"What if my Nostr account got compromised?" is what I was thinking the past few days, which made me think of the following:

It would be cool if there'd be a NIP that two fields:

- Backup key:

- Compromised: y/n

These would be attached to your main account and relays and clients would see this.

Let's say in my Plebstr app, on this account, I'd go to my profile settings and there'd be one new field "Backup key" where I added another npub that I own. Under it there's a question "Compromised" with a yes/no toggle or drop-down (default no) and click save. (This should be done on the same day of when you've created your main account / asap)

One day, my (this) account gets stolen / the nsec gets leaked and others now have control over my account. What should I do now? The following:

- Go to my profile settings and toggling the "Compromised" option to 'yes'. ("This action is irriversible. Are you sure": "yes/cancel")

My compromised account now has a permanent "Compromised: yes" on it, and clients should be able to see that and do the following:

- Mention very clearly on the account profile and on all posts that it makes "This account has been compromised. This is thier new account "

That's it. I think it this would definitely make people (well, myself at least) a little bit more relaxed knowing that they've taken a security measure against a potential account leak.

#nostr #nip

Reply to this note

Please Login to reply.

Discussion

No replies yet.