fiatjaf on Nostr: The latest nak v0.17.4 implements support for managing decoupled encryption keys that ...
The latest nak v0.17.4 implements support for managing decoupled encryption keys that fix NIP-17 completely, as per
https://github.com/nostr-protocol/nips/pull/1647See this amazing infographic that explains how it works:
If you call `nak dekey --sec <whatever>` you'll generate a new decoupled encryption key that is stored locally and announced with a kind:10044 event. After that if you use `nak gift wrap` or `nak gift unwrap` that key will be used by default (when wrapping both keys will be tried if possible).
If you run `nak dekey` on another device/client (or with another --config-path) that other device will announce itself as in need of the decoupled key, then you can run `nak dekey` again on the first device and it will automatically send the key to the second -- and like that the key is shared among all your devices.
Call `nak dekey --rotate` to discard the current decoupled key and generate and announce a new one.
Download here:
https://github.com/fiatjaf/nak/releases/tag/v0.17.4Published at
2025-12-30 18:44:58 UTCEvent JSON
{
"id": "b5185904786d21bc99d89c511a0450a7fa0be7ee45ef1eeb4fbea374d3556a8e",
"pubkey": "3bf0c63fcb93463407af97a5e5ee64fa883d107ef9e558472c4eb9aaaefa459d",
"created_at": 1767120298,
"kind": 1,
"tags": [
[
"imeta",
"url https://image.nostr.build/89c543d261ad0d665c1dea78f91e527c2e39e7fe503b440265a3c47e63c9139f.jpg",
"ox 89c543d261ad0d665c1dea78f91e527c2e39e7fe503b440265a3c47e63c9139f",
"x 7c6741ce310731b7516c61508102e4e38abfc0ce5f712459ddc1f117ff668d2d",
"m image/jpeg",
"dim 1989x2545",
"bh LASs4~^*^+~p_3Rjjst7oubIRjRk",
"blurhash LASs4~^*^+~p_3Rjjst7oubIRjRk",
"thumb https://image.nostr.build/thumb/89c543d261ad0d665c1dea78f91e527c2e39e7fe503b440265a3c47e63c9139f.jpg"
]
],
"content": "The latest nak v0.17.4 implements support for managing decoupled encryption keys that fix NIP-17 completely, as per https://github.com/nostr-protocol/nips/pull/1647\n\nSee this amazing infographic that explains how it works: \nhttps://image.nostr.build/89c543d261ad0d665c1dea78f91e527c2e39e7fe503b440265a3c47e63c9139f.jpg\n\nIf you call `nak dekey --sec \u003cwhatever\u003e` you'll generate a new decoupled encryption key that is stored locally and announced with a kind:10044 event. After that if you use `nak gift wrap` or `nak gift unwrap` that key will be used by default (when wrapping both keys will be tried if possible).\n\nIf you run `nak dekey` on another device/client (or with another --config-path) that other device will announce itself as in need of the decoupled key, then you can run `nak dekey` again on the first device and it will automatically send the key to the second -- and like that the key is shared among all your devices.\n\nCall `nak dekey --rotate` to discard the current decoupled key and generate and announce a new one.\n\nDownload here: https://github.com/fiatjaf/nak/releases/tag/v0.17.4",
"sig": "8b6e7abfb89ab6e9e70e8f0c8ecfccd0708e1da521853d9dc8d55daeb13b01030a2c078f4eae80261161d809536722b5f0bf9dd6ba9ca893c84fd7972cbff627"
}
