Disaster Recovery Service: Station70 – Fireblocks Help Center

Fireblocks has partnered with Station70 to offer a comprehensive Disaster Recovery Service (DRS) that includes backing up and securely holding your private key material. DRS enables you to maintain continuous access to your assets, even if you lose access to all of your key shares or if Fireblocks suspends operations permanently due to a non-recoverable disaster.

What's included in the service

Workspace key backup

If you use a third-party DRS provider like Station70, you don't have to securely store and maintain an offline, air-gapped machine for reconstructing your private keys in case of a disaster. Station70 does this for you, saving you time and resources for onboarding and maintenance. You only need an offline machine to construct your Station70 backup in the case of an actual disaster.

You can request Station70 to replace or destroy your workspace key backup at any time. You might request this if your workspace Owner forgets their recovery passphrase and wants to replace their recovery package without using their previous recovery passphrase as a component for recovering your key shares.

The diagram below provides an overview of the workspace key backup sent to Station70.

Your Owner's recovery passphrase is always necessary for workspace key recovery. Requiring a full workspace key recovery is rarer than a key share recovery. If you forget your Owner's recovery passphrase, Fireblocks recommends resetting the passphrase and creating a new backup.

Key share backup for Owners

Station70 backs up your workspace Owner's key share with an auto-generated passphrase to enable recovery if the Owner's key recovery passphrase is lost or forgotten and you lose access to your Owner's key share. This can happen for any of the following reasons:

You make changes to your device's biometric settings or lose your Fireblocks mobile app PIN code.
You lose or damage your device.
You are replacing your device.
You delete the Fireblocks mobile app from your device.

When Fireblocks initiates a Station70 backup, your workspace Owner needs to complete the backup on their Fireblocks mobile app.

The diagram below illustrates the structure of the key share backup with an auto-generated passphrase.

Onboarding to Station70

Step 1: Legal and commercial agreements

Contact your Customer Success Manager to ask to onboard with Station70.
Sign a Fireblocks Third Party Letter Agreement.
Your Customer Success Manager provides you with Station70's Terms and Conditions to sign and a link to set up your Access Control List (ACL).

Step 2: Station70 onboarding and backup initiation

Station70 contacts you to begin your onboarding to the Station70 platform.
Submit a Fireblocks Support ticket with the workspace name requiring backup.
After you complete onboarding and set your quorum on Station70, Station70 notifies Fireblocks to initiate the backup process.

Step 3: Completion of workspace key backup with Station70

Make sure the Owner's device is activated and fully enrolled with the MPC key share.
Make sure the Owner's Fireblocks mobile app is updated to the latest version.
You receive a confirmation once Station70 receives your workspace key backup from Fireblocks.

Step 4: Initiation and completion of key share backup with Station70

Once your workspace key backup is ready and sent to Station70, the Owner receives a notification on their mobile device. The notification, along with an action card in the mobile app, prompts the Owner to complete their key share backup:

Tap the notification or the card to start the process.
Tap Create backup.
Enter your PIN.
Authenticate your identity using your mobile phone's biometrics.
A message confirms the backup is complete.

Your workspace Owner must complete the above steps manually. If they don't complete these steps, your key share backup is not complete. If the Owner recovery passphrase is reset, the workspace Owner was changed to a different user, or the Owner wants to initiate a test, contact Fireblocks Support to create a workspace key backup and key share backup for Station70.

Step 5: Backup enrollment on Station70

Once both the workspace key and key share backups are sent to Station70, Station70 notifies you with instructions on enrolling the new backup on your Station70 dashboard.

Note: After you complete enrollment with Station70, go to Settings > General > Key backup and select Mark all as completed for Station70. This is a manual confirmation on your end that the backup enrollment process for the workspace has been completed.

Step 6: Recovery of backups on Station70

At any point, follow the instructions provided by Station70 to download your workspace recovery material on your Station70 dashboard.

Fireblocks recommends reviewing these articles to understand the concepts of key share backup and recovery and workspace key backup and recovery.

Backup and Recovery (must be set up before receiving funds to your workspace)
Mobile key share backup and recovery
Fireblocks Recovery Utility