I am developing a REST API currently running off a node.js server. The API allows ethereum account creation, making a transaction etc.

The API interacts with a locally running ethereum node to execute these requests over RPC. I have set the provider to "" I use the web3.eth.personal RPC API for many of these requests. Is it safe to expose the personal API?

If not how could I unlock an account without web3.eth.personal.unlockAccount?

0 is your localhost, inaccessible by default to the public Internet. The only way to expose the RPC API would be to intentionally setup a Reverse Proxy (using say Nginx) to forward the localhost to a publicly accessible IP & Port. If you're behind a NAT (say on your home network), this becomes even more difficult, so you should be safe to use the API unlocked.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.