Alternative Key Management

Operator V3 Documentation

This page covers Operator Service V3. If your Vault version is 5+ on Ethereum or 3+ on Gnosis, refer to the V4 Alternative Key Management →.

Validator keystores don't need to be stored locally—you may prefer to manage them externally for better security or flexibility.

This section covers three alternatives:

Remote Signer → – Use external signing services (like Web3Signer ↗) while keeping validator keys isolated from the Operator Service.

HashiCorp Vault → – Store validator signing keys in HashiCorp Vault instead of local files.

API Mode → – External service manages validator keystores and signs operations with the hot wallet via API calls.