metamask security

[X-ray]

So , are people saying that i should UNCONNECT from  connected sites to m.mask , then re connect when i need to use them ?

It sounds you didn't need to do that. They will need to connect with your metamask once you wanna try to connect with them again. The site will ask you again to connect with your metamask. Somesites may still able to connect with your metamask such as dex or something like this.
Disconnect your metamask was also a good decision to prevent malicious activities with your metamask.

[mbakruroh]

    Hi all . re: m.mask security ...... if you have very small/low risk funds in m.mask wallet , as recommended , but from a phishing/hacking perspective , you have : connected sites : to wallet , does this mean if wallet is accessed by hacker that they can then access connected sites ?

No. Even though Metamask is linked to a certain site, the site owner cannot transfer money from Metamask to another account, because every transfer of funds requires confirmation. This is the same as the process when you do a swap, namely by confirming by an active wallet. If the wallet is not active of course they can't do anything with our metamask even though it's connected to their site. So you don't have to worry about the metamask security system. Unlike a site that asks to import a private key, there is a possibility that the site backs up the private key that we import.

[Kocret02]

MetaMask which can be accessed online can in fact limit the level of security compared to cold wallets.
However, the level of security that MetaMask has is able to beat other wallets, and this is one of the advantages of the Metamask wallet that is worth considering.

[Almasani]

    Hi all . re: m.mask security ...... if you have very small/low risk funds in m.mask wallet , as recommended , but from a phishing/hacking perspective , you have : connected sites : to wallet , does this mean if wallet is accessed by hacker that they can then access connected sites ?

Metamask cannot make any transactions without confirmation from the wallet owner who activates Phrase even though it is connected to another site. Unless you've entered the Phrase to another site to access that site. Some sites enable import Phrases, but others just make a connection.