Any recommendations to improve the security of my nostr account?
What are the best practices for creating nostr keys?
Discussion
Take it with a grain of salt, but in my opinion generating them with a client, locally in your devise and use it on as few new clients as posible. Every time you enter your nsec on a client you are trusting them to some degree (unless you know the code and have checked it)
If you use web clients like nostrgram, iris, etc... use a browser extention like Alby, so even if you still put some trust on a 3rd party you only do it once, on Alby for example.
Maybe consider getting a NIP-05 so if your account is compromised at least your followers can follow you by your NIP-05 to your new account.
Maybe have back up your follow list now and then, and your relay list, just in case if you have to get a new pair of keys, but this is not a bitcoin wallet, so loosing it is bad but not THAT bad I think
Thank you! All of this is new to me. I'm very used to btc that's why my concern. I read about nip-05 but I don't have an identifier. Is it possible to create one after having created the keys?
en tu browser ya que tenés Alby Wallet, configurale la private key como Signer. De esa manera toda web que visites de Nostr, en vez de tener que pegar tu Private Key, Alby te la va a reconocer y te va a firmar por vos sin pegar la private key realmente.
Eso te va a dejar probar muchas cosas y otras implementaciones como snort.social, coracle.social, nostrgram.co, etc etc
got it, ya lo encontré y ya aprendí que es NIP-07 😄
Welcome !!
I recommend you to use rana to generate your pubkey
https://github.com/grunch/rana
and nos2x extension for the browser.
Thanks! I'll take a look
Great !! Pv 🤙🏼💜
igual sólo para clarificar:
Rana lo único que hace es que tu pubkey tenga algo más de proof of work. Es decir si mirás mi pubkey que tiene npub1qqqq ... esas q es porque había corrido todo en hex antes con rana buscando 0 adelante
Pero no me da seguridad a la private key, sólo hace que tu pubkey sea "especial" pero nada más
ok, es un script que corres en tu computadora y te da una key especial. Generando tu key con alby o otra extension es lo mismo, todos corren en tu computadora localmente.
si en realidad es sólo para tener una key nueva.. pero ahora que ya arrancaste con tu key no vas a cambiarla probablemente
You can use the nos2x extension to access Nostr clients (Snort, Damus, etc) and a password manager to store your private key, like KeePassXC or Bitwarden.