Avatar
[ARCHIVED] Jay
d7607464225c8ab610da99495bc70c8a3a45a03f8a22a95f06fcb5bc421e573a
NPUB MOVED ↪️ @npub10mtatsat7ph6rsq0w8u8npt8d86x4jfr2nqjnvld2439q6f8ugqq0x27hf

No, coracle has a really nice warning that lets you know you're about to post your nsec, and you have to confirm.

No problem. It was quite interesting 🙂

I used it to send myself 21 sats round trip.

Primal on Android will let you post your nsec.

nostr:note1jvdh4rfgcrev0mx6g7639rq8qc589m8d3vhn6e3djaqyfcaryryqz72rp0

nsec13ed7fpzrt0344eekpgjg7598ajg5plgcvfl5sdltec3xnyc322xqguzy94

Primal test.

nsec13ed7fpzrt0344eekpgjg7598ajg5plgcvfl5sdltec3xnyc322xqguzy94

Coracle test.

nsec13ed7fpzrt0344eekpgjg7598ajg5plgcvfl5sdltec3xnyc322xqguzy94

Nostrudel test.

It's like that meme from back in the day. Once upon a time, there was a troll on a forum that said, "You know, if you type in your password here, the forum will detect it and turn it into asterisks. Here's mine: ********"

And a bunch of people went along with the joke, posting their "passwords" but just typing in a bunch of asterisks and saying, "Wow it worked!"

Then some poor guy came in and actually typed in his password, and it came out as "hunter2". The forum didn't know it was his password, so it just let him post his real password because he'd been scammed.

But as it turns out, Nostr fixes this. At least in Damus. Because if you try to send your password, aka your nsec, in a note, Damus can apparently recognize it and and replace it with your username, aka your npub, to prevent you from accidentally sharing your private key with the whole world.

Because everyone's "password" is in the same format on Nostr, the nsec string, it's easy to make sure you don't accidentally share it, unlike passwords, which can be anything at all.

Ok, I see what happened. Damus converted the nsec into an npub and then sent the npub in the note. So the nsec never actually left your device.