Now just picking a password to hack the metamask is very difficult but there are many other ways through which scammers doing this.