Spring is safe, your keys are stored on disk in encrypted form, apps cannot access them, the source code is open.

Reply to this note

Please Login to reply.

Discussion

Thank you very much, nostr:npub1xdtducdnjerex88gkg2qk2atsdlqsyxqaag4h05jmcpyspqt30wscmntxy, for taking your precious time to reply. What you tell is assuring. How does it encrypt nsec on disk please? Encrypt with what?

With keys generated inside the Android's internal keystore. Android ensures only Spring can access those keys, decryption is performed inside the keystore.

That sounds great. Thank you.