Security
Set up the PIN, recovery codes, two-factor authentication, passkeys, and sessions that protect your Console account and your wallet's signing authority.
Security protects Console sign-in and transaction signing. Two-factor authentication, passkeys, and active sessions protect signing in to the Console itself. Your PIN and recovery codes protect something else: the signing authority of your Smart WalletA Smart Wallet lets a tenant require several signers to agree before an instruction moves assets, with the rule enforced on chain, not by one private key.Read the concept, the wallet the Console uses to authorize the transactions your account submits. You can be fully signed in without being able to sign a transaction yet, which is exactly the gap this page exists to close.
Reach for this page the first time you need to sign a transaction and have not set up wallet security yet. Come back whenever you want to add a stronger sign-in method, or when you need to end a session on a device you no longer trust. Most of the setup here happens once; after that, you return mainly to review sessions or replace a recovery-code set you have run down.
Account readiness moves in three stages
A new Console account is provisioned as soon as you sign up: you can sign in and browse. It becomes API-ready the moment you generate an API key, which needs no wallet setup at all, since a key authenticates a Platform API request on its own. It becomes transaction-ready only once your wallet has a PIN and a confirmed set of recovery codes, because a transaction needs your wallet to sign it, and the wallet will not sign until both exist.
Complete wallet security before authorizing a transaction. If you reach a screen that asks you to authorize a transaction before your wallet security setup is complete, the Console does not show you the usual PIN or passkey prompt. It substitutes a short setup wizard in its place, right there in the same dialog, and only returns you to the transaction once the wizard finishes. Finish the setup wizard to continue with the transaction.
Steps
Open Security
Open My account, then Security. The page groups PIN code, recovery codes, two-factor authentication, passkeys, and sessions as separate cards, each showing its current state and its own control.
Screen equivalent: the page lists independent cards for PIN code, recovery codes, two-factor authentication, passkeys, and active sessions, each with its own control.
Set your PIN and save your recovery codes
If your PIN code card shows Not set, select Set PIN. The wizard asks for a 6-digit PIN first, then shows a set of recovery codes and requires you to confirm you have stored them, "I have stored these recovery codes in a safe place", before you can finish. This confirmation is the gate: the wizard will not let you continue without it, and once you confirm and finish, that specific set of codes is the one your account uses for recovery until you regenerate.
Turn on two-factor authentication, or add a passkey
To add two-factor authentication, start the flow, enter your password, then scan the QR code with your authenticator app and enter the resulting code to confirm. The Console then shows a set of backup codes and requires the same kind of confirmation, "I have saved my backup codes", before the Done button unlocks. To add a passkey instead, or as well, select Add passkey on the passkey card and follow your device's prompt.
Both methods can also come off. Select Disable two-factor on the two-factor card and enter your password to turn it off. To remove a passkey, select Delete passkey on its row and confirm. That passkey can no longer sign you in. Your other passkeys and sign-in methods keep working.
Troubleshooting
I was asked to set up a PIN in the middle of trying to sign a transaction
The Console substitutes the setup wizard for the verification prompt whenever your wallet security is incomplete. Finish the wizard, which ends with the same recovery-code confirmation step described above, and the Console returns you to the original transaction automatically once you do.
I forgot my PIN
Use "Forgot PIN?" on the PIN code card. It asks you to set a new PIN, then asks for one unused recovery code to authorize the reset instead of your password. If that code was your last one, the Console immediately generates a fresh set and walks you straight into confirming and saving it. A reset that left you with zero codes would strand you the next time you forget your PIN.
I have run out of recovery codes and cannot reset my PIN
The recovery codes card warns you once you are down to your last two codes, and again once you have none left. Regenerate a fresh set from that card while you still remember your PIN, since regenerating after your codes are exhausted still needs you to authorize the regeneration with your password, not a code you no longer have.
I cannot revoke my current session
That is expected: the session you are using right now is marked Current session and has no revoke control of its own, since ending your own active session from inside itself would sign you out mid-action. Sign out to end the current session. Use the sessions card to revoke other devices individually or to revoke all other sessions.
The sessions list will not load
If your own session is not recent enough for the Console to trust it for a sensitive read like this, the sessions card asks you to sign in again rather than showing a stale or partial list. Re-authenticate and the list loads normally.