This page describes how to set up a Standby Wallet for your primary wallet provider using Station70's Secure Wallet Asset Transfer (SWAT).
While this guide offers a generic solution that applies to any primary wallet provider, our Standby Wallet solution currently supports only migrating keys from Fireblocks to Fordefi.
A Standby Wallet is a dormant Fordefi workspace that stays inactive until you need it. If your primary wallet provider becomes unavailable, Station70 transfers your wallet key material to the Standby Wallet, so you can keep operating from Fordefi. The private key is never rebuilt in one place.
You can also use SWAT to move off your primary wallet provider permanently. In doing so, you avoid handling private keys manually, as you do when you import them directly.
You need a Station70 Pro or Enterprise plan, which includes SWAT.
If you have questions about your plan, contact Station70.
- Onboard with Station70.
- In Fordefi, create a Standby Wallet workspace and onboard admins.
- Configure the Fordefi workspace: upload Station70's public key as the backup, set an admin quorum, and add a policy that blocks all transactions.
- Create a Fordefi API user with the Trader role.
- Add Fordefi as the backup provider in Station70 with the API token and your organization ID.
- Check your setup regularly.
- If you need it, activate SWAT with Station70.
Onboard with Station70 as usual. Station70 guides you through connecting your primary wallet provider.
- Work with Fordefi support to create a Standby Wallet workspace for your organization.
- Onboard every admin into the workspace now, not on activation day.
- Retrieve your organization ID from the Fordefi console: https://app.fordefi.com/profile/organizations
- Send the organization ID to Station70. They will send you an RSA public key in return.
The workspace can stay unused for years, so set it up to remain reachable and safe until you need it.
- Upload the RSA public key from Station70 as the workspace's backup. Follow step 7 of that page, and have all admins confirm in the Fordefi mobile app.
- Set an admin quorum that you can still reach years from now. People leave, and a quorum that is too strict can lock the workspace when you need it.
- Add a policy rule that blocks all transactions. Funds stay frozen until you replace the policy with real rules after activation. Do this before you create the API user, so its key can never move funds.
- Make sure every admin has a device backup to ensure future access. Failure to properly manage device backups can lock you out of the workspace.
- In the Fordefi web console, create an API user with the Trader role.
- Save the API user's access token.
The Viewer role isn't sufficient. Trader is the only role that can import derivation paths. Station70 uses the token to create vaults after the keys arrive, never to sign transactions. The block-all policy from Step 3 also stops this key from moving funds.
- Log in to Station70.
- Go to Backups and open your Fordefi workspace's backup.
- Under Action Items, click Link Wallet.
- Enter the Fordefi API user's access token and your Fordefi organization ID when prompted.
A five-minute monthly check is enough. Confirm that:
- Your admins still work at your company.
- Your admin quorum is still reachable.
- The Trader API user and its token are still active and shared with Station70.
- Every admin has a current device backup.
- The Fordefi mobile app is up to date.
Activate SWAT when you need to move your primary wallets to Fordefi.
- Log in to Station70.
- Go to Backups and open your Fordefi workspace's backup.
- Click Initiate Recovery.
- Select Secure Wallet Transfer. Station70 runs the transfer into Fordefi automatically, converting your key shares into Fordefi's format and importing your wallet addresses and balances. This takes minutes.
- Open Fordefi. Your wallets appear in the workspace.
- Replace the block-all policy with your own policy rules so you can transact.
- If your wallets appear in Fordefi but show no assets, contact Fordefi support to refresh your vaults.
- Bitcoin, Ethereum, Solana, Sui, and Tron vaults are created automatically.
- Keys for other chains transfer too, but you must create their vaults yourself.
After the transfer, the workspace holds live keys and needs access control and maintenance like any other workspace. You can archive it, but you can't empty it or return it to dormant.