DEV Community

Solsmint
Solsmint

Posted on Originally published at blog.solsmint.com

Solana Token Authorities Explained: Mint, Freeze, and Update Permissions

Solana token authorities: mint authority, freeze authority, update authority, and authority revocation explainedSolana tokens can have several authorities, each with different permissions. Mint Authority can authorize new token issuance. Freeze Authority can freeze eligible token accounts. A metadata Update Authority may be able to change token information, depending on the metadata program and asset settings.

These permissions are separate. Revoking one does not automatically revoke the others, make the entire token immutable, or prove that a project is trustworthy. Before changing an authority, identify which token program and metadata standard your token uses—and understand whether the change can be reversed.

Important: Setting an authority to None is generally permanent for that role under the applicable token program. Verify the token and metadata implementation before approving an authority-change transaction. Solana’s Set Authority documentation

What Are Solana Token Authorities?

A token authority is a wallet address or other authorized account that can perform a specific action.

In the classic SPL Token program, a mint can have a Mint Authority and a Freeze Authority. Token accounts have an owner and may have a close authority. Token-2022 also supports additional authority roles for certain extensions. Solana’s Set Authority documentation

An authority is not general control over every aspect of a token. Each role grants specific permissions. For example, Mint Authority can authorize new token issuance; it does not automatically control metadata.

When reviewing a token, check its mint address, token program, authority settings, and metadata implementation. A token’s name or symbol alone does not reveal its permissions or prove that it is legitimate.

Mint, Freeze, and Update Authority

Authority What it controls Why a project may retain it Consider before revoking
Mint Authority Authorizes additional token issuance under the applicable token program. The project may need future rewards or planned distributions. Revocation prevents future minting through that authority and is generally permanent.
Freeze Authority Can freeze eligible token accounts under the applicable token program. A project may have a specific operational or compliance need. Revocation prevents future freezes by that authority, but does not automatically thaw frozen accounts.
Metadata Update Authority Can modify permitted metadata fields when allowed by the relevant metadata program and asset settings. The project may need to correct or update metadata. Metadata rules vary. Removing authority or making metadata immutable may prevent future changes.

These are distinct permissions. Mint and Freeze Authority relate to the token program, while metadata permissions are governed by the relevant metadata system. Solana’s Set Authority documentation Metaplex’s Token Metadata documentation

What Is Mint Authority on Solana?

Mint Authority is the permission to create additional units of a token. Under Solana’s token programs, only the Mint Authority can authorize new tokens, and minting increases the mint’s total supply. Solana’s Mint Tokens documentation

A project might retain this authority to distribute planned rewards over time. That flexibility also means the supply can increase, so the project should explain who controls the authority and why it remains active.

If a project intends to issue no more tokens, it may consider revoking Mint Authority after confirming that all planned supply and distributions are accounted for.

What happens when Mint Authority is revoked?

Setting Mint Authority to None prevents that authority from authorizing future token issuance. Existing tokens remain in their holders’ accounts; revocation does not burn or remove them. Solana’s SetAuthority instruction can set a selected authority to None, permanently removing that role. Solana’s Set Authority documentation

For example, after creating its intended supply, a project might revoke Mint Authority to prevent future minting through that role. It would then be unable to use that authority to issue additional rewards later.

Revoking Mint Authority does not make the whole token immutable or automatically trustworthy. Other authorities, metadata settings, Token-2022 extensions, and project-level controls may still matter.

What Is Freeze Authority on Solana?

Freeze Authority can freeze eligible token accounts for a particular mint. A frozen account cannot receive, transfer, or burn tokens until it is thawed. Solana’s Freeze Account documentation

This is an account-level control, not a way to freeze every token on Solana. The authority applies to accounts associated with the relevant mint and token program.

A project should retain Freeze Authority only when it has a clear reason and communicates that permission to users. Holders should understand who controls it and how it could be used.

What happens when Freeze Authority is revoked?

Revoking Freeze Authority prevents that authority from freezing additional accounts for the mint. It does not automatically unfreeze accounts that were already frozen. Solana’s Freeze Account documentation

If accounts are already frozen, understand the relevant thawing process before revoking the authority. Removing the permission does not necessarily reverse an account’s existing state.

What Is Update Authority?

Update Authority is a metadata permission, not the classic SPL Token program’s Mint Authority or Freeze Authority. Its exact scope depends on the metadata program, token standard, and asset configuration.

For example, Metaplex Token Metadata allows an asset’s Update Authority to update metadata when the asset is mutable. The permitted changes depend on the implementation and asset settings. Metaplex’s guide to updating Token Metadata

Metadata may include a name, symbol, URI, or other asset information. Updating metadata does not itself mint or burn tokens and does not change token supply.

Before changing or relinquishing metadata authority, identify the metadata standard and confirm whether the asset is mutable. Not every Solana token uses the same metadata mechanism.

Revoke, Transfer, or Retain?

These are different choices:

  • Retain an authority: Keep the current permission active.
  • Transfer an authority: Assign the permission to a different address, if supported by the relevant program.
  • Revoke an authority: Remove the permission, typically by setting it to None.

Transferring an authority changes who controls the permission; it does not remove the permission itself. A project might use a controlled wallet or multisig, but the authority still exists.

For classic SPL Token and Token-2022, authority changes use the Token Program’s SetAuthority instruction. Each change applies to a particular authority role on a mint or token account, and the current authority must approve the transaction. Solana’s Set Authority documentation

Can a revoked authority be restored?

Generally, when an authority is set to None, the former authority holder cannot simply restore it under that token program’s authority model. Verify the relevant program and transaction before signing. Metadata systems may have different rules, so do not assume they behave exactly like Mint or Freeze Authority.

Should You Revoke Solana Token Authorities?

There is no single configuration that fits every project. The decision depends on the token’s purpose, operating model, holder expectations, and the specific program features in use.

Before retaining, transferring, or revoking an authority, ask:

  1. Is the mint using classic SPL Token or Token-2022?
  2. Which permission are you changing?
  3. Does the project have a documented need to retain it?
  4. Who controls the current authority wallet?
  5. Would transferring it to another controlled address meet the need?
  6. What becomes impossible if the authority is removed?
  7. Are any token accounts already frozen?
  8. Which metadata program or standard is in use?
  9. Have you verified the mint address and transaction details?
  10. Have you explained the decision to users?

If a change is irreversible, review its consequences carefully. Where possible, test the workflow and ask another trusted person to verify the transaction before signing.

Common Mistakes to Avoid

Confusing Mint Authority with Update Authority

Mint Authority controls token issuance. Update Authority concerns metadata under a separate system. Revoking one does not necessarily affect the other.

Assuming fixed supply makes everything immutable

Revoking Mint Authority prevents future minting through that role. It does not necessarily make metadata immutable or remove every other permission.

Assuming revocation proves trustworthiness

Revocation changes a specific technical permission. It does not verify a team, guarantee fair distribution, or eliminate all project risks.

Assuming Freeze Authority revocation unfreezes accounts

Revoking Freeze Authority prevents future freezes through that authority. Accounts already frozen may still require a separate thaw action. Solana’s Freeze Account documentation

Ignoring token-program and metadata differences

Classic SPL Token, Token-2022, and metadata programs can have different features and authority behavior. Check the documentation for the implementation your token uses.

How Solsmint Fits In

Solsmint is a no-code Solana SPL token creation and management platform. Its supported areas include token creation, minting, burning, airdrops, liquidity, NFT creation, token management, and token research.

If you are preparing a token, review the settings available in the Solsmint token creation workflow before launch. This article explains authority concepts for education; it does not claim that Solsmint supports post-launch authority revocation, authority transfer, metadata updates, or unfreezing accounts.

For related workflows, see minting tokens, burning tokens, and the Solsmint FAQ.

Frequently Asked Questions

What are Solana token authorities?

Solana token authorities are accounts authorized to perform specific actions, such as minting tokens, freezing token accounts, or updating metadata under a separate metadata standard.

What does Mint Authority control?

Mint Authority authorizes the creation of additional token units under the applicable token program. Revoking it prevents future minting through that authority. Solana’s Mint Tokens documentation

What does Freeze Authority control?

Freeze Authority can freeze eligible token accounts for a mint. A frozen account cannot receive, transfer, or burn tokens until it is thawed. Solana’s Freeze Account documentation

What is Solana Update Authority?

Update Authority is a metadata permission defined by the relevant metadata program or asset standard. It may allow metadata changes when the asset is mutable. Metaplex’s Token Metadata documentation

Does revoking Mint Authority burn the remaining supply?

No. Revoking Mint Authority prevents future minting through that role; it does not remove tokens that have already been created.

Does revoking Freeze Authority unfreeze existing accounts?

No. Revocation prevents future freezes through that authority. Existing frozen accounts may need to be thawed separately. Solana’s Freeze Account documentation

Can a revoked Solana authority be restored?

Generally, an authority set to None cannot simply be restored by its former holder under the relevant token program. Verify the program and metadata standard before making changes. Solana’s Set Authority documentation

Does revoking authorities make a token safe?

No. Revocation removes specific permissions but does not guarantee security, project legitimacy, fair distribution, or trustworthy behavior.

Conclusion

Mint Authority, Freeze Authority, and metadata Update Authority control different permissions. Mint Authority affects future supply, Freeze Authority affects eligible token accounts, and Update Authority concerns metadata under the applicable metadata system.

Before making changes, identify the token program and metadata standard, understand whether the action is reversible, and verify the mint address and transaction. Revocation can remove a permission, but it is not a substitute for broader security and project due diligence.

If you are creating a Solana token, review its authority settings as part of your launch plan—not as an afterthought.

Top comments (0)