Media
5 items
Description
A multi-account NIP-07 Nostr signer with a built-in Lightning wallet, in your browser sidebar. Sidecar lives in your browser's side panel and hands every Nostr web app a secure window.nostr to sign in with — so you never paste your nsec into a website again. Your keys stay on your device, encrypted behind a PIN. It's a companion to your favorite Nostr client, not a replacement: sign, post, and zap in a tap, then jump right back to the app you love. 🔑 Your keys, your control Full NIP-07 signer: getPublicKey, signEvent, NIP-04 & NIP-44 encrypt/decrypt, and your relay list. Private keys are encrypted at rest (PBKDF2 → AES-GCM via WebCrypto) — never stored in plaintext, never transmitted off your device. PIN-protected (at least 8 characters, with a live strength check) and automatic re-lock, on by default after a period of inactivity you can adjust. A paste guard blocks dropping an nsec anywhere except the import field. Multiple accounts — store as many keys as you like, switch the active one in a click, drag to reorder. Switching works the way you'd expect: log out of a site, switch accounts here, log back in, and the site follows — while sessions you've left open elsewhere keep signing as the account they started with. And if a site is signed in with more than one of your accounts, the approval prompt tells you and lets you switch without closing it. Per-site permissions with a clear prompt that previews exactly what you're signing — with human-readable event kinds and a heads-up on the few worth a second look. Relay auth (NIP-42) signs automatically so clients stay connected. A warning before an app erases your data. Your follow list, mute list, and profile are stored as events that replace the previous version outright — no merge, no undo — so one careless app can wipe years of follows in a single signature. Sidecar checks what it's being asked to sign against what it last signed for you, and stops to tell you in plain language what would be lost. 🔐 Key portability Import or export any account as a NIP-49 ncryptsec — a password-encrypted key, so it never has to touch a clipboard as a raw nsec. Exported secrets are cleared from your clipboard automatically after 60 seconds. Back up or restore your whole vault — every account's key and connected wallet — in one encrypted file. NIP-05 identifiers are verified against their domain, with a check or warning right on your profile. 👤 Your profile, your way View and edit your profile, see your following count, and publish updates in a tap. Edit and publish your outbox relays (NIP-65) right from your profile. Follow-list recovery — if another app wipes or shrinks your follows, scan your relays and restore a healthy earlier version (powered by Mutable). ✍️ Post without leaving the page A composer for notes with @mention autocomplete that searches your follows and all of Nostr, embedded note previews, link cards, and image/video upload (to your own Blossom servers, with an automatic fallback). Drafts autosave per account, and a short review countdown lets you read the note exactly as it'll publish before it sends. 💬 Comment on any webpage The speech-bubble icon in the top bar opens a composer for the page you're reading. Your comment publishes as a kind 1111 (NIP-22) addressed to the page's URL — so everyone commenting on the same page lands in the same thread. Mentions work the same way they do in notes. The review countdown fires before it goes out, and a stray click doesn't lose your draft. 🔍 Find anyone, open it anywhere Paste an npub, note, nevent or naddr into the search bar and it opens in whichever Nostr client you prefer. Type a name instead and Sidecar suggests people as you go, starting with the ones you follow. NIP-05 addresses like name@domain resolve against their own domain. Paste a link from a client you don't use and it reopens in the one you do. 🔔 Notifications at a glance A bell shows replies, mentions, reposts, reactions, and zaps for your active account — opening instantly and updating live while you watch, and always reflecting a mute the moment you check (even one made in another app). Each carries its own icon, so you can tell a zap from a reaction at a glance, and each taps through to your preferred web client. ⚡ Lightning wallet (Nostr Wallet Connect) Connect any NWC wallet — Alby Hub, Zeus, YakiHonne, Coinos, Minibits and more — with built-in suggestions to help you pick one. No wallet yet? Quick-start one through Rizful with a single one-time code, no separate app required. Send (BOLT11 or Lightning address), receive by invoice or by your Lightning address (with a QR), view history, and back up or export your connection (PIN-gated, with a QR). Tap your balance to switch between sats, BTC, and your local currency — sixteen to choose from — and open a bitcoin price chart with historical ranges and a hover indicator right on the wallet card. Pay a Lightning invoice from any Nostr page in a tap, plus a WebLN provider with optional per-site spending budgets you can edit or revoke any time. Auto Zaps — approve small zaps under a limit you set, so small tips go out with nothing to approve — starting at 200 sats a zap and 20,000 a day, and hard-capped at 1,000 and 100,000. Every payment ends with a bolt of lightning across the page, drawn fresh each time. Turn it off in Settings if you'd rather not. Sidecar never holds your funds — you stay in control of your own wallet. 🎨 Dressed to your taste Six themes, switchable in Settings, each set in its own display typeface. Speakeasy — the original after-hours velvet, in a high-contrast Didone serif — stays the default, joined by Film Noir (matte black with silver and venetian-blind stripes), Art Deco (daylight eggshell and bronze, legible at five times the contrast), Aegean (Greek whitewash and cobalt), Brownstone (New York sandstone after dark), and Bauhaus (flat planes of primary color, black rule lines, a Futura-lineage geometric sans). Your choice sticks across sessions, and the "Pay with Sidecar" card injected on web pages wears the same look. 🛡️ Private by design Open source. No analytics, no tracking, no remote code — everything runs locally in your browser. Link previews are fetched with a guard against private-network requests. Works in Chrome, Brave, Edge, and other Chromium browsers, plus Firefox 128 and later. Pin Sidecar, open the side panel (or Firefox sidebar), and you're ready. 🍸 🗞️ What's new 1.8.0 • New theme: Bauhaus — flat planes of primary color, black rule lines, a Futura-lineage geometric sans. Sixth theme, third light theme. • Every theme now has its own display font — six typefaces from six different categories. The theme picker reads as a type specimen, each card set in the face you'd get. • "Wrong account?" on the signing prompt — when a site is signed in with more than one of your accounts, the approval prompt tells you and lets you switch without closing it or reloading the page. • Distinct activity icons — reactions, zaps, reposts and mentions each carry their own glyph in Recent activity. • Art Deco legibility — gold text on cream measured just 1.67:1 contrast. Now a deep bronze at 5.23:1. • Signing reliability — a signing approval can no longer be hidden behind a modal, a request lost to a sleeping service worker is retried, and relay and wallet connections no longer die until a reload. • Copied secrets self-destruct — an exported key left on the clipboard is cleared after 60 seconds. 1.7.0 • Comment on any webpage — the speech bubble in the top bar opens a composer for the page you're reading. Publishes a kind 1111 (NIP-22) over the page's URL, with @mentions, a review countdown, and a link card. Links point at Jumble, the only client rendering them today. • Quick-start a Lightning wallet through Rizful — enter a one-time code and Sidecar receives an NWC connection. No separate app. • The price chart now shows historical ranges with a hover indicator. • Smarter wallet backup — Sidecar now verifies your relay backup matches the wallet you have connected, and warns before overwriting a different one. • Restoring a wallet shows the right balance — the client was cached under the account, not the connection, so a restored wallet displayed the previous wallet's balance until you removed and re-imported it. • Imported accounts now load profile pictures on the first try — a storage write race was silently overwriting freshly fetched profiles. • Add an account from the dropdown — no trip to settings. • Interface text stays put — chrome is unselectable, content opts back in.