Glossary for common terms in Hex Safe.

Approver

Authy

Address Book

Auditor

Authentication

Authorization

Blockchain confirmations / Transaction speed

Cold wallet

Control Center

History

Initiator

Operator

Security key

Two Factor Authentication (2FA)

Yubikey

Zerokey wallet

Approver - Approvers are Hex Safe first level of security and are able to approve transactions entered by Initiators. They have configured the Authy app and will be notified of each transaction. 
They are typically team leaders or supervisors. Using the Authy app, Approvers may “Accept” or “Reject” a pending transaction. 
A withdrawal request is only processed after a minimum number of approvals is received. 
Approvers have permission to approve:

  • transactions;
  • changes on Address Book and Wallet Whitelisting.
Important: the minimum number of approvals needed to approve a withdrawal is defined in the withdrawal approval scheme and can be changed any time.

 

Authy App and Authy ID - Authy is a mobile application needed by users with the Approver role in Hex Safe. It is used to approve specific important actions such as withdrawals and wallet whitelistings. The Authy ID is used by our team to link Hex Safe with the device of users with the Approver role. In this way they will be notified each time their attention is needed.

Address Book - allows users with the Initiator role to manage wallet addresses and save them in the address list. All other user roles have a view access only. 
When a withdrawal is initiated, these saved wallet addresses can be quickly selected in the recipient address field in the dropdown. 
The function can be found in the top right corner of the platform under “More Tools”.

Auditor - these have view-only  access to the account. Typically, they are members of the accounting team or auditors in the company.

Authentication - two ways of client authentication include Security Key and Two Factor Authentication. Hex Safe supports authentication via Security Key which is a method that uses a hardware device to verify a user's identity. Some examples of Security Keys are built-in fingerprint readers in laptops and special plug-in USB keys like Yubico's devices. 
They are a highly secure and recommended way to verify your identity and can be used alternately with 2FA mobile applications that generate a Time-based One Time Pin (also called TOTP).

Authorization (Authy App) - Hex Trust establishes different roles for the users and a role called Approver has the ability to use an application called Authy to approve specific important actions, such as withdrawals and wallet whitelistings

Blockchain confirmations / Transaction speed - all deposits can only be confirmed after sufficient block confirmations are detected from the blockchain network. The number of block confirmations required will vary depending on the blockchain. Hex Trust monitors these networks continuously and once sufficient confirmations are received, the deposit will be marked ​completed and the status will get updated on the History page of the Hex Safe account.

Cold wallet - this type of wallet allows for storing security keys offline in a vault only accessible by selected  Hex Trust personnel, hence providing the highest level of security for digital assets. The transactions are released by the Hex Trust team instead of the user and are processed within 4 hours. The withdrawal steps for Cold wallets are described here.


Control Center - this is an action inbox where users can see all the actions that require their attention, such as Authy approval or signing and releasing of transactions with Yubikeys. Users can check their pending notification in the Control Center whenever they expect an activity to be happening with their assets. 


History - this section shows history and status of incoming transactions, deposit requests, withdrawal and staking transactions. For more details about transaction history, please check this article


Initiator - these are the day-to-day transaction processors. They may initiate withdrawals, deposits, view account details and see the status of pending transactions.
Initiators have permissions to:


Operator - Operators are Hex Safe second level of security for the warm wallet solution: ZeroKey. They are the final layer of security and confirmation before a withdrawal is broadcasted to the network. 

They are YubiKey holders and usually team leaders or senior officers in a company. 
A withdrawal will be released  only after  the minimum number of Yubikeys is submitted. 
Operators have permission to:
  • sign and confirm withdrawals using the Yubikey via the Hex Safe app 
Important: The minimum number of Yubikey submissions needed to release a withdrawal is defined in the withdrawal release scheme.

 

Security key - a Security key is a 2-Factor Authentication (or 2FA) method that uses a hardware device to verify your identity. Some examples of Security Keys are built-in fingerprint readers in laptops and special plug-in USB keys like Yubico's devices. 
They are a highly secure and recommended way to verify your identity and can be used alternately with 2FA mobile applications that generate a Time-based One Time Pin (also called TOTP). The Yubikeys provided by Hex Trust to users with the Operator role cannot be used as a Security key.


Two Factor Authentication (2FA) - 2FA is a widely utilized authentication method designed to enhance security. 
Hex Safe users will be required to input 2FA to successfully perform the following actions:
 

  • Login
  • Initiate Withdrawals
  • Initiate Staking
  • Enable/Disable Wallet Whitelisting
  • Add/Remove addresses from a Whitelist
  • Create a new address in the Address Book

Yubikey - Yubikey is a hardware authentication device manufactured by Yubico needed by users with the Operator role to release withdrawals. It can also be used as Security Key

Zerokey wallet - this type of wallet is the most similar to a hot wallet that an individual would commonly register with a cryptocurrency exchange, such as Binance, Coinbase and so on. Security keys are shared on a server and transactions executed through Zerokey wallets get processed almost immediately. Withdrawals from ZeroKey wallets can be released through the Hex Safe desktop application by users with the Operator role. The withdrawal steps for ZeroKey wallets are described here.