Manager Account And Validator Account
To run a validator node, you need two different accounts. Each of the accounts has a different role:
- Your node uses an account(i.e., a private key) for signing new blocks. We call this account the
validator account. You can only use a Keystore file for this account.
- You can manage all your funds (margin and pending rewards) with another account. We call this account the
manager account. You can use either a hardware wallet or a gnosis-safe wallet.
With the above setup, your funds will be safe even if the server running your node is compromised and the hacker accesses the private key of your validator account.
You can only use a Keystore file for your validator account. You generate a new Keystore file by running the following command:
geth account new --datadir /data/.kcc
In the previous section, we use
--datadirto specify the directory where all chain data are stored. The generated Keystore file for your validator account is also in this directory.
After running the command above, it will ask you to provide the password for your Keystore file:
Your new account is locked with a password. Please give a password. Do not forget this password.
If everything goes well, it will print the address of your validator account on the screen:
Your new key was generated
Public address of the key: 0xa693bE057aEBeD3fEd313b661ef3cBbFfB49E95d
Path of the secret key file: /data/.kcc/keystore/UTC--2022-12-07T09-37-15.362634255Z--a693be057aebed3fed313b661ef3cbbffb49e95d
- You can share your public address with anyone. Others need it to interact with you.
- You must NEVER share the secret key with anyone! The key controls access to your funds!
- You must BACKUP your key file! Without the key, it's impossible to access account funds!
- You must REMEMBER your password! Without the password, it's impossible to decrypt the key!
Note that it also prints the path of your Keystore file (i.e., the secret key file). Please backup this file!