How to Check and Remove Wallet Permissions on TRON (Energy Pools, Bots and dApps)
TRON lets you give another address limited rights over your wallet. Energy pools, auto-staking bots and some dApps use this so they can act for you, for example to delegate your Energy to buyers. That can be handy. But m
TRON lets you give another address limited rights over your wallet. Energy pools, auto-staking bots and some dApps use this so they can act for you, for example to delegate your Energy to buyers. That can be handy. But many people forget the permission is still there long after they stop using the service.
This guide shows how to check who can act for your account, how to remove an address, and what to look out for.
Network figures were checked on the TRON chain parameters in November 2026. Wallet screens change from time to time, so the button names may be a little different in your app.
How TRON Account Permissions Work
Every TRON account has two main kinds of permission:
- Owner permission: full control. It can do everything, including changing the permissions themselves. By default only your own key holds it.
- Active permissions: limited rights for chosen actions only, such as Delegate Resources (lend your Energy or Bandwidth) and Reclaim Resources (take it back). A service can be added here so it can do those actions, and nothing else.
Each permission has a threshold and a list of addresses with weights. If an address's weight reaches the threshold, that address can sign those actions alone.
Why People Grant Permissions
Some energy pools ask stakers to add the pool's address to an active permission. The pool can then delegate and undelegate the staker's Energy automatically. For example, the VIP pool of Tron Energy Market asks for Delegate and Undelegate permissions, according to its own website (November 2026). Bots and dApps may ask for other actions too, such as staking, voting or claiming rewards.
Granting a permission is not a scam in itself. But it does mean someone else can take actions on your wallet, so it should only be there while you actually use that service.
Step 1: Check Your Permissions
- Open TronScan and connect your wallet (for example with TronLink).
- Go to your account page and open the Permission tab (next to Transactions, Transfers and Staking). If another address holds rights on your wallet, TronScan also shows a notice under your address, such as "The current account's 'Active Permission' is authorized to 2 account(s)", with a View Account Permission link that opens the same tab.
- Stay on Current account permissions. Under Owner Permission, the Authorized To list should show only your own address (marked "Current Account").
- Under each Active Permission, check the Authorized To list and the Operation(s) it allows. Note every address that is not yours.
Warning sign: another address in your owner permission, or another address in an active permission that allows Transfer TRX or token transfers. If you did not knowingly allow that, treat it as urgent (see "If something looks wrong" below).
Step 2: Before You Remove a Pool or Bot
- Leave the service first if it has an exit option. Use the service's own "leave pool" or "stop" step, so pending rewards are paid out first.
- Check your delegations. Removing a permission does not take back Energy already delegated. Look at the Staking tab on TronScan. You can reclaim it yourself; if it was delegated with a lock period, it returns after that lock ends.
- Keep 100 TRX free. Changing account permissions costs 100 TRX, paid to the network (chain parameter UpdateAccountPermissionFee, November 2026).
Step 3: Remove the Address
- With your wallet connected, edit the active permission that holds the other address (on the Permission tab, or in your wallet app's permission / multi-signature settings).
- Delete that address (or delete the whole active permission if only that service used it).
- Make sure your own address still meets the threshold in every permission you keep. If it does not, you can lock yourself out.
- Save and sign the transaction with your owner key. The 100 TRX fee is taken.
- Refresh the page and check again: the address should be gone.
If Something Looks Wrong
- An unknown address in the owner permission can change your permissions too, and may be able to lock you out. Move funds you can still move to a new, clean wallet as soon as possible.
- Never type your seed phrase or private key into a website that offers to "fix" or "recover" permissions. Real help never needs them.
- Revoke token approvals as well. Permissions and token approvals are different things, and approvals do not show on the Permission tab. Check your TRC-20 approvals separately and revoke any you do not recognise.
How to Earn From Your Energy Without Giving Permissions
You can lend your Energy and still keep every right to your wallet. On a peer-to-peer market like TronBoost, you delegate Energy straight from your own wallet to the buyer, using the normal Stake 2.0 delegateResource action. TronBoost asks buyers and sellers for no wallet permissions, and never for a private key, a seed phrase or a token approval. Your TRX stays staked in your own wallet the whole time.
If you are comparing energy markets, we wrote an honest comparison of TEM and TronBoost for sellers.
A Quick Checklist for Any Energy Market
Before you pick a place to rent or sell Energy, check:
- Wallet access: does it ask for permissions, approvals or your seed phrase? The less, the better.
- Your share: how much of each sale do you keep, after all fees?
- Minimums: how much stake do you need to start?
- Payouts: when are you paid, and are there withdrawal limits or waiting times?
- Fees for changes: does cancelling an order or changing a price cost anything?
FAQ
Can an energy pool move my TRX if I gave it Delegate and Undelegate permissions?
If the permission lists only Delegate Resources and Reclaim Resources, it can only lend and take back your Energy or Bandwidth. They do not allow transfers. Check the exact list of actions under Operation(s) on the Permission tab, because some services ask for more.
How much does it cost to remove a permission on TRON?
Changing account permissions costs 100 TRX, paid to the network (November 2026).
Does removing a permission cancel my current delegations?
No. Delegated Energy stays with the receiver until it is reclaimed. You can reclaim it yourself on TronScan once any lock period has ended.
Do I need to give permissions to sell Energy on TronBoost?
No. On TronBoost you delegate directly from your own wallet. No permissions, no private key and no token approval are needed.
Originally published on tronboost.io.
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.