Holds your wallet
On first run it generates a wallet and a recovery phrase locally. The extension stores the encrypted key material in your browser profile and unlocks with a password you choose.
Self-custody · Web3 connectivity
The browser wallet that keeps the keys on your side of the screen
A clear, practical walkthrough of the Coinbase Wallet Extension — what it does when you install it, how it talks to decentralized applications, what every approval prompt is really asking for, and how to look after a recovery phrase nobody can reset for you.
- Plain-language explanations
- No sign-up, no wallet needed
- Safety-first by default
01
Self-custody
Keys and recovery phrase are generated on your device, not held on a server.
02
dApp connectivity
A consent layer between the browser page and the wallet you already own.
03
Transaction awareness
Nothing is broadcast until you read the request and approve it yourself.
04
Your responsibility
No reset link exists. Backup quality decides how recoverable you are.
Overview
One extension, three jobs
The extension is not a trading dashboard and not a bank account. It is a small, always-present wallet that lets a normal web page ask you for permission — and then waits for your answer.
Bridges you to dApps
Swap desks, lending markets, NFT marketplaces and games detect it automatically and offer a connect button — no extra software, no copied private keys.
Signs and sends
Every message signature and transaction is presented as a confirmation screen. You approve, reject or adjust fees before anything reaches the network.
The guide
Coinbase Wallet Extension: getting started with self-custody
The Coinbase Wallet Extension is a browser add-on that puts a self-custody crypto wallet inside the browser you already use. Rather than holding your keys on a company server, it creates and stores a wallet on your own device and asks for your approval each time a website wants to read an address or send a transaction.
That design is what makes it useful for Web3. When you open a decentralized application — a swap, a lending market, an NFT marketplace — the extension detects the page and offers to connect. You see which account is being shared and which network is in use, then confirm or reject the request. Nothing moves until you sign.
Convenience and control arrive together. Keeping a wallet open in the browser makes everyday interactions fast, and it also means a stray click can be expensive. Read every prompt: the site origin, the network, the contract, the amount, and whether the request is a simple transfer or a broad token approval you may want to revoke later. Skip unfamiliar links, and never approve a signature you cannot explain in plain words.
Because you control the recovery phrase, you also carry the responsibility. That phrase is the wallet. Anyone who has it can move your assets from any device, and no support team can reverse a transaction or restore access without it. Store it offline in more than one safe place, never type it into a website, chat or email, and treat each signature prompt as a decision with real consequences. Used carefully, the extension is a practical bridge between ordinary browsing and decentralized applications.
Capabilities
What you can expect from it
Feature sets shift between versions, so treat this as the shape of the experience rather than a fixed spec sheet.
Multi-network support
Switch between Ethereum-compatible networks and add custom ones, with the active network shown on every confirmation.
Token and NFT view
A single list of what your addresses hold, with balances you can copy or send without leaving the popup.
In-wallet swaps
Route a trade through an integrated aggregator, ideally after comparing the quoted rate and slippage against another source.
Saved addresses
Keep frequently used recipients on file so you are not pasting long strings under pressure — a common source of costly typos.
Password and lock settings
Auto-lock intervals and a local password gate the extension, though they protect a device — not a leaked recovery phrase.
Connection controls
Review and disconnect sites you have already authorised, so a forgotten connection is not left open indefinitely.
Getting started
Four steps, in this order
Install from the official browser store listing for your browser, and confirm the publisher before you add anything.
-
1
Install and pin it
Add the extension from the official store, check the developer name, then pin it to your toolbar so you can see when a page is talking to it.
-
2
Create the wallet and back it up
The recovery phrase appears once. Write it down on paper or metal, keep it offline, and verify the words before you put value anywhere near the wallet.
-
3
Fund it, then start small
Move a small amount first and send one test transaction. Learn how fees and network switching behave before you trust it with a meaningful balance.
-
4
Connect one dApp at a time
Approve a single site, read the permission it asks for, and disconnect when you are finished. New connections deserve a second look, not a reflex click.
Security and privacy
Guard the phrase. Question every prompt.
The extension is a careful product; the risks usually come from the pages around it and the habits of the person clicking approve.
- Recovery phrase: offline only. Anyone who asks you to type it — a site, an email, a "support" chat — is trying to steal your wallet.
- Seed phrase ≠ password: it cannot be reset, changed or recovered by support. Losing it means losing the wallet.
- Check the origin: look at the domain in the confirmation window, not the logo on the page.
- Understand approvals: an unlimited token allowance is not the same as a one-off transfer.
- Separate your wallets: a small, exposed "browsing" wallet and a cold-stored reserve keep mistakes survivable.
- Privacy by design: a public blockchain address is public. Sharing it links your activity, so use fresh addresses when you would rather not be followed.
FAQ
Questions people ask first
Is the Coinbase Wallet Extension the same as the main Coinbase app?
They are different products with different custody models. The exchange app holds assets on your behalf behind an account login; the browser extension is a self-custody wallet where the recovery phrase and signing authority stay on your own device. Treat the login credentials and the recovery phrase as two separate secrets — never enter one to help the other.
What does connecting a website actually share?
Connecting shares your public address and the ability to ask you to sign messages or transactions. It does not hand over your recovery phrase or private keys, and no transaction moves without your explicit confirmation in the extension window.
Can anyone restore my wallet if I lose the recovery phrase?
No. There is no password reset for a self-custody wallet. Back the phrase up offline, keep more than one copy in separate safe places, and never share or type it into a website, chat, email or support form.
How do I judge whether a signing request is safe?
Read it before approving: the site origin, the network, the contract you are interacting with, the amount, and whether it is a simple transfer or a broad token approval. Reject anything you cannot explain, and revoke approvals you no longer use.
Does using an extension make my activity public?
Blockchain transactions are public by nature — anyone can see that an address moved funds. What stays private is your identity, unless you link it yourself. Keep that in mind when posting an address publicly or reusing one address everywhere.
Start small, stay self-custodial
Read the guide once more, write the phrase down offline, and send a test transaction before anything large.