Asset Tokenization Platform - Secure Onboarding & Authentication

How do I access my asset tokenization platform?

Accessing your tokenization platform requires enterprise-grade security setup to protect digital assets worth millions. This guide walks you through the secure onboarding process that financial institutions and enterprises use to safeguard tokenized securities.

Who needs secure platform access?

• Platform Administrators: Managing the entire tokenization ecosystem
• Asset Issuers: Creating and managing tokenized securities
• Compliance Officers: Overseeing regulatory requirements
• Investors: Accessing and managing digital asset portfolios
• Auditors: Reviewing platform operations and transactions

What security challenges does this solve?

Step 1: How do I find my platform URL?

Locate your unique platform endpoint in the SettleMint dashboard:

Where to find your endpoint:

Step 2: How do I create my admin account?

The first user to register automatically receives platform administrator privileges:

What information is required for signup?

Account Creation Fields:

• Email Address: Corporate email for notifications
• Password: Minimum 12 characters with complexity requirements
• Organization: Company name for multi-tenant setup
• Role Selection: Admin, Issuer, or Investor

First User Privileges:

• Full platform administration rights
• User management capabilities
• Asset creation permissions
• System configuration access
• Compliance monitoring tools

Why does the first user get admin rights?

This design enables rapid platform deployment while maintaining security:

• Immediate platform control without external configuration
• Simplified onboarding for proof-of-concepts
• Clear ownership establishment
• Audit trail starts from account creation

Step 3: How do I secure my wallet with PIN protection?

After account creation, you must establish transaction security:

What is the 6-digit PIN used for?

The PIN serves as your transaction authorization key:

• Asset Transfers: Confirm before sending tokens
• Smart Contract Interactions: Authorize blockchain operations
• Administrative Actions: Approve critical platform changes
• Wallet Access: Additional layer beyond password

PIN Security Best Practices:

Step 4: How do I save my recovery codes?

The platform generates one-time recovery codes for emergency access:

What are recovery codes used for?

Emergency Scenarios:

• Lost authentication device
• Forgotten PIN
• Compromised primary credentials
• Employee offboarding
• Disaster recovery

How should I store recovery codes?

How do passkeys provide passwordless authentication?

The Asset Tokenization Kit implements FIDO2/WebAuthn passkeys for bank-grade security without passwords:

What are passkeys?

Passkeys are cryptographic credentials that replace passwords entirely:

• Technology: Public-key cryptography (FIDO2/WebAuthn standard)
• Storage: Secure enclave on your device or cloud keychain
• Security: Phishing-proof, no shared secrets
• User Experience: One-touch biometric authentication

How do passkeys work for asset tokenization?

Why are passkeys superior for financial platforms?

Which devices support passkeys?

Desktop Platforms:

• macOS: Safari with Touch ID (Ventura+)
• Windows: Edge/Chrome with Windows Hello
• Linux: Chrome/Firefox with FIDO2 keys

Mobile Devices:

• iOS: iPhone/iPad with Face ID or Touch ID (iOS 16+)
• Android: Devices with biometric sensors (Android 9+)

Cross-Platform Sync:

• Apple iCloud Keychain
• Google Password Manager
• 1Password, Dashlane (passkey support)
• Hardware keys (YubiKey 5+)

How do I combine passkeys with other authentication methods?

Enterprise deployments often require multiple authentication factors:

Available Authentication Methods:

Recommended Security Configurations:

For Individual Investors:

• Passkey + TOTP backup
• Recovery codes in password manager

For Corporate Users:

• SSO + Passkey
• Hardware key requirement for admins
• IP whitelisting

For High-Value Accounts (>$10M):

• Passkey + Hardware key + Time delays
• Multi-signature requirements
• Geographic restrictions

What happens after successful authentication?

Once authenticated, you gain access to the complete asset tokenization platform:

Available Platform Modules:

For Administrators:

• User & role management
• Platform configuration
• Compliance monitoring
• System health dashboard

For Asset Issuers:

• Asset creation wizard
• Token management tools
• Investor relations portal
• Distribution controls

For Investors:

• Portfolio overview
• Trading interface
• Transaction history
• Document vault

Security Features Post-Login:

• Session Management: Configurable timeout periods
• Activity Monitoring: Real-time suspicious activity alerts
• Transaction Limits: Daily/monthly thresholds
• Audit Logging: Every action recorded with timestamp
• Emergency Lockdown: Instant account freeze option

Best Practices for Ongoing Security: