Advanced Security

Separate keys, roles, and risk.

Advanced XRPL security is about reducing exposure of the master key and designing safer operational workflows.

Regular Key

A regular key is a separate key pair authorized to sign for the account. It can reduce exposure of the master key.

Master Key Disable

Powerful but dangerous. Do not disable the master key unless a safe alternative signing path and recovery plan exist.

Multisig

Requires multiple signatures. Useful for treasury, family, business, and higher-value custody setups.

Cold Storage

Keep high-value keys offline and use separate hot wallets for daily activity.

Air-Gapped Signing

Build unsigned transactions online, verify and sign offline, then broadcast online.

Inheritance Planning

Security must include recovery instructions for emergencies and trusted heirs.

Regular Key Mental Model

BeforeMaster key signs everything. If it is exposed, the account is at risk.
AfterMaster key can stay offline while the regular key signs routine transactions.
ImportantA regular key is not a spending limit. It is an authorized signing key. Treat it seriously.
Master Disable WarningIf the master key is disabled and the regular key is lost, access may be permanently lost unless another signing method exists.