How to Revoke Token Permissions on MetaMask

How to Revoke Token Permissions on MetaMask

Summary: Revoking permissions on MetaMask is a vital security measure to protect your digital assets. By managing token allowances, you prevent smart contracts from accessing your funds without authorization, effectively closing potential backdoors that hackers often exploit for drains.

Regularly auditing your wallet ensures that only trusted decentralized applications maintain access to your balance. Using specialized tools or native features helps maintain high security standards, reducing the risk of significant financial losses within the volatile crypto market.

Can I Revoke Permissions on MetaMask?

Yes, you can revoke permissions on MetaMask, but the exact method depends on the permission type. Connected-site access is removed from MetaMask settings, while token approvals must be revoked onchain through MetaMask Portfolio, explorers, or dedicated tools.

MetaMask specifically notes that disconnecting a dapp and revoking an approval are not the same action. A disconnected site may lose account visibility, yet an existing token allowance can still let an approved contract move tokens.

How to Revoke Permissions on MetaMask

There are two practical ways to revoke MetaMask permissions today: remove connected dApps or submit an onchain approval revocation through MetaMask Portfolio or Revoke.cash.

1. Revoke Permissions Directly in MetaMask

If you want to handle everything from official MetaMask surfaces, remove dapp permissions in the wallet and revoke supported token allowances through MetaMask Portfolio.

Use MetaMask’s native menus and approval tools:

  1. Disconnect dApps: Open Account options, choose All Permissions, select the site, and press Disconnect to remove its wallet connection.
  2. Clear privacy Data: Go to Settings, Security & Privacy, then Clear privacy data to remove all dapp permissions together.
  3. Revoke Allowances: Review approvals in MetaMask Portfolio and submit revocation transactions on Ethereum, Polygon, or BNB Chain.
How to Revoke MetaMask Permissions

2. Revoke Permissions Using Revoke.cash

If you need a broader approval dashboard across many chains, Revoke.cash offers a fast way to inspect, filter, and revoke existing token allowances.

Use this route for wider network coverage:

  1. Connect Wallet: Open Revoke.cash, connect MetaMask or enter your address, then choose the blockchain network you want reviewed.
  2. Review Approvals: Inspect the list, then sort, filter, or search spender addresses to find suspicious or unnecessary permissions.
  3. Revoke Entry: Click Revoke beside the approval, confirm the transaction in MetaMask, and pay the required network gas.
Revoke Cash

Revoke Token Permissions on Solana

If you use Solana through MetaMask, permission management differs from Ethereum-style token approvals. On Solana, access is usually tied to delegates, account authority, or app connections rather than unlimited ERC-20 allowances.

Use MetaMask to review Solana token access:

  1. Open MetaMask: Switch to your Solana account, review the token or connected app, and identify any delegate or permission-related access.
  2. Revoke Delegate: Remove delegated token access where available, preventing the approved wallet or app from transferring the assigned amount.
  3. Review Connections: Disconnect unused Solana apps and double-check account authority changes, since some permission updates can affect long-term token control.

Revoking Token Permissions Using Phantom Wallet

If you use Solana with Phantom, it makes more sense to manage token permissions directly inside the wallet instead of relying on EVM-style approval tools.

Use Phantom to review Solana token access:

  1. Open Phantom: Launch the wallet, select the token, and review any available permission, delegate, or connected-app details tied to that asset.
  2. Remove Delegate: Revoke token delegation if it exists, which prevents the approved address from transferring the assigned token amount.
  3. Check Authorities: Review token-account authority settings carefully, because changing or removing authority permissions can affect future account control.
Revoking Token Permissions Using Phantom Wallet

Why is It Important to Revoke Permissions?

Revoking permissions reduces the damage a malicious contract, compromised protocol, or fake dapp can cause after you stop using it. MetaMask warns that unlimited approvals are common, and abused allowances can let attackers drain approved tokens.

It is also a strong wallet-hygiene habit. MetaMask recommends checking approvals regularly because new smart contract updates can leave old allowances behind, and revocations help narrow your exposure even when you previously trusted the platform or no longer actively use it

Common MetaMask Revocation Problems and Fixes

Most revocation issues come from using the wrong network, missing gas, or confusing a disconnected dapp with an approval that still exists onchain.

1. The Approval Is Not Showing Up

Check the network and permission type first:

  1. Confirm Type: Check whether you are removing a dapp connection or token approval, because each requires a different workflow.
  2. Match Network: Switch to the same blockchain where the approval was granted, or the allowance may not appear.
  3. Use Alternatives: For unsupported networks, try the chain’s approval checker or a multi-network tool like Revoke.cash.

2. The Revocation Transaction Fails

Failed transaction or missing gas? Try these fixes:

  1. Fund Gas: Keep enough native token in the wallet, since every approval revocation is an onchain transaction with fees.
  2. Check Pending: Review wallet activity before retrying, so you do not stack conflicting transactions or duplicate revocation attempts.
  3. Retry Later: Wait through congestion or RPC instability, because temporary network issues can interrupt otherwise valid revocations.

3. The Permission Still Looks Active

Still seeing access after revoking? Check this:

  1. Refresh Data: Reload the wallet, explorer, or revoke tool, because cached interfaces can briefly show outdated approval information.
  2. Separate Actions: Disconnecting a site removes visibility permissions, but token approvals still stay active until revoked onchain.
  3. Sort Newest: On Revoke.cash, review recent approvals first if you suspect a freshly signed malicious permission.

Final Thoughts

Revoking MetaMask permissions is one of the simplest ways to tighten wallet security after using dApps, especially when older approvals no longer serve a purpose.

The safest approach is routine maintenance: review connected sites, limit spending caps when possible, and revoke unused allowances before they become avoidable exposure.

Frequently asked questions

What happens if I don't revoke permissions?

Does revoking permissions cost money?

Does revoking a permission refund my original approval gas fee?

Will I need to approve again after revoking access?

Can I reduce an approval instead of removing it completely?

Written by 

Datawallet Team

Research

Datawallet is an independent crypto research platform covering digital assets, blockchain data and on-chain analytics since 2019. Our research is cited by Binance, CoinMarketCap, Messari and leading academic publications.