Creating a Vault

Overview

Vultisig vaults are multi-factor by nature, meaning that at least 2 devices are required to create a vault.

There are different types of vaults that can be created in the Vultisig App, designed to meet all users' needs and configuration preferences. From a 'hot wallet' option to a 'cold wallet' option, users have full flexibility in creation and modification afterward.

Creating a Vault is also called a Key Generation (KeyGen) event, see more information here.

Setup - Vault Types

There are two general setup types to choose from:

• Fast Vaults

• Secure Vaults

Fast Vaults

This setup is the equivalent of a "hot wallet" in Vultisig, allowing vaults to be created on-the-go without requiring multiple devices from the user.

Fast Vaults are configured as a two-factor vault, where one device is held by the user and the other part is the Vultiserver, which automatically co-signs the user's requests (learn more about what the Vultiserver is here), making it a single signature experience. In the future, transaction policies will allow users to specify parameters for co-signing.

Secure Vault

This setup offers the highest level of security and is considered the 'cold wallet' equivalent in the Vultisig App.

Secure Vaults consist solely of user devices.

Users need at least two devices, although minimum three is recommended. More devices can be added to their vaults, increasing the signing threshold and enhancing security with each additional device.

The vaults will have a m-of-n Threshold to sign transactions, where m is at least 2/3rds (Threshold is 67%) of n, and no maximum number of n devices.

The following are the most common vaults:

1. 2-of-3 vault - three devices to create a vault and two devices can sign a transaction. This vault is automatically redundant, which means you can lose one device and still have access to your vault. To make sure you are fully protected, please back up the Vault shares of every device. This vault type is recommended as a secure vault setup.

2. 3-of-4 vault - four devices to create a vault and three devices to sign a transaction. This vault is automatically redundant, which means you can lose one device and still have access to your vault. To make sure you are fully protected, please back up the Vault shares of every device.

3. 2-of-2 vault - two devices to create a vault and two devices to sign a transaction. This vault is vunerable if you lose one device, you can lose access to the funds. To make sure you are fully protected, please back up the Vault shares of every device. This vault type is not recommended as a secure vault setup.

Generating A Vault

How to generate a Vault

Videos

Click on the image below to watch an explanation video on Twitter on creating a 2/2 Secure Vault

Click on the image below to watch an explanation video on Twitter on creating a 2/2 Fast Vault

Step by Step Guide

Get your devices ready and create a vault.

Select the Vault setup of preference:

• Fast Vault

• Secure Vault

After selecting your preferred setup, follow the steps for the following Setups:

Fast Vault

• Select "Fast Vault" in the Setup selection

• Choose a Vault Name

• Enter your email to receive the Server Vault Share for complete self-custody!

• Set a password for the server vault share

• Set an optional hint in case you temporarily forget the server share password.

• Start the keygen (Vault creation) and let it finish

• Enter the 4 digit verification code, received via email

• Backup your device share

• Use your new Vultisig Vault

Secure Vault

Start Vault creation with main device and join with all pairing devices.

Main Device: START -> will show a QR Code to scan with your pairing device(s)

Pairing Devices: Select "Scan QR code" and scan the QR code from the main device

When all wanted pairing devices are present, create the vault with the Next button.

Network Types

You can choose Internet or WiFI.

1. Internet: Using the Vultisig relay server. Encrypted packages are routed through the Vultisig relay server over the Internet. Each device can be on different networks / Internet providers.

2. Local: Using local Wi-Fi Network, however may not work on some Wi-Fi networks (since they may block mDNS packets).

The Vault Creation step may fail if the Internet/network connection is not stable.

Keygen

Once you click NEXT, the keygen process will begin. First it will create the pre-parameters (your vault shares and some other aspects, about 10 seconds), then it will create the ECDSA and EdDSA keys (another 10 seconds). Finally, it is done! Make sure that all devices show the done screen.

Troubleshooting

If a Keygen fails, it may be because you have an unreliable network and the devices dropped connections.

1. Quit the apps.

2. Change networks.

3. Start again.

Another reason are low spec android devices. Please ensure that your device has at least 4 GB RAM