diff --git a/packages/storage/lib/customStorage.ts b/packages/storage/lib/customStorage.ts
index 2dfa9ec..8d87671 100644
--- a/packages/storage/lib/customStorage.ts
+++ b/packages/storage/lib/customStorage.ts
@@ -363,7 +363,12 @@ const createMaskingSettingsStorage = (): MaskingSettingsStorage => {
   const storage = createStorage<MaskingSettings>(
     'masking-settings',
     {
-      enableMetaMaskMasking: false,
+      // Default ON — modern dApps (CowSwap, swap aggregators, several
+      // older sites) expect a window.ethereum with isMetaMask:true and
+      // bail out of their connect flow without it. Modern dApps that
+      // discover wallets via EIP-6963 still see KeepKey as itself.
+      // Existing installs keep whatever they previously set.
+      enableMetaMaskMasking: true,
       enableXfiMasking: false,
       enableKeplrMasking: false,
     },
diff --git a/pages/side-panel/src/components/Settings.tsx b/pages/side-panel/src/components/Settings.tsx
index 374543b..a04ccf2 100644
--- a/pages/side-panel/src/components/Settings.tsx
+++ b/pages/side-panel/src/components/Settings.tsx
@@ -198,7 +198,7 @@ const Settings = () => {
           </HStack>
           <Switch size="md" isChecked={maskingSettings.enableMetaMaskMasking} onChange={toggleMetaMaskMasking} />
         </HStack>
-        <Text fontSize="xs" color="gray.500" mt={-2} mb={2}>
+        <Text fontSize="xs" color="whiteAlpha.700" mt={-2} mb={2}>
           When on, KeepKey claims to be MetaMask on legacy dApps (Stripe, older sites) by mounting
           <code> window.ethereum </code>
           with <code>isMetaMask: true</code>. Modern dApps still see KeepKey via EIP-6963. Refresh any open dApp after
@@ -269,7 +269,7 @@ const Settings = () => {
           )}
         </Box>
 
-        <Text fontSize="sm" color="gray.500">
+        <Text fontSize="sm" color="whiteAlpha.700">
           This setting may conflict with these apps if also enabled.
         </Text>