> For the complete documentation index, see [llms.txt](https://docs.roamingiq.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.roamingiq.com/network-administrator-console/network-operator-settings/keypools.md).

# Keypools

### What are Keypools?

A keypool is essentially a reservoir of keys, or Wi-Fi passwords, along with the corresponding SSID for authentication purposes.

VAULT has three types of keypools.

1. Global: A global keypool is available at all venues. Any subscriber's Wi-Fi password, or PSK, in that keypool will work at all venues. We recommend always using a global keypool and broadcasting the same SSID at all venues, for example, "RoamingiQ Wi-Fi."
2. Local/Venue: A local keypool is exclusive to one specific venue. Any subscriber's Wi-Fi password, or PSK, in that keypool will only work at that venue with that local keypool.
   1. However, if you also have a global keypool, any Wi-Fi passwords associated with the local keypool will also "roll up" to work with the global keypool.
3. Unit: A unit keypool is exclusive to one specific unit at at venue.
   1. Any subscriber's Wi-Fi password, or PSK, in a unit keypool will also roll up to work with any Venue or Global keypool.

### How to Create Keypools

{% embed url="<https://scribehow.com/shared/How_to_Create_a_Keypool_in_VAULT__XjqDPhY2TQaO41wQPTcuUQ>" %}

You may also create a new keypool while creating or modifying a venue within the [venue settings](/network-administrator-console/creating-a-new-venue/add-a-keypool-to-a-venue-or-unit.md).

#### Keypool Scope and Display Order

After you have created a keypool, you will see two additional values.

1. Scope:  Indicates if a keypool is global, local, unit, or attached a [Ruckus R1 for DPSK3.](/network-administrator-console/network-operator-settings/ruckus-r1-dpsk3.md)
   1. Global: Indicates a keypool is global.
   2. 8 Character String: Indicates a keypool is local.
   3. 32 Charater String: Indicates a keypool belongs to Ruckus R1.&#x20;
2. Display Order:  If multiple keypools are available at a venue, the keypool with the lowest display order will appear by default when the subscriber logs into their VAULT account.

As a best practice, ensure a local keypool or Unit keypool at a Venue has a lower display order value than a global keypool at a Venue.