MetaMask vs Phantom vs Rabby: Who Owns Your Wallet in 2026?

On September 9, 2026, the company behind the crypto wallet most people open first stopped calling itself a wallet company. Consensys, the Ethereum software house that built MetaMask, said it would split into two independent businesses by the end of the year: the consumer side keeps the products and takes the name MetaMask, while a newly formed Consensys keeps the Ethereum protocols and institutional infrastructure. Joe Lubin, who co-founded Ethereum and Consensys, will run the consumer company as chairman and chief executive.

The reorganization is a useful lens for anyone choosing a wallet this year, because it makes explicit what has been true for a while: a software wallet is no longer just a key manager, it is a consumer-finance business. MetaMask, Phantom, and Rabby are the three self-custodial wallets crypto users actually argue about, and while all three hand you the same thing (a seed phrase only you control), they are three very different companies with very different plans for your money and your data. This piece compares them as businesses, not just as apps: who owns them, how they make money, which chains they reach, how they treat your privacy, and whether they will ever have a token. It matters more now than a year ago, because the wallet is quietly turning into the place you buy, hold, spend, and increasingly earn, a role that used to belong to exchanges and to the spot ETFs that opened crypto to ordinary brokerage accounts.

The day the wallet became a company

The structure of the split is clean. Consensys Software Inc., the legal entity, is being renamed MetaMask and will focus entirely on self-custodial consumer finance; a new company called Consensys takes the Ethereum development stack, the Linea layer-2, Infura, and the institutional business. Lubin chairs and runs MetaMask; Mike Kriak becomes chief executive of the new Consensys with David Cunningham as president, and Lubin stays on there as executive chairman. The two companies expect to operate independently by the end of 2026, and both say they will keep building on the same Ethereum ecosystem.

The numbers MetaMask cites for itself are large: more than 100 million downloads across roughly 190 countries and trillions of dollars in cumulative transaction volume. Monthly active users are a smaller and more honest figure; CoinGecko’s 2026 hot-wallet rankings put MetaMask at around 30 million monthly actives, third behind Tangem and Trust Wallet and just ahead of Coinbase Wallet and Phantom. The backdrop was a soft market: Bitcoin traded near $78,800, Ether around $2,485, and Solana near $105 on the day of the announcement, with fresh Middle East tensions keeping a lid on risk appetite.

What matters for a comparison is the mission statement. MetaMask now describes itself as a place where people do not just hold assets but manage money in its many forms, pushing beyond trading into payments, savings, and investing. Lubin framed the move in almost missionary terms: “Stepping into this role full-time is a recognition that consumer finance deserves the same focus and ambition that we’ve brought to building Ethereum itself,” he said, adding that MetaMask “grew out of that work into the world’s most widely used self-custodial wallet, and today it’s becoming something larger.” Notably, the announcement said nothing about an IPO or a token, the two questions most of the market wanted answered.

Consumer finance is a specific claim, not a vibe. It means the wallet wants to hold the everyday functions a bank app performs: a balance you spend from with a card, a place that pays yield on idle stablecoins, a rail for sending money, and a brokerage-style surface for buying and selling assets. MetaMask already ships pieces of each, and the split is an admission that running that business well is a different job from maintaining Ethereum infrastructure. It also sharpens the trade every user makes, because a bank-like product tends to want bank-like data.

Three wallets, three businesses

Strip away the interface similarities and the three wallets rest on different foundations. MetaMask is now a standalone, venture-scale consumer company with an open-source client and a large closed-source backend. Phantom is a privately held, venture-funded startup last valued at 3 billion dollars in a January 2025 round co-led by Sequoia and Paradigm, and it keeps its code closed. Rabby is made by the team behind the DeBank portfolio tracker, ships fully open source, and is the specialist’s pick rather than the mass-market default; it does not appear in CoinGecko’s consumer hot-wallet ranking at all. The table below is the shortest honest summary.

Ownership is not a footnote here; it shapes the incentives you inherit as a user. MetaMask’s new independence, and the token that hangs over it, mean the company has reasons to maximize measured engagement and on-chain activity, because both feed a future distribution and a possible public listing. Phantom answers to venture backers who expect it to win a large consumer market, which buys polish and speed but also carries a mandate to grow revenue per user. Rabby answers to DeBank, whose business is data and analytics about wallets and protocols, which is part of why the product is generous with features and thin on fees. Reading a wallet’s owner tells you, in advance, which corners it is likely to cut and which it will defend.

It is worth remembering how recent all of this is. MetaMask spent its first years as a plain Ethereum key manager, a fox logo that popped up to approve a transaction and then got out of the way. The pivot to a super-app, swaps, then a card, then a stablecoin, then perps, then savings, happened fast, and it mirrors what Trust Wallet, Coinbase Wallet, and Phantom were doing at the same time. The competitive pressure is real: if your wallet does not let a user swap, stake, spend, and earn without leaving, some other wallet will, and the user rarely comes back. That race is why a tool that once did one thing now does ten, and why the quiet costs (fees, data, complexity) are worth reading closely.

How each wallet makes money

None of these wallets charges a subscription, and all three are free to download, which raises the obvious question of how they pay for hundreds of engineers. The main answer is the swap fee, the cut the wallet takes when you trade one token for another inside the app. Here the three diverge sharply. MetaMask takes roughly 0.875 percent on in-app swaps, the highest of the group; Phantom takes about 0.85 percent on EVM swaps; Rabby takes about 0.25 percent and has built part of its brand on being the cheap option. On a 10,000 dollar swap the gap between Rabby and MetaMask is about 62 dollars, which is not nothing and compounds fast for active traders.

The newer revenue line is perpetual futures. Both MetaMask and Phantom now run perps through Hyperliquid. Phantom launched perp trading in July 2025 with leverage up to 40x and did roughly 1.8 billion dollars of volume in its first two weeks; MetaMask followed in October 2025, branding it MetaMask Perps and, tellingly, charging no swap fee on the perps themselves, using them as a hook to keep traders inside the app. Gal Eldar, MetaMask’s global product lead, cast the expansion as an extension of self-custody: “MetaMask was built to give people true ownership of their assets. Now we’re extending that principle to the world’s most important markets.” Both perp products are geofenced away from the United States and the United Kingdom.

Then there is the stack MetaMask is building on top: the mUSD stablecoin and a Money Account launched in June 2026 that bundles stablecoin yield, payments, and trading, plus the MetaMask Card for spending on-chain balances. Rabby’s twist is the Gas Account, where you deposit USDC or USDT once and pay gas across chains without holding each chain’s native token. This is where the brokerage comparison bites: the wallet wants to be the front-end for everything from a swap to a savings yield, the same territory we mapped in our look at on-chain credit and yield.

Put the money mechanics side by side and the differences are easy to see.

The token question

For MetaMask, the single biggest overhang is the token. A MASK token has been “coming” for so long that airdrop farmers treat MetaMask activity as a speculative position in itself. Lubin has stoked it directly; on a September 2025 podcast he said, “The MASK token is coming. It may come sooner than you would expect right now,” and added that it is “significantly related to the decentralization of certain aspects of the MetaMask platform,” according to The Block. A year on, the token still does not exist, the rewards program pays points rather than a live asset, and the September 2026 split announcement pointedly said nothing about it. The most plausible read is that decoupling the consumer company from Consensys is part of the groundwork a token launch would require.

Phantom and Rabby take the opposite stance. Phantom has no token and, as a venture-funded company chasing a consumer-finance land grab, may never need one; its cap table is private capital, not a community airdrop. Rabby has no token either, and DeBank has kept its own points-and-identity system separate from any tradable coin. For users the practical difference is about incentives. A wallet with a token has a reason to gamify usage and court mercenary liquidity; a wallet without one has to win on product. And if you are farming a MASK airdrop, understand that you are also volunteering more of your activity to MetaMask’s analytics, which is the subject of the next few sections.

The token also complicates the privacy story in a way most airdrop guides skip. Points programs reward on-chain and in-app activity, which means the rational way to maximize a future MASK allocation is to route more of your trading, bridging, and spending through MetaMask, where it can be measured. That pulls directly against minimizing your footprint. Decentralization, the stated reason for the token, could eventually cut the other way by reducing the company’s role as a data chokepoint, but nothing announced so far changes who sees your transactions today. Until the token and its mechanics are real, treat MASK as a marketing gravity well, not a reason to concentrate your whole on-chain life in one app.

Chains and reach: expand, retreat, or go deep

The three wallets are running opposite chain strategies. MetaMask keeps adding: it brought Solana support in May 2025, Bitcoin in December 2025, and Tron in January 2026, and its multichain accounts now derive Ethereum, Solana, and Bitcoin addresses from a single seed phrase. Phantom is going the other way, pruning chains that did not earn their keep: it dropped Monad support in August 2026 and will end Sui support on September 24, 2026, less than 20 months after adding it, after Sui’s total value locked fell about 82 percent from its 2025 peak. Phantom is steering SUI holders to swap into wrapped SUI on Solana, waiving its own conversion fee, or to export their seed phrase to a Sui-native wallet before the deadline. Rabby ignores the non-EVM world entirely and instead goes deep on Ethereum-compatible chains, supporting well over 100 networks, Gnosis Safe accounts, and batch approval revocation, but no Solana, Bitcoin, or Tron.

Read as businesses, the strategies fit. MetaMask, chasing 100-million-download scale, wants to be the one wallet a newcomer ever needs. Phantom, tuning a premium Solana-first experience, would rather support four chains well than ten badly. Rabby, serving EVM power users, treats chain breadth outside the EVM as someone else’s problem. None of this is about ideology; it is about which customer each company is trying to keep.

Onboarding and everyday use

Day to day, the three feel different from the first launch. Phantom is the mobile-first option, and it shows: the app is fast, the design is clean, and buying, swapping, or viewing an NFT takes a few taps, which is a big part of why it won the Solana crowd. MetaMask grew up as a desktop browser extension and still feels most complete there, with a capable mobile app alongside; its breadth is both a strength and a weakness, because the same settings that let a power user change networks and RPCs can overwhelm a newcomer. Rabby is unapologetically a power-user tool, an extension first (with a fully open-source mobile app that has been audited by Cure53), and its interface assumes you already know what an approval and a nonce are.

The recovery model is the same across all three, and worth stating plainly: you back up a seed phrase, and if you lose it, no support desk can restore your funds. That is the deal with self-custody, and it is different from the account recovery people expect from a bank or an exchange. Smart-account features are starting to soften this, with social recovery, spending limits, and session keys, but on a standard setup the seed phrase is still the single point of failure. All three connect to decentralized apps through the usual injected-provider and WalletConnect flows, and all three can pair with a hardware wallet, which is the setup you actually want for meaningful balances.

What your wallet actually knows about you

Here is the part almost no wallet markets. Self-custody protects your keys; it does not protect your identity. In July 2026, researchers at KU Leuven’s DistriNet group presented a study at the Privacy Enhancing Technologies Symposium titled The Masks We (Think We) Wear, examining 85 of the most popular crypto wallet browser extensions, together representing about 35 million Chrome installs. The finding was blunt: the wallets themselves leak enough to link and track the people using them. Seventeen wallets, covering roughly 23 million installations, exposed connections between a single user’s separate addresses; 36 of the 85, about 82 percent of the installs studied, announced their presence to any website and created a fingerprint that worked even without connecting.

It got worse after logout. In 22 of the 36 fingerprintable wallets, permission to read an address persisted after the user disconnected and cleared cookies, and 23 of them served addresses from embedded frames, letting tracking scripts tie a pseudonymous wallet to a real name on any site that already held one. The vendor responses are as revealing as the findings. MetaMask reportedly called the provider-injection behavior a “known issue” and declined to stop it; Rabby deemed the specific attack “virtually impossible” and concluded the vulnerability did not exist; a handful of wallets, including Coinbase Wallet, fixed it before a February 2026 retest. The lesson is not that one wallet is uniquely bad, it is that the browser-extension model leaks by default, and closing the gap requires the maker to choose privacy over developer convenience.

None of this is unique to crypto, but the stakes are higher, because a wallet address is a permanent handle attached to an immutable, public transaction history. Link one address to a name a single time and the ledger does the rest, unwinding years of activity in both directions. That is the backdrop against which MetaMask, Phantom, and Rabby each handle your data, and they handle it very differently.

MetaMask, Infura, and the RPC problem

MetaMask’s privacy story is defined by Infura, the default remote procedure call (RPC) provider that relays your transactions to Ethereum. By default, when you broadcast a transaction, Infura can see your IP address alongside your wallet address. This became a public controversy in late 2022, when Consensys updated its privacy policy and users realized the linkage; the company clarified that it did not store wallet address information on simple read requests and framed the update as transparency rather than a change in practice. The mitigation is real and available: because the MetaMask client is open source, you can swap Infura for another RPC such as Alchemy or QuickNode, run your own node, or route through a VPN, all from the settings. The catch is that almost nobody does, and the new consumer-finance products (the Card, mUSD, the Money Account) add regulated, know-your-customer data surfaces that a pure key manager never had. The more MetaMask becomes a bank, the more it necessarily knows.

Phantom’s closed-source bargain

Phantom offers the opposite trade. Its code is closed, so you cannot independently audit how it generates or signs with your keys; you are trusting a binary and the company behind it. In exchange, its stated privacy posture is arguably the strongest of the three on paper. Phantom’s privacy policy says its systems are “not designed to associate your IP address with potentially identifying information such as your wallet address, username or email address,” it requires no name or email to use, and it lets you opt out of analytics. The asterisk is that the same policy discloses collection of device data, transaction data, and product analytics that can include session replay, the recording of clicks and navigation, and that IP handling still routes through partners. So the Phantom bargain is a slick, closed application from a well-funded company that promises not to join your IP to your identity, set against the reality that you cannot verify the promise and that the company’s stated ambition is to become a consumer-finance platform with all the data appetite that implies.

The counterargument for Phantom is scale and track record. The company reported roughly 15 million monthly active users and tens of billions of dollars in self-custodied assets around its 2025 fundraise, and a closed app from a well-capitalized company is a bargain millions of people make happily every day with their banking apps. The question each user has to answer is whether a crypto wallet, which holds the keys to bearer assets that cannot be reversed or refunded, deserves the same benefit of the doubt as an app backed by deposit insurance and a chargeback system. Reasonable people land in different places; the point is to make the choice knowingly rather than by default.

Rabby’s open-source paradox

Rabby is the paradox of the group: the most transparent codebase and the cheapest fees, yet privacy that independent reviewers rate poorly by default. Rabby’s own documentation says it uploads only the domain of the site you connect to, not the full path. But Walletbeat, a community wallet-scoring project, rates Rabby’s privacy as largely failing, because the security features that make it great (the scam checks and pre-transaction simulation) route your IP address, your Ethereum address, and the contract and domain you are touching to external providers, where they can be correlated, and because it does not isolate accounts per app, which allows cross-app linkage. Open source lets you read the code and confirm the wallet is not quietly stealing your keys; it does not automatically make your usage private. Rabby’s transparency is real and valuable, but a user who wants privacy still has to change defaults, point it at a trusted RPC, and accept that DeBank’s backend sees a great deal.

Security in practice

Privacy and security are different problems, and on security the three converge more than they differ, each pairing a transaction preview with a threat engine. MetaMask uses Blockaid for privacy-preserving security alerts that flag malicious transactions without sharing them with third parties. Phantom acquired the security firm Blowfish in late 2024 to power its transaction previews; chief executive Brandon Millman said at the time, “By bringing on Blowfish, we now have the best security team in crypto.” Rabby’s signature feature is the most technical of the three: before you sign, it simulates the transaction on a forked copy of the chain and shows exactly which tokens and approvals would leave your wallet, a defense that repeatedly catches drainer transactions people would otherwise blind-sign; its 2025 audits by SlowMist and Least Authority turned up only low and medium-severity issues.

The threat environment is improving, at least by the numbers. Scam Sniffer counted about 83.85 million dollars lost to wallet drainers and phishing in 2025, down 83 percent from roughly 494 million in 2024, with victims down 68 percent, though attackers have simply shifted to fewer, richer targets. The next frontier is signature comprehension. Ethereum’s account-abstraction upgrade EIP-7702 lets an ordinary wallet temporarily act like a smart contract, which is powerful and dangerous in equal measure; MetaMask ships it through its Smart Accounts, Rabby supports a limited delegated-account version, and Phantom stays on Solana’s own model. The danger of signing what you cannot read is the exact theme of our piece on what the Radiant heist taught, and it is why clear-signing standards such as ERC-7730 matter. Whichever wallet you choose, the old rules still hold: pair a hot wallet with a hardware device for real balances, revoke stale approvals, and treat the seed phrase as the only thing that truly matters, a discipline we covered in why the theft is the easy part and in our guide to the layer above the keys.

Hardware support is the other half of a serious setup, and here the three differ in the details. All of them pair with a Ledger over USB or Bluetooth, so the private key can stay on a dedicated device while the wallet is only the interface. Rabby goes further for the air-gapped crowd, supporting QR-based signing with devices such as Keystone so the key never touches a networked machine. The takeaway is the same regardless of brand: for any balance you would miss, the software wallet should be a window onto keys that live on hardware, not the place the keys actually sit. A hot wallet is for the money you are willing to expose to a malicious website; everything else belongs behind a physical confirmation button.

The regulation question

In the United States, the regulatory ground under self-custody has firmed up. In April 2026, staff at the Securities and Exchange Commission said that software merely enabling users to transact from self-hosted wallets is not acting as a broker, a meaningful relief for wallet makers, and the SEC had earlier moved to dismiss its case over MetaMask’s staking feature. But the split changes the risk calculus. A wallet that only manages keys sits comfortably outside most financial regulation; a self-custodial consumer-finance company that offers a stablecoin, a yield account, a payment card, and leveraged perpetuals is stepping into money transmission, the GENIUS Act stablecoin regime, and derivatives rules all at once. That is why the perp products are geofenced out of the US and UK, and why MetaMask’s move to become a payments-and-savings platform invites more oversight, not less.

For now the practical takeaway for a US user is narrow but useful: holding and swapping in a self-custodial wallet stands on firmer legal ground than it did a year ago, while the flashier products bolted on top (perps, cards, yield) are the ones most likely to be fenced, licensed, or paused as the rules catch up. The wallet is now competing with the same brokerages that distribute spot ETFs, and regulators treat those two access paths very differently.

Which wallet for which user

No single wallet wins for everyone, and the honest recommendation depends on what you actually do on-chain.

In practice many users end up running two of these at once. A common setup pairs Phantom or MetaMask for everyday spending and Solana or Bitcoin access with Rabby for serious EVM DeFi, where the pre-sign simulation and cheap swaps earn their place. There is nothing wrong with that; seed phrases are portable, and holding the same assets across two interfaces changes nothing about custody. What matters is that you know which wallet is touching which chain, which one is your high-value signer, and which defaults each one shipped with.

Two caveats sit above that table. First, none of these is a substitute for cold storage; for balances you would be upset to lose, keep the keys on a hardware wallet and use the software wallet only as a signing interface. Second, the defaults are rarely the private choice, so if privacy matters, change the RPC, opt out of analytics where you can, and assume that the public ledger plus wallet telemetry can deanonymize you unless you actively work against it.

Whichever you land on, a short hardening checklist applies to all three:

• Replace the default RPC with a trusted or self-hosted endpoint, and consider a VPN for transaction broadcasts.
• Turn off optional analytics and telemetry in settings wherever the wallet allows it.
• Use a separate address for public activity such as donations or mints, and keep it apart from your main funds.
• Revoke stale token approvals regularly, and re-check them after using any new app.
• Keep meaningful balances on a hardware wallet and treat the hot wallet as spending money.

The bottom line

The September split did not change what these wallets are; it confessed it. A software wallet in 2026 is a consumer-finance business wearing the clothes of a key manager, and MetaMask, Phantom, and Rabby are three different bets on that business. MetaMask is the incumbent going for scale and, eventually, a token, with the broadest reach and the most data. Phantom is the polished, closed, venture-funded challenger optimizing a premium experience and a strong privacy promise you have to take on faith. Rabby is the open, cheap, EVM-native tool for people who read what they sign and are willing to manage their own defaults. All three still give you the one thing that matters, a seed phrase only you hold. Everything else is built on top of it, and the axis nobody puts on a billboard is how much of you the wallet keeps. Choose the trade-off you can live with, and then change the settings the maker hoped you would ignore.

Watch the next two moves. If MASK launches, MetaMask’s incentives to measure and monetize behavior get sharper, and the privacy defaults become the first thing to check. If Phantom keeps pruning chains while adding money features, it is betting that a smaller, closed, beautifully made app beats a sprawling open one for most people. And if Rabby stays token-free and cheap, it is wagering that a serious minority will always want a tool that shows them exactly what they are signing. Three bets, one seed phrase, and a set of defaults you should change before you trust any of them with real money.

Frequently Asked Questions

Which is the safest wallet: MetaMask, Phantom, or Rabby?

All three are non-custodial and pair a transaction preview with a threat engine: MetaMask uses Blockaid, Phantom uses Blowfish, and Rabby simulates each transaction on a forked chain. Rabby’s pre-sign simulation is the most detailed for catching malicious token approvals, but the safest setup is the same for any of them: use the software wallet as a signing interface for a hardware wallet, and revoke old approvals regularly.

Does MetaMask have a token, and how do I get the MASK airdrop?

As of September 2026 there is no live MASK token. MetaMask’s leadership has said one is coming and that it relates to decentralizing the platform, and the wallet runs a rewards program that awards points for activity such as swaps, but nothing is tradable yet and no airdrop mechanics have been confirmed. Treat any site claiming to sell or distribute MASK today as a scam.

Is Phantom better than MetaMask for Solana?

For a Solana-first user, generally yes. Phantom was built around Solana and offers a smoother Solana and NFT experience, while MetaMask added Solana only in 2025. If you split time across Ethereum, Bitcoin, Tron, and Solana, MetaMask’s single-seed multichain accounts can be more convenient despite a less native Solana feel.

Can I use Rabby with Solana or Bitcoin?

No. Rabby is EVM-only: it supports Ethereum and more than 100 EVM-compatible networks, but not Solana, Bitcoin, or Tron. For those chains you would use Phantom for Solana and Bitcoin or MetaMask for Solana, Bitcoin, and Tron, or a chain-native wallet.

Do these wallets track you, and are they private?

To varying degrees they can leak data. A 2026 KU Leuven study found that browser-extension wallets, including MetaMask and Rabby, can expose your addresses and be fingerprinted by websites. Phantom’s policy promises not to link your IP to your identity, but its code is closed, so you cannot verify it. For meaningful privacy, use a custom or self-hosted RPC, opt out of analytics, and pair the wallet with a hardware device.

By Yuki Tanaka, wallets and exchanges correspondent at HOGE Wire. Figures reflect prices and company disclosures as of September 9, 2026, and nothing here is investment advice.