What do you think is the best tool to use to keep it a secret secret?
It depends how you use your account. I'd say browser extensions like #alby are fine for most. #Amber on android serves the same purpose for android apps, but is more private (no 3rd party account). The idea is to only paste your secret key into one trusted place, and let every other app ask that app to sign your events for broadcast.
one more question: what is the browser extensions giving to clients and apps....is it something even more difficult than a HEX?
Everything in computers is encoded in binary with 1s & 0s. But to answer, the extension doesn't give your secret to apps at all. The other way, apps will say to the extension "sarah wants to post this recipe, please 'sign' it so I can post it to the relays and they know its from the right account" The secret never leaves the extension. Once you paste the secret into the extension to store it, you really shouldn't paste it into anything else (except another trusted thing like amber).
I have been using KeePass for years. (now KeePassXC). its probably better then pasting it in a word file on your desktop...
tyty, i will look at!!