Generate Validator Keys
Last updated
Last updated
If your mnemonic phrase is compromised, someone can steal your ETH, so it's very important that keys are generated using proper security procedures.
The best way to safely generate keys is using a live USB running Ubuntu on an air-gapped computer, as demonstrated in this guide:
The following is a simplified (and less secure) way to generate keys for testnet purposes.
eth2.0-deposit-cli
Key GeneratorPlease be sure you are using the official Ethereum Foundation GitHub account.
Under "Assets", click the file ending in linux-amd64.tar.gz
, then choose "Save". Once complete, the file (aka tarball) should appear in your Downloads folder.
Find the file in your Downloads folder, double click to open this window, then click "Extract" in the upper left hand corner as shown below:
Home
in the upper left, then click the green Extract
Home
directory:Note: Clicking "Show the files" will not bring you to your home folder. You can navigate to the home folder by clicking "Home" from the panel on the left side in file viewer.
deposit-cli
Ctrl + Alt + T
deposit-cli
:./deposit new-mnemonic
:Once you enter the command, you'll be asked a series of questions. Once you complete the questions, you'll be asked to enter a password and be given a mnemonic seed.
Note: Be sure you select Kiln when asked which network you'd like to join.
A few things to keep in mind regarding the 24-word mnemonic phrase:
Note: These safeguards are in reference to a mainnet mnemonic that has access to real Eth. No need to be so serious regarding the testnet mnemonic.
Make sure you use durable paper and permanent pen
Store in a waterproof, fireproof bag inside a safe
A bank security box is helpful in preventing the $5 wrench attack
Minimum of 2 copies in 2 different locations
You can split a copy 12/12 and give to trusted family/friends
Once you correctly reenter the mnemonic, the validator_keys
will be created.
deposit_data
and keystore
filesFiles can be found at:/home/**YOURUSERNAME**/deposit-cli/validator_keys
deposit_data-[timestamp].json
contains data used to register your validator on the launchpad
keystore -[timestamp].json
validator keystore file protected by password (aka validator signing key)
/home/deposit-cli/validator_keys
:The "pubkey" is the validator public key and should be the same in both files.
Deposit_data
file contents:Keystore
file contents:Congratulations, you successfully created your validator keys!
Now that you have the validator keys, it's time to configure Metamask for Kiln