The Fireblocks Cold Wallet solution meets the strictest regulatory and insurance requirements while maintaining enterprise-grade Fireblocks MPC-CMP security. Cold Wallet team members can easily sign transactions from the Fireblocks Console using dedicated iOS devices and any computer with a webcam.
Fireblocks recommends a combination of Hot and Cold Wallet workspaces to streamline operations using a single login and unified user experience.
Complete the following steps to begin onboarding to a new Cold Wallet workspace.
Step 1: Determine user roles
Identify the key personnel who will manage and operate your Cold Wallet workspace:
- The Owner is responsible for approving new users and Cold Wallet devices.
- Signers can sign transactions using their Cold Wallet device and any computer with a webcam.
- The Security Manager is typically an IT professional, responsible for configuring new Cold Wallet devices for the Owner and Signers.
Learn more about Cold Wallet user roles and how they compare to other Fireblocks workspaces.
Step 2: Purchase required hardware
You need specific iOS devices and equipment for the setup session. This device list was last updated on November 26th, 2025.
iOS mobile devices
Keep these devices new and unopened until configuration during onboarding.
- The workspace Owner requires an iOS device for approving new users.
- Each Signer requires a dedicated iOS device for signing transactions.
Use any of the following devices running iOS or iPadOS 15.0 and later:
iPhones
- iPhone SE (3rd generation)
- iPhone 13, 13 Pro, 13 Pro Max, 13 mini
- iPhone 14, 14 Plus, 14 Pro, 14 Pro Max
- iPhone 15, 15 Plus, 15 Pro, 15 Pro Max
- iPhone 16, 16e, 16 Plus
- iPhone 17
iPads
- iPad (10th generation)
- iPad Pro (6th generation)
- iPad Air (5th generation)
- iPad mini (6th generation)
Warning: Do not use iOS 26 with Cold Wallet devices. iOS 26 contains a known bug that can cause the device to become unresponsive after a restart. This issue is resolved in iOS 26.1, where a "Continue without WiFi" pop-up appears after a restart. Select Continue to proceed with setup.
Mac provisioning device
You need a Mac computer to supervise and configure Cold Wallet devices using Apple Configurator 2.19. Fireblocks recommends dedicating a Mac solely for provisioning Cold Wallet devices.
Requirements
- Any Apple computer with macOS 10.15.6 or later
- Apple Configurator 2.19 installed from the App Store
- Original Apple Lightning or USB-C cable to connect iOS devices
- Internet connectivity during setup
- Working webcam
Security requirements
Each Cold Wallet device must meet these security standards:
- Biometric authentication: Set up Touch ID or Face ID before configuration.
- Factory-fresh device: Use new, unopened, factory-unlocked devices.
- No MDM enrollment: Do not purchase through Apple Device Enrollment Program (DEP) or pre-enroll with Mobile Device Management (MDM) programs. Apple Configurator 2.19 cannot configure devices as "supervised" when they're connected to MDM software, preventing the Fireblocks Cold Wallet mobile app from installing.
Step 3: Prepare accounts and software
Set up the necessary accounts and applications before your onboarding session.
Apple ID requirements
An Apple ID is required to sign in to the App Store. You'll use this ID on both the macOS computer and iOS devices during configuration.
Software installation
Install Apple Configurator 2.19 on the macOS computer using your Apple ID.
Two-factor authentication
Every Fireblocks user requires a 2FA app to sign in to their workspace. Install this on any personal device other than the Cold Wallet iOS signing devices.
Setup session requirements
Plan for a 3-hour setup session with the following requirements:
Required personnel
- Security manager (operates the provisioning MacBook)
- Cold wallet Owner (sets up the Owner device)
- Cold wallet Signer(s) (sets up Signer devices)
Network and location
- Strong, stable WiFi network
- All participants in the same physical location (or multiple Mac computers if remote)
Additional requirements
- Download the restrictions profile to your Mac before starting
- Computer with a working webcam for workspace access and QR code scanning
- Keep Signer devices connected to WiFi throughout the entire setup process
Next steps
Once you complete all steps above, contact your Fireblocks Customer Success Manager to schedule onboarding time and training sessions.