Secure Vault

Create a Secure Vault with multiple devices for cold storage security. Flexible threshold signing (2-of-2 up to m-of-n). Ideal for holdings and DAOs.

Overview

Secure Vault offers the highest level of security—the "cold wallet" equivalent in Vultisig. These vaults consist solely of user-controlled devices with no third-party involvement.

A minimum of two devices is required; three or more is recommended for redundancy. Additional devices increase the signing threshold and enhance security.

Secure Vaults are ideal for shared wallets among multiple users and DAOs.


Threshold Configurations

Secure Vaults use an m-of-n threshold where m is at least 67% of n. Common configurations:

Setup
Devices
Signing
Redundancy
Recommendation

2-of-3

3

2

Yes (1 device)

Recommended

3-of-4

4

3

Yes (1 device)

Maximum security

2-of-2

2

2

No

Not recommended

Best practice for maximum redundancy:

  1. Use 3 different platforms (Mac, iOS, Android)

  2. Encrypt vault shares with 3 different passwords

  3. Store shares in 3 different cloud providers (Google, iCloud, Dropbox)

  4. Use unique email addresses with 2FA for each cloud account

This setup allows recovery from anywhere in the world with just email access and passwords—no hardware wallets or seed phrases required.


Creation Steps

Requirements:

  • One initiating device

  • One or more pairing devices

On the Initiating Device

  1. Select Secure Vault option

  1. Choose a vault name

  2. A QR code will appear for pairing devices

On Pairing Devices

  1. Select Scan QR code and scan the initiating device's QR

Complete Setup

  1. When all devices are connected, tap Next on the initiating device

  2. Wait for keygen to complete on all devices


Network Options

Mode
Description
Use Case

Internet

Uses Vultisig relay server

Devices on different networks

Local

Uses local WiFi (mDNS)

Same network, may not work on all WiFi


After Creation

Last updated

Was this helpful?