Metamask’s Web3 wallet app has introduced a number of new features aimed at increasing privacy and giving users more control, according to per the developer’s March 14 blog post. The new features come after Metamask was previously criticized for allegedly violating user privacy.
MetaMask Mobile v6 is now available to everyone! Our biggest release to date fixes slow loading issues and provides a new and improved user interface that gives users more control over their finances and digital identity.
Upgrade to the latest version todayhttps://t.co/tGtA4GUXR1
— MetaMask (@MetaMask) March 14, 2023
Previously, Metamask used its Infura RPC node to automatically connect to Ethereum whenever a user first set up a wallet. Although the user could later change the setting, this still meant that the user’s public address was transmitted to Infury before they had a chance to change their node, according to a report by Ethereum node operator Chase Wright.
Infura is owned by Metamask’s parent company, Consensys.
As part of the new version of the Metamask extension labeled “10.25.0”, users are prompted for the option to use “advanced configuration” during setup. Selecting this option reveals a number of settings that can be configured, including one that allows the user to select an RPC node other than the default Infura node.
In addition to allowing the user to enter their own node details, the “advanced configuration” dialog also allows them to turn off incoming transactions, phishing detection, and enhanced token detection. These functions require data to be sent to third parties such as Etherscan and jsDeliver according to the application’s user interface. Users concerned about privacy can now turn these features off during setup if they wish.
According to the post, the new mobile version of Metamask also includes privacy improvements. Previously, this application did not allow users to connect one account to the Web3 application and leave another account disconnected. The user only had the option to connect all of them or none at all.
However, the new version allows users to choose which specific accounts they want to connect to the app without revealing other addresses they control.
Metamask said in its post that it has always intended to protect user privacy and that it believes these new features are in line with those values, stating:
“Data abuse goes against MetaMask’s core values. Instead, we believe in equipping our community with the core principles that guide our development –beneficial ownership and privacy[…]We are committed to protecting the privacy of our users so that you are not and ultimately cannot be abused by another centralized entity.”
On November 23, Metamask was heavily criticized in the crypto community for issuing a privacy policy stating that collect IP addresses from users. Consensys responded to the criticism on November 24 by stating that RPC nodes have always collected IP addresses and that the essence of the privacy policy was not new, although the language used in it has changed. On December 6, Consensys announced that the IP addresses collected through Infur would not store longer more than 7 days.
