Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

To revoke an ordinary Solana token approval, remove the delegate from the specific token account that granted it. You can use a wallet’s approval screen, a revocation tool, or the Solana SPL Token CLI. Revocation is an on-chain transaction: it clears the account’s delegate and delegated amount, so that delegate can no longer transfer or burn tokens from that account.

Disconnecting a decentralized app (dApp) is a separate action. It removes the wallet connection, but it does not cancel an existing token-account delegate. If your recovery phrase or private key may have been exposed, neither action is enough; move remaining trusted assets to a new wallet created with a fresh phrase.

What a Solana token approval actually grants

Solana’s Token Program lets the owner of a token account approve another address as a delegate. The delegate can transfer or burn up to the amount approved from that one token account. The account stores one current delegate and one delegated amount at a time.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Approving a different delegate replaces the previous delegate and allowance. The wallet owner signs the approval. Solana’s ApproveChecked instruction additionally checks that the mint and token decimals supplied by the caller match the token account.

#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter | 4Pack Type C Female to A Male Cable Converter for Apple Duo 17 16 15 14 Plus,iWatch Watch 12 11 10,iPad 9 8 Air,Airpods 5 4
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.

This is an account-level permission, not automatically an unlimited, contract-wide allowance. The relevant questions are which token account is involved, which address is its delegate, and how much was delegated. A dApp connection by itself is not proof that the dApp has a token-spending delegate.

Revocation in one sentence

The Token Program’s Revoke instruction clears the delegate and sets the delegated amount to zero on the source token account. The token-account owner normally signs the transaction. Solana’s official Revoke Delegate documentation states: “After revocation, the previous delegate no longer has authority to transfer or burn tokens on behalf of the token account.”

Revocation affects only the delegate recorded on that token account. It does not undo a transfer that already happened, reverse a signed transaction, disconnect an app, or repair a leaked private key.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Choose the right remediation route

Route Permission it changes What you must verify Important limitation
Famous Fox’s Revoker used with Phantom Ordinary Solana token-account delegates Connect the intended wallet, review the listed accounts, and inspect the transaction before signing The interface is a third-party tool and can change; verify the current domain and transaction details
Solflare approval settings Spending approvals shown by the wallet Open Settings → Security and Privacy → Spending Approvals and confirm the account and permission selected Wallet labels and screens may change; the owner still signs an on-chain transaction
SPL Token CLI The delegate on a specified token account Use the correct token-account address and a signer that controls its owner authority The command does not remove other authorities or app connections
Disconnect a dApp The wallet-to-app connection Remove the app from the wallet’s connected-app list It does not revoke an existing token delegate

Before you sign a revocation

  1. Identify the wallet account. Make sure the wallet currently connected is the account that owns the affected token account. A different account cannot revoke that delegate through the ordinary owner path.
  2. Identify the token account and delegate. A wallet may hold separate token accounts for different mints. Confirm which account and token the approval concerns, rather than treating the wallet address as the approval itself.
  3. Decide whether the signing key is trusted. If the recovery phrase, private key, or signing device may be compromised, skip straight to the asset-migration procedure below. A revocation signed by a compromised key does not make that key safe.
  4. Review the transaction. Check the mint, token account, delegate, and instruction shown by the wallet. Do not approve a transaction merely because a site labels it “revoke.”
  5. Separate connection cleanup from permission cleanup. Plan to disconnect unfamiliar apps as a second action after handling on-chain approvals.

Method 1: Revoke through a wallet-facing tool

Phantom route documented by the wallet

Phantom’s help instructions direct Solana users to Famous Fox’s Revoker:

  1. Open the current Revoker site by navigating to a trusted, verified address. Do not follow an unexpected link from a message or pop-up.
  2. Connect the wallet that owns the token account.
  3. Choose the Solana network or Solana-specific view if the interface presents multiple chains.
  4. Review every approval the tool lists. Confirm the token account and delegate you intend to remove.
  5. Select Revoke all for Solana when that is the current label and you intentionally want to remove all listed Solana token delegates for that wallet.
  6. Read Phantom’s transaction preview and sign only if the instruction matches the intended revocation.
  7. Wait for the transaction to be confirmed, then check that the approval no longer appears in the wallet’s current approval view.

This is a documented route, not an independent test of the third-party interface. The site, wording, and available controls may change. Treat the wallet’s transaction preview as the authority for what will actually be signed.

Rank #2
Sale
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter | USB C Dongle with 90W Max Power Delivery, 3×5Gbps USB A Data Ports, for MacBook, Dell, and More (Charger Not Included)
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

Solflare route

Solflare documents approval controls at Settings → Security and Privacy → Spending Approvals.

  1. Open the wallet settings and follow that path.
  2. Review the spending approvals associated with the active wallet.
  3. Select the unwanted approval and read the transaction details, including the token account and delegate.
  4. Submit and sign the revocation transaction if the details are correct.
  5. Reopen the approval screen after confirmation to check the resulting state.

Provider interfaces are revised over time. If the labels differ, use the current security or approval section, and do not sign a transaction whose instruction or account details you cannot identify.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Method 2: Use the SPL Token CLI

Solana’s official SPL Token CLI reference documents this command for removing a delegate:

spl-token revoke <TOKEN_ACCOUNT_ADDRESS>

  1. Replace <TOKEN_ACCOUNT_ADDRESS> with the address of the token account whose delegate you want to clear.
  2. Run the command in an environment where the SPL Token CLI is configured to use the wallet that controls that token account’s owner authority.
  3. Review the transaction details produced by the CLI and confirm the token-account address before signing.
  4. After confirmation, verify through your wallet or another trusted Solana account view that the delegate and delegated amount have been cleared.

The command targets one token account. It does not disconnect dApps, change mint authorities, or remove a Token-2022 PermanentDelegate. If you do not know the exact token-account address or signer configuration, use a wallet interface that clearly identifies those values instead of guessing.

Disconnecting a dApp is not revocation

A wallet connection lets an app request wallet information and present transactions for signing. Disconnecting removes that connection. Phantom distinguishes this from token approvals: disconnection removes the app’s ability to view wallet data through the connection, while revocation removes a token-account delegate’s authority to move specified tokens.

Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter | 85W Max PD, 2 USB 3.0 & 1 USBC Data Ports, SD/TF Card Reader, for Laptops/Mac and Other Type C Devices (Charger Not Included)
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.

Use both controls when appropriate:

  1. Open the wallet’s connected-app list and disconnect unknown or unnecessary apps.
  2. Separately inspect token approvals and revoke unwanted delegates.
  3. Review any recent signatures or transfers in the wallet and treat unexplained activity as a possible compromise signal.

Leaving an app disconnected does not guarantee that a delegate previously granted to an address has been removed. Conversely, revoking a delegate does not remove the app from the connected-app list.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not confuse a delegate with other Solana authorities

Solana assigns different authority roles to mints and token accounts. The Set Authority instruction changes one selected authority type on one mint or token account. Setting an authority to None permanently removes that selected role; it is not the same operation as revoking a delegate.

Role Scope What revoking a token delegate does
Token-account owner One token account Normally signs approval and revocation transactions
Token-account delegate One token account and its delegated amount Cleared by Revoke; the delegated amount becomes zero
Mint authority A token mint Unaffected
Freeze authority A token mint Unaffected
Optional close authority A token account Unaffected
Token-2022 PermanentDelegate A mint-level authority able to transfer or burn that mint’s tokens from token accounts Cannot be removed by the owner of an individual token account

The Token-2022 PermanentDelegate exception

Token-2022 can include a PermanentDelegate extension on a mint. That authority is assigned at the mint level and can transfer or burn tokens from any token account for that mint. The owner of one token account cannot revoke the permanent delegate from that account.

This means an ordinary approval review may not explain every authority associated with a token. If the asset uses Token-2022, identify whether the concern is a normal account delegate or a mint extension. Do not promise that the standard Revoke instruction removes a PermanentDelegate.

If you approved a malicious transaction

First classify the incident. A suspicious dApp approval with a still-trusted signing key is different from a disclosed recovery phrase or private key.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray | Data transfer & Fast charging for MacBook, iPhone 17/16/15, iPad, Samsung Galaxy, Apple Watch
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft

When the key is still trusted

  1. Revoke the specific unwanted token-account delegate.
  2. Disconnect the suspicious dApp separately.
  3. Review the wallet’s transaction preview for any further instructions before signing anything else.
  4. Keep only the permissions and app connections you can identify.

These actions reduce the authority already granted. They do not reverse a transfer that has already settled.

When the phrase, private key, or device may be compromised

  1. Stop using the suspected wallet for new long-term deposits.
  2. On a secure, malware-free device, create a new wallet with a fresh recovery phrase.
  3. Move trusted remaining assets to the new wallet. Prioritize assets that have not already been transferred.
  4. Do not reuse the suspected phrase in the new wallet or in another wallet.
  5. Disconnect suspicious apps and revoke ordinary delegates only when doing so does not expose the new signing setup to the compromised environment.

Phantom and Solflare both advise moving assets to a separate wallet when the key may be compromised. Solflare also states that it cannot retrieve stolen funds or reverse completed transactions. Treat revocation as prevention of further use of one permission, not as a recovery mechanism.

Be cautious with suspicious tokens or unsolicited assets. Interacting with an unknown token can create another signing opportunity; investigate the asset and transaction instruction before taking action.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Limit exposure before the next dApp interaction

Use a dedicated wallet for unfamiliar apps

Solflare recommends a separate burner wallet with a unique recovery phrase for unfamiliar applications. Keep only the funds needed for that session in the wallet, and keep long-term holdings in a different wallet. This limits the amount exposed if an approval or signature turns out to be unsafe; it does not guarantee safety.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Keep wallet roles separate

  • Use a long-term holding wallet for assets that should not be exposed to routine experimentation.
  • Use a low-balance wallet for testing unfamiliar dApps.
  • Never import a phrase suspected of exposure into the new wallet.
  • Disconnect apps that no longer need access and periodically review token approvals.

Consider offline key storage for future signing

Phantom says hardware devices such as Ledger keep private keys on the device, and Solflare lists Ledger and Keystone among offline key-storage options. A Solana-compatible hardware wallet can improve future signing custody, but it does not revoke an existing delegate and cannot cleanse a phrase that has already leaked. Confirm current Solana support and device availability before choosing a model.

Best Value
Sale
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display | 85W Max PD, 1 Powered USB-C 5Gbps & 2 Powered USB-A 3.0 5Gbps Data Ports, for MacBook Pro, MacBook Air, Dell and More (Black)
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.

Common situations and the correct response

Situation Correct action What it will not do
An unknown app remains connected Disconnect it from the wallet’s connected-app controls It will not clear a token-account delegate
An unwanted ordinary delegate is listed Revoke that delegate through the wallet route or CLI It will not disconnect the app or change mint authorities
A transfer already occurred Secure remaining assets and investigate the transaction Revocation cannot reverse the transfer
The recovery phrase may be exposed Create a fresh wallet on a secure device and move trusted assets Revocation cannot make the old key trustworthy
The token uses Token-2022 PermanentDelegate Identify the mint-level authority and assess the asset’s authority model Account-level Revoke cannot remove it

Troubleshooting and verification

The wallet still shows the app after revocation

Revocation and connection status are independent. Use the connected-app controls to disconnect the app; do not submit another token revocation merely because the app remains listed.

The approval disappears but the wallet balance changed

Revocation prevents the previous delegate from using that token-account permission going forward. It cannot restore tokens already transferred or burned. Preserve the transaction details and focus on securing assets that remain.

You cannot revoke the listed authority

Check whether the item is a Token-2022 PermanentDelegate or another mint authority rather than an ordinary token-account delegate. The owner of an individual token account cannot remove a PermanentDelegate.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The interface does not match published instructions

Wallet help pages and third-party tools can change. Confirm the current domain, use the wallet’s present security or approval controls, and inspect the exact transaction instruction before signing. If the account or delegate cannot be identified, do not guess.

Practical decision checklist

  • Only an ordinary delegate is unwanted: revoke the delegate on the affected token account.
  • An unfamiliar app is connected: disconnect it separately.
  • The signing key may be exposed: create a fresh wallet and move trusted remaining assets; do not rely on revocation alone.
  • The asset uses Token-2022: check for a mint-level PermanentDelegate before assuming account-level revocation is sufficient.
  • A transaction already drained funds: treat revocation as forward-looking protection and secure what remains.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.