zhashtoshi_ on Nostr: Why I built my own Nostr signer My phone signer kept failing when I needed it. iOS ...
Why I built my own Nostr signer
My phone signer kept failing when I needed it. iOS suspends apps, its background wake-ups were unreliable for me, and after I deleted one connection I could not pair it again. Quill, my relay's admin panel and my MCP assistant all stopped signing in the same day.
So I wrote hivescope-bunker, a NIP-46 remote signer for one account that runs on my own server:
• The key is encrypted on disk (NIP-49) and the bunker starts locked: I unlock it by hand after a restart
• Each app has its own connection that can sign only the kinds of event it needs, with an hourly limit
• The relay panel's connection signs only logins for its own address
• No open ports: it only connects out to relays
The trade-off is real: my key now lives, encrypted, on a server instead of in a phone keychain. Open source, MIT, written in Go:
https://github.com/rzazo24/hivescope-bunker#nostr #nip46
Published at
2026-10-10 20:48:01 UTCEvent JSON
{
"id": "93c62c703b359b59c9e2b09b911fbcc931c8ae123d40d3666eb8ddcac38baddf",
"pubkey": "67a69f6937afaa0ab6604c833b1010da2b12ce9c714c59342c16f68c098375f1",
"created_at": 1791665281,
"kind": 1,
"tags": [
[
"t",
"nostr"
],
[
"t",
"nip46"
]
],
"content": "Why I built my own Nostr signer\n\nMy phone signer kept failing when I needed it. iOS suspends apps, its background wake-ups were unreliable for me, and after I deleted one connection I could not pair it again. Quill, my relay's admin panel and my MCP assistant all stopped signing in the same day.\n\nSo I wrote hivescope-bunker, a NIP-46 remote signer for one account that runs on my own server:\n\n• The key is encrypted on disk (NIP-49) and the bunker starts locked: I unlock it by hand after a restart\n• Each app has its own connection that can sign only the kinds of event it needs, with an hourly limit\n• The relay panel's connection signs only logins for its own address\n• No open ports: it only connects out to relays\n\nThe trade-off is real: my key now lives, encrypted, on a server instead of in a phone keychain. Open source, MIT, written in Go:\nhttps://github.com/rzazo24/hivescope-bunker\n\n#nostr #nip46",
"sig": "bdb2104a0d194098d34639ee46aea0236b014ad374a0fe45e0a7186a83b4a234fb33f4988d4e9bbfb14ab3a3b8fce77b9f3669246b9f97f697afb23ba2031506"
}