Securing the operation: management access and payout custody
A mining rig is an internet-connected computer that controls money flows. Harden its interfaces, isolate its network, and keep the custody line crisp: pool balance is IOU, wallet is money.
2026-10-19·updated 2026-10-19·4 min·pow.family research#security#operations
01
Harden the machine
- Change default passwords on day one — miner web UIs ship with credentials printed in manuals that attackers also own.
- Restrict access: management UI reachable only from your LAN or VPN, never port-forwarded to the internet.
- Firmware: stock or reputable custom builds, from official sources, updated deliberately (not on day one of a profitable run).
- Kill unused services (SSH/telnet/FTP extras) and never paste pool API keys or seed phrases into miner config fields.
- Miners get hacked into botnets more often than they get stolen — an infected rig mines someone else's coin at your expense.
02
The custody ladder
| Where coins are | Who controls them | Treat as |
|---|---|---|
| Pool 'pending balance' | The pool | IOU — reconcile it (next lesson) |
| Pool 'paid', awaiting confirmations | The chain | In transit |
| Wallet you hold keys for | You | Money — custody practices below |
| Exchange account | The exchange | IOU until withdrawn |
Payout wallets: hardware or otherwise well-secured; keys generated offline; the payout address verified per the address-safety lesson. A mining operation that accumulates months of payouts into a hot wallet on the mining PC is one clipboard-malware away from a very bad day.
03
See it live on pow.family
Project pages list each pool's payout thresholds and schemes — the parameters of your custody ladder per coin.