Bitcoin Forum

I know MEW is primary choice of the most. (https://bitcointalk.org/index.php?topic=5208510.0) I'm not very fond of installing a browser plugin either. But, for a certain Airdrop, I need to install MetaMask browser plugin. So, I'd like to know general feedback or known security loopholes of it.

IIRC most of the time Metamask is considered to be 'safer' than MEW, because you don't have to expose your private key all the time. For now, there are no loopholes that can be used to hack your wallet (as long as you don't do something stupid such as having a keylogger on your machine and then typing your private key), CMIIW. And yes it supports ERC tokens.

If I were you, I'd use Metamask instead of MEW. Most dapps require Metamask too, so it's nearly impossible not to use it if you're active on the dapps space.

It is not. MEW is good for those who take their security seriously and know how to stop getting scammed by phishing websites. Use a hardware wallet for ether tokens if you must since that is the safest option here. However the system of using a wallet by MEW has changed now since they are was tussle between their devs and they switched paths, as far I recall.

So here you might want to decide one some things:
1. Is the airdrop really worth the time you are putting in to it? Considering it is,
2. MetaMask saves you from getting phished by clone MEW websites and itself has not been known to trick any user. So its more or less safe.

So far I know most of my fellow friends that doing bounty hunters are switching to Metamask plugin. Since this Metamask wallet is open source and users control their public key and private key not on any remote servers.

As I have known and I didn't hear a serious complaint about them, I'll consider that their security as of now is safe. I'm one of the early adopters on this wallet too and so far there's no issue on it. BTW, I found articles probably you can avoid the possible hack.
6 Ways a Site Can Attack your MetaMask (https://bloom.co/blog/6-ways-a-site-can-attack-your-metamask/)

Used it for over 2 years now without any single problem. It's much safer than MEW especially when it comes to avoiding getting your Private Keys phished.
It's very popular with dapps and it makes it easy to send ETH or ERC20 tokens automatically.

Unlike MEW where you have to manually add token information in order to see the token, For MetaMask they will appear automatically in your account.

I am using Myetherwallet by connecting it with Metamask for more than 2 years. Metamask is more safer that other ERC20 wallet at present. You can install MetaMask Extension for Chrome. You can expand this extension and use it very smoothly.   

If control of public key and private key is the point, myetherwallet (MEW) has also that full feature. In fact it also has a JSON file as an option to have access to your wallet. And if you consider Metamask better than myetherwallet because it is open source, MEW is also open source.


Is metamask even a wallet? I thought it is just an extension?

Metamask is a wallet while at the same time it offers the ability for you to claim the airdrop tokens directly from the contract. Some airdrop may use this feature and that's why that airdrop gives you a mandatory to install the metamask wallet and then claim your airdrop tokens from the contract.
You just need to pay the fees from your wallet and this is the best way for a developer to distribute its token without needed to pay the fees to send any tx. Basically, it's simple as that.

It is actually.
You can;
- Create a new account using it
- Restore and old account using it
- Send and Receive Ether and Tokens using it

So basically it does what all Ether wallets do. The only difference is that it has been an extension for a while. There are already plans to develop mobile app but it's still on Early access. If you are interested check it out on App store

whether to follow a particular airdrop you mean, you are asked to connect a metamask wallet, I rarely find cases like this, usually to connect a wallet there is only a game site ERC721 and rarely use metamask for airdrop erc20, metamask is also good both from myetherwallet , because I also use metamask wallet for almost 2 years and it is very safe, usually I use metamask wallet to make smart contracts or make other trials, I think also metamask wallet plugin is safe for storing erc20 tokens, hope that helps your question

Exactly, obviously, a self-hosted wallet in a browser extension, whether in desktop or mobile devices though for eth and its compatible tokens such erc20.

I have read about lbxu token before, and their procedure for claiming airdrop / bounty, is it for the same purpose as this?
https://bitcointalk.org/index.php?topic=5105414.0
the process that will be generated requires confirmation from metamask that is integrated with Dapps from the developer, this process is safe because metamask ensures it as a third party.

Metamask has not security concerns,its just browser add on to manage your MEW,sometimes you might feel slow while using it and accessing metamask is possible from your device when someone got the passwords so its really not good for long term storage.But you mentioned its for airdrop then there is no problem with installing it.

If you want to know how to add your MEW to metamask,use this step by step method to do it: Ethereum Wallet: MyEtherWallet and MetaMask – How to Add Token To ETH Wallet (https://alertairdrop.com/ethereum-wallet/)

metamask is a wallet because you can import your wallet from MEW using private key even you can create a new address and backup
so i think it's more easy to use than MEW.

Use it first before saying you do think that its more easy to use than MEW. Yes, it does yet you wont need to type up your PK everytime you do access your wallet.

I havent any problems so far with Metamask and ive been using it since it was introduced.I didnt see any loopholes nor security exploits with this one so i can
say that this is safe and been trusted by many.

thats new to my ears  . i always join every airdrop that i see before but i dont ever encountered one airdrop that ask for metamask but some of them only want you to register on thier website and you will recieve your tokens on that site and some will require you to download a different wallet aside from mew or erc20 wallet  . you can refrain from joining on that airdrop because you are not forced to join that but if you want to join then you need to train your self about installing metamask  .

Instead of MetaMask and MyEtherWallet, you can use Trust wallet and Coinoimu which both wallets support ERC20 tokens AFAIK. The more you dig in the altcoin world, you become enlighten why many people preferred to download these applications from Google play store while the alternative platforms are famous with advertising. Metamask is secure compared to MEW but the 2FA protected Android ERC20 wallets have a better use case.