Solana Token-2022 Authorities Explained: Mint, Freeze and More
When you create a Token-2022 token, several different authorities can control different parts of the token system. Understanding these roles is important because an authority can determine who can mint tokens, freeze accounts, change settings, or perform extension-specific actions. Solana documents separate authority roles for mints and token accounts, along with additional authorities introduced by Token-2022 extensions.
What Is a Token Authority?
An authority is an account authorized to perform a specific operation.
A Token-2022 mint can have a mint authority and a freeze authority. A token account has an owner and can optionally have a close authority. Token-2022 extensions can introduce additional authority types.
These roles are separate, so controlling one does not automatically mean controlling everything.
Mint Authority
The mint authority can create additional units of a token.
For example, if a mint has a supply of 1 million tokens and the mint authority remains active, that authority can authorize additional minting subject to the token program’s rules.
You can change the mint authority with the CLI:
spl-token authorize <MINT_ADDRESS> mint <NEW_AUTHORITY>
You can also permanently remove the mint authority:
spl-token authorize <MINT_ADDRESS> mint — disable
Solana’s CLI documentation states that disabling an authority is permanent when no other program mechanism can restore it. Removing mint authority therefore prevents future minting through that authority and can make the supply fixed.
Freeze Authority
The freeze authority controls whether token accounts can be frozen or thawed.
A frozen token account cannot perform certain token operations until it is thawed.
The CLI provides:
spl-token freeze <TOKEN_ACCOUNT_ADDRESS>
and:
spl-token thaw <TOKEN_ACCOUNT_ADDRESS>
These operations use the mint’s freeze authority.
A token can be created without an active freeze authority. This is separate from mint authority.
Token Account Owner
The token account owner controls operations associated with that specific token account.
For example, the owner can authorize supported transfers and delegates. Token accounts can also have a separate close authority.
This distinction matters because the wallet that created or funded a token account does not necessarily represent every authority stored within the account.
Close Authority
A token account may have a close authority that can authorize closing the account when the program’s requirements are satisfied.
Get SatoshiBro’s stories in your inbox
Join Medium for free to get updates from this writer.
The close authority is different from the mint authority and token-account owner. Solana’s SetAuthority instruction can update supported authority roles on mints and token accounts.
Token-2022 Extension Authorities
Token-2022 can introduce additional authority types.
For example, the PermanentDelegate extension creates a mint-level delegate capable of authorizing transfers and burns for token accounts associated with that mint.
Other extensions can have their own authority controls, so developers should inspect the documentation for every extension used.
Changing or Removing Authorities
The general concept is:
Current authority → SetAuthority → New authority or None
Setting an authority to None permanently removes that role under the Token Program’s authority model.
Before changing an authority, verify the mint address, current signer, intended replacement address, and consequences of disabling the role.
Practical Security Checklist
Before launching a Token-2022 token, check:
- Who controls mint authority?
- Is freeze authority required?
- Who owns important token accounts?
- Who can close accounts?
- Which extensions have separate authorities?
- Should any authority be permanently disabled?
- Are authority keys stored securely?
Final Thoughts
Token-2022 authority management is about separating responsibilities.
Mint authority controls minting. Freeze authority controls freezing. Token-account ownership controls account-level operations. Close authority handles supported account closure, while Token-2022 extensions can introduce additional authority roles.
Understanding these distinctions helps builders configure tokens before handing them to users.
FAQ
Can mint authority be changed?
Yes. The SetAuthority mechanism can assign a new authority or remove the existing one.
Does freeze authority control minting?
No. Mint and freeze authority are separate roles.
Can authorities be permanently removed?
Yes. Setting a supported authority to None removes that authority permanently.
Does Token-2022 add new authority types?
Yes. Some extensions introduce their own authority roles.
