A secure, end-to-end encrypted password manager built on the Nostr protocol. Your secrets are encrypted locally and synced across devices using Nostr relays as encrypted self-addressed DMs.
Nostr Secrets Vault is a zero-knowledge password manager that leverages the Nostr protocol for secure, decentralized secret synchronization. Unlike traditional password managers, there's no central server - your encrypted secrets are stored as messages to yourself on Nostr relays.
- Generate new Nostr key pairs (nsec/npub)
- Import existing keys via nsec, hex, or NIP-19 format
- Multiple key support with easy switching
- Secure key storage with optional PIN encryption
- AES-256-GCM vault encryption with PBKDF2 key derivation (100k iterations)
- NIP-44 encryption for secrets (ChaCha20 + HMAC-SHA256)
- Salt embedded in payload - no exposed cryptographic material
- SHA-256 integrity verification with automatic self-healing
- Optional PIN protection with biometric unlock (Android)
- Sync secrets across devices via Nostr relays
- Self-addressed encrypted DMs (only you can decrypt)
- Configurable relay list with connection status
- Offline-first architecture with automatic sync
- Cyberpunk/neon dark theme
- Mobile-first responsive design
- Tag-based organization with color coding
- Real-time search and filtering
- Swipe navigation between screens
- PWA support for app-like experience
┌─────────────────────────────────────────────────────────┐
│ User Device │
├─────────────────────────────────────────────────────────┤
│ ┌─────────────┐ ┌──────────────────────────────┐ │
│ │ PIN/Bio │───▶│ PBKDF2 Key Derivation │ │
│ └─────────────┘ │ (100k iterations + salt) │ │
│ └──────────────────────────────┘ │
│ │ │
│ ▼ │
│ ┌──────────────────────────────────────────────────┐ │
│ │ AES-256-GCM Encrypted Vault │ │
│ │ ┌────────────┐ ┌────────────┐ ┌───────────┐ │ │
│ │ │ Nostr Keys │ │ Sign Logs │ │ Settings │ │ │
│ │ └────────────┘ └────────────┘ └───────────┘ │ │
│ └──────────────────────────────────────────────────┘ │
│ │
│ ┌──────────────────────────────────────────────────┐ │
│ │ NIP-44 Encrypted Secrets │ │
│ │ (ChaCha20 + HMAC-SHA256 per secret) │ │
│ └──────────────────────────────────────────────────┘ │
│ │ │
└──────────────────────────│──────────────────────────────┘
│
▼
┌─────────────────────────────────────────────────────────┐
│ Nostr Relays │
│ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ │
│ │ relay.damus │ │ nos.lol │ │ nostr.band │ │
│ └─────────────┘ └─────────────┘ └─────────────┘ │
│ │
│ Encrypted DMs (Kind 4) - Self-Addressed │
│ Only the owner can decrypt the content │
└─────────────────────────────────────────────────────────┘
| Layer | Protection | Details |
|---|---|---|
| Vault | AES-256-GCM | Keys & settings encrypted at rest |
| Salt | Embedded | PBKDF2 salt hidden in encrypted payload |
| Secrets | NIP-44 | Each secret individually encrypted |
| Transport | TLS + NIP-44 | End-to-end encrypted relay communication |
| Integrity | SHA-256 | Checksum verification with self-healing |
- Node.js 18+ or Bun
- Git
# Clone the repository
git clone https://github.com/AcierP/nostr-secrets.git
cd nostr-secrets
# Install dependencies
npm install
# or
bun install
# Start development server
npm run dev
# or
bun devnpm run build
npm run preview# Build web assets
npm run build
# Sync with Android
npx cap sync android
# Open in Android Studio
npx cap open android- Create or Import Key - Generate a new Nostr identity or import your existing nsec
- Optional PIN Setup - Enable PIN protection for vault encryption
- Add Your First Secret - Tap the + button to create a secret
- Add: Tap + button, enter title and content, select tags
- View: Tap the eye icon to decrypt and reveal content
- Edit: Tap the pencil icon on any secret
- Delete: Swipe left or use the delete button
- Search: Use the search bar to filter by title
- Filter: Tap tags to filter secrets by category
- Go to Settings → Manage Relays
- Add or remove relays as needed
- Secrets automatically sync when connected
- Green indicator = synced to all relays
wss://relay.damus.io
wss://relay.nostr.band
wss://nos.lol
wss://relay.primal.net
| Tag | Color | Use Case |
|---|---|---|
| Login | Blue | Website credentials |
| Crypto | Orange | Wallet seeds, keys |
| Finance | Green | Banking, cards |
| Personal | Pink | Personal info |
| Work | Purple | Work-related |
| API | Cyan | API keys, tokens |
| Category | Technology |
|---|---|
| Framework | React 18 + TypeScript |
| Styling | Tailwind CSS + shadcn/ui |
| Build Tool | Vite |
| Mobile | Capacitor |
| Crypto | @noble/secp256k1, nostr-tools |
| State | React Context + Custom Hooks |
src/
├── components/
│ ├── SecretsScreen.tsx # Main secrets list & management
│ ├── AddSecretSheet.tsx # Create/edit secret form
│ ├── KeysScreen.tsx # Nostr key management
│ ├── SettingsScreen.tsx # App settings
│ ├── SecuritySheet.tsx # PIN & biometrics settings
│ ├── RelayManager.tsx # Relay configuration
│ └── ui/ # shadcn/ui components
├── context/
│ └── VaultContext.tsx # Global encrypted state
├── hooks/
│ ├── useRelaySync.ts # Relay synchronization
│ ├── useNostrDMs.ts # DM fetching
│ └── useBiometrics.ts # Native biometric auth
├── lib/
│ ├── vault.ts # AES-256-GCM encryption
│ ├── nip44.ts # NIP-44 implementation
│ ├── keyStore.ts # Key generation & storage
│ ├── nostrRelay.ts # Relay connections
│ └── vaultIntegrity.ts # SHA-256 checksums
└── pages/
└── Index.tsx # Main app layout
Contributions are welcome! Please follow these steps:
- Fork the repository
- Create a feature branch:
git checkout -b feature/amazing-feature - Commit your changes:
git commit -m 'Add amazing feature' - Push to the branch:
git push origin feature/amazing-feature - Open a Pull Request
- TypeScript strict mode
- Functional components with hooks
- Tailwind CSS for styling
- No inline styles
You can download the latest version of the application ready to install:
Note: After downloading, you will need to allow installation from "Unknown Sources" in your Android phone's settings to be able to install the APK file.
This project is licensed under the MIT License - see the LICENSE file for details.
- Backup your nsec - Lost keys cannot be recovered
- Use strong PINs - Short PINs are vulnerable to brute force
- Verify relays - Only use trusted relay servers
- Regular updates - Keep the app updated for security patches
- Nostr Protocol - Decentralized social protocol
- NIP-44 - Versioned encryption
- noble-secp256k1 - Audited crypto library
- shadcn/ui - Beautiful UI components
- Capacitor - Native mobile runtime
Built with 💜 for the Nostr community
Your keys, your secrets, your privacy.