Overview
Fireblocks has partnered with Station70 to offer a comprehensive Disaster Recovery Service (DRS) that includes backing up and securely holding your private key material. DRS enables you to maintain access to your assets at all times, even if you lose access to all of your key shares or if Fireblocks suspends operations permanently due to a non-recoverable disaster.
Learn more about Station70's solution.
What is included in the service?
Workspace Key Backup
Note
The Workspace Key Backup generation process is automatic. It occurs behind the scenes between Station70 and Fireblocks on your behalf. No action is required by you besides keeping an eye out for confirmation from Fireblocks that the backup is complete.
If you use a third-party DRS provider like Station70, you don’t have to securely store and maintain an offline, air-gapped machine for reconstructing your private keys in case of a disaster. Station70 does this for you, saving you time and resources for onboarding and maintenance. You would only need an offline machine to construct your Station70 backup in the case of an actual disaster.
You can request Station70 to replace or destroy your Workspace Key Backup at any time. You might request this if your workspace Owner forgets their recovery passphrase and wants to replace their recovery package without using their previous recovery passphrase as a component for recovering your key shares.
Note
Your Owner's recovery passphrase is always necessary for Workspace Key Recovery. Requiring a full Workspace Key Recovery is rarer than a Key Share Recovery. If you forget your Owner’s recovery passphrase, we strongly suggest resetting the passphrase and creating a new backup.
The diagram below provides an overview of the Workspace Key Backup sent to Station70.
Key Share Backup for Owners
When using Station70 for DRS, your workspace Owner’s key share is backed up with an auto-generated passphrase to enable recovery in case the Owner’s Key Recovery passphrase is lost or forgotten and you lose access to your Owner's key share. This can be for any of the following reasons:
- You make any changes to your device's biometric settings or lose your Fireblocks mobile app PIN code.
- You lose or damage your device.
- You are replacing your device.
- You delete the Fireblocks mobile app from your device.
When a Station70 backup is initiated by Fireblocks, your workspace Owner needs to complete the backup on their Fireblocks mobile app.
The diagram below illustrates the structure of the Key Share Backup with an auto-generated passphrase.
Disaster recovery actions
Onboarding to Station70
- Legal and commercial agreements:
- Contact your Customer Success Manager to ask to onboard with Station70.
- Sign a Fireblocks Third Party Letter Agreement.
- Your Customer Success Manager provides you with Station70's Terms and Conditions to sign and a link to set up your Access Control List (ACL).
- Station70 Onboarding and Backup Initiation:
- Station70 will contact you to begin your onboarding to the Station70 platform.
- At the same time, you must submit a Fireblocks Support ticket with the workspace name requiring backup.
- After completing the onboarding and setting your quorum on Station70, Station70 notifies Fireblocks to initiate the backup process.
- Completion of Workspace Key Backup with Station70:
- Make sure the Owner’s device is activated and fully enrolled with the MPC key share.
- Make sure the Owner’s Fireblocks mobile app is updated to the latest version.
- You will receive a confirmation once Station70 receives your Workspace Key Backup from Fireblocks.
- Initiation and completion of Key Share Backup with Station70:
- Once your Workspace Key Backup is ready and sent to Station70, the Owner receives a notification on their mobile device.
- The notification, together with an action card in the mobile app itself, also prompts the Owner to complete their Key Share Backup:
- Tap the notification or the card to start the process.
- Tap the Create backup button.
- Enter your PIN.
- Authenticate your identity using your mobile phone's biometrics.
- You will see a message confirming the backup was completed.
Note- Your workspace Owner must complete the above steps manually. If they do not complete these final steps, your Key Share Backup will not be complete.
- If the Owner recovery passphrase is reset, the workspace Owner was changed to a different user, or the Owner wants to initiate a test, contact Fireblocks Support to create a Workspace Key Backup and Key Share Backup for Station70.
- Backup Enrollment on Station70:
- Once both Workspace Key and Key Share Backups are successfully sent to Station70, you will be notified by Station70 with instructions on enrolling the new backup on your Station70 dashboard.
- Recovery of Backups on Station70:
- At any point, you can follow the instructions provided by Station70 to download your workspace recovery material on your Station70 dashboard.
Learn more
We recommend reading these articles to understand the concepts of Key Share Backup and Recovery and Workspace Key Backup and Recovery.
- Remember that Backup and Recovery must be set up before receiving funds to your workspace.
- Learn more about Mobile Key Share Backup and Recovery.
- Learn more about Native Workspace Key Backup and Recovery.
You can also learn more about third-party DRS Coincover's solution.