Forgotten password, profile intact
The vault is still present in the browser profile. Feasibility depends on how much of the password can be described.
MetaMask keeps an encrypted vault inside your browser profile. If that profile still exists, a forgotten password is a search problem. If it does not, only the secret recovery phrase can bring the wallet back.
The extension stores an encrypted vault blob in its local extension storage inside the browser profile directory. Your password decrypts that blob; MetaMask itself holds no copy of either. There is no reset, no support recovery and no server-side backup — by design.
This produces a clear split. With the profile intact and some memory of the password, the vault is a verifiable target and a constrained search is possible. With the profile deleted, the browser reinstalled or the machine reset, there is nothing left to decrypt, and only the 12-word secret recovery phrase restores the wallet.
A third situation is more common than people expect: the phrase works, but the imported wallet looks empty. That is usually an account-index or network issue rather than lost funds.
The vault is still present in the browser profile. Feasibility depends on how much of the password can be described.
Uninstalling the extension or wiping the profile removes the vault. Without the recovery phrase there is nothing to work with.
A handful of the 12 words missing or ambiguous, which becomes a BIP39 reconstruction problem.
Wrong account index, wrong network, or tokens simply not added to the interface yet.
An earlier computer or a system backup may still hold a copy of the vault data.
Accounts added by private key are not derived from the phrase and are not restored by it — they need their own key.
The single most damaging action in a MetaMask case is reinstalling the extension or resetting the browser. Preserve first, experiment later.
No. MetaMask is non-custodial and stores nothing on their servers. Anyone claiming to be MetaMask support offering a reset is running a scam.
It is the necessary starting point, but not sufficient on its own. A search still needs constraints from what you remember about the password.
Check the network, add the tokens manually, and check additional derived accounts. If the wallet used a different derivation path, the funds may sit on an account MetaMask does not show by default.
Copying the profile directory to a backup is safe and sensible. Never post the vault contents publicly or send it to anyone offering to decrypt it for you.
Describe the wallet, what happened and what information you still have. You will get an honest assessment of whether recovery is technically feasible — without sending any secret credentials.
Assess My MetaMask Recovery Case