# P12 Keystore

## **What Is a `.p12` Keystore File?**

A `.p12` keystore file—also known as a **PKCS#12 file** is a secure, encrypted container that stores multiple cryptographic keys and certificates within a single file. It is commonly used to bundle **private keys**, **public keys**, and **certificates** in a portable, protected format.

***

## 🔐 Usage in the Constellation Network

Within the context of running a Validator Node on the Constellation Network, the `.p12` keystore file plays several critical roles:

* **Network Authentication (Public Key)**\
  Contains a public key used to authenticate your Validator Node against the Constellation Network's **seed list**, allowing it to join the network cluster.
* **Transaction Signing (Private Key)**\
  Contains a private key used to **sign and authorize transactions**, making it your node’s **hot wallet**.\
  This key can also be imported into a wallet like **Stargazer** to provide proof of staking, receive validator rewards and hold supported cryptocurrencies.
* **Consensus Participation (Private Key)**\
  Used to **digitally sign consensus proofs**, which is a core function of Validator Nodes participating in Hypergraph or metagraph consensus rounds.
* **DAG Wallet Address Derivation (Public Key)**\
  Contains the public key required to **derive your wallet’s DAG address**, used in transactions and rewards distribution.

***

## 🔒 Security Best Practices

Because the `.p12` file contains sensitive keys, it must be handled with extreme care:

* **Never share your `.p12` file** with untrusted individuals or systems.
* **Always protect it with a strong passphrase.**
* **Maintain offline backups** in secure, air-gapped locations (i.e., systems not connected to the internet).
* Consider using hardware-based or encrypted storage for long-term archival.

***

{% hint style="danger" %}
Losing access to your `.p12` file or having it fall into the wrong hands can result in **loss of funds**, **node compromise**, or **inability to participate in network validation**. Treat it as a critical asset.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.constellationnetwork.io/run-a-node/references/p12-keystore.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.