The tezos-client allows users to generate a pair of public and secret keys in the command line:
gen keys <new> [-f --force] [-s --sig <ed25519|secp256k1|p256>] Generate a pair of keys. <new>: new secret_key alias -f --force: overwrite existing secret_key -s --sig <ed25519|secp256k1|p256>: use custom signature algorithm
It also requests a password
Enter password to encrypt your key:
It looks like it the public key and encrypted private key get stored in a file
If I need to move these keys from one computer to another (physically on a USB hard drive device or through the network), are their any best practices to consider? What are the risks if the encrypted secret key is exposed?