{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-user-guide/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["img","admonition"]},"redocly_category":"User Guide","type":"markdown"},"seo":{"title":"Freeze a Workspace","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"freeze-a-workspace","__idx":0},"children":["Freeze a Workspace"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Freezing is an emergency \"kill switch\" that lets an admin instantly halt all"," ","activity in your workspace from a single action. Use it to contain an incident —"," ","a suspected key compromise, a phishing event affecting a signer, abnormal"," ","automation behavior, or an insider threat — without having to disable users,"," ","revoke tokens, and pause automation one surface at a time."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Freezing is deliberately asymmetric: a single admin can freeze immediately, but"," ","releasing the freeze requires both Fordefi Customer Success and an Admin Quorum"," ","approval. This makes it hard for an attacker to silently reverse the"," ","containment."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"workspace-states","__idx":1},"children":["Workspace states"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["A workspace is in one of three states:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Active"]},": The normal state. All actions are available."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Frozen"]},": Every value-moving and configuration-changing action is blocked."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Pending unfreeze"]},": A release has been started and is awaiting Admin Quorum"," ","approval. The workspace stays frozen until the quorum approves."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"what-freezing-does","__idx":2},"children":["What freezing does"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["While a workspace is frozen, all value-moving and configuration-changing actions"," ","are blocked, including:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["New transactions and swaps"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Approvals and signatures on already-pending transactions"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Policy creation, edits, and deletion"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["User, role, and API User changes"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Address book changes"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["MFA and passkey changes"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Webhook endpoint changes"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Importing keys and activating an API Signer"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Any write action added to the platform in the future is frozen by default as"," ","well."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Read access stays available. Users can still log in and view balances,"," ","transaction history, and audit logs. A persistent banner across the web console"," ","and mobile app shows that the workspace is frozen. Admins can also see when it"," ","was frozen, by whom."]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/workspace-freeze-frozen.29d59dc06cdeba1fba37752e6bd95554a587db416eddbe1baf452459c4921209.9c1bb791.png","alt":"alt","framed":false,"withLightbox":false,"width":"700","border":"1px solid lightgray"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Freeze during backup expiration"},"children":[" A workspace"," ","can be frozen even if it is disabled due to backup expiration. Uploading a"," ","backup is not permitted while the workspace is frozen. "]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"who-can-freeze","__idx":3},"children":["Who can freeze"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Only an ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Admin"]}," can trigger or release a freeze. ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Traders"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Viewers"]}," ","can see the workspace state but cannot act on it. Every step of the freeze and"," ","release flow is attributable and written to the"," ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/user-guide/export-audit-logs"},"children":["audit log"]},"."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Role / User type"},"children":["Role / User type"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Trigger freeze"},"children":["Trigger freeze"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Initiate release"},"children":["Initiate release"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Approve release quorum"},"children":["Approve release quorum"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"View state"},"children":["View state"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Admin"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes (once CS enables)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Trader"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Viewer"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["API User"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Inherits from underlying user role"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Inherits"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Inherits"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"freeze-your-workspace","__idx":4},"children":["Freeze your workspace"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You can freeze from either the web console or the mobile app. A confirmation"," ","step prevents accidental triggers."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["From the web console:"]}]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In the side menu, click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Settings"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Emergency"]},"."]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/workspace-freeze-active.97986dcc9697b31e04ffee62f7cd5e072005ada96ede7fab25042659d0f4450b.9c1bb791.png","alt":"alt","framed":false,"withLightbox":false,"width":"700","border":"1px solid lightgray"},"children":[]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Emergency Freeze"]}," area, click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Freeze Organization"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Confirm the action by typing the confirmation keyword."]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["From the mobile app:"]}]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open the emergency freeze control."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Confirm with your biometric or device passcode."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You can optionally record a free-text reason at freeze time, which is surfaced"," ","in the audit log and notifications. The freeze takes effect immediately, and all"," ","workspace users are notified in the app."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"release-a-freeze","__idx":5},"children":["Release a freeze"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Releasing a freeze is intentionally harder than triggering one. The ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Unfreeze"," ","Organization"]}," control stays disabled for everyone until"," ","Fordefi Customer Success enables it."]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Contact your Fordefi CSM"]}," through your shared Slack or Telegram channel to"," ","request a release."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Your CSM validates the request"]}," — verifying the requester's identity and"," ","confirming the incident is contained."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Your CSM enables self-serve release."]}," The ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Unfreeze Organization"]}," ","control in the web console and mobile app becomes active."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["An admin initiates the release."]}," In the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Emergency Freeze"]}," area, the"," ","admin clicks ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Unfreeze Organization"]},". This does not unfreeze the workspace"," ","immediately — it starts an ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/user-guide/admin-quorum"},"children":["Admin Quorum"]}," approval, and"," ","the workspace moves to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Pending unfreeze"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["The Admin Quorum approves."]}," Once the quorum threshold is reached, the"," ","workspace returns to active and the audit log records the full chain: the CSM"," ","operator, the initiating admin, every approver, and all timestamps."]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/workspace-freeze-pending-unfreeze.9010a1dfe4087fb5eacbf0fd76016cb114cf5f84cd525ab607b85286a98fca35.9c1bb791.png","alt":"alt","framed":false,"withLightbox":false,"width":"700","border":"1px solid lightgray"},"children":[]}]}]}]},"headings":[{"value":"Freeze a Workspace","id":"freeze-a-workspace","depth":1},{"value":"Workspace states","id":"workspace-states","depth":2},{"value":"What freezing does","id":"what-freezing-does","depth":2},{"value":"Who can freeze","id":"who-can-freeze","depth":2},{"value":"Freeze your workspace","id":"freeze-your-workspace","depth":2},{"value":"Release a freeze","id":"release-a-freeze","depth":2}],"frontmatter":{"title":"Freeze a Workspace","search":{"title":"Shut down a workspace","description":"Freeze your organization to instantly halt all activity during a security incident, then release it through a CSM-gated Admin Quorum flow.","keywords":{"includes":["Shut down"]}},"seo":{"title":"Freeze a Workspace"}},"lastModified":"2026-07-26T10:30:30.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/user-guide/organization-management/freeze-workspace","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}