How to revoke token permissions in MetaMask?

Manage token permissions in MetaMask to control which dApps can spend your tokens and revoke unused approvals regularly for better security.

Jul 07, 2025 at 10:42 am

What Are Token Permissions in MetaMask?

Token permissions in MetaMask refer to the allowances granted by users to decentralized applications (dApps) or smart contracts, enabling them to interact with specific tokens in your wallet. When you connect your MetaMask wallet to a dApp and approve token usage, you're essentially giving that contract permission to spend a certain amount of your tokens on your behalf. This is commonly used for swapping, staking, or providing liquidity. However, if these permissions are not managed properly, they can pose security risks, as malicious contracts could potentially drain your funds.

Why Revoke Token Permissions?

Revoke token permissions when you no longer trust a dApp, have completed a transaction, or suspect unauthorized access. Leaving unnecessary approvals active increases the attack surface for potential exploits. For instance, if a project you've interacted with gets compromised, any open token approvals could be exploited by attackers. Regularly reviewing and revoking unused permissions is a best practice to enhance wallet security and maintain control over your digital assets.

How to Access Token Permission Settings in MetaMask

To manage token permissions, start by opening your MetaMask wallet. Navigate to the "Assets" tab and scroll down to the "Tokens" section. Here, you will find a list of all tokens currently in your wallet. Click on the token you want to manage, which will bring up additional details including the "Spender" contracts that have been approved to use your tokens. Look for an option labeled "Approvals & locks" or similar wording, depending on your MetaMask version. This section displays all active token allowances.

Steps to Revoke Token Permissions

• Open MetaMask and switch to the account where the token resides.
• Go to the "Assets" tab and locate the token you wish to revoke permissions for.
• Click on the three dots next to the token name and select "View on block explorer".
• In the new browser tab, look for the "Contract Interaction" section.
• Find the "Approved Spenders" or "Token Approvals" section.
• Identify the spender address associated with the dApp or contract you want to revoke.
• Use a revoke approval tool or manually interact with the token's smart contract to remove the allowance.

Some tools like https://revoke.cash allow you to revoke multiple token permissions at once, simplifying the process significantly.

Understanding the Smart Contract Interaction Method

If you choose to revoke permissions directly through the blockchain explorer, follow these steps:

• Visit the Etherscan page of the token you’re managing.
• Navigate to the "Contract" tab and click on "Write Contract".
• Connect your wallet using the "Connect to Web3" button.
• Locate the "approve" function and set the _spender field to the contract address you want to revoke.
• Enter 0 in the _value field to remove the allowance.
• Confirm the transaction in MetaMask, ensuring you pay the appropriate gas fee.
• Wait for the transaction to be confirmed on the blockchain before closing the window.

This method requires basic knowledge of interacting with smart contracts but provides more granular control over your token permissions.

Using Third-Party Tools to Revoke Token Permissions

Third-party platforms such as Revoke.cash streamline the process of checking and revoking token permissions across multiple chains. To use this service:

• Visit Revoke.cash and connect your MetaMask wallet.
• The site will display a list of all active token approvals linked to your wallet address.
• Filter by token, spender, or network to locate the specific approval you want to revoke.
• Click the "Revoke" button next to the entry.
• Confirm the transaction in MetaMask, paying attention to the gas cost.
• Once the transaction is successful, the approval will no longer exist.

These tools offer a user-friendly interface and often support multiple networks, making it easier to clean up old or suspicious approvals without diving into Etherscan or other explorers.

Frequently Asked Questions

Q: Can I undo a revoked token permission?

A: Yes, you can re-enable a token permission by interacting with the same dApp or contract again. Revoked permissions do not permanently block future approvals.

Q: Does revoking token permissions affect my ability to receive tokens?

A: No, revoking token permissions only affects a contract’s ability to spend your tokens. It does not prevent you from receiving new tokens or transferring them manually.

Q: Is it safe to use third-party tools like Revoke.cash?

A: These tools generally do not require access to your private keys and only facilitate interactions with public blockchain data. Always ensure you're using trusted services and double-check contract addresses before confirming transactions.

Q: Do I need to revoke token permissions on every network I use?

A: Yes, token approvals are network-specific. If you've interacted with a token on Ethereum, Binance Smart Chain, or Polygon, you must revoke permissions separately on each network.