Oddbean new post about | logout
 npubs in UX have got to go

clients are also way too loose with NSECs 
 I've been thinking a lot about his. 
TBH an account with password and cryptographic proof of ownership that is nuked if I don't periodically check in would be way better. 
 
 Preserve your nsec, and think 100 times before entering it somewhere. 

It's literally your digital identity.

nostr:note1h3qf2h4e4np58wp36fw9dwvhh3kdtf5t39lzenhn8a4ytv29sqwqfzrtxs  
 I think we need some sort of Nostr coldcard. 
 Not sure it make sense tho. I'm not a genius I just sew things. 
 I like what you sew. 

I think some  @bitcoinwell users could use some custom merch 👀 
 I'm a big fan of Bitcoin Well and use it regularly. As most of my income is now in Bitcoin, I often need to buy some fiat and the new lightning feature is a blessing.

I'm currently working on a project that require all my attention and time, but, since I've seen your Twitter comment I've been thinking about it.

I'm sure I'll get to it eventually. 
 I mean, sending notes is way more frequent than UTXOs
But some sort of signing device that allows me to prove I own the nsec is cool. 

The thing clients need though is access to post via npub. 
But granting a signing a timed authorization (say every 30 days or something) would be cool idea! 
 Clients can’t post notes that are not signed by your private key 
 That’s one of the rules of Nostr that will never change just like how the 21 million cap of Bitcoin will never change 
 I’ve switched to storing an encrypted version of my private key and copy that around instead the raw private key or nsec

https://github.com/nostr-protocol/nips/blob/master/49.md

You can use nak to encrypt your private key. 

https://github.com/fiatjaf/nak?tab=readme-ov-file#encrypt-key-with-nip-49

For login, I usually use nip-07, nsec.app, Amber, or run my own bunker using nak. 
 I just learned about Amber for Android