2025-09-30T16:11:19Z https://nostr.now unl0ckd https://nostr.now/npub1pcqplsgaschuac3glqp7fs9dm069wmr7w2m45dx06grk2ltz80lq7zz5zu https://24242.io/9fbf8ba1dc7436948873b89ec1fd2f47fa16419f4febfedd788a00a4372286f8.png https://24242.io/9fbf8ba1dc7436948873b89ec1fd2f47fa16419f4febfedd788a00a4372286f8.png https://nostr.now/nevent1qqsqkeaxjuas683c2y3x4ps2uzjfkgrkjxsl8yz73t5r8jsp86jsamqzyq8qq87prkrzlnhz9ruq8exq4hdlg4mv0eetwk35elfqwetavgaluut8la7 I love the decentralized nature of Nostr, but I have a nagging concern about my Nsec. If this secret is ever compromised, my entire identity across Nostr is compromised. <br/><br/>Is there a method to rotate breached nsec based on my npub? How would this work? <br/><br/>I would only possess an authenticate token, my npub, that anyone would know or could find out. I like how private Nostr is, but without having my nsec/npub associated with another identity like my email, it seems like I must protect my nsec at all costs.<br/><br/>I store my nsec in 1Password, so I’m not overly concerned about disclosure of my nsec locally, but I worry that another strength of the Nostr ecosystem (as I understand it after using it for 48 hours) could prove to be a security weakness: all Nostr clients must protect my nsec equally. If one of them ever mis-handles this secret, my entire Nostr identity is compromised.<br/><br/>Am I understanding Nostr Authentication properly?<br/><br/>#asknostr 2025-10-02T00:16:38Z