Limestone City Bitcoin

Technical Resources ▸ Bonus Projects

Nostr Signing Device

Cold storage for your identity

Everything this site teaches about Bitcoin keys applies to another key you may already carry: your Nostr identity. Nostr (the open protocol behind the purple ostrich icons in our footer) identifies you by a keypair, and the private half, your nsec, signs every note you publish. This bonus project gives that key the same treatment we give a seed: a cheap, dedicated device it never leaves.

Why Bother? An nsec Is Forever

Here is the uncomfortable difference from a password: a Nostr key cannot be rotated. Your npub is your identity; followers, reputation, and zap history all hang off it. If malware or a keylogger ever grabs the nsec from a browser, the thief is you, permanently, and there is no reset flow. A key that can never be changed deserves to live somewhere no website can reach, which is exactly the logic that puts Bitcoin seeds on signing devices.

The Build: $15 of Parts

The device is a LILYGO T-Display, a tiny ESP32 board with a screen, sold for about $10 to $15. The build is a gentle introduction to the DIY spirit of SeedSigner: install the Arduino IDE, flash the open-source signing firmware onto the board over USB, and load your nsec onto the device. From then on the key lives in the board's memory, not on any computer.

How Signing Works

The flow mirrors PSBT signing. Your Nostr client hands each unsigned event to a small browser extension (the bridge is called Horse, in a Chrome-based browser), the extension passes it to the device, the device signs it on its own chip, and only the signature comes back. The client never sees the key; the browser never sees the key; a compromised computer can at worst ask the device to sign things while it is plugged in, not steal the identity outright.

Honest limits: this is a young project, the browser-extension bridge is a convenience rather than an air gap, and a USB link is involved, so it does not meet the standard we hold for serious Bitcoin savings. For an identity key with no other hardware option, though, it is a huge upgrade over an nsec pasted into a browser.

Back it up like a seed. The device can break or be lost, and the nsec still cannot be rotated. Keep the key written on paper or metal in a safe place, exactly as the backup rules teach, and never store it digitally.

A perfect meetup project. The parts cost less than lunch and the flashing takes an evening. Bring a board to a meetup and build it alongside someone who has done it, then zap them a thank-you.