarks, potentially affecting data integrity and user control.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: Early script execution enables pre-emptive content manipulation• 25% increase: Unsafe code evaluation capabilities increase attack surface
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
http://localhost:8545/
Host
Medium
Host permission — access limited to this URL pattern.
file://*/*
Host
Medium
Host permission — access limited to this URL pattern.
ws://*/*
Host
Medium
Host permission — access limited to this URL pattern.
wss://*/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: *://connect.trezor.io/*/popup.html*
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.

983 indicators in this extension

983 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

The world's most trusted crypto wallet

Read the publisher’s full description

MetaMask is the world’s most secure and flexible crypto wallet, trusted by millions of users to buy, sell, and swap digital assets. Manage your portfolio, interact with dapps, and jump into the decentralized web. Crypto made easy – Buy, sell, swap, and earn directly in your wallet – Choose from thousands of tokens – Connect to dapps across multiple chains – Try DeFi, buy meme coins, collect NFTs, explore web3 gaming, and more Advanced industry-leading security protects you – Know what you’re signing before you transact – Live threat surveillance safeguards your wallet – Designed for privacy, control what you share – MEV and front-running protection Live support 24/7 – Around-the-clock support from our (human!) customer service experts SUPPORTED NETWORKS Ethereum, Linea, BSC, Base, Arbitrum, Solana, Bitcoin, Cosmos, Avalanche, Cardano, XRP, Polygon, BNB, Starknet, and more. SUPPORTED TOKENS Ether (ETH), USD Coin (USDC), Tether (USDT), Wrapped Bitcoin (wBTC), Shiba Inu (SHIB), Pepe (PEPE), Dai (DAI), Dogecoin (DOGE), Cronos (CRO), Celo (CELO), and thousands more. Download MetaMask today. Because MetaMask adds functionality to your traditional browser, we require permission to read and write to any webpage. You can always view our source code the way you would any browser extension, or on Github: https://github.com/MetaMask Our privacy policy: https://consensys.net/privacy-policy/ Terms of use: https://consensys.net/terms-of-use/

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
931
IPv4
52

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

983 indicators in this extension

983 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
13.42.0
Latest
21.28 MBNot scanned—
4a94d2fc9874657720f7945f92dbd48bd7859f29e2d455fe3765c0a347118059
10.28.3
17.98 MBNot scanned—
4a94d2fc9874657720f7945f92dbd48bd7859f29e2d455fe3765c0a347118059
10.34.0
18.33 MBNot scanned—
4a94d2fc9874657720f7945f92dbd48bd7859f29e2d455fe3765c0a347118059
11.0.0
18.87 MBNot scanned—
4a94d2fc9874657720f7945f92dbd48bd7859f29e2d455fe3765c0a347118059
11.4.1
20.45 MBNot scanned—
4a94d2fc9874657720f7945f92dbd48bd7859f29e2d455fe3765c0a347118059
11.7.3
20.17 MBNot scanned—
4a94d2fc9874657720f7945f92dbd48bd7859f29e2d455fe3765c0a347118059
11.7.5
20.12 MBNot scanned—
4a94d2fc9874657720f7945f92dbd48bd7859f29e2d455fe3765c0a347118059
11.12.2
19.84 MBNot scanned—
4a94d2fc9874657720f7945f92dbd48bd7859f29e2d455fe3765c0a347118059
11.16.14
20.65 MBNot scanned—
4a94d2fc9874657720f7945f92dbd48bd7859f29e2d455fe3765c0a347118059
12.9.3
21.50 MBNot scanned—
4a94d2fc9874657720f7945f92dbd48bd7859f29e2d455fe3765c0a347118059
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from MetaMask

Popular in Productivity