Revoke token approvals and manage allowances
Quick summary
This page explains how to revoke token approvals and manage token allowances on a mobile software wallet. If you've ever used a DeFi dApp to swap, stake, or farm, you likely authorized a contract to spend your tokens. That authorization is an on-chain allowance. And that allowance stays active until you change or revoke it. This guide covers what allowances do, how to find them on mobile (including WalletConnect), how to revoke unlimited token allowance, and practical security tips.
Why revoke approvals? What can go wrong
Why care about a single approval transaction? Because approvals give a smart contract permission to move tokens from your address via transferFrom. If a contract is later compromised, or you connected to a malicious dApp, an existing allowance can be used to drain tokens. Simple as that.
Short list of risks:
- Unlimited allowances mean the contract can move any amount. Scary? Yes. (And avoid giving unlimited by default when possible.)
- Phishing dApps or malicious contracts impersonating a legit protocol can trick you into approving a harmful address.
- Old approvals you forgot about are latent risk.
If you're wondering how to revoke approvals trust wallet users regularly ask — this guide shows mobile-friendly ways to do it safely.
How token approvals work (short technical primer)
Most tokens follow the ERC-20 pattern: you call approve(spender, amount) which sets allowance[owner][spender] = amount. A spender can call transferFrom(owner, recipient, amount) up to the allowance.
Unlimited allowance is usually just the maximum uint256 value written into that allowance slot. You'll see huge numbers or the label "Unlimited" in UI tools. To remove permission you either set the allowance to zero or call a revoke function offered by an approvals manager — that issues an on-chain transaction that clears the allowance.
How to find your approvals on mobile — three methods
There are three practical ways to review and manage token allowance on a phone.
Method A: In-app dApp browser (if available)
Many mobile wallets include a built-in dApp browser that lets you open an approvals manager site inside the app (so the dApp can connect directly). If your wallet's dApp browser is enabled, this is convenient and keeps everything on the phone. See troubleshooting for enabling the dApp browser on iOS or Android: enable-dapp-browser-iphone, enable-dapp-browser-android.
(Image placeholder)
Method B: WalletConnect + approvals manager (recommended on mobile)
WalletConnect lets you open an approvals manager site in your phone browser and connect the mobile wallet to that site. That's the most user-friendly approach on phones because it avoids installing desktop extensions. It also works with multiple chains if the approvals manager supports them. I use this flow most of the time.
More on connecting: WalletConnect guide.
Method C: Block explorer / token approval checker (desktop or mobile)
Block explorers often offer a token approval checker. On a desktop this is straightforward, but on mobile you can still use the explorer and connect with WalletConnect. Use this method if you want the raw on-chain detail (contract addresses, transaction ids) before revoking.
Step-by-step: Revoke approvals using WalletConnect (mobile friendly)
This is the common path for "how to revoke token approvals" when you only have a phone.
- Open your wallet app. Make sure you have access to the address that holds the tokens.
- Open a browser (or the in-app dApp browser) and navigate to a trusted approvals manager or token-approvals checker.
- Choose Connect → WalletConnect. The site will show a QR code or deep link. Tap the WalletConnect option.
- Approve the connection inside the wallet app. (You are granting the approvals manager read-only access to list allowances.)
- Review the "Spenders" list. Look for unusually large allowances or unknown contract addresses. Unlimited allowances will be flagged or show very large numbers.
- Tap "Revoke" or "Remove" next to a spender you don't recognize, then confirm the on-chain transaction inside your wallet.
- Wait for the transaction to confirm, then refresh the list. Verify the allowance is now zero or removed.
And here's a tip: when the approvals manager asks you to sign a transaction, the wallet will show the destination contract and gas fee. Read both before confirming.
Gas fees, timing, and practical tips
Revoking approvals is an on-chain transaction, so you pay gas. On mainnet that can range from low to high depending on network congestion. In my experience a revoke on an L2 or alternative EVM chain is often a few cents to a few dollars, while Ethereum mainnet can be materially higher.
Practical tips:
- If your token also exists on a cheap chain (e.g., BSC, some L2s), consider revoking there if appropriate.
- Use EIP-1559 priority fee controls in the wallet (if exposed) to speed up or slow down a revoke.
- Combine revokes with other self-managed transaction timing — avoid panic revokes during peak gas windows.
See more on gas handling: gas-fees-management.
Security checklist: what to revoke, and what to keep
- Revoke unlimited token allowance to contracts you no longer use. If you need to interact with the dApp again later, you can approve a specific amount.
- Keep allowances for smart contracts you use daily only if the convenience outweighs risk (for small token amounts).
- Confirm contract addresses by cross-referencing official docs of the dApp. (A malicious site may mimic an address.)
- Use transaction simulation or preview if your wallet provides it.
- For high-value holdings, use a hardware wallet to approve or revoke — it requires signing on the external device.
But remember: if someone gets hold of your seed phrase or private keys, revoking approvals won't stop them — they can sign transactions. So backup your seed phrase securely. See: backup & recovery and security & backup.
Comparison: mobile methods vs desktop explorers
| Method |
Pros |
Cons |
Best for |
| In-app dApp browser |
Seamless connection inside wallet |
May be hidden on some platforms |
Quick mobile fixes |
| WalletConnect + approvals manager |
Mobile-friendly, supports many approvals managers |
Requires trusting the approvals UI (read-only scope) |
Most mobile users |
| Block explorer (desktop) |
Full transaction detail, easier address validation |
Requires desktop or extension |
Deep verification and auditing |
Who this guide is for — who should look elsewhere
Who this guide is for:
- Mobile hot wallet users who interact with DeFi, swap tokens, or use staking apps.
- People who want to perform token allowance management without a desktop.
Who should look elsewhere:
- Users holding very large balances who want the highest security model should prefer a hardware wallet for signing important revokes and approvals.
- Developers who need programmatic access to allowances should use developer tools and node RPC access instead of the UI flows.
FAQ
Q: Is it safe to keep crypto in a hot wallet?
A: Hot wallets are convenient for daily use. They are appropriate for small-to-medium amounts used in DeFi. For large holdings, I believe combining a hardware wallet and cold storage is safer.
Q: How do I revoke token approvals?
A: On mobile, connect an approvals manager via WalletConnect or use the wallet's dApp browser, find the spender, and revoke (set allowance to zero). For desktop you can use a block explorer approval checker.
Q: What happens if I lose my phone?
A: Losing the device doesn't automatically give someone access. If you didn't back up your seed phrase, you could lose funds. If your seed phrase is compromised, an attacker can sign transactions from any device. Follow backup & recovery immediately.
Q: How do I revoke unlimited token allowance?
A: In an approvals manager you will usually see "Unlimited" or a max value. Click revoke or set allowance to zero. Confirm the transaction in your wallet.
Q: Can I automate approvals cleanup?
A: Some approval managers offer batch revoke (multiple on-chain transactions). These still cost gas and require careful confirmation.
Conclusion and next steps
Revoke token approvals regularly as part of token allowance management. It costs a small on-chain fee, but that cost is often worth the reduced risk. In my experience, doing a quick monthly sweep of approvals prevents surprises later.
Next actions:
Be careful, read each transaction before you sign, and check allowances often. If you want a step-by-step setup for first use, check onboarding-setup.
