Session keys let Tapioca execute transactions on your behalf without prompting you to sign each one. Built on EIP-7702, a session key is a time-limited, scope-limited authorization: you define which actions it can take and for how long. Once active, the app uses your session key to submit gasless transactions seamlessly — no pop-ups, no confirmations. You remain in full control, and you can revoke any session key at any time.
Revoke any session keys you no longer need. An active session key grants the app permission to perform its authorized actions until it expires or is revoked.
Create a session key
Open Settings
Click your account icon in the top-right corner and select Settings from the dropdown menu.
Go to Session Keys
In the Settings sidebar, select Session Keys. You will see a list of any currently active session keys.
Click Create New
Select Create New to open the session key configuration panel.
Set a name
Give the session key a descriptive name (e.g., “Daily yield management”) so you can identify it later in your active keys list.
Choose an expiry duration
Select how long the session key should remain valid. Options typically range from 1 hour to 30 days. The key automatically becomes invalid after the chosen duration, with no action required from you.
Select permitted actions
Choose which actions the session key is authorized to perform, such as deposits, withdrawals, or strategy rebalancing. Restrict permissions to only what you need for the task at hand.
Confirm and sign
Review the session key details and click Create Session Key. You will be asked to sign once to authorize the key — this is the only signature required for all subsequent actions covered by this key.
Short-lived session keys (24 hours or less) are recommended for day-to-day use. They limit your exposure window and expire automatically if you forget to revoke them.
View active session keys
Navigate to Settings → Session Keys
From any page in the app, open Settings and select Session Keys.
Review your active keys
Each active session key displays its:
- Name — the label you assigned at creation
- Permitted actions — the scope of what it can do
- Expiry — the exact date and time it will automatically expire
Revoke a session key
Revoking a session key immediately invalidates it, even if its expiry duration has not elapsed.
Navigate to Settings → Session Keys
Open Settings and select Session Keys to see your list of active keys.
Find the key to revoke
Locate the session key you want to cancel in the list.
Click Revoke
Select Revoke next to the key. Confirm the action when prompted. The key is invalidated on-chain immediately and will no longer appear in your active keys list.
Session key revocations are on-chain transactions. Tapioca covers the gas cost — you will not be charged any ETH.
