Bitcoin Forum

   Hi all . I hope i am posting in right area . Just quickly checking something ; when trying to connect Meta Mask wallet to Ledger nano s [ for extra security ] i get the following message ...... " OPEN DEVICE BRIDGE ,EXPOSE YOUR DEVICE ACCOUNTS THROUGH WEB SOCKET , opening a bridge exposes all of your accounts to third party applications "    is this part of the normal process / a legitimate step in connecting ?    Any help much appreciated . 

I don't use Ledger wallets. but it seems that is the normal procedure implemented to connect the hardware wallet to MetaMask.
you can see the video on youtube. this video (https://www.youtube.com/watch?v=z3q3U9ZFNQY) might be able to help you. I see some parts are exactly what you mean. watch the whole thing, don't jump.

It's fine, actually only your public address got exposed to the third party applications, not your private key, seeds or anything that would harm your security [1] Actually you're connecting your Metamask to Ledger live, that's why you're get this message. As long as you're not connect to random or unknown Dapps, your wallet wouldn't get compromised.

---

[1] https://www.reddit.com/r/ledgerwallet/comments/q0a3ez/open_device_bridge_expose_your_device_accounts/

I don't usually do that but you can just go ahead with the official setup and tutorial from Ledger and check if that's part of the process.
Just follow the article and step-by-step procedure made by Ledger themselves on this blog: https://www.ledger.com/academy/security/the-safest-way-to-use-metamask
This is an updated article, the last update was on October 25 this year.

OP, something has changed since July 07, 2022. Is there a need for the question you previously asked?
Maybe you should read all the tips in the previously created thread, or just move it to the right section, so as not to create a new thread?

If extra security is what you're looking for, then you should stop connecting your hardware wallet to MetaMask. Use a separate wallet to manage your funds and keep your HW offline. As for your question, as mentioned above it only expose your public key. No security issue but your privacy might be at risk. Assuming you want to manage altcoins, maybe look for a privacy-focused wallet app if privacy is an issue for you.

If you use a reputable hardware wallet when making transactions, your private keys never get exposed to the Internet, no matter what actions you perform or what buttons you press. The main goal of a hardware wallet like Ledger is to protect you from stupid mistakes you may make during your interactions with different blockchains. However, the drawback of hardware wallets, or, to put it more precisely, the deliberate limitation for security purposes, is that it doesn't have a user interface and requires additional software to "track" your addresses and balances. It shares a special key called the "master public key" with the wallet of your choice. Metamask asks for this special key to calculate your crypto addresses, which also means it will know what addresses belong to your wallet. It is rather a privacy concern than a security one, but your funds are still safe.

In general, I would agree that someone in this way only risks privacy, but this is the case with any software that we use as an interface, whether it is Electrum or Ledger Live. The real danger in all of this is fake software that tries to trick the user into entering their seed because there is some kind of critical vulnerability in the HW. For those who don't know how to deal with seed (and there are too many of them), it can often be the moment when they get hacked, and then they blame everyone else but themselves.