Oh it does evolve. Faster than I could follow. Keep your nsec (private key) secure! By injecting it via getalby.com or nos2x you will be able to login to all kinds of webpages within the next one or two years.
Discussion
are you aware of people working on making nostr easier to adopt for normal people? i can't imagine non-technical persons to understand the crypto keys etc.
Generally a lot of devs tend to argue that private/public keys are easier to use AND understand than the "email plus new password on every site" logins we've been using for the last two decades... So they stick to it and I guess we're in the process of letting the market decide on the best way to implement it by offering a ton of alternatives:
Which client/ clients are you useing?
For iOS some have reported great onboarding success with primal.net