Event Date(s):
Event Location:
Your parent or grandparent has heard about cryptocurrency from a friend, received an unexpected inheritance, or simply wants to understand this part of modern finance. They ask you to help them set up a wallet. The practical instinct is sound—a self-custody wallet like MetaMask puts them in control and removes reliance on custodial institutions—but the execution matters enormously. Older adults face distinct risks: impatience with complex passwords, vulnerability to social engineering, unfamiliarity with blockchain terminology, and the tendency to trust a voice on the phone or a message that appears to come from a trusted contact.
The good news is that MetaMask setup need not be difficult if approached deliberately. The challenge is not the software itself but creating conditions where your parent can hold cryptocurrency without becoming a target for theft disguised as legitimate requests. This requires planning before the wallet is even created: identifying who else should know about the assets, establishing how to distinguish a real update from a fake one, writing down recovery information in a form that cannot be photographed or forwarded, and agreeing on a simple rule about when to ask you before sending money. Done correctly, this is achievable. Done casually, it is a liability.
Why elderly users are specifically targeted in crypto social engineering
Older adults have money, experience trusting institutions, and may be less familiar with how online fraud actually works. Scammers exploit these facts with remarkable consistency. A person calls claiming to be from “tech support,” mentions that the account has been “compromised,” and asks the older person to open MetaMask, verify they can access their wallet, and “confirm” the recovery phrase by reading it aloud. Variations include a fake email about suspicious activity, a text message with a suspicious link, or a family member’s compromised social media account requesting an urgent loan in cryptocurrency.
The kernel of each scam is the same: creating enough urgency or perceived legitimacy that the older person acts before thinking or asking someone else. Cryptocurrency transactions are irreversible once sent. Unlike a credit card, there is no dispute resolution and no bank able to recover the funds. A scammer who obtains the recovery phrase can drain the entire wallet regardless of what password is set. A person who sends funds to the wrong address will never see them again. Understanding this is not about age—it is about understanding the actual threat model.
The specific risk that makes older users attractive targets is that many have lifetime savings and a cultural habit of respecting authority figures, institutional communication, and the appearance of legitimacy. An email that looks like it comes from MetaMask, a phone number that looks like it belongs to an exchange or support service, or a name that matches a trusted grandchild can override normal skepticism. The solution is not to prevent your parent from using cryptocurrency. It is to establish protocols before they have money at stake, when clear thinking is easier.
Before creating the wallet: establishing trusted contacts and communication channels
The first step happens offline, before MetaMask is installed. Sit down with your parent and create a simple document listing three things: the names and phone numbers of people they can ask before moving any money, the specific websites and applications they should use, and the fact that legitimate support will never ask for a recovery phrase or password. Write this on paper and keep it visible near their computer.
The trusted contact list should include you, a family member they talk to regularly, and ideally a second person they can reach if you are unavailable. This is not about restricting their autonomy. It is about creating a speed bump between impulse and action. If someone calls claiming to be from support and asks for verification, your parent should hang up, look at the paper list, and call you. If a week-old message in email claims the account is compromised, they should read the message to you first before clicking anything. The fact that you have agreed to this beforehand makes it easier for them to follow the rule when pressure is applied.
Establish also which devices will be used. MetaMask is available as a browser extension and as a mobile application. For older users, a single dedicated device—either a laptop or phone used primarily for this purpose rather than for email or general internet browsing—creates a boundary between cryptocurrency interaction and routine activity. If your parent uses the same browser for cryptocurrency and for reading email, a phishing email is far more dangerous because the compromised browser environment can redirect them to a fake MetaMask import screen or steal credentials in real time.
The communication channel for questions should also be pre-established. Will they call you? Text? Schedule a weekly video call to review activity? The specific method matters less than agreeing on it before problems arise. When a scammer creates urgency by claiming that funds are at risk, your parent should be able to immediately reach someone they trust through a channel they have practiced.
Downloading and installing MetaMask safely
MetaMask is available only through official channels: metamask.io, or the app stores for Apple and Android. It is never sold through other websites, email links, or pop-up advertisements. Verify this explicitly with your parent before they download anything. Show them how to how to download MetaMask safely from the official source, and explain that legitimate software companies never hide the download location or make it difficult to find.
On a desktop, open a web browser—Chrome, Firefox, Brave, Edge, or Opera are all supported—and navigate to metamask.io. The website should display correctly with no unusual requests. Look for the download button, click it, and follow the installation prompts. Do not accept any offers to install additional software. Do not allow any browser extensions beyond MetaMask itself unless you have a specific reason and have reviewed it together.
On a mobile device, open the Apple App Store or Google Play Store, search for MetaMask by Consensys, and verify it is the official version. Many fake apps exist in app stores with nearly identical names. Confirm that the developer is listed as Consensys and that the app has millions of downloads and recent reviews. Ask your parent to show you the screen before they tap the install button.
Once installed, open MetaMask and resist the urge to rush. This is where the real setup begins. MetaMask will offer three options: create a new wallet, import an existing wallet using a recovery phrase, or connect a hardware wallet. For your parent, the answer is create a new wallet. Do not import anything unless they are migrating funds from another wallet they already own. Do not connect to anything they do not understand.
Creating the wallet and securing the recovery phrase
MetaMask will ask for a password. This password protects the wallet on the device—it is not the recovery phrase, and it is not sufficient alone to steal the wallet. Guide your parent through creating a strong password by typing it into a password manager they can access, or if they prefer, write it down and store it in a secure physical location separate from the recovery phrase. The password should be at least 12 characters, using a mix of uppercase, lowercase, numbers, and symbols. Do not use birthdays, anniversaries, or information from their social media.
MetaMask will next present the recovery phrase: a list of twelve words that can regenerate the wallet from scratch if the device is lost or the password is forgotten. This is the critical moment. The recovery phrase is equivalent to the cash in their pocket. Anyone with this phrase can access the wallet and drain it instantly. Your parent must write this phrase down by hand, in order, on paper. Do not take a photograph. Do not type it into a computer. Do not screenshot it. Do not email it to themselves. Do not store it in a password manager that syncs to the cloud.
Crypto wallet security depends almost entirely on keeping this phrase private. Explain to your parent that if anyone asks for this phrase—whether in email, on the phone, through a text message, or in person—the answer is always no. No legitimate support will ever ask for it. No grandchild in distress will need it. No software update requires it. If someone asks, they are a scammer, and your parent should immediately hang up and call you from the trusted contact list.
Once written, the recovery phrase should be stored in a physical location your parent controls and trusts. A safe deposit box, a home safe, or a sealed envelope kept in a locked drawer all work. What matters is that it cannot be found by casual intruders and cannot be discovered through a casual search of the house. If your parent lives with others, the location should be known only to trusted family members, and ideally a backup copy should be kept with you or another designated family member in a separate secure location. This is not paranoia. It is the standard practice for high-value assets.
Setting up the wallet environment and testing a small deposit
Once the wallet is created and the recovery phrase is secured, open MetaMask and review the main screen. Your parent will see their wallet address—a long string of numbers and letters starting with “0x”. This is similar to a bank account number: it is public and safe to share. People can send cryptocurrency to this address; your parent will not be harmed by publishing it. What matters is that they do not publish the recovery phrase.
Before depositing significant funds, make a test deposit. If your parent is receiving cryptocurrency from a friend or an inheritance, ask the sender to transfer a small amount first—perhaps ten or twenty dollars worth. Monitor the transaction together. Watch for the transaction to appear in MetaMask, then on a public blockchain explorer. Confirm that the funds arrive and that your parent understands how to see them in the wallet. This simple test prevents confusion and errors when larger amounts are involved later.
Explain also which networks MetaMask supports. Ethereum is the original network, but MetaMask now supports Bitcoin and Solana, as well as many EVM-compatible chains like Polygon and Optimism. Each network requires a different setup. If your parent receives cryptocurrency on a network they have not yet configured, MetaMask will prompt them to add it. Walking through this process together—rather than letting them figure it out alone—prevents mistakes and builds familiarity.
Set up browser notifications or mobile app notifications to alert your parent when transactions are pending. MetaMask will show this information, but older users often overlook the notification unless they are looking for it. Knowing that a transaction will appear as a notification can reduce anxiety and help them understand what is happening when they use the wallet.
Establishing simple rules about transactions and asking for help
Before any substantial funds are deposited, agree on a set of simple rules. The most important rule is this: before sending any cryptocurrency to an address outside the wallet, your parent should confirm the address with you. This means reading it aloud, having you verify it matches what the recipient claimed, and waiting for your confirmation before approving the transaction. This single step prevents most theft by social engineering. A scammer can create urgency and fake legitimacy, but they cannot actually control the address they ask for unless your parent is too rushed or embarrassed to verify it.
A second rule is to never click links in unsolicited emails or text messages that mention MetaMask, cryptocurrency, or accounts. If they receive an email claiming unusual activity, they should navigate to metamask.io directly by typing the address in the browser, not by clicking a link. They should then look at their account to see if anything actually happened. Nine times out of ten, the email is fake and the account is fine.
A third rule is to be suspicious of anyone claiming there is a limited-time opportunity or an emergency requiring immediate action. Real financial matters rarely demand responses within hours. A scammer pushing for immediate action is a major red flag. Your parent should take the time to verify, ask you, and sleep on it if something feels rushed.
Write these rules down on the same paper as the trusted contact list. Keep it visible. Review it together every few months or when your parent feels uncertain about something. If they call you confused about a request, be patient and take the time to explain. The alternative—your parent making a mistake—costs far more than a few minutes of your time.
Monitoring for signs of compromise and planning for incapacity
After setup, your parent should check their wallet periodically—perhaps once a week if they are receiving regular deposits, or monthly if the wallet is mainly for storage. They should verify that the balance matches what they expect and that no unexpected transactions have occurred. If anything looks wrong, they should contact you before doing anything else. Do not assume the wallet has malfunctioned. Ask your parent to describe exactly what they see, verify it on a public blockchain explorer using their wallet address, and investigate together.
Plan also for the possibility that your parent becomes incapacitated or passes away. If your parent has created a will or power of attorney document, clarify whether it includes instructions for managing digital assets. The recovery phrase should be part of the estate planning process. Decide whether a trusted family member or executor should have access to it, and if so, store a copy with the attorney or executor in whatever manner you have established for the main copy. This is uncomfortable to discuss, but it is far preferable to discovering after the fact that a significant asset cannot be accessed by the estate.
MetaMask itself is a non-custodial wallet, meaning MetaMask the company cannot unlock it, transfer funds, or recover a lost recovery phrase. Once your parent controls the wallet, only they and anyone who has their recovery phrase can access it. This is the benefit of self-custody—no company can lock them out or restrict their access—and the responsibility. If the recovery phrase is lost and the password is forgotten, the funds are permanently inaccessible. Plan for this by ensuring the recovery phrase is duplicated and stored securely.
Recognizing and responding to common scams targeting crypto users
Even with preparation, scams are persistent and evolving. Help your parent recognize the most common ones. A “tech support” phone call claiming the account is compromised is almost always a scam. MetaMask does not make outbound calls, and neither do legitimate cryptocurrency companies. If someone calls unprompted about account security, it is a scammer. The response is to hang up without providing any information.
A text message claiming to be from a family member requesting urgent cryptocurrency transfer is also common, especially if your parent’s account has been compromised. The scammer gains access to an email or messaging account and impersonates a grandchild in distress. The defense is to call that family member using a phone number you already know rather than a number from the message. Do not use a number from the message itself. If your parent cannot reach the supposed grandchild, they should assume the message is fake and wait to verify before sending anything.
Email phishing attempts often mimic MetaMask, exchanges, or news about a cryptocurrency investment opportunity. They include links that look legitimate but lead to fake websites designed to steal login credentials or recovery phrases. The defense is to never click links in unsolicited emails and to navigate to known websites by typing the address directly into the browser.
Pressure to invest in a specific cryptocurrency or to transfer funds to an account “for safekeeping” is another red flag. Legitimate investment opportunities do not require secrecy, and legitimate support personnel do not need access to your parent’s cryptocurrency. If someone your parent has just met through a cryptocurrency group or dating app is offering investment advice or asking to handle their funds, it is almost certainly a scam.
The common thread in all these scams is that they exploit urgency, fear, or trust. Your parent’s defense is the plan you have established: contacting the trusted contact list before acting, verifying addresses independently, and maintaining healthy skepticism toward unsolicited requests. This is not paranoid; it is the appropriate response to an environment where theft is easy and recovery is impossible.
Frequently asked questions
What is the recovery phrase, and why is it so important?
The recovery phrase is a list of twelve words that can regenerate your wallet from scratch. It is the master key to the wallet. Anyone with the recovery phrase can access all the cryptocurrency and send it anywhere. Never share it, never photograph it, never type it into a computer, and never give it to anyone claiming to be support. Store it only on paper in a secure physical location.
Is MetaMask safe for older people to use?
MetaMask itself is secure software, but cryptocurrency is only as safe as the user’s practices. Older people can use MetaMask safely if they follow the rules outlined: keeping the recovery phrase private, verifying addresses before sending funds, contacting trusted family members before making large transactions, and ignoring unsolicited requests for verification or recovery information. Preparation and clear communication are more important than age.
What should I do if my parent loses their password but still has the recovery phrase?
MetaMask allows password reset using the recovery phrase. Open the wallet, click the menu, select “Security and Privacy,” and follow the option to reset the password. This is a legitimate recovery mechanism and the reason the recovery phrase must be kept secure. However, password reset should only be done on a device your parent trusts and controls. Do not attempt it on a public computer or over someone else’s guidance if you are uncertain.
