# Where are the keys stored?

**URL:** https://community.fireblocks.com/t/where-are-the-keys-stored/1427
**Category:** Developer Discussion
**Tags:** getting-started
**Created:** [September 13, 2024, 1:14am UTC](https://community.fireblocks.com/t/where-are-the-keys-stored/1427 "2024-09-13T01:14:11Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![alexandre.makiyama](https://avatars.discourse-cdn.com/v4/letter/a/c37758/32.png) [@alexandre.makiyama](https://community.fireblocks.com/u/alexandre.makiyama)
#### Post date: [September 13, 2024, 1:14am UTC](https://community.fireblocks.com/t/where-are-the-keys-stored/1427/1 "2024-09-13T01:14:11Z")

</div>

Hi,

On the Fireblocks Direct custody wallet, where are the key shares of the “3-of-3 multi-party computation (MPC) signature scheme algorithm” stored?

---

<div class="post-metadata">

### Author: ![yoji](https://avatars.discourse-cdn.com/v4/letter/y/977dab/32.png) [@yoji](https://community.fireblocks.com/u/yoji)
#### Post date: [September 13, 2024, 5:05pm UTC](https://community.fireblocks.com/t/where-are-the-keys-stored/1427/2 "2024-09-13T17:05:40Z")

</div>

Hey @alexandre.makiyama – one key share is stored by the workspace owner, and the remaining shares are stored across multiple tier-1 cloud environments to ensure an extra layer of security even if one of the physical data centers is compromised. Nevertheless, these shares cannot be extracted even if malware or a hacker has control over the server’s OS – as the memory space and the data in the SGX enclave are encrypted.

You can find more information on [this Developer Portal page](https://developers.fireblocks.com/docs/what-is-fireblocks#layer-1-mpc-cmp).

---

<div class="post-metadata">

### Author: ![alexandre.makiyama](https://avatars.discourse-cdn.com/v4/letter/a/c37758/32.png) [@alexandre.makiyama](https://community.fireblocks.com/u/alexandre.makiyama)
#### Post date: [September 13, 2024, 6:56pm UTC](https://community.fireblocks.com/t/where-are-the-keys-stored/1427/3 "2024-09-13T18:56:38Z")

</div>

Hi @yoji , thanks for the reply.

So, I understand that this key share hold by the workspace owner is the same as the “third MPC key share” mentioned at [Fireblocks Key Features & Capabilities](https://developers.fireblocks.com/docs/capabilities#hot-warm-and-cold-mpc-cmp-wallets), am I right?

---

<div class="post-metadata">

### Author: ![yoji](https://avatars.discourse-cdn.com/v4/letter/y/977dab/32.png) [@yoji](https://community.fireblocks.com/u/yoji)
#### Post date: [September 17, 2024, 3:02am UTC](https://community.fireblocks.com/t/where-are-the-keys-stored/1427/4 "2024-09-17T03:02:00Z")

</div>

That’s right–although I will also clarify that the owner can create additional “third” key shares for users. This way, an API user can hold a key share for the Hot workspace setup, or other users can have keys to sign operations themselves.
