# Manage devices

Devices hold MPC key shards and participate in transaction signing. As an owner or administrator, you approve device pairings, monitor device status, and remove devices when they are no longer needed. This guide covers the full device lifecycle.

## Types of devices

Wallet-as-a-Service (Palisade) supports two device types:

| Device type | Description | Best for |
|  --- | --- | --- |
| **Mobile** | A phone running the Palisade Mobile app. Requires manual approval for each signing request. | Human-in-the-loop review, low-volume signing |
| **CloudSign** | A server-based signing agent. Signs transactions automatically when quorum conditions are met. | High-volume operations, automated workflows |


You can use a single type or combine both in a **mixed quorum** for flexibility.

## Add a device

1. Go to **Devices** in the console sidebar.
2. Select **Add new device**.
3. Select the **device type** (Mobile or CloudSign).
4. Enter a **name** for the device.
5. Select **Save and continue**.


The device appears as unpaired with an approval status of **Pending**. The device owner must complete the pairing process before you can approve it.

### Pair a mobile device

1. Install the Palisade Mobile app on the user's phone.
2. Open the app and scan the QR code displayed in the console, or enter the pairing code manually.
3. The device approval status remains **Pending** until an owner or administrator approves it.


### Pair a CloudSign device

1. Set up the CloudSign node following the infrastructure steps in [Set up and run CloudSign](/products/wallet/user-interface/devices/set-up-and-run-cloudsign).
2. Start the CloudSign container. It automatically registers with the platform.
3. The device approval status remains **Pending** until an owner or administrator approves it.


## Approve a device

After a device completes pairing, an owner or administrator must approve it before it can join a quorum.

1. Go to **Devices**.
2. Find the device with a **Pending** approval status.
3. Select the device to view its details.
4. Review the device information (type, owner, registration time).
5. Approve the device.


Verify before approving
Only approve devices you expect. Confirm with the device owner through an out-of-band channel (phone call, in-person) that they initiated the pairing request.

## View all devices

Go to **Devices** to see all devices in your organization. The device list has two tabs:

- **Internal** — Devices owned by users in your organization
- **External** — Devices shared with your organization from other organizations


For each device, you can see:

- Device name and type
- Owner
- Approval status
- Enabled status
- Quorum membership


Device state has two independent dimensions:

| Dimension | Values | What it means |
|  --- | --- | --- |
| **Approval status** | Pending, Approved, Rejected | Whether the organization trusts the device to participate in quorum operations. |
| **Enabled status** | Pending, Enabled, Disabled | Whether the device can currently participate in signing operations. |


For example, a device with **Approved** approval status and **Disabled** enabled status remains trusted but can't currently sign. A device with **Rejected** approval status isn't trusted and can't sign.

## Disable a device

Disabling a device changes its enabled status to **Disabled**. The device can't participate in signing operations, but its approval status and configuration remain unchanged. Use disable for a reversible pause.

1. Go to **Devices**.
2. Select the device you want to disable.
3. Open the **Actions** menu and select **Disable**.


Impact on quorums
Disabling a device affects any quorum it belongs to. If the remaining active devices fall below the quorum threshold, that quorum can't sign transactions until you re-enable the device or restructure the quorum.

## Reject a device

Reject a pending device pairing request when you don't expect it or can't verify it. Rejection denies approval and removes the device from your organization. The device can't join a quorum or participate in signing operations.

1. Go to **Devices**.
2. Select the pending device.
3. Open the **Actions** menu and select **Reject**.


## Delete a device

You can delete a device only if it isn't a member of any active quorum.

1. Go to **Devices**.
2. Select the device.
3. Open the **Actions** menu and select **Delete**.


Remove from quorums first
If the device belongs to a quorum, you must restructure the quorum to remove the device before you can delete it. See [Manage MPC quorums](/products/wallet/admin-guide/manage-mpc-quorums).

## Best practices

- **Distribute devices across team members** — avoid concentrating multiple key shards on devices controlled by a single person.
- **Audit your device inventory regularly** — review which devices are active and whether their owners still need access.
- **Remove devices promptly for offboarded users** — when a team member leaves, disable their approved devices immediately, then restructure affected quorums and delete the devices when eligible.
- **Name devices descriptively** — include the owner's name and device purpose in the name (for example, "Alice - Mobile - Approvals").
- **Keep CloudSign instances updated** — ensure CloudSign nodes run the latest version for compatibility with quorum operations.


## Related guides

- [Adding a device](/products/wallet/user-interface/devices/adding-a-device) — Reference documentation
- [Set up and run CloudSign](/products/wallet/user-interface/devices/set-up-and-run-cloudsign) — CloudSign infrastructure setup
- [Types of devices](/products/wallet/user-interface/devices/types-of-devices) — Detailed device type comparison
- [Manage MPC quorums](/products/wallet/admin-guide/manage-mpc-quorums) — Create quorums using your devices