<p>The signing requirements for nodes in the Lightning Network are limited to the ability to sign that transactions that make up the smart contracts of the open channels.  So first off, only the money in the channels is "hot", which by its very nature it has to be.  It would be wise to not keep more money in a lightning node than is required for the channels.  For example, keeping your savings on a lightning node would be foolish.</p>

<p>However, lightning nodes also will also earn fees (although how much is unclear), meaning that profit will be generated as the nodes run.  This profit, too, is initially locked up in the channels, but will eventually be settled by means of an on-chain transaction.  Nodes will likely have a mechanism to send funds from the closing of a channel to a more secure wallet for safe keeping.  Either that, or they will take those funds, and use them to fund new channels.</p>

<blockquote>
  <p>What can a Lightning Network node operator do to secure their nodes hot wallet and protect their private keys?</p>
</blockquote>

<p>There is nothing special that lightning nodes will have to do.  All the advice is basic information security practices.  Don't open ports on your node that you don't have to.  Use a strong password to access your node. Disable remote logins if you have physical access.  Keep the software that is running patched and up to date.  Decrease your attack surface, and reduce the amount of liability (money) you have on any single node to a reasonable amount.</p>

<p>Remember that you put money into a node so that it can make more money.  Making money does not come without risks.  Mitigate those risks to an acceptable level.</p>

CC BY-SA 3.0
2017-12-29T22:04:01.490Z
2017-12-29T22:04:01.490Z
Jestin
<blockquote>
  <p>There is nothing special that lightning nodes will have to do. All the
  advice is basic information security practices. Don't open ports on
  your node that you don't have to. Use a strong password to access your
  node. Disable remote logins if you have physical access. Keep the
  software that is running patched and up to date. Decrease your attack
  surface, and reduce the amount of liability (money) you have on any
  single node to a reasonable amount.</p>
  
  <p>Remember that you put money into a node so that it can make more
  money. Making money does not come without risks. Mitigate those risks
  to an acceptable level.</p>
</blockquote>

<p>LN is being pitched as a "counterparty risk free" method of earning interest on your BTC. Based on this not only is it not risk free but also comes with a pile of OpSec maintenance costs. Until a smarter way to do this comes along I'm out as there are lower risk, less pain-in-the-ass ways to grow your crypto holdings especially when compared to some of the new DeFi solutions coming onto the scene (i.e. Maker/DAI, Augur, WBTC, etc...).</p>

CC BY-SA 4.0
2019-10-06T20:03:54.567Z
2019-10-06T20:03:54.567Z
DowskiVision MagicalOracle
<p>The success of the Lightning Network is dependent on payment routing. Successful payment routing will require online nodes with automated signing facilities. This entails online nodes with hot wallets.</p>

<p>Well known advice within the Bitcoin community is to not use hot wallets.</p>

<p>What can a Lightning Network node operator do to secure their nodes hot wallet and protect their private keys?</p>

<security><lightning-network><wallet-security>
How will Lightning Network nodes secure their hot wallets?
Matthew Stannard
# How will Lightning Network nodes secure their hot wallets?

(Asked by: username_0 on 2017-12-29)

The success of the Lightning Network is dependent on payment routing. Successful payment routing will require online nodes with automated signing facilities. This entails online nodes with hot wallets.

Well known advice within the Bitcoin community is to not use hot wallets.

What can a Lightning Network node operator do to secure their nodes hot wallet and protect their private keys?

**Tags:** security, lightning-network, wallet-security


---

## 2 answers

### Answer by username_1 on 2017-12-29. Score: 2 | Accepted answer

The signing requirements for nodes in the Lightning Network are limited to the ability to sign that transactions that make up the smart contracts of the open channels. So first off, only the money in the channels is "hot", which by its very nature it has to be. It would be wise to not keep more money in a lightning node than is required for the channels. For example, keeping your savings on a lightning node would be foolish.

However, lightning nodes also will also earn fees (although how much is unclear), meaning that profit will be generated as the nodes run. This profit, too, is initially locked up in the channels, but will eventually be settled by means of an on-chain transaction. Nodes will likely have a mechanism to send funds from the closing of a channel to a more secure wallet for safe keeping. Either that, or they will take those funds, and use them to fund new channels.

> What can a Lightning Network node operator do to secure their nodes hot wallet and protect their private keys?

There is nothing special that lightning nodes will have to do. All the advice is basic information security practices. Don't open ports on your node that you don't have to. Use a strong password to access your node. Disable remote logins if you have physical access. Keep the software that is running patched and up to date. Decrease your attack surface, and reduce the amount of liability (money) you have on any single node to a reasonable amount.

Remember that you put money into a node so that it can make more money. Making money does not come without risks. Mitigate those risks to an acceptable level.


---

### Answer by username_2 on 2019-10-06. Score: 0

> There is nothing special that lightning nodes will have to do. All the
> advice is basic information security practices. Don't open ports on
> your node that you don't have to. Use a strong password to access your
> node. Disable remote logins if you have physical access. Keep the
> software that is running patched and up to date. Decrease your attack
> surface, and reduce the amount of liability (money) you have on any
> single node to a reasonable amount.
>
> Remember that you put money into a node so that it can make more
> money. Making money does not come without risks. Mitigate those risks
> to an acceptable level.

LN is being pitched as a "counterparty risk free" method of earning interest on your BTC. Based on this not only is it not risk free but also comes with a pile of OpSec maintenance costs. Until a smarter way to do this comes along I'm out as there are lower risk, less pain-in-the-ass ways to grow your crypto holdings especially when compared to some of the new DeFi solutions coming onto the scene (i.e. Maker/DAI, Augur, WBTC, etc...).


---

