> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aeon.so/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Setup

> Configure backups, admin quorum, and transaction policies

<Warning>
  Follow these security steps immediately after creating your workspace to
  ensure operational security.
</Warning>

Proper security configuration is critical for protecting your organization's assets. This guide covers the essential security measures you must implement.

## 1. Configure Backups

Backup configuration is your safety net for recovering access to funds if Aeon becomes unreachable.

<Steps>
  <Step title="Navigate to Backup Settings">
    Go to **Settings** → **Backup** tab in your workspace
  </Step>

  <Step title="Create Backup">
    Click **"Create Backup"** and select trusted users for backup
    responsibilities
  </Step>

  <Step title="Understand the Commitment">
    ⚠️ **This decision is irreversible.** Selected users will always have the
    ability to recover private key material.
  </Step>

  <Step title="Distribute Backup Materials">
    When new vaults are created, backup key material is automatically generated
    and sent via email to designated backup users.
  </Step>
</Steps>

<Tip>
  For single-user workspaces, one backup user is sufficient. For additional
  security, include multiple users from your organization.
</Tip>

### Backup User Responsibilities

Backup users must:

* Securely store backup files received via email
* Keep their seed phrases safe and accessible
* Be available for emergency recovery procedures
* Understand the recovery process

<Note>
  Backup users should be trusted individuals who understand the importance of
  their role in fund recovery.
</Note>

## 2. Increase Admin Quorum

<Warning>
  Default workspaces use a **1/x** admin quorum, which is insufficient for
  production use.
</Warning>

The admin quorum determines how many administrators must approve critical operations like policy changes and user management.

### Recommended Settings

* **Minimum 2/x**: For workspaces with 2-4 administrators
* **3/x or higher**: For larger organizations with more administrators
* **Majority rule**: Require more than 50% of administrators for maximum security

### How to Update Admin Quorum

<Steps>
  <Step title="Navigate to Admin Settings">
    Go to **Settings** → **Administrators** → **Quorum Settings**
  </Step>

  <Step title="Set Quorum Threshold">
    Increase the required number of administrator approvals to at least **2**
  </Step>

  <Step title="Apply Changes">
    Save the new quorum settings - this change requires current admin approval
  </Step>
</Steps>

## 3. Configure Transaction Policies

Default policies may auto-approve transactions, which poses security risks. You should modify policies to require proper authorization.

### Policy Configuration Steps

<Steps>
  <Step title="Access Policy Settings">
    Navigate to **Settings** → **Policies** in your workspace
  </Step>

  <Step title="Select Default Policy">
    Find and select the default transaction policy that was created with your
    workspace
  </Step>

  <Step title="Add Required Signers">
    Add administrators as required signers for transaction approval
  </Step>

  <Step title="Remove Auto-Approval">
    Ensure no transactions can execute without prior admin approval
  </Step>

  <Step title="Set Transaction Limits">
    Configure appropriate transaction limits based on your organization's needs
  </Step>
</Steps>

### Policy Best Practices

<CardGroup cols={2}>
  <Card title="Multi-Signature" icon="users">
    Require multiple approvals for high-value transactions
  </Card>

  <Card title="Amount Limits" icon="dollar-sign">
    Set daily/monthly limits for different user roles
  </Card>

  <Card title="Time Restrictions" icon="clock">
    Limit transaction execution to business hours if appropriate
  </Card>

  <Card title="Recipient Validation" icon="shield-check">
    Require approval for transactions to new addresses
  </Card>
</CardGroup>

<Note>
  Consult with the Aeon team for recommendations on optimal transaction policy
  configuration for your specific use case.
</Note>

## 4. Test Your Security Setup

After configuring security settings, verify everything works correctly:

### Security Checklist

* [ ] Backup configuration is complete and tested
* [ ] Admin quorum is set to appropriate level (minimum 2/x)
* [ ] Transaction policies require proper authorization
* [ ] All administrators can access and approve transactions
* [ ] Backup users understand their responsibilities
