Overview
This article shows you how to perform the setup process for a first-time Fireblocks user.
Important
- Users with roles that can approve transactions must pair their mobile devices with the appropriate workspace.
- Users with roles that can sign transactions must pair their mobile devices with the appropriate workspace and have their MPC key share requests approved by the workspace Owner.
- Your workspace Owner must complete their own user setup for a workspace before they or an Admin can request to add an additional user to the workspace.
- Deleting the Fireblocks mobile app or changing your device's biometric settings at any point after you pair your device with a workspace will revoke your ability to sign transactions. Unless instructed to do so by Fireblocks Support, do not delete the Fireblocks mobile app or change your mobile device's biometric settings.
Accepting the workspace invitation
Check your inbox for an email containing a workspace invitation. In that email, select Join Workspace to begin the setup process. We recommend opening the invitation email on a desktop or laptop device to avoid mobile compatibility issues.
Signing up
You must use the same sign-in method (email/password or SSO) for all future logins. You cannot change the email associated with your invitation.
To sign up for Fireblocks:
- On the login page, select the Sign Up tab.
- If the email address at which you received your workspace invitation is also your Google account or Microsoft account email address, use the applicable Single Sign-On (SSO) method. Otherwise, enter your email address and password in the fields below.
- Select Sign Up.
Console password requirements
Your Fireblocks Console password must contain the following:
- At least eight characters
- At least three of the following types of characters:
- Lowercase letters
- Capital letters
- Numbers
- Special characters
The Fireblocks Console validates that your password meets these requirements.
Setting up Two-Factor Authentication
To set up Two-Factor Authentication (2FA):
- Use an authenticator app on your mobile device to scan the onscreen QR code. Learn more about setting up 2FA.
- Enter the corresponding 2FA code.
- Select the arrow.
After setting up 2FA, a Setup Key is generated. Record and store it securely. You may need it if you ever need to restore Fireblocks in your authenticator app.
Note
Users with the Editor or Viewer roles have completed the setup process. Users with the Admin, Non-Signing Admin, Signer, or Approver roles must continue with the following sections.
Pairing the Fireblocks mobile app with your workspace
Note
Only users with the Owner, Admin, Non-Signing Admin, Signer, and Approver roles need to complete the following steps.
To pair the Fireblocks mobile app with your workspace:
- Verify your mobile device meets the minimum requirements. Additionally, if you haven't already, configure your device's biometric authentication with your fingerprint or face ID.
- Download the Fireblocks mobile app from Google Play or the Apple App Store.
- Use the Fireblocks mobile app to scan the onscreen QR code in your Fireblocks Console. This pairs the device with your workspace. If you do not see a QR code in your Fireblocks Console, please log out of the Console and log in again and you should see the QR code appear.
- Follow the setup instructions on your mobile device.
- Allow the Fireblocks mobile app to use the device's biometric authentication.
- Enter the six-digit PIN code you want to use for authorization. We recommend you write down your six-digit PIN code and keep it in a secure place, separate from your mobile device.
You can now use your Fireblocks mobile app for workspace approvals.
After pairing, you’ll be redirected to the Fireblocks Console login page. We recommend bookmarking this page for future use.
Completing the MPC key share setup
Note
Only users with the Owner, Admin, and Signer roles need to complete the following steps.
Your MPC key shares are required to sign transactions. Learn more about signing transactions using the Fireblocks app.
Owner MPC key generation
The workspace Owner's MPC keys are automatically generated. No additional action is required. Note that one of your key shares is stored on your mobile device.
However, the Owner must approve the requests to generate MPC keys for users with the Admin and Signer roles. The Owner must approve these requests from their Fireblocks mobile app within 12 hours. Once the owner approves your new MPC keys on their Fireblocks mobile app, you have 6 hours to complete the MPC registration.
To approve these requests, tap View on the notification and then Approve on the following page. To deny a request, tap Deny.
Admin and Signer MPC key generation
Users with the Admin and Signer roles must request to have their MPC key shares generated. The workspace Owner must approve these requests on their Fireblocks mobile app within 12 hours.
After the Owner approves your request, your MPC key shares are automatically generated for you and you receive a notification to complete your MPC setup. Note that one of your key shares is stored on your mobile device.
If more than 12 hours have passed since finishing your user setup, you have two options:
- Request the Owner to delete your user and then recreate it, which will allow you to complete the MPC setup process.
- Request the Owner or an Admin to re-enroll your mobile device.
Setting a recovery passphrase
Note
Only users with the Owner, Admin, and Signer roles need to complete the following step.
After your MPC keys are generated, you must set a recovery passphrase. You will use this recovery passphrase if you ever need to perform a Key Share Recovery — the secure process for restoring the MPC key share stored on your mobile device, such as when replacing or resetting the device.