Skip to content

Commit

Permalink
Add empty keys directory for ease of use
Browse files Browse the repository at this point in the history
  • Loading branch information
yorickdowne committed Sep 22, 2020
1 parent af8f569 commit b934750
Show file tree
Hide file tree
Showing 2 changed files with 1 addition and 32 deletions.
32 changes: 0 additions & 32 deletions .eth2/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,35 +6,3 @@ Use `deposit_data-TIMESTAMP.json` for your initial deposit. After that, it can b
Use `keystore-m_ID.json` files to import your validator secret keys into the validator
instance of the client you are running. These files need to be secured when you are done
with the initial import.

# Validator Key Security

The `keystore-m_ID.json` files have to be stored securely outside of this server. Offline
is best, on media that cannot be remotely compromised. Keep the password(s) for
these files secure as well, for example in a local (not cloud-connected) password vault
on a PC that is not on the network, or at the very least not used for online access.

These files will be needed in case you need to restore your validator(s).

**Caution**
An attacker with access to these files could slash your validator(s) or threaten
to slash your validator(s).

For more on validator key security, read this article: https://www.attestant.io/posts/protecting-validator-keys/

# Withdrawal Key Security

**Critical**
When you ran eth2.0-deposit-cli, a 24-word mnemonic was created. This mnemonic
will be used for eth2 withdrawals in the future. It must be securely kept offline.

Precise methods are beyond this README, but consider something as simple as
a sheet of paper kept in a fireproof envelope in a safe, or one of the steel
mnemonic safeguards that are available.

Test your mnemonic **before** you deposit, so you know that you will be able
to withdraw funds in future.

An attacker with access to your mnemonic can drain your funds.

For more on withdrawal key security, read this article: https://www.attestant.io/posts/protecting-withdrawal-keys/
1 change: 1 addition & 0 deletions .eth2/validator_keys/.empty
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
To keep the directory around

0 comments on commit b934750

Please sign in to comment.