Nostr Authenticator is a high-security, open-source 2FA (Two-Factor Authentication) solution specifically designed for the Nostr ecosystem. It allows you to verify your identity and manage multiple Nostr keys without ever exposing your sensitive private data to third-party applications.

How it works (Decentralized Verification): This app introduces a secure "Challenge-Response" flow via encrypted Direct Messages (DMs). When a service or website needs to verify that you own a specific public key (npub) or NIP-05 identifier, it sends a unique, random nonce (challenge) to your address. Nostr Authenticator listens to the relays, receives the encrypted DM, and allows you to securely re-transmit the response to authorize your login.

Uncompromising Security:

AES-256-GCM Encryption: When a PIN is enabled, all your private keys are stored in a local vault encrypted with military-grade AES-256-GCM.

Self-Destruct Mechanism: To protect against physical theft or brute-force attacks, the app automatically wipes all stored data after 5 consecutive failed PIN attempts.

Zero Data Collection: We do not operate servers. We do not collect emails, phone numbers, or analytics. Your keys stay on your device, and your communication stays on the decentralized Nostr network.

Multi-Key Management: Easily switch between different Nostr identities and maintain a history of your authentication requests.

Open Source & Transparent: We believe that security tools must be auditable. Nostr Authenticator is fully open-source, allowing the community to verify our encryption methods and our "zero-knowledge" claims. Transparency is the foundation of trust in the decentralized web.

Project Source: https://github.com/tzongocu/nostr-authenticator.git

Key Features:

Real-time relay monitoring for instant authorization requests.

Encrypted DM response logic for secure 2FA.

Clean, ad-free, and privacy-focused user interface.

Advanced protection for NIP-05 identity verification.

Take full control of your Nostr identity with a lightweight, secure, and transparent authenticator.