Initial user setup

Complete your Fireblocks user setup to access the Console, secure your account, and generate the MPC key shares needed to sign transactions.

Before you can begin setup, your workspace Owner must complete their own user setup. The Owner is the first user in a workspace; once their setup is complete, the Owner or an Admin can invite additional users.

Not every role completes every step. Use the table below to find which steps apply to your role.

Accepting the workspace invitation

Check your inbox for an email containing a workspace invitation. In that email, select Join Workspace to begin the setup process. Fireblocks recommends opening the invitation email on a desktop or laptop device to avoid mobile compatibility issues.

Signing up

You must use the same sign-in method (email and password, or SSO) for all future logins. You cannot change the email associated with your invitation.

To sign up for Fireblocks:

1. On the login page, select the Sign Up tab.
2. If the email address at which you received your workspace invitation is also your Google account or Microsoft account email address, use the applicable Single Sign-On (SSO) method. Otherwise, enter your email address and password in the fields below.
3. Select Sign Up.

Console password requirements

If you sign up with an email address and password, your password must contain:

• At least eight characters
• At least three of the following character types:
  • Lowercase letters
  • Uppercase letters
  • Numbers
  • Special characters

The Fireblocks Console validates that your password meets these requirements.

Setting up two-factor authentication

To set up Two-Factor Authentication (2FA):

1. Use an authenticator app on your mobile device to scan the onscreen QR code. Learn more about setting up 2FA.
2. Enter the corresponding 2FA code.
3. Select the arrow.

After setting up 2FA, a Setup Key is generated. Record and store it securely. You may need it to restore Fireblocks in your authenticator app later.

Pairing the Fireblocks mobile app with your workspace

To pair the Fireblocks mobile app with your workspace:

1. Verify your mobile device meets the minimum requirements. If you have not already done so, configure your device's biometric authentication with your fingerprint or face ID.
2. Download the Fireblocks mobile app from Google Play or the Apple App Store.
3. Use the Fireblocks mobile app to scan the QR code shown in the Fireblocks Console. This pairs the device with your workspace. If you do not see a QR code, log out of the Fireblocks Console and log back in.
4. Follow the setup instructions on your mobile device.
5. Allow the mobile app to use the device's biometric authentication.
6. Enter the six-digit PIN code you want to use for authorization. Fireblocks recommends writing down your six-digit PIN code and keeping it in a secure place, separate from your mobile device.

You can now use the Fireblocks mobile app for workspace approvals. After pairing, you are redirected to the Fireblocks Console login page. Fireblocks recommends bookmarking this page for future use.

Completing the MPC key share setup

Your MPC key shares are required to sign transactions. One of your key shares is stored on your mobile device. Learn more about signing transactions using the Fireblocks mobile app.

Owner MPC key generation

The workspace Owner's MPC keys are automatically generated. No additional action is required.

The Owner must approve the requests to generate MPC keys for users with the Admin and Signer roles. The Owner must approve these requests from their Fireblocks mobile app within 2 days (48 hours). After the Owner approves your new MPC keys, you have 2 days (48 hours) to complete the MPC registration.

To approve a request, select View on the notification and then Approve on the following page. To deny a request, select Deny.

Admin and Signer MPC key generation

Users with the Admin and Signer roles must request to have their MPC key shares generated. The workspace Owner must approve these requests on their Fireblocks mobile app within 2 days (48 hours).

After the Owner approves your request, your MPC key shares are automatically generated, and you receive a notification to complete your MPC setup.

If more than 2 days (48 hours) have passed since finishing your user setup, you have two options:

• Request the Owner to delete your user and then recreate it, which allows you to complete the MPC setup process.
• Request the Owner or an Admin to re-enroll your mobile device.

Setting a recovery passphrase

After your MPC keys are generated, you must set a recovery passphrase. You use this recovery passphrase if you ever need to perform a Key Share Recovery — the secure process for restoring the MPC key share stored on your mobile device, such as when replacing or resetting the device.