I don't recommend putting nsecs in *any* client, but the flow here is pretty slick.
miljan's avatar miljan
Big news Nostr fam: the Primal Remote Signer is here! 🫡 We just released Primal 2.6, which includes a NIP-46 remote signer built into our iOS and Android apps. Now you can use your Primal mobile app to login to any Nostr app that supports the remote login (a.k.a. nsec bunker) standard. IMHO this is the easiest and most secure way to login to Nostr web apps. Check out Paul’s overview video below. We had to do some crazy stuff to make this work on iOS. Overall this was way harder to build than we anticipated. Try it and let us now how it hits!
View quoted note →

Replies (7)

Signers should rarely receive updates. The smallest the signer, the easier to audit and make sure there are no leaks. Larger apps not only change all the time, but they also update their dependencies all the time, which makes it really hard to know if the nsec is leaking or not. Any dependency can inject code to steal the nsec from users.