Standard tags are custom labels that attach to vault accounts, making it easier to classify, filter, and manage your vault inventory at scale. Support for additional Fireblocks entity types is planned for future releases.
Common examples include labels like Retail, Treasury, Hot Wallets, Testnet, Europe, or VIP. Generally, labels should reflect a business concept relevant to your operations.
Note: To use tags in Policy rules or require approval-controlled governance, see Protected tags instead.
What you can do with standard tags
- Organize vault accounts by business unit, region, environment, risk category, or any custom classification.
- Filter vault accounts quickly across the Fireblocks Console and API using one or more tags.
- Adapt your structure as your vault inventory grows or your operations change. Tags can be created, updated, and removed without approval.
- Improve reconciliation, reporting, and audits by keeping vaults consistently labeled.
Who can manage standard tags
Owners, Admins, Non-Signing Admins, Signers, Editors, and Approvers can all create, edit, delete, and attach or detach standard tags. No approval is required for any standard tag operation, and changes take effect immediately.
Creating a standard tag
Via Settings
- In the Fireblocks Console, go to Settings > Tags (Utilities > Tags in some workspaces).
- Select Create Tag.
- Enter a name, and optionally a description and color.
- Select Create tag.
Via the Vault
- In the Fireblocks Console, go to Accounts > Vault and find the vault account you want to tag.
- In the Tags column, select +.
- Enter the new tag's name in the search bar and select Create tag.
- Optionally, select a color and enter a description.
- Select Create tag.
Attaching and detaching standard tags
To attach or detach tags on a single vault account:
- In the Fireblocks Console, go to Accounts > Vault and find the vault account you want to tag.
- In the Tags column, select +.
- Select the tags you want to attach or detach.
- Select Apply.
To attach tags to multiple vault accounts at once:
- In the Fireblocks Console, go to Accounts > Vault.
- Select the checkbox for each vault account you want to tag.
- Select Bulk attach tags.
- Select the tags you want to attach.
- Select Apply.
Filtering vault accounts by tag
In Accounts > Vault, use the Tags filter to show only vault accounts that match one or more selected tags.
Editing a standard tag
- In the Fireblocks Console, go to Settings > Tags (Utilities > Tags in some workspaces).
- On the row of the tag you want to edit, select Edit tag.
- Update the tag's details.
- Select Save changes.
Changes take effect immediately with no approval required.
Deleting a standard tag
Before deleting a tag, detach it from all vault accounts. A tag with active vault account attachments cannot be deleted.
- In the Fireblocks Console, go to Settings > Tags (Utilities > Tags in some workspaces).
- On the row of the tag you want to delete, select Delete tag.
- Confirm the deletion.
API
For all tag operations via API (including creating, listing, filtering, attaching, detaching, and managing approval requests), see Tags API reference.
When bulk-creating vault accounts via the API, you can attach standard and protected tags to all created accounts in the same request by including a tagIds array. If any of the specified tags are protected, an approval flow is triggered and an approvalRequestId is returned alongside the jobId.
Limits and label rules
For all tag limits, label requirements, and constraints, see Tag Limits and Label Rules.
Frequently asked questions
Can I use tags in Policy rules?
No. Standard tags are for organization and filtering only. To reference a tag in a Policy rule, create it as a protected tag instead.
Do tag changes require approval?
No. All standard tag operations (create, edit, delete, attach, and detach) take effect immediately with no approval required.
Can I rename a tag?
Yes. Edit the tag from the Console or use the PATCH /v1/tags/{tagId} endpoint. The new label must be unique within your workspace.
Can I convert a standard tag into a protected tag?
Not currently. Protection status is set at creation time and cannot be changed afterward. If you need a protected version of an existing tag, create a new tag with isProtected: true.
What happens if I delete a tag that is attached to vaults?
The deletion is rejected. Detach the tag from all vault accounts first, then delete it.
Can I attach multiple tags to a vault account at once?
Yes. A single API request can attach up to 20 tags to up to 100 vault accounts simultaneously.