Token safety
How to Update Solana Token Metadata & Make It Immutable
Change your Solana token's name, symbol, or logo, then lock the metadata forever by revoking update authority. Here is how metadata works, how to edit it, and when to make it immutable.
A token’s name, symbol, and logo aren’t set in stone at creation — as long as you hold the update authority, you can change them. That’s useful when you need to fix a typo or refresh a logo, and it’s a risk buyers watch, because the same power lets a project quietly rebrand a token into something else after people have bought it. This guide covers both sides: how to update your metadata cleanly, and how to lock it permanently when you want to prove it can’t change.
What token metadata is
On Solana, a token’s human-readable details live in a separate metadata account, created through the Metaplex Token Metadata standard — distinct from the mint account that holds supply and authorities. The metadata stores the name and symbol on-chain directly, plus a uri pointing to a JSON file that carries the logo image, description, and any social links.
Two things follow from that structure:
- Editing metadata means updating that account — and only the holder of its update authority can do it.
- The logo lives behind a URL. If that URL ever breaks, the image breaks — which matters a lot once you make the metadata immutable, because you won’t be able to fix it.
How to update your token’s metadata
Updating is a single signed transaction. A metadata tool uploads any new image and JSON, then writes the new values into the on-chain account.
- Connect the wallet that holds update authority. Only that wallet can edit; the tool detects what you’re allowed to change.
- Enter the token’s mint address and load its current metadata.
- Change what you need — name, symbol, description, socials, or a new logo. Upload a fresh image if you’re replacing the logo.
- Review and sign. The change settles on-chain in one transaction, with the cost itemized first.
Why the change might not show up immediately
The on-chain update is instant, but what you see depends on caching, and this confuses people constantly. Aggregators like DexScreener, Birdeye, and Jupiter typically refresh within minutes. Wallets and explorers — Phantom, Solflare, Solscan — cache metadata and can take anywhere from minutes to hours to show the new name or logo. Nothing’s broken; the different services just refresh on their own schedules. Update, then give the caches time before assuming it didn’t work.
Making metadata immutable — the trust decision
Revoking the update authority locks the metadata permanently. After that, the name, symbol, and logo can never be changed — by you or anyone. This is a real trust signal, and it belongs on the same list buyers check alongside revoked mint and freeze authority: an active update authority means the token could be rebranded after they buy, so locked metadata removes that risk entirely.
But it’s a genuine trade-off, not a free win:
- The upside: buyers can verify the token can’t be quietly turned into something else. Immutable metadata is a struck guarantee.
- The cost: you lose the ability to fix anything — a typo in the name, a wrong symbol, a logo you want to improve, or a broken image URL. It’s permanent.
Lock the metadata only after it’s exactly right. The most common regret isn’t keeping update authority too long — it’s revoking it with a typo still in the name.
Get it right before you lock it
A short checklist before you revoke update authority:
- Name and symbol are spelled correctly and final.
- The logo is the version you want to live with — and hosted somewhere permanent (a durable storage URL, not a link that can expire).
- Description and socials are current.
When all of that is set, revoke the update authority from the authorities bench or the metadata tool. Because it’s irreversible, the action arms and asks for a deliberate confirmation first.
Prove it on the certificate
Once metadata is locked, publish a token certificate — the “metadata locked” guarantee shows as a struck hallmark, read live from the chain. That turns “we won’t rebrand” into something buyers can verify in seconds, sitting alongside supply-fixed and unfreezable. A locked token that nobody can see is locked is doing half the job.
Whether you’re fixing a logo or freezing a finished token forever, the metadata tool handles both in one signed, non-custodial transaction — with the cost, and the permanence when you’re revoking, spelled out before you approve.
Frequently asked questions
Can you change a Solana token's name or logo after it is created?
Yes, as long as you hold the update authority for the token. You can change the name, symbol, logo, description, and social links by updating the on-chain metadata. Only the wallet that holds update authority can make these changes — if it has been revoked, the metadata is locked and nothing can be edited.
What does making token metadata immutable mean?
It means revoking the update authority so the name, symbol, and logo can never be changed again — by you or anyone. Once revoked it is permanent: the metadata is frozen on-chain forever. Immutable metadata is a trust signal because it guarantees a token cannot be quietly rebranded into something else after people buy it.
How long does a metadata change take to show up?
The on-chain change is instant, but where you see it depends on caching. Aggregators like DexScreener, Birdeye, and Jupiter usually refresh within minutes. Wallets and explorers such as Phantom and Solscan cache metadata and can take longer — minutes to hours — to display the new name or logo.
Should I make my token metadata immutable?
It is a trade-off. Locking metadata proves the token can never be rebranded, which buyers value, but it also means you can never fix a typo, update a logo, or refresh a broken image link. Get the metadata exactly right first — correct name, symbol, and a permanent logo URL — then revoke update authority once you are certain.
Is update authority the same as mint or freeze authority?
No. Update authority controls the token's metadata — its name, symbol, and logo. Mint authority controls supply, and freeze authority controls whether accounts can be frozen. They are three separate authorities, revoked independently, and locking metadata does not affect supply or freezing.