Choose properties required for each signing scenario.
Enter a scenario such as git.signature, or * for all scenarios.
Loading signing requirements...
Active requirements
No active signing requirements.
Properties are reported by keys. A biometric report does not prove biometric authentication was used for a specific signature.
Draft. Changes are not enforced until activated.
You have read-only access to this draft.
Draft saved. It is not enforced until activated.
Review and approve proposals in the KeySigner app with an enrolled signing key. The last required approval activates the saved proposal.
Loading changes...
No signing requirement changes yet.
What needs you, what waits on others, and what already happened
Nothing needs attention.
| Request | Account | Asked by | Asked | Actions |
|---|
Nothing is waiting for you.
You sit on your company's governance council. Approve a change with the security key registered for your seat.
| Member | Roles now | Roles after | Expires | Vote |
|---|
| Request | Account | Asked by | Approvals | Asked |
|---|
Nothing is waiting for others.
Changes that give someone more authority wait here until independent approvers accept them.
| Member | Roles now | Roles after | Proposed by | State | Expires | Actions |
|---|
No role changes yet.
| Request | Account | Asked by | State | Decided by | Asked |
|---|
No history yet.
Review requests from your paired customer devices in the KeySigner app. Your saved customer connection controls which requests appear.
Open the customer inbox in KeySignerEach account has a rule: who must agree before it acts.
These recoveries stopped and will not apply. Start a new recovery if it's still needed.
A recovery replaces a server's keys after 72 hours and 2 approvals by recovery custodians. Anyone who sees one they don't expect should cancel it.
| Account | New keys | Approvals | Applies | Actions |
|---|
Each key's holder signs the change on their device. It applies when enough keys have signed.
| Account | Change | Signed |
|---|
| Account | Chain | The account's rule | Keys |
|---|
No wallets yet.
| Account | Kind | The account's rule | Keys |
|---|
No servers yet.
Who must agree, by host. A rule sets how many keys every matching server needs, including servers added later. Use * for any run of characters. The strictest matching rule wins.
| Rule | Hosts | Keys needed | Servers | Actions |
|---|
No rules by host yet.
| Package | Registry | The account's rule | Owners |
|---|
| Release | Approvals | State | Approved by |
|---|
No releases yet.
| Account | The account's rule | Members |
|---|
No multisig accounts yet.
| Account | Kind | The account's rule | Keys |
|---|
No websites yet.
Every key that can sign for an account, grouped by who holds it and the device it lives on.
| Member | Attested keys | Status |
|---|
These keys are on your phone in your personal KeySigner. Bring them here to use them for your company's accounts. Only public keys are copied; the keys stay on your phone.
No keys yet. A key appears here once someone adds one in the KeySigner app.
This change needs independent approval. Your company governs changes that give someone more authority.
| Member | Roles | Status | Actions |
|---|
New people join as viewers. Change their roles once they have joined.
| State | Actions |
|---|
A group gives its members its roles, on top of their own. The owner role is always given directly.
| Group | Roles | Members | Actions |
|---|
No groups yet.
Last 7 days, newest first
| Time | Event | By | Sequence |
|---|
One file with every record your organization has in KeySigner: people, roles, keys, accounts, requests, releases, billing and the audit log. It holds no secrets.
KeySigner sends every new audit event to this address, signed with the stream's secret.
Copy this secret now. KeySigner won't show it again.
KeySigner writes audit events as files into your S3-compatible bucket.
When available, KeySigner can cover network fees for eligible multisig accounts. The amounts below reflect confirmed fees; billable fees are the network cost plus 5%.
Support access and closing the organization
Let KeySigner support see counts and states (never names, keys or request contents) for a few hours. Each time support looks, it appears in this audit log.
| Reason | Granted by | State | Actions |
|---|
Closing stops new requests at once. You can cancel for 30 days and download everything meanwhile; then all of your organization's data in KeySigner is deleted.