Security & Password
Your password protects this browser
The password you set during first launch encrypts everything stored locally:
- Your identity and signing keys
- Messages stored on this device
- Wallet connections and payment history
This password is local to this browser. It does not protect your Nostr identity on other devices. If someone else uses your computer, they can't access your data without the password.
There is no password reset
We cannot recover your password. If you forget it, you'll need to reinstall the extension and restore your account from your recovery phrase or private key.
How encryption works
- All secrets are encrypted with AES-256-GCM
- Your password is derived using PBKDF2 with 100,000 iterations
- Encryption happens entirely on your device — nothing is sent to any server
Auto-lock
The extension locks automatically when you close your browser. You can also configure an auto-lock timer in Settings > Preferences > Security — the extension will lock after a period of inactivity.
You can manually lock at any time from the settings dropdown.
Changing your password
Go to the browser options page (Settings > Preferences > Security) to change your password. You'll need your current password to set a new one.
Backup your keys
Your 12-word recovery phrase (mnemonic) is shown once during account creation. You can also export your private key (nsec) from the options page under Account > Backup Key.
Store your backup securely — offline, on paper, or in a password manager. Anyone with your recovery phrase or private key has full access to your identity.