# Blimp Vault

The **Vault** feature in Blimp allows you to securely store and manage your wallet keys using the **Key Management System (KMS)** with split key technology. This feature enhances security, transparency, and user control over wallet operations. Here is a detailed guide to using the Vault and its options:

### **Step 1: Navigate to the Blimp Settings**

* Go to **Settings** → **My Wallet** → **Vault**. On the Vault page, you will see the label kms.auth-store-wallet-description.

<figure><img src="https://2414485336-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUGN3Vu2Hi1voQQLrIVGO%2Fuploads%2F8WDH7j45QkivMsrXZRx7%2Fimage.png?alt=media&#x26;token=f96748e2-9438-40e3-bb86-1943be331a07" alt=""><figcaption><p>Fig1: Vault Settings</p></figcaption></figure>

### **Step 2: Store Your Wallet in Vault**

* Click on the **Store Wallet in Vault** button. A **Split Key** will be generated and displayed. Upon storing, an **Active Split Key** will be generated and displayed.

<figure><img src="https://2414485336-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUGN3Vu2Hi1voQQLrIVGO%2Fuploads%2FNFZnAU4Pxe0JcfBKsUoe%2Fimage.png?alt=media&#x26;token=2fc0d0bd-bf10-4601-80ed-1df5112aae0d" alt=""><figcaption><p>Fig2: Create Split Key</p></figcaption></figure>

### Step 3: Manage your Split Key

Once the **Active Split Key** is generated, you can perform several actions:

<figure><img src="https://2414485336-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUGN3Vu2Hi1voQQLrIVGO%2Fuploads%2FxmWBE7xIke0ObqyBehYQ%2Fimage.png?alt=media&#x26;token=c84844f8-0ab5-4e00-bdeb-b7e4d77985ce" alt=""><figcaption><p>Fig3: Manage your Split Key</p></figcaption></figure>

* **Copy the Key:** Locate the active split key on the Vault page. Click the **Copy** button to copy the key for backup or secure sharing.
* **View Key Details:** Click on the **Details** icon beside the active split key. Review the metadata for the key, including:&#x20;

  * **Created On**: The date the key was created.
  * **Shared**: The sharing status of the key.
  * **Last Used**: The last date the key was accessed.
  * **View Restrictions:**  The restrictions for this key

  <figure><img src="https://2414485336-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUGN3Vu2Hi1voQQLrIVGO%2Fuploads%2Fmic4mO0U1dW4lPVfAlEu%2Fimage.png?alt=media&#x26;token=f4715f2c-a6f1-437d-aedb-622847f0466b" alt=""><figcaption><p>Fig4: Key Details</p></figcaption></figure>
* **Switch Key:** If you have more than one key this icon will be shown. You can click on it to switch between keys.

### **Step 4: Manage Restrictions and Share**

The Vault allows users to control access to their wallet keys by applying **restrictions**. You can securely share split keys with other users using the **Share** feature. To manage restrictions:

* Click the **Share** button on the Vault page.

<figure><img src="https://2414485336-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUGN3Vu2Hi1voQQLrIVGO%2Fuploads%2F3fQ0ltikNYTdRsEvJheE%2Fimage.png?alt=media&#x26;token=b2955386-9d3c-4faf-9012-138fbc561d74" alt=""><figcaption><p>Fig5: Share Key</p></figcaption></figure>

* In the sharing window, select the specific **restrictions** to apply. Some default permissions are set which you can change it. The restrictions are:

<figure><img src="https://2414485336-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUGN3Vu2Hi1voQQLrIVGO%2Fuploads%2FWBGS67VhHzlF9iJui6Ae%2Fimage.png?alt=media&#x26;token=5abc1261-13aa-462f-b878-796198938ccf" alt=""><figcaption><p>Fig6: Specify Restrictions</p></figcaption></figure>

<table data-header-hidden><thead><tr><th width="322"></th><th></th></tr></thead><tbody><tr><td><strong>Property</strong></td><td><strong>Description</strong></td></tr><tr><td><strong>Allow All</strong></td><td>Grants unrestricted access to the wallet and its operations.</td></tr><tr><td><strong>Token Transfers</strong></td><td>Enables or restricts the ability to perform token transfer operations.</td></tr><tr><td><strong>Allocation File Operations</strong></td><td>Allows or disables file-related actions such as uploading, downloading, and deleting files within an allocation.</td></tr><tr><td><strong>Allocation Storage Operations</strong></td><td>Permits management of storage-related actions like increasing or extending storage allocations.</td></tr><tr><td><strong>Allocation Token Operations</strong></td><td>Enables the use of tokens for allocation-related tasks, such as payments for storage or upgrades.</td></tr><tr><td><strong>Storage Rewards</strong></td><td>Controls access to managing rewards for storage providers or blobbers.</td></tr><tr><td><strong>Storage Operations</strong></td><td>Enables general operations related to storage, such as viewing or modifying storage configurations.</td></tr><tr><td><strong>Storage Management</strong></td><td>Allows administrative tasks related to storage, including managing providers, locations, and settings.</td></tr><tr><td><strong>Miner Operations</strong></td><td>Grants access to operational actions for miners within the network, such as updating configurations.</td></tr><tr><td><strong>Miner Management Operations</strong></td><td>Allows users to manage miner-specific tasks, including assigning roles, monitoring performance, or managing settings.</td></tr><tr><td><strong>Miner Financial Operations</strong></td><td>Enables financial activities for miners, such as handling fees, rewards, or other monetary-related tasks.</td></tr><tr><td><strong>Token Bridging</strong></td><td>Allows or restricts the ability to bridge tokens across different blockchain networks.</td></tr><tr><td><strong>Authorizer Management Operations</strong></td><td>Enables management tasks for authorizers, such as adding, removing, or updating authorizer roles.</td></tr><tr><td><strong>Authorizer Operations</strong></td><td>Grants access to general operations involving authorizers, such as handling authentication or verification tasks.</td></tr></tbody></table>

* &#x20;Enter the username of the recipient to securely share the key. Confirm the sharing action, ensuring the recipient has the necessary permissions.

<figure><img src="https://2414485336-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUGN3Vu2Hi1voQQLrIVGO%2Fuploads%2F4bZWx8FkhV5fRa4Pw7t4%2Fimage.png?alt=media&#x26;token=80dba573-4828-433f-a114-faeca2e9cc55" alt=""><figcaption><p>Fig7: Search User to Share </p></figcaption></figure>

{% hint style="info" %}
Always verify restrictions before sharing a key and Ensure your split key is backed up securely to prevent loss of access.
{% endhint %}

### **(Optional) Step 5:  Disconnect from Vault**

* If you wish to remove your wallet from the Vault, click the **Disconnect from Vault** button. Confirm the action to ensure the wallet is no longer stored in the Vault.

<figure><img src="https://2414485336-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUGN3Vu2Hi1voQQLrIVGO%2Fuploads%2FKVCBkaFU2ioMDViBQzXh%2Fimage.png?alt=media&#x26;token=a4ea5c6d-0f79-414e-9c5d-8074dd5df2b0" alt=""><figcaption><p>Fig8: Disconnect the Key</p></figcaption></figure>

If you are assigned a key by another user, follow these steps to utilize the key:&#x20;

* Find the key that has been assigned to you. Assigned keys will appear in the list of active keys.
* Review the restrictions and permissions tied to the key from Key Details Section. This determines what actions you can perform using the key.
* Perform the allowed operations based on the permissions provided.

This comprehensive management system is designed to provide **maximum security** and **customizable control**, making it ideal for both personal and enterprise users.
