Thread

Replies (2)

You are correct, your nsec is the one you need to keep private. However, you also need to enter your nsec in any mobile app, or web based clients like coracle or primal web to be able to make posts. So, you have to trust the website or app with your nsec. You'll be fine using your nsec with primal, you can trust them, but anything new, or interesting but you don't think you can trust it, don't use your nsec. However... here's the good news. There are things called signers. They can be an app on your phone like Amber, a browser plugin like nos2x or Alby. They can even be a hardware device that sits on your desk. You enter your nsec into the signer, and that's it. When you want to use primal, instead of using your nsec, use the signer login option. Your signer will ask you to approve the login, and your in. You can log into almost all nostr shit using your signer and nothing you sign into can do anything without you knowing about it. The app or website has to send an authorization request to your signer and you approve or deny it. This keeps your nsec secure but also gives you full access to any app or website you use it with. I now use Amber on my phone as my signer. I have used the Alby browser plugin in the past.