
MetaMask Social Login is a new feature introduced in 2025 that allows users to create, backup, and restore their MetaMask wallet using their Google or Apple accounts, significantly simplifying the onboarding and login process. Instead of dealing with the traditional 12-word Secret Recovery Phrase (SRP) upfront, users now sign in using their social accounts and create a unique password. Behind the scenes, the wallet generates the SRP locally on the user's device and encrypts it securely.
The system uses advanced cryptographic techniques, including Threshold Oblivious Pseudorandom Function (TOPRF) and Shamir Secret Sharing (SSS), fragmenting and distributing encrypted key shares across multiple servers. No single entity—not MetaMask, Google, Apple, or any server—can reconstruct the SRP alone; only the user can unlock it by combining their social login credentials with their password. This ensures the wallet remains fully self-custodial and secure.
When logging in on a new device, users authenticate with their social provider (Google or Apple), enter their password, and the system reconstructs the encryption key to decrypt the SRP locally, restoring access to the wallet. Rate limiting on password attempts protects against brute force attacks.
This approach marries Web2 convenience with Web3 security, offering a familiar login experience without compromising user control over private keys. MetaMask emphasizes that password management remains critical—losing the password or social login access without prior backup means the wallet cannot be recovered.