# Creating a vault

You create a vault in three steps: Vault Details, Select Keys, and Review & Create. The threshold and the signers you choose are permanent, so this is the most important governance decision you make for the vault.

> Part of the SQRL documentation, section "SQRL Enterprise".
> Rendered page: https://docs.sqrl.tech/enterprise/vaults/creating-a-vault

**Required permissions:** Manage vaults (`MANAGE_VAULTS`).

**Prerequisites:** Every signer has a [signing profile](/enterprise/signing-profile) in this workspace.

## Step 1: Vault Details

1. Open **Vaults** and select **Create Vault**.
2. Enter a name.
3. Leave **Script Type** as **P2WSH**.
4. Set **Required Signatures (M)** and **Total Keys (N)**. For 2-of-3, set 2 and 3.
5. Select **Continue**.

## Step 2: Select Keys

1. Select N keys from your workspace's signing profiles. You can pick from a flat list, or by person and then key.
2. Select **Continue**.

  Each key should belong to a different person, or to an HSM under separate control. A vault where one person holds two keys of a 2-of-3 can be moved by that person alone.

## Step 3: Review & Create

Check the name, threshold and signers, then select **Create Vault**. The vault takes the network of the workspace.

Holders of Manage vaults are notified that the vault was created. The vault's spending policy starts with its default limit; see [Vault policies](/enterprise/vaults/vault-policies).

  A vault's threshold and signers are fixed at creation. If a signer changes, create a new vault with the new signer set and move the assets across under the old quorum.