MetaMask introduced a social login feature on Aug. 26, allowing users to create and manage crypto wallets using Google or Apple accounts.

According to the announcement, the initiative aims to eliminate the complexity of traditional 12-word seed phrases in its latest crypto adoption initiative.

The self-custodial wallet service streamlined wallet creation into two steps: signing in with a Google o r Apple ID and creating a unique password. Users can then access their wallets without manually managing Secret Recovery Phrases (SRP), which MetaMask generates and stores securely behind the scenes.

MetaMask stated:

“Crypto doesn’t have to be complicated. That’s why we’ve made it easier than ever to manage a MetaMask wallet with our new Social login feature.”

The company added that the social login feature addresses a primary obstacle for crypto newcomers: managing complex seed phrases to secure wallet access.

Keeping it self-custodial

The social login system preserves MetaMask’s self-custodial nature while reducing user friction.

No single entity, including MetaMask, can access all components needed to retrieve users’ Secret Recovery Phrases. Only the combination of social credentials and the user’s unique password can unlock the SRP on local devices.

The architecture ensures that social credentials work in conjunction with user passwords to unlock locally stored wallet information.

The system combines “Web2 familiarity with Web3 security,” according to the company, providing seamless wallet management without compromising asset control.

MetaMask emphasized that wallet security depends on users creating and managing secure passwords. Lost passwords cannot be recovered, maintaining the non-custodial principles that distinguish crypto wallets from traditional financial accounts.

Broader adoption strategy

The social login launch follows MetaMask’s Aug. 21 announcement of its planned stablecoin, MetaMask USD (mUSD), developed in collaboration with Stripe-owned Bridge and decentralized platform M0.

The stablecoin will debut on Ethereum and layer-2 blockchain Linea. It is backed 1:1 by dollar-equivalent assets and integrated into major DeFi protocols.

Mentioned in this article

A rapidly evolving bank malware now has far greater capabilities to infect Android devices and steal personal information, according to researchers.

The cybersecurity firm Zimperium says the so-called DoubleTrouble trojan “has rapidly evolved in both its distribution methods and capabilities,” and is now permeating channels on the social platform Discord.

“In its latest evolution, the malware has integrated several new and advanced features, significantly expanding its capabilities beyond earlier iterations. These enhancements enable more effective data theft, device manipulation, and evasion techniques.

The new functionalities include: displaying malicious UI overlays to steal PIN codes or unlock patterns, comprehensive screen recording capabilities, the ability to block the opening of specific applications, and advanced keylogging functionality.”

Researchers say the malware convinces users to download it by masking itself as an extension or an add-on, and it uses the Google Play icon to appear trustworthy.

It also manipulates device functionality by exploiting Android’s Accessibility Services, allowing it to block legitimate banking or security apps with misleading “system maintenance” prompts.

In addition, the malicious software simulates user actions like taps and swipes, allowing attackers to remotely control infected devices and steal data, including passwords and banking details, with alarming precision.

The trojan’s attacks are ongoing, primarily targeting users in Europe through phishing websites and Discord-hosted APKs. Specific victim counts remain unknown at time of publishing.

Follow us on X, Facebook and Telegram

Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Surf The Daily Hodl Mix

&nbsp

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney