Overview

The Fireblocks Vault is your secure solution for wallet and address management. Fireblocks lets you create and manage multiple vault accounts, each of which contains your asset wallets.

In MPC workspaces, wallet addresses are derived for each vault account and asset wallet using HD derivation (BIP44), with the underlying keys protected by Fireblocks MPC technology. In KeyLink workspaces, vault accounts are linked to keys that you manage externally in your own HSM or KMS.

Vault structures

Depending on your business use case, Fireblocks recommends one of the following Vault structures:

• Segregated: Individual vault accounts for each end client and use case (such as trading, lending, DeFi, payments, or client location). Funds are stored in and invested from these individual accounts.
• Sweep-to-omnibus: A central vault account combined with individual vault accounts for each end client. Funds are deposited into the individual accounts and then swept to the central account for investment.

For more information, see Best practices for structuring your Vault.

Vault accounts

Vault accounts are where you store your asset wallets on the Fireblocks platform. Each vault account can contain one asset wallet per asset type. Any user with the appropriate permissions can create a vault account; there is no approval requirement for this action.

The Vault page displays all vault accounts in your workspace. Each account shows the asset wallets it contains.

For information on creating and managing vault accounts, see Manage vault accounts.