Home | Back

NOSTR

Notes and Other Stuff Transmitted by Relays

Nostr NIP-46 & NIP-47 - Secure, remote, revokable logins

Use NIP-46 Remote Signer to keep your private key in a safe “bunker” device, and NIP-47 Wallet Connect to grant controlled Lightning wallet access - ideal for teams and creators.

At a glance

  • NIP-46 (Remote Signer): a device/app (e.g. Amber) signs on your behalf, so your nsec never leaves the bunker.
  • NIP-47 (Wallet Connect): connect a Lightning wallet (e.g. GetAlby) via Nostr with permissions & limits (zap caps, etc.).
  • Use case: log in to clients (e.g. YakiHonne) remotely and allow third parties to engage without sharing secrets.

NIP-46 setup (example: Amber on Android)

  1. Install Amber (via Obtainium, F-Droid, or Zapstore). Add a nsec bunker.
  2. On the web client (e.g., YakiHonne), choose Remote Signer, scan the QR with Amber, and approve.
  3. Your account is now usable in the client - without pasting the nsec.

NIP-47 setup (example: GetAlby via NWC)

  1. Create/choose a Lightning wallet in GetAlby and enable Nostr Wallet Connect.
  2. Generate a connection string and paste it into the client's “Add wallet” (NWC) flow.
  3. Configure limits (e.g., 100k sats/month) per teammate to prevent drain.

Team patterns

  • Multi-user posting: grant multiple editors access via NIP-46; revoke per-user at any time.
  • Shared wallet zaps: connect one wallet with per-user caps via NIP-47.
  • Separation of duties: one bunker device holds the key; clients never see it.

Security notes

  • Keep the bunker device secure (PIN/biometrics, backups).
  • Audit connected clients and NWC permissions regularly.
  • Prefer open-source builds (e.g. Obtainium installs from upstream releases).

References & further reading

©2025 tomdwyer.co.uk