How to Revoke Mint and Freeze Authority (and Why You Should)

Every SPL token has a small set of keys that can still change it after launch, even once it's trading. Whether those keys exist — and who holds them — is one of the first things worth checking about any token, and one of the first decisions to make about any token you create.

The two authorities that matter

A mint account on Solana can carry two independent authorities, each a separate keypair with a narrow, specific power:

Mint authority. Whoever holds it can call mintTo and create new supply, at any time, in any amount, forever — unless it's revoked. There is no cap enforced by the protocol; the only limit is whatever the mint authority chooses to do. A token with live mint authority can have its supply doubled by its creator the day after you buy it, with no on-chain mechanism to prevent that.

Freeze authority. Whoever holds it can freeze any holder's token account for that mint, instantly, without the holder's consent. A frozen account can't send, receive, or burn until it's thawed by the same authority. This exists for legitimate reasons — stablecoin issuers use it to comply with sanctions and court orders — but on a permissionless community token, it means the creator can lock any wallet's balance at will.

Neither authority is inherently a scam. A team actively managing a token — running a mint-and-burn model, or needing freeze for a regulated product — has a real reason to keep them. The problem is when they're live silently, on a token being marketed as decentralized or "fair launch," and nobody checks.

Why revoking is the strongest signal a token can give

Anyone can claim a token is safe in a Discord announcement. On-chain state doesn't take anyone's word for it. When mint authority is set to None, it is cryptographically, permanently gone — there is no admin override, no multisig that can reinstate it, no upgrade path. The Solana runtime itself enforces that a None authority can never mint again. The same is true for freeze authority set to None.

This is what separates a revoked authority from a promise to never misuse it. A promise requires trust in a person. A revoked authority requires trust in nothing — it's a fact about the mint account that anyone can read.

What to check before you trust a claim

Every wallet, and every explorer, can show you a mint's current authority fields — you're looking for whether Mint Authority and Freeze Authority read None. If either still shows a live address, that address can still do what its authority allows, regardless of anything the team has said publicly. A live mint authority two months after "launch" is worth asking about directly.

Revoking your own token's authorities

If you're the one creating the token, you get to make this call once, and it can't be undone — so it's worth getting the order right.

Mint supply first, revoke second. Once mint authority is None, total supply is locked forever — including for you. If there's any chance you'll need to mint more later (a rewards pool, a liquidity incentive, a phased release), do that minting before you revoke, not after.

Decide if you need freeze at all. Most community tokens have no legitimate use for freeze authority — revoke it immediately, during creation. If you're building something regulated that genuinely needs the ability to freeze compromised accounts, keep it, and say so publicly — a disclosed, purposeful freeze authority is a very different signal than an undisclosed one.

Do it at creation, or do it later — both work. Both the SPL and Token-2022 creators offer a revoke-on-creation checkbox that folds the revocation into the same transaction that mints the token. If you've already launched and are revoking now, Token Manager does it as a standalone transaction for any mint your wallet still controls — paste the mint address, and it shows exactly which authorities you're still holding.

There's no undo

This is worth repeating on its own: revoking is final. There's no re-grant instruction, no recovery path, no support ticket that brings a None authority back. That permanence is the entire value of doing it — treat the decision with the weight that implies, and double check supply and decimals before you commit to it. Full walkthrough in the revoke authority docs.