Oddbean new post about login | logout What vpn do you recomend? One that doesn’t steal my nsec
nostr:nprofile1qqs80n2hqvjppgqh2c5t2dtl5e2mr7kw4d90u468xwaaenke8r0frgspz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3samnwvaz7tmjv4kxz7fwwdhx7un59eek7cmfv9kqzxthwden5te0wpuhyctdd9jzuenfv96x5ctx9e3k7mg6k4xa4 or Mullvad would be my recommendation. I use IVPN personally. Can pay via Lightning.
Why not just use Orbot or Amethyst with internal TOR?
Not everyone runs Android, but if you do, that's a fantastic option. Overkill if you just don't want your IP exposed to the relays you are connecting to, though, and with some noticeable performance hit if you are trying to load anything more than text notes. I am using the internal Tor feature on Amethyst, and it's fantastic! That said, my feed, and especially my notifications, take several seconds longer to load.
Is Tor secure enough to sign in with your nsec?
Is this something that has happened to you before? I have not heard of any VPN even having the ability to steal your nsec, let alone actually doing so. However, I would assume they could see any unencrypted data sent through their servers. You will always be safest using a signing app that is local on your device, so that your nsec itself is not being sent anywhere, only the signed events you are posting.
I don’t really know about “signed events” but you’re saying if i log in on a local app, even if I’m connected to vpn, they can’t see my nsec?
I can't speak to all local apps and how they handle your nsec. However, if they are keeping your nsec local to your device, and not sending it anywhere, then being connected to a VPN is not going to allow that VPN to see your nsec.
Can I ask what client do you use?? I’m trying Nostur at the moment
Well, I am on Android, so I primarily use #Amethyst and #Coracle, both of which work very well with Amber.
What is Coracle ?
Coracle is a web client at coracle.social, but there is also a recently released native Android app. You can find it on zap.store.
Again, it would be better to use Amber to store your nsec, if you are on Android. Amber does not send your nsec anywhere. It just signs events for you locally for whatever Nostr client you are using, and the client sends the signed events to your relays.