Clave - Nostr Signer

Stop pasting your nsec into every app. Clave keeps your Nostr key in your iPhone's Keychain — you approve each request, and the key never leaves your phone.

Your Nostr identity is one key. Lose it or leak it and there's no reset — no password recovery, no support line. Yet the usual way to use Nostr is to paste that key into every app you try.

Clave ends that. Your key is created and stored in your iPhone's Keychain, and it stays there. When an app needs something signed — a post, a reaction, a profile update — it asks Clave. You approve, Clave signs, and the app gets a signature. The key itself never leaves your phone.

Think of it as a notary in your pocket: apps bring things to be stamped, you decide what gets stamped, and nobody ever borrows the stamp.

WHAT YOU GET

• One key, one place. Pair every Nostr app to Clave instead of spreading copies of your key around.
• You're in control. Set each app to full, medium, or low trust. Sensitive actions — profile changes, contact lists, deletions — always ask first.
• See everything. A running activity log shows every signature, with one-tap unpair for any app.
• More than one identity? Hold several accounts and sign in with all of them in a single pairing flow. Each key stays separate.
• Works in the background. Clave can sign even when it's closed — no need to keep it open.

BUILT ON AN OPEN STANDARD Clave is a NIP-46 remote signer. NIP-46 is the open Nostr standard for letting apps request signatures from a separate signer instead of holding your key. Any client that supports it can pair with Clave.

FOR THE CURIOUS Requests reach your phone through an end-to-end encrypted relay. A lightweight push notification — with no readable content — wakes a small part of Clave for a few seconds to decrypt the request, check the rules you set, sign with the key in your Keychain, and send back an encrypted response. The relay and proxy can see that a request arrived, never what's in it, and they can never sign on your behalf.

OPEN SOURCE Clave is MIT-licensed and the entire signing path is public: github.com/DocNR/clave. It has had an internal security review; an independent third-party audit is on the roadmap. Don't want to use our proxy? Point Clave at your own in Settings and run the whole stack yourself.

GOOD TO KNOW Clave holds your real Nostr key — treat it like any app you'd trust with your nsec. The win is one place that holds your key instead of the many copies you create by pasting it everywhere. New to it? Pairing a fresh key first is a fine way to try it.