I personally use Nos2X on Firefox which keeps your nsec client side. I thought Alby’s signing extension did the same but I may be mistaken.