---
title: Macaroons
slug: macaroons
docTags: 
createdAt: 2024-06-12T15:09:15.523Z
---

## Understanding Macaroons

Macaroons are flexible, decentralized authorization credentials used for fine-grained access control. Unlike traditional tokens, macaroons include embedded caveats that specify conditions under which they are valid. This allows for:

- **Detailed Permissions**
- Macaroons can define precise access rights, such as time limits or specific resource access.
- **Delegation and Attenuation**
- They support creating new macaroons with restricted permissions from an existing one, ideal for safely delegating access.
- **Cryptographic Security**
- Macaroons are signed and cryptographically secure, ensuring they can't be tampered with.

In **LND** (Lightning Network Daemon), macaroons manage permissions for accessing node services, providing secure and granular control over actions like creating invoices and making payments.

**Learn more about macaroons in LND:**
[https://docs.lightning.engineering/lightning-network-tools/lnd/macaroons](https://docs.lightning.engineering/lightning-network-tools/lnd/macaroons)

## Your Voltage Node Macaroons

**You can find your pregenerated macaroons in your Voltage dashboard on the 'Macaroon Bakery' page:**

![macaroon bakery](https://api.archbee.com/api/optimize/CGGF0VLgJQypTJbZ1FbQy/amqehXI_0EOw3Y5dDepw7_image.png "macaroon bakery")

## Generating and Revoking Macaroons with LNCLI

Voltage surfaces macaroons via your node's dashboard but if you want more fine grained control you can access your node's full rpc interface through ([LNCLI (Self Host)](docId:_KBYUaUC4HsHWNpDB_4WN)) and generate or revoke macaroons.&#x20;
*See how in the two documents below:*

[Generate Macaroons with lncli](docId\:NYl5SY770RBKX1-itJ5vf)

[Revoke macaroons with lncli](docId:5Y1pewxX0TXy_bsjA6Cno)
