on mobile, use a NIP-55 signer like Amber, and I would recommend you use the same security measures you use for your Bitcoin... don't add your nsec in any app, any web site, store it in paper or other form offline