Here’s how I understand the current limitations/recommendations related to using Nostr:

1. Don’t trust a client with your nsec.

2. Instead, use a tool that keeps your keys safe but allows you to authorize clients to sign transactions on your behalf.

Examples: Alby or nsec bunker.

3. There are no tools for mobile devices to manage #2. So you either go with an insecure method of using Nostr, or limit yourself to a desktop client. (What percentage of social media use is on mobile today, 90% +?)

Do I have this right? Are there any mobile options coming that don’t sacrifice security?

#AskNostr

nostr:npub14f0xen78ed7rgvw39v82fwp7tv65yasz2gsgpf4gvxy4q5nlsydsk37k3l

nostr:npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr

nostr:npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6

Reply to this note

Please Login to reply.

Discussion

As far as I understand it, you can setup an nsec bunker on your desktop and use it from your mobile... Provided the app supports it.

Nah, there are signing apps but clients have to be compatible... Check out the nostr GitHub, it lists others for iOS too

https://github.com/greenart7c3/Amber (Android)

NSecBunker and there is another app called Amber https://github.com/greenart7c3/Amber

Unfortunately most mobile clients don't support them

Spring browser is also good but its really only for web clients https://github.com/nostrband/nostr-universe