{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-products/wallet/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"Configure devices and quorums","description":"User guides, API reference, and support resources.","siteUrl":"https://docs.ripple.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"configure-devices-and-quorums","__idx":0},"children":["Configure devices and quorums"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Ripple Custody (Wallet) uses Multi-Party Computation (MPC) to protect wallet private keys. Instead of storing a complete key in one place, MPC splits the key into shards distributed across multiple devices. To sign a transaction, a minimum number of those devices must participate."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Before you can create a wallet, you must:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Add and pair at least 2 devices."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Create an MPC quorum from those devices."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"HSM wallets in sandbox"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Sandbox environments also support HSM-based wallets, which don't require devices or quorums. If you want to skip this step and test basic platform features in sandbox first, you can select HSM when you ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/wallet/get-started/console/create-your-first-wallet"},"children":["create your first wallet"]},". For production, MPC is required."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"understand-device-types","__idx":1},"children":["Understand device types"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Ripple Custody (Wallet) supports two types of signing device. You can use either type or a mix of both."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":""},"children":[]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Mobile (Ripple Custody (Wallet) Mobile)"},"children":["Mobile (Ripple Custody (Wallet) Mobile)"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"CloudSign"},"children":["CloudSign"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["How it signs"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Manual — you review and approve each transaction on your phone"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Automatic — signs programmatically without manual review"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Best for"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Low-volume wallets that need human oversight per transaction"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["High-volume or API-driven wallets that need fast throughput"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Can approve transactions?"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No (signing only)"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Platform"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["iOS (Android coming soon)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Any cloud instance (AWS, GCP, Azure, on-premises)"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["See ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/wallet/signing-and-key-management/devices"},"children":["Types of devices"]}," for a full comparison."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Recommendation for sandbox"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For sandbox testing, a CloudSign-only quorum is the fastest path to your first transaction. You can set up mobile devices later when you move to production."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-1-add-devices","__idx":2},"children":["Step 1: Add devices"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Required role:"]}," Owner, Administrator, Proposer, or Approver."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Add at least 2 devices to your organization. You can mix mobile and CloudSign devices."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Internal and External devices"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The Devices page has two tabs: ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Internal"]}," for devices owned by your organization, and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["External"]}," for devices shared with you by other organizations."]}]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Devices"]}," section in the Ripple Custody (Wallet) console."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add new device"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select the device type (",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Mobile"]}," or ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Cloud"]},")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["In the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Name this device"]}," field, enter a name that identifies the device (for example, \"CFO Mobile\" or \"CloudSign Node 1\")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Save and continue"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Repeat until you have at least 2 devices."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/get-started-add-device.9b3b3bcfc31737af7104496e79927a6d3433cd2d577d3ffbba2805b2f98ef90e.9fccc40d.png","alt":"The Add a device page with the Mobile and Cloud device types and the Name this device field"},"children":[]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-2-pair-each-device","__idx":3},"children":["Step 2: Pair each device"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["New devices start in an ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Unpaired"]}," state. You must pair each device before it can join a quorum."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"pair-a-mobile-device","__idx":4},"children":["Pair a mobile device"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["After you add the mobile device, the console displays a QR code."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open the Ripple Custody (Wallet) Mobile app on your phone."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Scan the QR code."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The device status changes to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Waiting for approval"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["An owner or administrator approves the device pairing in the console."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The device status changes to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Paired"]},"."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Sandbox mobile app"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The sandbox console uses a separate sandbox version of the app, distributed through Apple TestFlight. The production app is on the App Store. See ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/wallet/signing-and-key-management/devices/add-a-device#install-the-mobile-app"},"children":["Install the mobile app"]}," for both links."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"pair-a-cloudsign-device","__idx":5},"children":["Pair a CloudSign device"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["After you add the CloudSign device, the console displays a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["pairing key"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Copy the pairing key."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/wallet/signing-and-key-management/devices/set-up-cloudsign"},"children":["Set up and run your CloudSign node"]}," and enter the pairing key when prompted."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The device status changes to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Waiting for approval"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["An owner or administrator approves the device pairing in the console."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The device status changes to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Paired"]},"."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/get-started-device-unpaired.984cd17ddb56454a0b67bc46ff75860641be5db0231eb9f8df34cca17bab5675.9fccc40d.png","alt":"A new Cloud device with the Unpaired status and its pairing key"},"children":[]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Complete all pairings before proceeding"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You need at least 2 fully paired devices to create a quorum. Make sure all devices show a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Paired"]}," status before you continue to Step 3."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-3-create-an-mpc-quorum","__idx":6},"children":["Step 3: Create an MPC quorum"]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Owner or Administrator role required"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Only users with the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Owner"]}," or ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Administrator"]}," role can create an MPC quorum. Other roles don't see ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create quorum"]},". If you don't see it, ask an owner or administrator in your organization."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["An MPC quorum defines which devices hold key shards and how many must participate to sign a transaction."]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Controls"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["MPC Quorums"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create quorum"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select the quorum type:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Mobile"]}," — all devices are mobile."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Cloud"]}," — all devices are CloudSign."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Mixed"]}," — a combination of mobile and CloudSign devices."]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Enter a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Name"]}," for the quorum and, optionally, a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Description"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Under ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Key shard holders"]},", select at least 2 devices. Only paired devices appear in the list."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Set the number of ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Required signatures"]},". This field appears after you select key shard holders."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["(Optional) Select a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Backup and recovery kit"]},". You can't add a backup and recovery kit to a quorum after you create it, and a quorum without one, and all of its wallets, isn't backed up."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Avoid requiring all devices to sign"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Always set the required signatures to at least one fewer than the total number of devices. If you require all devices (for example, 2 of 2), losing or decommissioning a single device means you permanently lose the ability to sign transactions from wallets using that quorum. For example, if your quorum has 3 devices, set the required signatures to 2. This gives you fault tolerance — you can still sign even if one device is unavailable, lost, or compromised."]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":8},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["In the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Confirm quorum"]}," dialog, review the quorum details and click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create quorum"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Each device in the quorum receives a notification to approve. All devices must approve within 60 minutes."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["After all devices approve, the quorum status changes to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Confirmed"]},"."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"60-minute approval window"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If any device rejects the notification or the 60-minute window expires, the quorum is not created and you must start over. Coordinate with all device owners before you create the quorum so they're ready to approve promptly."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"common-quorum-configurations","__idx":7},"children":["Common quorum configurations"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"cloudsign-only-recommended-for-high-volume-wallets","__idx":8},"children":["CloudSign-only (recommended for high-volume wallets)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use 3 or more CloudSign devices. Transactions sign automatically within seconds. Pair this configuration with ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/wallet/governance-and-controls/approvals"},"children":["approval groups"]}," to add human oversight without slowing down signing."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"mobile-only-recommended-for-high-value-wallets","__idx":9},"children":["Mobile-only (recommended for high-value wallets)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use 3 or more mobile devices. Every transaction requires manual review and approval on each signer's phone. This provides maximum oversight but limits throughput."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Signing timeout"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Mobile devices must sign within 5 minutes of receiving a transaction notification. If too few devices respond in time, the transaction fails."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["See ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/wallet/signing-and-key-management/mpc-quorums"},"children":["MPC quorums"]}," for advanced configuration, ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/wallet/signing-and-key-management/mpc-quorums/key-resharing"},"children":["key resharing"]},", and ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/wallet/signing-and-key-management/mpc-quorums/key-restructuring"},"children":["key restructuring"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"next-step","__idx":10},"children":["Next step"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Create a vault to organize your wallets:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/wallet/get-started/console/create-your-first-vault"},"children":["Create your first vault"]}]}]}]},"headings":[{"value":"Configure devices and quorums","id":"configure-devices-and-quorums","depth":1},{"value":"Understand device types","id":"understand-device-types","depth":2},{"value":"Step 1: Add devices","id":"step-1-add-devices","depth":2},{"value":"Step 2: Pair each device","id":"step-2-pair-each-device","depth":2},{"value":"Pair a mobile device","id":"pair-a-mobile-device","depth":3},{"value":"Pair a CloudSign device","id":"pair-a-cloudsign-device","depth":3},{"value":"Step 3: Create an MPC quorum","id":"step-3-create-an-mpc-quorum","depth":2},{"value":"Common quorum configurations","id":"common-quorum-configurations","depth":2},{"value":"CloudSign-only (recommended for high-volume wallets)","id":"cloudsign-only-recommended-for-high-volume-wallets","depth":3},{"value":"Mobile-only (recommended for high-value wallets)","id":"mobile-only-recommended-for-high-value-wallets","depth":3},{"value":"Next step","id":"next-step","depth":2}],"frontmatter":{"title":"Configure devices and quorums","seo":{"title":"Configure devices and quorums"}},"lastModified":"2026-10-09T09:02:30.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/wallet/get-started/console/configure-devices-and-quorums","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}