Oddbean new post about login | logout https://www.nostrapps.com/ for more clients built using Nostr. But don't copy your nsec into any of these except (for now) the.most reputable native phone apps: Amethyst, Damus, and Primal. Check out the Spring browser on Android. It lets you log into Nostr apps without putting in your nsec. Use the GetAlby browser extension to log into apps on desktop: https://getalby.com/
Thank you for your advice! So the best secure way of using my nsec when using Nostr clients are Alby for web clients, and most reputable ones (lower risk) for phone native apps, is that correct?
Yes. There are also things like nsecbunker and nsec.app that are used to protect your nsec too, but I haven't used them yet.
So, the worst case cenario would be someone stealing my nsec key, and impersonate me… But in that case I can generate another nsec and “verify” my new user using Nip-05 like I did with this one, right?
Yes, for sure. The only problem is losing the people who follow your old nsec, but it's happened to people before who posted on the old account their new npub and rebuilt from there. I've heard of ideas people have had for setting up backup keys in case that happens too.
This is a great resource. I use it all the time with alby to stay up to date on the latest and greatest apps.
The only thing I do not like about alby right now is that it's not open for every one to create an account (I understand why but this sucks for newcomers like me). I did setup nos2x to sign my auth without exposing my nsec in browser clients and it worked great!
If you are willing to use you "own node" option, you can pay $25/month for Voltage.cloud. really easy low maintenance option, but has a cost. Nos2x may be the best option for now. Upon further review I see there is no option for new users without a node.
Yeah… I do not want to setup my own lightning node and make alby connect to it. Too much trouble haha For sending zaps configuring a non custodial wallet like blue wallet is enough?
Yes, what client do you use? Easiest setup atm would be primal. Allows for built in zap wallet on iOS and is on all mobile and desktop options. highly recommend using it primarily on mobile. Everyone makes a big stink about logging into your nostr account with a copy/paste of your insec, but when you first get started dont worry about doing it to make life easier. Just dont build your account for years and have bad login habits.
Thanks for your support! I’m using Damus right now, and Primal for web browser