Aegis is a free, open-source Nostr signer for people who want to use Nostr apps without giving each one their private key. It runs on desktop and mobile, and the Windows version comes as a ready-made build or installer. If you use Nostr clients, web apps or browser-based tools and want one place to approve signatures, Aegis is built for that job.
Instead of storing your keys inside every app, Aegis holds them and lets other programs ask it to sign events, encrypt messages or decrypt them. It supports several standard Nostr connection methods, including remote signing over NIP-46 and browser signing through NIP-07. The current release is v0.5.1, and the code is public on GitHub, so you can see how it handles keys before you rely on it.
What a Nostr Signer Does and Why It Matters
Nostr identities are based on key pairs. The private key signs every event you publish, and anyone who holds it can post as you. That makes the private key the most sensitive part of using Nostr, more important than any single app's password screen.
A signer separates the key from the apps. Instead of pasting your private key into each client, you keep it in one program and let the clients ask for signatures. If one app is buggy or untrustworthy, it never needs to see the key itself. The app sends an unsigned event, the signer checks it, and the signed result comes back.
This model also makes it easier to stop using an app. You revoke its access in the signer rather than trying to remove a key from several places. Aegis follows this pattern, which is why it is worth understanding the basic idea before you connect your first app.
Who Aegis Is For
Aegis fits several common situations. Someone who uses a Nostr client on a desktop and a different one on a phone can keep one key in Aegis and approve signatures from both devices. This avoids copying the same private key around.
Developers testing web Nostr apps can use the NIP-07 path in the built-in browser. They can see how a window.nostr signing flow behaves without writing their own key handling. The local relay also gives them a predictable address on their own machine to point an app at.
People who are cautious about giving apps their keys form another group. If your main concern is keeping the private key in one controlled place, a signer is the right kind of tool. Aegis is a good fit when that is the goal, but it does not replace careful habits such as backing up your key offline and checking where your downloads come from.
Understanding Nostr Keys: npub and nsec
Nostr uses two related formats for keys. The npub is your public key, the identifier other people use to find you and follow your posts. It is safe to share. The nsec is your private key, and it proves that an event really came from you. Anyone with your nsec can sign events as you.
Both values are encoded in a human-readable format that starts with a fixed prefix, which makes them easier to recognize when you copy them. Be careful when pasting. A common mistake is putting an nsec into a field meant for an npub, and a signer helps by keeping the private key out of the way of day-to-day copying.
Understanding this split is the foundation for using Aegis well. Share only the npub with people and apps that need your identity. Keep the nsec in the signer, and approve requests as they come in rather than handing the key over in advance.
Key features
Signing for Android apps (NIP-55)
Remote signing with Nostr Connect (NIP-46)
Browser signing (NIP-07)
Local relay for on-device connections
Compatibility with Nostr apps
Supported coins
Aegis works with Nostr, which is the only network named in its documentation. It is a signer for Nostr identities and events, not a wallet for other cryptocurrencies, so it is best understood as a tool for signing and encrypting Nostr messages.
How to install Aegis on Windows
- 1
Get the Windows build
Download Aegis from the official website or from the Releases page of the project on GitHub at github.com/ZharlieW/Aegis. Download only from the official website or GitHub, and avoid mirrors or links shared in messages or forums.
- 2
Verify the file
Compare the SHA-256 checksum of your download with the value published alongside the release. If a signature is provided, check it as well. If the values do not match, delete the file and download it again from an official source.
- 3
Run the installer or build
If you received an installer, run it and follow the on-screen prompts. If you received a ready-made build, extract it to a folder you control and start the program from there. Keep the program in a location where you can find it again when you need to update it.
-
Set up your Nostr key
Open Aegis and set up the Nostr key you want it to manage. Back up the private key in a safe place before you connect any app, because you cannot recover a lost key from the signer alone.
How to use Aegis
Aegis works best when you connect it to one app at a time, so you can see how each request is handled. The steps below cover the main connection methods.
- Open Aegis and confirm that your Nostr key is loaded.
- In the Nostr app you want to use, look for a remote signing or Nostr Connect option.
- Copy the bunker:// address or Nostr Connect URI from Aegis and paste it into the app.
- Approve the connection request in Aegis and confirm that the app shows your public identity.
- For web apps, open them in the built-in browser so Aegis can provide window.nostr through NIP-07.
- On Android, allow the app to use Aegis as a signer through NIP-55 when it asks.
- Review each signing request before you approve it, especially when an app asks you to sign a new kind of event.
- Disconnect apps you no longer use so they cannot request signatures in the future.
Pros & cons
- Keeps your Nostr private key in one signer instead of in each app
- Supports NIP-46, NIP-55 and NIP-07 connection methods
- Works across desktop and mobile platforms
- Free and open source, with the code available on GitHub
- Local relay option for connections that stay on your device
- Available as a Windows build or installer
- Covers Nostr only; it is not a multi-coin wallet
- Apps must support NIP-46, NIP-55 or NIP-07 to use it
- Version 0.5.1 points to an early stage of development
- Remote signing needs the signer to be available when an app asks for approval
- Newcomers need to learn Nostr key concepts before the setup feels simple
Is Aegis safe?
Aegis handles your Nostr private key, so treat the download and setup with care. Get the program only from the official website or the GitHub Releases page, and verify the SHA-256 checksum or signature before you run it. Never enter your nsec or any seed phrase on third-party websites, including sites that claim to offer a Nostr login or a recovery service.
Do not paste your private key into any app that you have not connected through a method you understand. Keep backups offline, such as on paper or a dedicated encrypted drive, and avoid storing them in plain text on a shared computer. Because the code is public, you can review it or rely on community reports before trusting it with real keys.
The project is actively maintained, and the latest code update is recent. Still, check the latest version on the official website before installing, and update when a newer release is available.
- Official source only. Download from github.com/ZharlieW/Aegis. Ignore ads and lookalike domains.
- Check the SHA-256. Compare the installer hash with the value the developer publishes before running it.
- Never share your seed phrase. No developer, support agent or website — including CryptApps — will ever ask for it.
Alternatives
Aegis is a signer, while most of the programs in this catalog are clients or tools that you use to read, post or manage Nostr content. Amethyst, Gossip and Coop are Nostr clients, so you use them to follow people and write notes or messages. Aegis sits behind those apps and handles the keys they need.
NAK and Nostr Commander RS are command-line tools aimed at users who prefer working from a terminal. Nostr VPN takes a different approach, building a mesh network on Nostr signaling. Blockcore Notes is a progressive web app for following accounts and organizing feeds.
If you want a dedicated key holder that other apps can call, Aegis is the closest match. If you want an app to browse Nostr, pick a client, and then connect it to Aegis if you want to keep your keys in one place.
Specifications
- Price
- Free
- Type
- Open source
- License
- —
- Latest version
- v0.5.1
- Last update
- 17 May 2026
- Windows support
- Yes (Windows build or installer)
- Source code
- github.com/ZharlieW/Aegis
Frequently asked questions
Aegis is a Nostr signer that holds your private key and signs events on behalf of other apps. It lets clients and web apps request signatures, encryption and decryption without receiving the key itself. It is useful for people who use several Nostr apps and want one place to control their keys.
Yes, Aegis is free and open source. The source code is published on GitHub, so you can read it, follow its development and build it yourself if you have the skills. For ordinary use, you can download the ready-made Windows build or installer.
Yes, Aegis is available for Windows as a ready-made build or installer. Download it from the official website or the GitHub Releases page, verify the SHA-256 checksum, and then run it. It also runs on macOS, Linux, Android, iOS and in a web or extension form.
Aegis is designed to keep your private key inside the signer rather than inside each app, which is its main safety benefit. Safety still depends on how you install it and what you approve. Use only official downloads, verify the checksum, and never enter your nsec on third-party sites.
Most connections use NIP-46 with a bunker:// address or a Nostr Connect URI. Copy the value from Aegis, paste it into the app's remote signing option, and approve the request. Web apps can use NIP-07 inside the built-in browser, and Android apps can use NIP-55.
NIP-46 is a Nostr standard for remote signing, often called Nostr Connect or a bunker. It lets an app send signing requests to a signer such as Aegis without ever holding the private key. This separates the key from the app and gives you control over each approval.
No, Aegis is built for Nostr. Its documentation names Nostr as the only supported network, and it signs Nostr events and encrypted messages. If you need a wallet for other cryptocurrencies, look for a program designed specifically for that purpose.
Verdict
Aegis is a practical choice for Nostr users who want to keep their private keys in one controlled place and connect several apps to it. It is free, open source and available for Windows, and it supports the main Nostr signing methods, including NIP-46, NIP-55 and NIP-07. It suits people who already understand the basics of Nostr keys and want a cleaner setup. Beginners should learn how npub and nsec work first, and anyone who keeps real identities at stake should follow the safety steps carefully before connecting a single app.