Oddbean new post about login | logout I just copied my NOSTR Private Key and pasted it directly into another nostr APP. How safe is this…. If unsafe, why do apps encourage it? Regardless, I consider my nostr key compromised.
On the phone, then you are likely OK if the app is reputable and uses keys storage
Dangerous for a couple reasons. 1. The client is handling your key. They may handle it properly, but this requires trust. Impossible to verify. 2. Your key is on your clipboard now. This may persist in memory until you copy something else or even longer. You may have malicious software that will grab it from your clipboard. 3. You may have malicious software that logs text you input. There are probably other reasons but these are the big ones I can think of off the top.
I try not to do it, but I mostly use Amber so I don't have to do it.
You're probably not going to die or lose a heap of cash because you were careless with your nsec. The greatest risk is your Nostr reputation & experience. Having said that I don't know what you use your Nostr DMs for. Amber app is good for signing into app clients. Nos2x or Alby are good for signing into browser clients.