Overview
Fireblocks uses different security and safety mechanisms to prevent unauthorized workspace activity. One of these mechanisms is the expiration of approval and signing notifications.
Approvals are required for:
- New connections
- New users
- Transactions, per the workspace's Transaction Authorization Policy (TAP). For all outbound transactions, signing is required.
Except for email invitations, all notifications that require approval appear in the Fireblocks mobile app.
Transaction authorization and signing notifications
Transaction authorization expiration
Transactions timeout and fail if not authorized within two hours of creating the transaction. Approval is required before the initiator can sign when two-tier authorization is enabled in the TAP. Contact Fireblocks Support to change the transaction authorization timeframe for your workspace. The maximum transaction authorization timeframe allowed is 24 hours.
TAP change request
TAP change requests using the TAP Editor expire after seven days if your workspace Owner and Admin Quorum have not yet approved them.
Initiator signing expiration
Transactions timeout and are canceled if not signed within two hours after the transaction is created. Signing follows authorization if two-tier authorization is enabled in the TAP.
Transaction timeout configuration
The default Transaction timeout period (when in Broadcasting status) is five hours. Contact Fireblocks Support to change the transaction timeout period for your workspace. The timeout period cannot be extended to more than 24 hours to avoid significant fluctuations in asset rates that may be affected by TAP rules.
Whitelisting and connection approval notifications
Approval is required for new whitelisted addresses, exchange connections, Fireblocks Network connections, and fiat account connections.
Admin quorum expiration
Whitelisting and new connection authorizations expire after seven days.
User approval notifications
New user approval expiration (Owner)
Workspace Owners receive a notification when a new user is added to their workspace. The Owner must approve the new user request within seven days. Otherwise, the request expires and must be resubmitted. Approving this notification sends an email invitation to the new user.
New user invitation expiration (User)
New users have seven days to respond to their Fireblocks email invitation and set up their new accounts. Contact Fireblocks Support if you need to extend this timeframe.
Granting signing privileges expiration (Owner)
If a new user has signing privileges, the workspace Owner receives a notification to authorize the user's signing privileges. The Owner has 12 hours to approve the request. Contact Fireblocks Support if this request expires and the user still requires signing privileges.
Note that even if the Owner has not approved the request, the new user can access the Fireblocks Console without signing privileges.
New MPC key generation request (User)
Requests for the workspace Owner to approve generating MPC keys on new devices expire 5 days (120 hours) after a user scans the QR code using the Fireblocks mobile app during workspace setup. Once approved, the user has 5 days (120 hours) to complete the registration process. If not completed, the owner then must re-enroll the user, otherwise we will resend the MPC keys requests to the Owner.