Multi-User Wallet

Overview

Multi-user access supports finance, operations, administrators, auditors, developers, or customers without sharing one credential. Roles may control viewing, address creation, transaction preparation, approval, policy management, export, or recovery.

Separate logins do not necessarily mean separate on-chain keys. The provider may enforce roles around one custody key, or each user may hold independent signing authority. Administrators, identity providers, API accounts, and recovery staff can have greater effective control than ordinary approvers.

Organizations should apply least privilege, strong authentication, joiner and leaver procedures, periodic access review, and separation of duties. Sensitive policy changes need independent approval. Logs should identify each user and action, including failed attempts and administrative overrides. Shared accounts should be eliminated because they destroy accountability and complicate incident containment.

Multi-User Wallet should be distinguished from the asset balance and from the application that displays it. For example, a customer-facing success message does not prove that the intended transaction executed on the correct network; operations should verify execution and reconcile the result before irreversible fulfillment.

Records for Multi-User Wallet should preserve account and address identifiers, asset and network identity, policy version, requester, approvers, signed payload or transaction reference, fees, timestamps, status history, confirmations, exceptions, and final balance and accounting effects. For Multi-User Wallet, corrections must remain linked rather than overwrite the original event.

Material risks for Multi-User Wallet include credential compromise, malicious destinations, unsupported assets, wrong-network transfers, stale balances, compromised software, provider outage, privacy leakage, and inaccessible recovery material. For Multi-User Wallet, controls should reflect value, automation, reversibility, and whether the organization or a third party controls signing.