MetaMask 0.6.1 / Security
Signed login proofs and contract wallets
Understand domain-bound login challenges, EOA recovery, and ERC-1271 verification.
Wallet login uses a short-lived Sign-In with Ethereum-style challenge bound to the site domain, URI, active EVM chain, purpose, nonce, issue time, and expiry. A proof cannot be reused for a different site, purpose, account, chain, or expired request.
Externally owned account proofs are recovered locally. ERC-1271 contract-wallet proofs are verified through the trusted server RPC policy on the declared chain. If the verification endpoint or chain policy is unavailable, login fails closed.
The server rechecks Pro access, current account state, nonce, purpose, and association before creating a WordPress session. Browser visibility or a connected provider is never sufficient authority.