Sidecar | A Classy Nostr Signer troch The Daniel

Sidecar lives in your browser’s side panel and hands every Nostr web app a secure window.nostr to sign in with — so you never paste your nsec into a website again. Your keys stay on your device, encrypted behind a PIN. It’s a companion to your favorite Nostr client, not a replacement: sign, post, and zap in a tap, then jump right back to the app you love.

🔑 Your keys, your control

Full NIP-07 signer: getPublicKey, signEvent, NIP-04 & NIP-44 encrypt/decrypt, and your relay list.
Private keys are encrypted at rest (PBKDF2 → AES-GCM via WebCrypto) — never stored in plaintext, never transmitted off your device.

PIN-protected (at least 8 characters, with a live strength check) and automatic re-lock, on by default after a period of inactivity you can adjust. A paste guard blocks dropping an nsec anywhere except the import field.

Multiple accounts — store as many keys as you like, switch the active one in a click, drag to reorder. Switching works the way you’d expect: log out of a site, switch accounts here, log back in, and the site follows — while sessions you’ve left open elsewhere keep signing as the account they started with.

Per-site permissions with a clear prompt that previews exactly what you’re signing — with human-readable event kinds and a heads-up on the few worth a second look. Relay auth (NIP-42) signs automatically so clients stay connected.

A warning before an app erases your data. Your follow list, mute list, and profile are stored as events that replace the previous version outright — no merge, no undo — so one careless app can wipe years of follows in a single signature. Sidecar checks what it’s being asked to sign against what it last signed for you, and stops to tell you in plain language what would be lost.

🔐 Key portability

Import or export any account as a NIP-49 ncryptsec — a password-encrypted key, so it never has to touch a clipboard as a raw nsec.
Back up or restore your whole vault — every account’s key and connected wallet — in one encrypted file.
NIP-05 identifiers are verified against their domain, with a check or warning right on your profile.

👤 Your profile, your way

View and edit your profile, see your following count, and publish updates in a tap.
Edit and publish your outbox relays (NIP-65) right from your profile.
Follow-list recovery — if another app wipes or shrinks your follows, scan your relays and restore a healthy earlier version (powered by Mutable).

✍ Post without leaving the page

A composer for notes with @mention autocomplete that searches your follows and all of Nostr, embedded note previews, link cards, and image/video upload (to your own Blossom servers, with an automatic fallback).
Drafts autosave per account, and a short review countdown lets you read the note exactly as it’ll publish before it sends.

🔍 Find anyone, open it anywhere

Paste an npub, note, nevent or naddr into the search bar and it opens in whichever Nostr client you prefer. Type a name instead and Sidecar suggests people as you go, starting with the ones you follow. NIP-05 addresses like name@domain resolve against their own domain.

Paste a link from a client you don’t use and it reopens in the one you do.

🔔 Notifications at a glance

A bell shows replies, mentions, reposts, reactions, and zaps for your active account — opening instantly and updating live while you watch, and always reflecting a mute the moment you check (even one made in another app). Each taps through to your preferred web client.

⚡ Lightning wallet (Nostr Wallet Connect)

Connect any NWC wallet — Alby Hub, Zeus, YakiHonne, Coinos, Minibits and more — with built-in suggestions to help you pick one.

Send (BOLT11 or Lightning address), receive by invoice or by your Lightning address (with a QR), view history, and back up or export your connection (PIN-gated, with a QR).

Tap your balance to switch between sats, BTC, and your local currency — sixteen to choose from — and open a 24-hour bitcoin price chart right on the wallet card.

Pay a Lightning invoice from any Nostr page in a tap, plus a WebLN provider with optional per-site spending budgets you can edit or revoke any time.

Auto Zaps — approve small zaps under a limit you set, so small tips go out with nothing to approve — starting at 200 sats a zap and 20,000 a day, and hard-capped at 1,000 and 100,000.

Every payment ends with a bolt of lightning across the page, drawn fresh each time. Turn it off in Settings if you’d rather not.

Sidecar never holds your funds — you stay in control of your own wallet.

🎨 Dressed to your taste

Five themes, switchable in Settings. Speakeasy — the original after-hours velvet — stays the default, joined by Film Noir (matte black with silver), Art Deco (daylight eggshell and gold), Aegean (Greek whitewash and cobalt) and Brownstone (New York sandstone after dark). Your choice sticks across sessions, and the “Pay with Sidecar” card injected on web pages wears the same look.

🛡 Private by design

Open source. No analytics, no tracking, no remote code — everything runs locally in your browser. Link previews are fetched with a guard against private-network requests.
Works in Chrome, Brave, Edge, and other Chromium browsers, plus Firefox 128 and later. Pin Sidecar, open the side panel (or Firefox sidebar), and you’re ready. 🍸

🗞 What’s new

1.6.0
• A warning before an app erases your data — your follow list, mute list, and profile replace the previous version outright, with no undo. Sidecar compares what it’s asked to sign against what it last signed for you and stops to tell you exactly what would be lost.
• Zaps strike — a bolt of lightning crosses the page on every payment, drawn fresh each time. Turn it off in Settings.
• Tap your balance to cycle sats, BTC, and your local currency, on the wallet card and the pinned bar. Sixteen currencies.
• A 24-hour bitcoin price chart on the wallet card.
• Search — paste an npub, note, nevent, naddr or a name@domain address and it opens in your preferred client. Type a name and it suggests people as you go, starting with your follows.
• Two new themes — Aegean (Greek whitewash and cobalt) and Brownstone (New York sandstone after dark). Five in total.
• Auto Zaps now work — small zaps within your limit go through with nothing to approve, defaulting to 200 sats a zap and 20,000 a day, hard-capped at 1,000 and 100,000.
• Notes now reach your relays. A note could be signed, reported as posted, and stored nowhere, with no error shown.
• Payments report the truth — a payment that succeeded could be reported as failed, or leave the page waiting.
• A clearer approval popup — the PIN field, the auto-sign options, and the name of the site asking all stay in view.

1.5.1
• Relax mode — grant a timed auto-sign window (5, 15, or 30 minutes) so you don’t approve every action during an active session, with a countdown bar and an End button.
• Pinned wallet balance bar — your Lightning balance stays visible everywhere in the panel, updating on incoming payments with a gold glow.
• Film Noir balances are now gold, so amounts read warm in the monochrome theme.