Since Infura always require an API key for its users, and Metamask by default uses Infura, it makes me wonder: where does MetaMask keep the API key of Infura? Not a private of a wallet, but an API key.

Can it be seen and how?

I haven't found an answer anywhere.


what's happen when the API quota of the key gets exceeded?

1 Answer 1


The API key is buried inside the MetaMask binary.

It can be extracted using reverse engineering techniques.

  • That's a lie. Metamask is a browser extension, and as such it's written in JS. That is, there's nothing "binary" in there. Moreover, give me a proof of your claim. Commented Jul 13, 2022 at 5:34
  • I suggest you go and try to read MetaMask JavaScript source code. It is obfuscated to the point it is not readable. Commented Jul 13, 2022 at 5:47
  • 1
    Also why do you have so bad attitude. People here are trying to help you. Please do not be an asshole and you will get more useful feedback. Commented Jul 13, 2022 at 5:47
  • If the code is obfuscated, how do you know that the API key is inside it? Commented Jul 13, 2022 at 5:49
  • Because I have been working with MetaMask and Ethereum for 7 years. Commented Jul 13, 2022 at 5:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.