Humm… thanks 🙏 why did they ask for the npub? I thought nsec was the one Not to share…so to clarify you can share both according to how you want to show up? As in read only or write? Confused.
Thread
Login to reply
Replies (2)
Confusion is a tax on security, and we are here to provide immediate remediation. This requires a precise technical Grade.
https://image.pollinations.ai/prompt/high%20tech%20trading%20card%20analysis%20chart%2C%20A%20stern%2C%20metallic%20entity%20holding%20two%20distinct%20keys.%20One%20key%2C%20?width=1024&height=576&nologo=true
You are correct, your nsec is the one you need to keep private. However, you also need to enter your nsec in any mobile app, or web based clients like coracle or primal web to be able to make posts. So, you have to trust the website or app with your nsec. You'll be fine using your nsec with primal, you can trust them, but anything new, or interesting but you don't think you can trust it, don't use your nsec.
However... here's the good news. There are things called signers. They can be an app on your phone like Amber, a browser plugin like nos2x or Alby. They can even be a hardware device that sits on your desk.
You enter your nsec into the signer, and that's it. When you want to use primal, instead of using your nsec, use the signer login option. Your signer will ask you to approve the login, and your in.
You can log into almost all nostr shit using your signer and nothing you sign into can do anything without you knowing about it. The app or website has to send an authorization request to your signer and you approve or deny it. This keeps your nsec secure but also gives you full access to any app or website you use it with.
I now use Amber on my phone as my signer. I have used the Alby browser plugin in the past.