> For the complete documentation index, see [llms.txt](https://poolguide.frcan.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://poolguide.frcan.com/security-tips-for-spos..md).

# Extra security tips for SPOs.

{% hint style="warning" %}
**Important:** Follow this first : <https://poolguide.frcan.com/2.-harden-your-server>
{% endhint %}

*`And remember, this is the minimum, you cant go wrong with doing more if you wish to.`*

**And now to the extra tips:**&#x20;

1. Use a hardware wallet for your pledge. See my guide at: <https://poolguide.frcan.com/readme-1>
2. Use air-gapped machine for all transactions signing.
3. Keeping the system updated is vital before starting anything on your system. This will prevent people to use known vulnerabilities to enter in your system:

To enable ONLY security updates, do this:

```
sudo nano /etc/apt/apt.conf.d/50unattended-upgrades
```

Edit to look like this:&#x20;

> ```
> : Unattended-Upgrade::Allowed-Origins {
> :     "${distro_id}:${distro_codename}-security";
> : //  "${distro_id}:${distro_codename}-updates";
> : //  "${distro_id}:${distro_codename}-proposed";
> : //  "${distro_id}:${distro_codename}-backports";
> : };
> : // Unattended-Upgrade::Mail "my_user@my_domain.com";
> ```

**I took inspiration in this story from another beloved SPO before i made this guide (remember, this could happen to you too!) :**

![](/files/-MXxf5i89N049oeE8QVW)

![](/files/-MXxfaYWDApKZ0PnYdWv)

{% hint style="danger" %}
So remember to keep more than one copy of your stake pool op keys offline and only in safe places! Let this be a lesson to you!
{% endhint %}