
Session Key Plugin
FreeModular Plugins (ERC-6900)
Session Key Plugin lets your Modular Account add signers with specific permissions, durations, and spending limits.

Modular Plugins (ERC-6900)
Session Key Plugin lets your Modular Account add signers with specific permissions, durations, and spending limits.
Session Key Plugin enables your Modular Account to add signers with per-app permissions and defined time windows.
Session keys provide a streamlined authentication flow while minimizing exposure of the main private key.
Users create a session key with app-specific permissions, and the app can use that key for future actions.
The plugin also supports configuring start and end times for each key, enforcing access control lists to allow or deny addresses, requiring specific paymasters, and setting spending limits for ERC-20s, native tokens (e.g., ETH, MATIC), and gas within a defined interval or in total.
The standard this plugin is built on, and why a scoped, expiring signer is safer to hand an app than the account's own key.
ERC-6900 splits an account into validation, execution and hooks. The spec that makes plugins like this installable at all.

Security frameworks, smart contract reviews, and compliance alignment to reduce risk and protect users.
Smart Contract Wallets • Arbitrum
Modular Plugins (ERC-6900) • Ethereum
Smart Contract Wallets • Arbitrum