Replying to Avatar Vitor Pamplona

It's annoying to copy your nsec from your phone to the browser's extension on a computer.

What would you prefer?

1. get the desktop to turn on the camera to scan an app-generated QR code with the nsec?

2. find a way to represent the nsec as a list of words so that people can easily write them from one device to another.

Any other ideas?
Avatar
petri 2y ago

Password managers are the default, and they operate between desktop and mobile clients. No need to pass anything between different devices manually. Autofill within browsers handles also the transit from the manager to browser’s field without clipboard.

Passkey or true delegation would be the ideal.

But 🤷‍♂️ if the nsec delegation is not feasible.

Bluesky has those limited passwords and they are nice. Revokable tokens on Mastodon instances with oAuth2 are convenient, too.

Nostr should use normal methods if it wants to become mainstream.

Reply to this note

Please Login to reply.

Discussion

Avatar
petri 2y ago

On Apple ecosystem, this works locally and without lockups from vendors: https://strongboxsafe.com/

Avatar
Vitor Pamplona 2y ago

Very few people even know what password managers are. If you have to onboard them into a password manager before you can onboard them into Nostr, you already lost them.

Avatar
petri 2y ago

Apple has the native keychain so that’s the default option and it’s well integrated.

https://appleinsider.com/articles/21/12/29/how-to-use-icloud-keychain-apples-built-in-and-free-password-manager

Avatar
petri 2y ago

But to answer your question: 1)

My bank uses QR code on browser that seems to be dynamic (moving pattern) and you point your mobile’s authentication app with camera to it and it let’s you in.