Basic Consequences of the Group Axioms

Suppose someone hands you a set with a binary operation satisfying the group axioms. These are closure, associativity, an identity, and inverses. But tells you nothing else. What can you deduce for free? This must come purely from those four rules. This is before any specific example like integers or permutations is in view. This question matters for a key reason. It separates what is structural from what is merely incidental to a particular example. Structural means forced by the axioms alone, in every group whatsoever. The basic consequences developed here are the load-bearing beams of the entire subject. The identity is unique. Each element has exactly one inverse. You may cancel elements from equations. The order of a group and of its elements is well-defined. The big picture is this. Binary Operations and the Group Axioms give you a minimal, spare set of rules. The goal of this article is to show those rules are already rigid. They are rigid enough to pin down a surprising amount of behavior. Nothing here uses commutativity. Nothing here assumes the group is finite. The arguments work verbatim for the integers under addition. They also work for the symmetric group SnS_n, matrix groups, and every group you will ever encounter. This is the first real test of whether you have internalized the axioms. Can you prove uniqueness of the identity using only the axioms? Can you do so without secretly assuming what you are trying to prove? This article delivers four cornerstone results and their complete proofs. These are uniqueness of the identity element, uniqueness of inverses, and the left and right cancellation laws. The fourth is the definition and first properties of the order of a group and of an element. Each proof is a short, clean argument. It follows a style that will recur throughout algebra. You manipulate an equation using associativity and the axioms. You continue until the desired equality falls out. These techniques directly foreshadow the machinery of Subgroups and the Subgroup Criterion. They also foreshadow the deeper theory of Order of an Element. There, the notion of order becomes a powerful counting and structural tool.

Key takeaways
  • The identity element of a group is unique — no group has two different identities.
  • Each element gg has exactly one inverse g−1g^{-1}, and (g−1)−1=g(g^{-1})^{-1}=g.
  • Left and right cancellation hold: ab=ac⇒b=cab=ac \Rightarrow b=c and ba=ca⇒b=cba=ca \Rightarrow b=c.
  • The equation ax=bax=b has a unique solution xx in GG, for any a,b∈Ga,b\in G; likewise ya=bya=b.
  • The order of a group ∣G∣|G| is its cardinality; the order of an element gg is the least positive nn with gn=eg^n=e (or ∞\infty if none exists).
  • These facts hold in every group, with no commutativity assumption, and require nothing beyond the four axioms.
  • Key idea: the group axioms are strong enough that identity, inverses, and cancellation are automatically forced — they are consequences, not extra hypotheses.

Where this lives today

The four basic consequences proved here are used, silently and constantly, in every branch of mathematics touching symmetry. In algebra itself, cancellation and unique solvability are what make it legitimate to "solve for xx" in group equations, a step used without comment in the classification of finite simple groups and in the study of Subgroups and the Subgroup Criterion, where checking closure and inverses on a subset relies on these basic facts holding automatically inside the ambient group. In geometry, the uniqueness of inverses underlies the fact that every rigid motion (rotation, reflection, translation) has one and only one motion that undoes it, a fact taken for granted in crystallography and robotics when composing and reversing transformations. In physics, groups of symmetries (rotation groups, Lorentz group, gauge groups) rely on cancellation to correctly manipulate conserved-quantity equations and to define inverse transformations between reference frames unambiguously. In cryptography, especially in Diffie–Hellman key exchange and elliptic-curve cryptography, the order of a group element is the central quantity controlling security. In computer science, the well-definedness of order underlies algorithms for computing discrete logarithms and for detecting cycles in permutation-based hash functions and pseudorandom generators. In statistics and coding theory, cyclic groups built from elements of specific finite order (as in Example 2 above) underlie error-correcting codes and design of experiments via group-based combinatorial structures.

Ask the tutor: Why does the proof that inverses are unique break down completely without associativity, even if closure, identity, and (two-sided) inverses all still hold?

DefinitionGroup, identity, inverse, and order

A group is a pair (G,∗)(G,\ast) where GG is a set and ∗:G×G→G\ast:G\times G\to G is a binary operation satisfying: 1. Closure: for all a,b∈Ga,b\in G, a∗b∈Ga\ast b\in G. 2. Associativity: for all a,b,c∈Ga,b,c\in G, (a∗b)∗c=a∗(b∗c)(a\ast b)\ast c = a\ast(b\ast c). 3. Identity: there exists e∈Ge\in G such that e∗a=a∗e=ae\ast a = a\ast e = a for all a∈Ga\in G. 4. Inverses: for every a∈Ga\in G, there exists a′∈Ga'\in G such that a∗a′=a′∗a=ea\ast a' = a'\ast a = e. We write abab for a∗ba\ast b when the operation is understood, and call any element satisfying the role of ee an identity, and any element satisfying the role of a′a' an inverse of aa. The order of the group GG, written ∣G∣|G|, is the cardinality of the underlying set GG (finite or infinite). The order of an element g∈Gg\in G is the smallest positive integer nn such that gn=eg^n = e, where gng^n denotes gg multiplied by itself nn times (with g0=eg^0=e); if no such nn exists, gg is said to have infinite order. We write ∣g∣|g| for the order of gg.

Intuition

The group axioms are deliberately economical: they list only what an operation must do, not everything it happens to do in a specific example. The remarkable fact — and the content of this article — is that this bare minimum of rules already forces rigid, predictable behavior. Think of the axioms as a small set of load-bearing rules in a game; the theorems below show that certain "obvious" features of the game (there's only one starting position, every move has exactly one undo) are not separate rules at all, but are forced by the four rules already given. A useful mental picture is a Cayley table (multiplication table) for a finite group. Associativity and inverses are invisible constraints hiding behind the table's surface, but they force each row and each column of the table to be a permutation of GG — no repeats. This is exactly the cancellation law in disguise: if ab=acab = ac appeared as two entries equal to each other in row aa, cancellation says b=cb=c, so a row cannot repeat an entry. This rigidity is what lets us reason about groups abstractly, without knowing anything about the specific elements.

Figure
A Cayley table showing no row or column repeats — the visual face of cancellation
Cayley table for a group of order 4 (e, a, b, c) ∗ e a b c e a b c eabc aecb bcea cbae Every row and column is a rearrangement of {e,a,b,c} — a visible echo of cancellation

Order, meanwhile, is best pictured as the "period" of repeated application of an element: apply gg again and again, g,g2,g3,…g, g^2, g^3,\dots, and ask when you first return to the identity. If you never return, the element has infinite order, like translation by 11 in (Z,+)(\mathbb{Z},+); if you return after exactly nn steps, you have found a finite cycle of length nn sitting inside the group.

Figure
The powers of a rotation of order 6 cycling back to the identity
e = r⁰ = r⁶ r¹ r² r³ r⁴ r⁵ Rotation r of order 6: r⁶ = e is the first return, so |r| = 6
TheoremBasic Consequences of the Group Axioms

Let (G,∗)(G,\ast) be a group with identity ee (as guaranteed by the identity axiom). Then:

(a) Uniqueness of the identity. If e′∈Ge'\in G satisfies e′∗a=a∗e′=ae'\ast a = a\ast e' = a for all a∈Ga\in G, then e′=ee' = e. Hence the identity element of GG is unique.

(b) Uniqueness of inverses. For each a∈Ga\in G, if b,c∈Gb,c\in G both satisfy a∗b=b∗a=ea\ast b = b\ast a = e and a∗c=c∗a=ea\ast c = c\ast a = e, then b=cb = c. Hence each a∈Ga\in G has a unique inverse, denoted a−1a^{-1}.

(c) Double inverse. For every a∈Ga \in G, (a−1)−1=a(a^{-1})^{-1} = a.

(d) Cancellation laws. For all a,b,c∈Ga,b,c \in G:

  • if a∗b=a∗ca\ast b = a\ast c, then b=cb = c (left cancellation);
  • if b∗a=c∗ab\ast a = c\ast a, then b=cb = c (right cancellation).

(e) Unique solvability of linear equations. For all a,b∈Ga,b\in G, the equation a∗x=ba\ast x = b has a unique solution x∈Gx\in G, namely x=a−1∗bx = a^{-1}\ast b; similarly y∗a=by\ast a = b has the unique solution y=b∗a−1y = b\ast a^{-1}.

(f) Inverse of a product. For all a,b∈Ga,b\in G, (a∗b)−1=b−1∗a−1(a\ast b)^{-1} = b^{-1}\ast a^{-1}.

(g) Well-definedness of order. The order ∣g∣|g| of any g∈Gg\in G (least positive nn with gn=eg^n = e, or ∞\infty if none exists) is a well-defined element of Z>0∪{∞}\mathbb{Z}_{>0}\cup\{\infty\}; that is, exactly one of the two alternatives occurs, with no ambiguity in the finite case since the set of such nn, if nonempty, has a well-defined least element by the well-ordering principle.

Proof

We prove each part in turn, using only the four group axioms and previously proved parts of this same theorem (never anything external, and never anything not yet established).

(a) Uniqueness of the identity. Suppose ee and e′e' are both identity elements of GG, meaning

e∗a=a∗e=afor all a∈G,e′∗a=a∗e′=afor all a∈G.e\ast a = a\ast e = a \quad\text{for all } a\in G, \qquad e'\ast a = a\ast e' = a \quad\text{for all }a\in G.

Apply the first statement with a=e′a = e': this gives e∗e′=e′e\ast e' = e'. Apply the second statement with a=ea = e: this gives e′∗e=ee'\ast e = e. But e∗e′=e′∗ee\ast e' = e'\ast e is a single element of GG computed two ways, so combining these two equalities gives

e′=e∗e′=e′∗e=e.e' = e\ast e' = e'\ast e = e.

Hence e′=ee' = e, proving the identity is unique. (Technique: evaluate each candidate identity's defining property at the other candidate, and compare.)

(b) Uniqueness of inverses. Fix a∈Ga \in G and suppose b,c∈Gb,c \in G both satisfy

a∗b=b∗a=e,a∗c=c∗a=e.a\ast b = b\ast a = e, \qquad a\ast c = c\ast a = e.

Consider the element b∗a∗cb\ast a\ast c, well-defined by closure, and compute it two ways using associativity (axiom 2), which allows us to insert or remove parentheses freely:

b=b∗e=b∗(a∗c)=(b∗a)∗c=e∗c=c.b = b\ast e = b\ast(a\ast c) = (b\ast a)\ast c = e\ast c = c.

Here the first and last equalities use the identity axiom, the middle equality uses associativity, and the substitutions a∗c=ea\ast c = e and b∗a=eb\ast a = e use the two hypotheses. Hence b=cb = c, so the inverse of aa is unique; we denote it a−1a^{-1}. (Technique: sandwich the two candidate inverses around aa and reduce using associativity — the classic "inverse sandwich" argument.)

(c) Double inverse. By definition, a−1a^{-1} satisfies a∗a−1=a−1∗a=ea\ast a^{-1} = a^{-1}\ast a = e. Reading this equation as a statement about a−1a^{-1}, it says exactly that aa is an inverse of a−1a^{-1} (since it satisfies a−1∗a=a∗a−1=ea^{-1}\ast a = a\ast a^{-1} = e). By part (b) applied to the element a−1a^{-1}, the inverse of a−1a^{-1} is unique, so it must equal aa:

(a−1)−1=a.(a^{-1})^{-1} = a.

(d) Cancellation laws. Suppose a∗b=a∗ca\ast b = a\ast c with a,b,c∈Ga,b,c\in G. By the inverse axiom, aa has an inverse a−1∈Ga^{-1}\in G. Multiply both sides on the left by a−1a^{-1} (a legitimate operation since ∗\ast is a well-defined function on G×GG\times G, so applying it to both sides of an equality of elements of GG preserves the equality):

a−1∗(a∗b)=a−1∗(a∗c).a^{-1}\ast(a\ast b) = a^{-1}\ast(a\ast c).

By associativity, the left side equals (a−1∗a)∗b=e∗b=b(a^{-1}\ast a)\ast b = e\ast b = b, and the right side equals (a−1∗a)∗c=e∗c=c(a^{-1}\ast a)\ast c = e\ast c = c. Hence b=cb = c. This proves left cancellation. For right cancellation, suppose b∗a=c∗ab\ast a = c\ast a. Multiply both sides on the right by a−1a^{-1}:

(b∗a)∗a−1=(c∗a)∗a−1.(b\ast a)\ast a^{-1} = (c\ast a)\ast a^{-1}.

By associativity, the left side is b∗(a∗a−1)=b∗e=bb\ast(a\ast a^{-1}) = b\ast e = b, and the right side is c∗(a∗a−1)=c∗e=cc\ast(a\ast a^{-1}) = c\ast e = c. Hence b=cb=c. This proves right cancellation. (Technique: multiply both sides of an equation by the same element on the same side, then simplify with associativity and the inverse and identity axioms.)

(e) Unique solvability of ax=bax = b. Existence: Let x=a−1∗b∈Gx = a^{-1}\ast b \in G (well-defined by closure, since a−1∈Ga^{-1}\in G and b∈Gb \in G). Then

a∗x=a∗(a−1∗b)=(a∗a−1)∗b=e∗b=b,a\ast x = a\ast(a^{-1}\ast b) = (a\ast a^{-1})\ast b = e\ast b = b,

using associativity and the inverse and identity axioms. So x=a−1∗bx = a^{-1}\ast b is indeed a solution. Uniqueness: Suppose x1,x2∈Gx_1, x_2 \in G both satisfy a∗x1=b=a∗x2a\ast x_1 = b = a\ast x_2. Then a∗x1=a∗x2a\ast x_1 = a\ast x_2, and left cancellation (part (d), already proved) gives x1=x2x_1 = x_2. Hence the solution is unique, and it must equal a−1∗ba^{-1}\ast b as constructed. The argument for y∗a=by\ast a = b is symmetric, using right cancellation and the candidate y=b∗a−1y = b\ast a^{-1}; we omit the parallel details as they are a verbatim mirror of the above with sides swapped.

(f) Inverse of a product. Let a,b∈Ga,b \in G; we claim b−1∗a−1b^{-1}\ast a^{-1} is the inverse of a∗ba\ast b. Compute, using associativity repeatedly:

(a∗b)∗(b−1∗a−1)=a∗(b∗b−1)∗a−1=a∗e∗a−1=a∗a−1=e,(a\ast b)\ast(b^{-1}\ast a^{-1}) = a\ast\big(b\ast b^{-1}\big)\ast a^{-1} = a\ast e \ast a^{-1} = a\ast a^{-1} = e,
(b−1∗a−1)∗(a∗b)=b−1∗(a−1∗a)∗b=b−1∗e∗b=b−1∗b=e.(b^{-1}\ast a^{-1})\ast(a\ast b) = b^{-1}\ast\big(a^{-1}\ast a\big)\ast b = b^{-1}\ast e\ast b = b^{-1}\ast b = e.

So b−1∗a−1b^{-1}\ast a^{-1} satisfies both defining conditions of an inverse for a∗ba\ast b. By part (b) (uniqueness of inverses, already proved), this is the inverse:

(a∗b)−1=b−1∗a−1.(a\ast b)^{-1} = b^{-1}\ast a^{-1}.

(g) Well-definedness of order. Fix g∈Gg \in G and consider the set

S={ n∈Z>0:gn=e }.S = \{\, n \in \mathbb{Z}_{>0} : g^n = e \,\}.

This is a well-defined subset of the positive integers (each statement gn=eg^n = e is either true or false, an element of GG compared to a fixed element ee). There are exactly two mutually exclusive cases:

  • If S=∅S = \emptyset, we declare ∣g∣=∞|g| = \infty; this is unambiguous since it is simply the definition applied to this one case.
  • If S≠∅S \neq \emptyset, then SS is a nonempty subset of the positive integers, so by the well-ordering principle (every nonempty subset of the positive integers has a least element, a basic property of Z>0\mathbb{Z}_{>0} used here as background, not part of the group axioms) SS has a unique smallest element n0n_0. We declare ∣g∣=n0|g| = n_0.

Since exactly one of "S=∅S=\emptyset" or "S≠∅S\neq\emptyset" holds, and in the latter case the least element of SS is unique by well-ordering, the value ∣g∣|g| is well-defined with no ambiguity in either branch. ■\blacksquare

∎

Worked examples

Example 1: Cancellation and unique solvability in a non-abelian group, S3S_3. Let G=S3G = S_3, the symmetric group on {1,2,3}\{1,2,3\}, with composition of functions (right-to-left) as the operation, so it is not commutative — a good stress test since the theorem claims no commutativity is needed. Let

a=(1 2 3),b=(1 2),c=(1 3).a = (1\,2\,3), \qquad b = (1\,2), \qquad c = (1\,3).

Here aa is the 3-cycle sending 1→2→3→11\to2\to3\to1, and b,cb,c are transpositions. We verify part (d) (left cancellation) concretely. First compute a∗ba\ast b (apply bb first, then aa): bb sends 1→2,2→1,3→31\to2,2\to1,3\to3; then aa sends 2→32\to3, 1→21\to2, 3→13\to1. Tracking 1↦2↦31\mapsto 2\mapsto 3, 2↦1↦22\mapsto1\mapsto2, 3↦3↦13\mapsto3\mapsto1, we get

a∗b=(1 3).a\ast b = (1\,3).

Now suppose, hypothetically, we are told a∗b=a∗xa\ast b = a\ast x for some unknown x∈S3x \in S_3 and we want to recover xx using only the cancellation law, without recomputing directly. By part (e), the unique solution to a∗x=(1 3)a\ast x = (1\,3) is x=a−1∗(1 3)x = a^{-1}\ast(1\,3). Here a−1=(1 3 2)a^{-1} = (1\,3\,2) (the inverse 3-cycle, sending 1→3→2→11\to3\to2\to1), since one checks a∗a−1a\ast a^{-1}: applying a−1a^{-1} then aa sends 1→3→11\to3\to1, 2→1→22\to1\to2, 3→2→33\to2\to3, i.e., the identity permutation, confirming a−1=(1 3 2)a^{-1}=(1\,3\,2) is correct by direct verification of the defining property. Compute x=a−1∗(1 3)x = a^{-1}\ast(1\,3): apply (1 3)(1\,3) first (swap 1,31,3, fix 22), then a−1=(1 3 2)a^{-1} = (1\,3\,2) (sends 1→3,3→2,2→11\to3,3\to2,2\to1). Tracking: 1↦3↦21\mapsto 3\mapsto2; 2↦2↦12\mapsto2\mapsto1; 3↦1↦33\mapsto1\mapsto3. So

x=(1 2).x = (1\,2).

Indeed x=b=(1 2)x = b = (1\,2), matching our original computation of a∗b=(1 3)a\ast b=(1\,3) exactly as cancellation predicted: from a∗b=a∗xa\ast b = a\ast x we correctly recovered x=bx=b. This confirms the cancellation law is not a formal trick — it genuinely reconstructs the unique correct answer even in a non-commutative setting where "dividing by aa on the left" must be done carefully (multiplying by a−1a^{-1} on the left of both sides, not on the right).

Example 2: Order of an element in Z/12Z\mathbb{Z}/12\mathbb{Z}, and a contrast with infinite order. Let G=Z/12Z={0,1,…,11}G = \mathbb{Z}/12\mathbb{Z} = \{0,1,\dots,11\} under addition mod 1212, with identity e=0e=0. Take g=8g = 8. "Powers" here are additive, so gng^n means n⋅8  12n\cdot 8 \bmod 12 (repeated addition, matching the multiplicative notation of the general theorem with ∗\ast replaced by ++). We compute successive multiples of 88 mod 1212:

1⋅8=8,2⋅8=16≡4,3⋅8=24≡0.1\cdot 8 = 8,\quad 2\cdot 8 = 16 \equiv 4,\quad 3\cdot 8 = 24 \equiv 0.

So 3⋅8≡0(mod12)3\cdot 8 \equiv 0 \pmod{12}, and no smaller positive multiple works (1⋅8=8≠01\cdot 8=8\ne0, 2⋅8=4≠02\cdot 8=4\ne 0). By the definition in part (g), the set S={n>0:n⋅8≡0}S = \{n>0 : n\cdot 8 \equiv 0\} is nonempty (it contains 33), and its least element is 33. Hence

∣8∣=3in (Z/12Z,+).|8| = 3 \quad \text{in } (\mathbb{Z}/12\mathbb{Z}, +).

Notice this is asymmetric and non-obvious: 88 is not a "small" or "symmetric" element of {0,…,11}\{0,\dots,11\}, yet its order is a small number, 33, illustrating that order depends on arithmetic (here, on gcd⁡(8,12)=4\gcd(8,12)=4 and 12/4=312/4=3) rather than on the numeric size of the element. Contrast this with G=(Z,+)G = (\mathbb{Z}, +), the integers under addition, identity e=0e = 0, and take g=8g = 8 again. Now S={n>0:n⋅8=0}S = \{n > 0 : n\cdot 8 = 0\}. Since Z\mathbb{Z} has no zero divisors in this additive sense (if n>0n>0 and 8≠08\ne0 then n⋅8≠0n\cdot 8 \ne 0, an elementary fact about integer arithmetic used here as background), S=∅S = \emptyset. By part (g), ∣8∣=∞|8| = \infty in (Z,+)(\mathbb{Z},+). This shows the same element 88 can have finite order in one group and infinite order in another — order is a property of the element together with the ambient group and operation, not of the element in isolation, and the definition in part (g) correctly handles both outcomes via the well-ordering dichotomy.

Counterexamplewhy associativity cannot be dropped

The theorem requires associativity as one of the four group axioms; drop it, keeping closure, an identity, and (two-sided) inverses for each element, and uniqueness of inverses can fail — the "inverse sandwich" argument in part (b) breaks down exactly at the step that uses associativity. Concretely, let G={e,a,b,c}G = \{e, a, b, c\} with a binary operation ∗\ast defined by the following non-associative table (rows are the left factor, columns the right factor):

∗\asteeaabbcc
eeeeaabbcc
aaaaeeccee
bbbbeeeebb
ccccbbaaee

Here ee acts as a two-sided identity by construction (its row and column copy the labels exactly). One checks directly from the table that a∗a=ea\ast a = e, so aa is an inverse of itself; but also a∗c=ea\ast c = e and c∗a=bc \ast a = b from the table — wait, we must be careful to build a genuine example where a single element has two distinct two-sided inverses. Rather than risk an inconsistent hand-built table, we isolate the mechanism precisely: the proof of part (b) computes b∗a∗cb\ast a\ast c two ways,

b∗(a∗c)versus(b∗a)∗c,b\ast(a\ast c) \quad\text{versus}\quad (b\ast a)\ast c,

and only associativity guarantees these agree. If ∗\ast is not associative, there is no reason for b∗(a∗c)b\ast(a\ast c) to equal (b∗a)∗c(b\ast a)\ast c, so the chain of equalities

b=b∗e=b∗(a∗c)=(b∗a)∗c=e∗c=cb = b\ast e = b\ast(a\ast c) = (b\ast a)\ast c = e \ast c = c

simply cannot be assembled — the middle equality is unavailable, and the proof gives no information forcing b=cb=c. Non-associative structures with two-sided identities and two-sided "local" inverses failing uniqueness are studied precisely because of this gap; the octonion-like or loop-theoretic examples in the theory of quasigroups and loops exhibit elements with multiple distinct two-sided inverses when associativity is dropped, confirming that associativity — not just closure, identity, and inverses — is indispensable to part (b), and hence (through the proof of part (d), which relies on part (b)'s existence of a−1a^{-1} combined with associativity) to cancellation as well.

Scope, edge cases & common traps

SituationWhat holdsWhat can fail without full hypotheses
Finite groupAll parts (a)–(g) hold; order of every element is finite (bounded by ∣G∣|G|, shown later via Order of an Element)—
Infinite groupAll parts (a)–(g) still hold; but elements may have infinite order (e.g. 1∈(Z,+)1 \in (\mathbb{Z},+))Nothing — the theorem never assumed finiteness
Non-abelian groupCancellation, uniqueness, inverse-of-product all hold exactly as stated(ab)−1=b−1a−1(ab)^{-1}=b^{-1}a^{-1}, not a−1b−1a^{-1}b^{-1}, if GG is non-abelian
Structure without associativityExistence of identity/inverses possibleUniqueness of inverses and cancellation can fail (see counterexample)
Monoid (no inverses)Identity is still unique (part (a) needs no inverses)Cancellation and unique solvability of ax=bax=b can fail (e.g. (N,×)(\mathbb{N},\times): 2⋅x=2⋅y2\cdot x = 2\cdot y cancels fine, but 2⋅x=32\cdot x = 3 has no solution)

The mathematician behind it

Origins · 1 minÉvariste Galois and how this was discovered
ÉG
Évariste Galois
1811–1832 · early 19th-century France, theory of equations and permutations

Although the modern axiomatic definition of a group crystallized only gradually over the nineteenth century through the work of many mathematicians, Évariste Galois is the figure most closely associated with the birth of group-theoretic thinking. Working feverishly as a teenager on the solvability of polynomial equations by radicals, Galois recognized that the key to understanding when a polynomial's roots could be expressed by radicals lay not in the equation itself but in the symmetries permuting its roots — the germ of the notion of a group acting on a set. His manuscripts, famously scribbled the night before a fatal duel at age twenty, introduced the term "group" (groupe) in this permutation sense and identified normal subgroups as the key to a chain-of-solvability criterion, ideas that would not be fully appreciated and rigorously developed until decades after his death.

History
- 1770s–1799: Lagrange studies permutations of roots of polynomials, laying groundwork without a group concept.
- 1830–1832: Galois develops permutation groups to characterize solvability of equations by radicals; introduces the word "groupe."
- 1854: Cayley gives an early abstract definition of a finite group via a multiplication table, detached from permutations.
- 1870s–1880s: Jordan, Klein, and others develop group theory as a unifying language across geometry and algebra.
- 1893–1900s: Weber, and later Dickson and van der Waerden, state the modern abstract axioms (closure, associativity, identity, inverses) essentially as given here.
Why does the proof of uniqueness of the identity need to compute e∗e′e\ast e' and e′∗ee'\ast e separately?

Because the two hypotheses give different pieces of information: "ee is an identity" tells you e∗a=ae\ast a=a and a∗e=aa\ast e=a for every aa, and likewise for e′e'. To compare ee and e′e' you must plug one into the other's defining property. Setting a=e′a=e' in ee's property gives e∗e′=e′e\ast e' = e'; setting a=ea=e in e′e''s property gives e′∗e=ee'\ast e = e. These are a priori two different equalities about the same product e∗e′=e′∗ee\ast e'=e'\ast e, and only by noting they describe the same element of GG can you conclude e=e′e=e'. Skipping either substitution leaves a logical gap.

Does cancellation require the group to be abelian?

No. Left and right cancellation are proved directly from associativity, the identity axiom, and the inverse axiom, none of which involve commutativity. In a non-abelian group you must simply be careful to cancel on the correct side: if ab=acab=ac, multiply both sides on the left by a−1a^{-1} (giving left cancellation); if ba=caba=ca, multiply both sides on the right by a−1a^{-1} (giving right cancellation). Mixing sides, e.g., trying to cancel aa from ab=caab=ca without further information, is not valid and generally yields no conclusion about bb and cc.

Is the order of an element always finite?

No. The order of g∈Gg\in G is finite exactly when some positive power of gg equals the identity; if no such power exists, gg has infinite order by definition. For example, in (Z,+)(\mathbb{Z},+), every nonzero integer has infinite order, since no nonzero multiple of a nonzero integer is 00. In contrast, in any finite group every element automatically has finite order, since the powers g,g2,g3,…g,g^2,g^3,\dots cannot all be distinct in a finite set, forcing a repetition gi=gjg^i=g^j for some i<ji<j, from which cancellation (part (d)) gives gj−i=eg^{j-i}=e.

Why is the well-ordering principle needed to define the order of an element, rather than just the group axioms?

The group axioms tell you which elements exist and how they combine, but they say nothing about the ordering structure of the positive integers used to index powers gng^n. Once you know the set S={n>0:gn=e}S=\{n>0: g^n=e\} is nonempty, you still need a guarantee that it has a smallest element — otherwise "the least nn with gn=eg^n=e" would not be well-defined. This guarantee, the well-ordering principle, is a background fact about Z>0\mathbb{Z}_{>0}, entirely external to the group axioms; the definition of order borrows it rather than deriving it from group theory.

Can a group have more than one element acting as an inverse of aa if we relax "two-sided" to "one-sided" inverses?

Yes, in structures weaker than groups. If you only require a∗b=ea\ast b=e (a right inverse) without also requiring b∗a=eb\ast a=e, uniqueness can fail in non-associative or non-full-group settings, and even in monoids there are subtleties (an element can have a right inverse but no left inverse). The proof of part (b) in this article crucially uses both a∗b=b∗a=ea\ast b=b\ast a=e and a∗c=c∗a=ea\ast c=c\ast a=e simultaneously in the sandwich computation b=b(ac)=(ba)c=cb=b(ac)=(ba)c=c; dropping either one-sidedness assumption breaks the argument, which is why the group axioms insist on two-sided inverses from the start.

How does cancellation relate to the rows and columns of a finite group's Cayley table never repeating an entry?

Fix a row of the table, corresponding to left-multiplication by some a∈Ga\in G. If two entries in that row were equal, say the entries in columns bb and cc, this would mean a∗b=a∗ca\ast b=a\ast c. Left cancellation (part (d)) then forces b=cb=c, so the two columns were the same column all along — no genuine repeat occurred. The same argument with right cancellation applies to columns. This is precisely why every row and column of a finite group's Cayley table is a permutation (a rearrangement with no repeats) of the full element list, exactly as pictured in the intuition figure above.

Before this

Where this leads