How to Revoke Token Permissions on MetaMask

Summary: Revoking permissions on MetaMask is a vital security measure to protect your digital assets. By managing token allowances, you prevent smart contracts from accessing your funds without authorization, effectively closing potential backdoors that hackers often exploit for drains.
Regularly auditing your wallet ensures that only trusted decentralized applications maintain access to your balance. Using specialized tools or native features helps maintain high security standards, reducing the risk of significant financial losses within the volatile crypto market.
Revoke.cash is the standout option for revoking MetaMask token permissions because it is easy to scan, supports 100+ networks, and makes suspicious approvals easier to spot quickly.
Supported Chains
100+ EVM Networks
Speed
Scans Wallets in Seconds
Coverage
Supports NFTs and Tokens
Can I Revoke Permissions on MetaMask?
Yes, you can revoke permissions on MetaMask, but the exact method depends on the permission type. Connected-site access is removed from MetaMask settings, while token approvals must be revoked onchain through MetaMask Portfolio, explorers, or dedicated tools.
MetaMask specifically notes that disconnecting a dapp and revoking an approval are not the same action. A disconnected site may lose account visibility, yet an existing token allowance can still let an approved contract move tokens.
How to Revoke Permissions on MetaMask
There are two practical ways to revoke MetaMask permissions today: remove connected dApps or submit an onchain approval revocation through MetaMask Portfolio or Revoke.cash.
1. Revoke Permissions Directly in MetaMask
If you want to handle everything from official MetaMask surfaces, remove dapp permissions in the wallet and revoke supported token allowances through MetaMask Portfolio.
Use MetaMask’s native menus and approval tools:
- Disconnect dApps: Open Account options, choose All Permissions, select the site, and press Disconnect to remove its wallet connection.
- Clear privacy Data: Go to Settings, Security & Privacy, then Clear privacy data to remove all dapp permissions together.
- Revoke Allowances: Review approvals in MetaMask Portfolio and submit revocation transactions on Ethereum, Polygon, or BNB Chain.

2. Revoke Permissions Using Revoke.cash
If you need a broader approval dashboard across many chains, Revoke.cash offers a fast way to inspect, filter, and revoke existing token allowances.
Use this route for wider network coverage:
- Connect Wallet: Open Revoke.cash, connect MetaMask or enter your address, then choose the blockchain network you want reviewed.
- Review Approvals: Inspect the list, then sort, filter, or search spender addresses to find suspicious or unnecessary permissions.
- Revoke Entry: Click Revoke beside the approval, confirm the transaction in MetaMask, and pay the required network gas.

Revoke Token Permissions on Solana
If you use Solana through MetaMask, permission management differs from Ethereum-style token approvals. On Solana, access is usually tied to delegates, account authority, or app connections rather than unlimited ERC-20 allowances.
Use MetaMask to review Solana token access:
- Open MetaMask: Switch to your Solana account, review the token or connected app, and identify any delegate or permission-related access.
- Revoke Delegate: Remove delegated token access where available, preventing the approved wallet or app from transferring the assigned amount.
- Review Connections: Disconnect unused Solana apps and double-check account authority changes, since some permission updates can affect long-term token control.
Revoking Token Permissions Using Phantom Wallet
If you use Solana with Phantom, it makes more sense to manage token permissions directly inside the wallet instead of relying on EVM-style approval tools.
Use Phantom to review Solana token access:
- Open Phantom: Launch the wallet, select the token, and review any available permission, delegate, or connected-app details tied to that asset.
- Remove Delegate: Revoke token delegation if it exists, which prevents the approved address from transferring the assigned token amount.
- Check Authorities: Review token-account authority settings carefully, because changing or removing authority permissions can affect future account control.

Why is It Important to Revoke Permissions?
Revoking permissions reduces the damage a malicious contract, compromised protocol, or fake dapp can cause after you stop using it. MetaMask warns that unlimited approvals are common, and abused allowances can let attackers drain approved tokens.
It is also a strong wallet-hygiene habit. MetaMask recommends checking approvals regularly because new smart contract updates can leave old allowances behind, and revocations help narrow your exposure even when you previously trusted the platform or no longer actively use it
Common MetaMask Revocation Problems and Fixes
Most revocation issues come from using the wrong network, missing gas, or confusing a disconnected dapp with an approval that still exists onchain.
1. The Approval Is Not Showing Up
Check the network and permission type first:
- Confirm Type: Check whether you are removing a dapp connection or token approval, because each requires a different workflow.
- Match Network: Switch to the same blockchain where the approval was granted, or the allowance may not appear.
- Use Alternatives: For unsupported networks, try the chain’s approval checker or a multi-network tool like Revoke.cash.
2. The Revocation Transaction Fails
Failed transaction or missing gas? Try these fixes:
- Fund Gas: Keep enough native token in the wallet, since every approval revocation is an onchain transaction with fees.
- Check Pending: Review wallet activity before retrying, so you do not stack conflicting transactions or duplicate revocation attempts.
- Retry Later: Wait through congestion or RPC instability, because temporary network issues can interrupt otherwise valid revocations.
3. The Permission Still Looks Active
Still seeing access after revoking? Check this:
- Refresh Data: Reload the wallet, explorer, or revoke tool, because cached interfaces can briefly show outdated approval information.
- Separate Actions: Disconnecting a site removes visibility permissions, but token approvals still stay active until revoked onchain.
- Sort Newest: On Revoke.cash, review recent approvals first if you suspect a freshly signed malicious permission.
Final Thoughts
Revoking MetaMask permissions is one of the simplest ways to tighten wallet security after using dApps, especially when older approvals no longer serve a purpose.
The safest approach is routine maintenance: review connected sites, limit spending caps when possible, and revoke unused allowances before they become avoidable exposure.
Frequently asked questions
What happens if I don't revoke permissions?
If a dApp you authorized is hacked, the attacker can use the existing approval to drain your tokens instantly, even if you are not currently using the site or connected to it.
Does revoking permissions cost money?
Yes, revoking is an on-chain transaction that requires a small gas fee. This fee pays miners or validators to update the smart contract state and remove the spender's authority over your tokens.
Does revoking a permission refund my original approval gas fee?
No. Revoking an approval is a new onchain transaction, so it usually costs an additional gas fee, and the gas spent on the original approval is not refundable.
Will I need to approve again after revoking access?
Usually, yes. If you revoke a token allowance or disconnect a dapp, the next interaction may require you to reconnect the site or sign a fresh approval.
Can I reduce an approval instead of removing it completely?
Often, yes. Revoke.cash notes that you can sometimes edit an approval amount instead of fully revoking it, which lowers risk while preserving future usability.

Written by
Datawallet Team
Research
Datawallet is an independent crypto research platform covering digital assets, blockchain data and on-chain analytics since 2019. Our research is cited by Binance, CoinMarketCap, Messari and leading academic publications.






