Just use the right Metamask and bookmark it. Use add-ons in windows to check for phishing sites and you should be good.
Metamask is safe and private keys are safe, so no problem there.