What are the best practices for managing private keys used to sign server-side transactions in decentralized apps?

Currently, we're testing a dapp with the private key exposed as an environment variable on the server. We want to do better than that.

1 Answer 1


A good approach would be to create multiple points of failure and only create it at runtime. To start with, you can divide your key in 4 parts, store each part in a different keystore (you can use AWS, Microsoft etc.) and only merge them at runtime.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.