one addition I want to make to this:
user two-factor password and app salts
this would allow you to add a two factor to your private data, associated with a specific app.
if your key leaks you wouldn't get mass decryption of private notes.
nostr:note1g8epn75k0lctmr0h6vj2uw6r7dt54n6c4tlaa348a23gt34h2k4stctxmq
Nice done will 👌
it wouldn't be clear at all to an attacker who has your nsec if you even have ai convos or specific types of private notes on certain apps, since you would need your two factor password to even know the author pubkey for the private note
Then turn the key into something like nosskey (passkey for nostr)
salt is random , unique piece of data added to another valuet before hashing . this is to increase security and prevent predictable hash value or reveresible .
sometimes you can predict the hash value that will come out casue it repeated , with salt --you added another random unique piece data to another value so the outcome wull be unpreditictable . it depend on what you putting on the Salt !
