Mara logo

Token Gating

Granting access to content, features or spaces based on what a connected wallet holds, rather than on an account.

Industry & Domain

Token gating checks a wallet for a specific token or NFT and unlocks something if it is there. It replaces the account-and-subscription model with one where access is transferable — the holder can sell the token and the access moves with it, which is genuinely new and is the main reason to use it at all.

The design problems are ownership timing and the failure message. Holdings change between checks, so the product must decide whether access is verified once per session, continuously, or at a snapshot — and say which. And when access is denied, “not authorised” is useless: the user needs to know which token, on which network, in which wallet, and what to do about it. Most gated experiences fail here rather than at the check itself.

In practice

A community platform gated its forum on an NFT but checked only the first connected address. Members holding the NFT in a hardware wallet while browsing from a hot wallet were locked out and told “access denied”. Supporting multiple linked addresses and naming the required token in the denial message removed the largest category of support requests.

Where teams get it wrong

  • Denial messages that do not name the required token, network or wallet.
  • Checking one address when users routinely hold assets across several.
  • No stated policy on when holdings are re-verified.
  • Gating on a network the user is not connected to, with no prompt to switch.
  • Using it where an ordinary account would serve, which adds a wallet requirement for no benefit.

Learn more

You may ask

Frequently Asked Questions

What is token gating?

Controlling access to content or features by checking whether a connected wallet holds a specific token or NFT, instead of checking an account or subscription.

What is the main UX problem with token gating?

The denial state. Users are frequently locked out for fixable reasons — wrong wallet connected, wrong network, asset in a different address — and a generic “access denied” gives them nothing to act on.

Related terms

All terms

Defined by Mara Last reviewed .

Let's talk about your product.

Happy to look at what you're building and say where design would move the needle.

Contact Us