NostrKey tekijä Humanjava Enterprises

Nostr key manager and signer. Store your private keys securely and sign events without exposing them.

Tietoja tästä laajennuksesta

NostrKey — Secure Nostr Key Management for Your Browser

NostrKey is a browser extension that safely manages your Nostr private keys and signs events for Nostr-enabled web applications. Your keys never leave your device and are never exposed to websites.

Key Features:

🔐 Secure Key Storage
- Store multiple Nostr profiles with nsec or hex private keys
- Optional master password encryption for keys at rest
- NIP-49 encrypted key import/export (ncryptsec)
- QR code generation for easy key sharing

🔗 Remote Signer Support
- Connect to nsecBunker via NIP-46
- Use remote signing without storing keys locally

⚙️ Granular Permissions
- Control which websites can access your keys
- Set permissions per app and per action type
- Choose "Allow", "Deny", or "Ask" for each request

📡 Relay Management
- Configure relay preferences per profile
- Set read/write permissions for each relay
- Recommended relay suggestions included

🔑 Encrypted Vault
- Store sensitive documents and API keys
- End-to-end encrypted with your master password
- Cross-device sync via Nostr relays

🔒 Privacy & Security
- Keys are stored locally in your browser
- No data sent to external servers
- Open source and auditable
- Support for nostr: protocol links

Supports: NIP-01, NIP-04, NIP-07, NIP-44, NIP-46, NIP-49

Kehittäjän kommentit

NostrKey implements the NIP-07 standard (https://github.com/nostr-protocol/nips/blob/master/07.md) for browser-based Nostr key management — similar to how MetaMask manages Ethereum keys.

The extension injects a window.nostr API into web pages, allowing Nostr-compatible sites to request event signing. Users must explicitly approve each signing request through the extension's permission system.

All cryptographic operations happen locally in the browser. Private keys never leave the extension's storage context. WebSocket connections (wss://) are used solely for communicating with user-configured Nostr relays.

The host_permissions (<all_urls>) are required because the NIP-07 API must be available on any website the user visits — we cannot predict which domains will be Nostr-enabled.

Source code: https://github.com/HumanjavaEnterprises/nostrkey.browser.plugin.src

Build from source:
1. npm install
2. npm run build:firefox:prod
3. Output is in distros/firefox/

Arvio 0 0 arvostelijan toimesta

NostrKey tekijä Humanjava Enterprises

Vaaditut käyttöoikeudet:

Valinnaiset käyttöoikeudet:

Tiedonkeruu: