Oddbean new post about | logout
 What might 2FA look like on nostr? 
 too fringe arse  
 Multisig?  
 perhaps we need a multisig nsec? 
 Multisig 
 Yup, I think this would be useful for organizations and businesses. There could be a queue of pending notes and etc. 
 Nsec derivated to random word and if this Nsec is used, then you need to know that word or you can’t log with that Nsec. 
That world would be changed every X time and only way how to do it would be selfhost. 
Like hosting a random generator of these words connected to your Nsec locally and to your phone via Tor? 
So basically if your Nsec leak, you will also need like little seed phrase that is connected to that Nsec and changes in time. 

Who will rly wants to use nostr safe and on daily basis, then they will care and will maybe selfhost that Nsec 2fa? 




Idk I’m just a pleb, i can’t program it. 
Idk if it’s good idea, just trying my brain to idealize some ideas. 
 F2A 
 For crypto bros:
#Nostr could be as effortless as your device recognizing your unique heartbeat or voice, securely logging you in without you needing to do a thing.

For freedom maximalists:
Nostr will always be simple as using your #Bitcoin keys to securely access your account, giving you full control and privacy without relying on third parties or extra devices. 
 Passkeys 
 Why reinvent device ownership checking, when there is a public-key cryptography standard already? 
 This.

Of course passkeys off-the-shelf don't do nostr's retarded secp256k1. 
 I saw this idea for passkeys https://github.com/Dolu89/nostr-passkeys-demo 
 This is super cool! I'm not sure it counts as MFA, since it's really only one factor, but I could definitely see it being used in multisig or xor key creation