Nostr & Decentralized Social

NkcliCommand-Line Nostr Key Manager

Free open-source command-line tool for managing Nostr keys, with NIP-46 signing and NIP-06 support. Read the project status and safety notes first.

Free Open source Windows: Yes v1.1.3 Updated 11 Apr 2023
8 min read Last update 11 Apr 2023 github.com/mdzz-club/nkcli

Nkcli is a free, open-source command-line tool for managing Nostr keys, built for developers and experienced users who prefer working in a terminal. It is written in Go and available as a ready-made Windows build or installer, so you can use nkcli for Windows without compiling anything yourself.

Before you install it, note the project status. The most recent code update is dated April 11, 2023, more than two years ago, and the latest release is version 1.1.3. Treat nkcli as an unmaintained tool: it may still suit a specific workflow, but you should not expect ongoing fixes or new Nostr features, and you should review the safety notes below before trusting it with real keys.

02

What Is Nkcli and Who Is It For?

Nkcli is a small utility whose job is narrow: it manages Nostr keys and can serve NIP-46 signing requests. It does not display a feed, post notes or act as a social app. Think of it as a tool that sits behind the scenes and holds the keys that the visible apps use.

The program suits people who are comfortable typing commands. Developers building Nostr bots, testers who need several throwaway identities and power users who want their keys kept outside of graphical clients will find it the most useful. Someone who only wants to read and post messages will usually be better served by a full client.

Because the project is open source, the code can be read by anyone who wants to check how keys are handled. That transparency is one reason technical users value tools like this, although it does not replace checking the release you download.

03

Key Concepts: Public Keys, Private Keys and Seed Phrases

A Nostr identity is built on a key pair. The public key is shared openly and identifies your account to others, while the private key proves that a message really came from you. Anyone who obtains the private key can act as you, which is why key handling is the central concern for a tool like nkcli.

Nostr keys are often written in bech32 form, where public keys begin with npub and private keys begin with nsec. Clients and tools use these formats to avoid confusing the two. Treat any nsec value as a password that must stay private.

A seed phrase is a list of words that can regenerate a whole set of keys. The NIP-06 approach lets one recovery phrase produce a Nostr key pair in a standard way. This is convenient for restoring an identity, but it also means the seed phrase is the single most sensitive piece of information you hold, so it should be stored offline and never typed into a website you do not trust.

04

Common Scenarios for a Command-Line Key Manager

A typical case is a developer testing a bot. The bot needs a key to publish events, and keeping that key in a dedicated tool lets the developer change it without editing the bot's code. Separating identities this way also reduces the chance of mixing test posts with a real account.

Another scenario is signing for a graphical app without giving that app the key itself. With NIP-46, the client asks nkcli to sign an event, and the key never leaves the tool. This pattern is useful when you want to try a new client but are not ready to store your main key inside it.

Finally, a command-line manager fits people who keep their setup documented and repeatable. Commands can be recorded, reviewed and rerun on another computer, which helps when you need to rebuild an environment after a reinstall. The same habit that makes this useful also means you should keep secure backups of every key you manage.

05

Key features

Multiple key management

Nkcli lets you handle more than one Nostr identity from a single tool. Instead of juggling separate apps for a personal account, a work profile and a test key, you can organize them in one place from the terminal. Because everything runs from the command line, the same workflow can be repeated on another machine or placed in a script.

NIP-46 support

NIP-46 is the Nostr standard for remote signing. Nkcli can act as a signing service, so a client application sends signing requests while the private key stays on your own machine. This lets you use an identity in another app without copying the key into that app.

NIP-06 support

NIP-06 describes how a Nostr key pair can be derived from a BIP-39 seed phrase. With support for this standard, nkcli can work with keys that come from a recovery phrase you already keep, so the same identity can be restored in other NIP-06 compatible tools.

Encrypted private key storage

Nkcli can encrypt your private key so it is not stored as readable text. Someone who copies the key file cannot read the key without the passphrase that protects it. The level of protection depends on how strong that passphrase is, so choose a long, unique one.
06

Supported coins

Nkcli is built around Nostr, the network its documentation names as the protocol it works with. It is not a multi-coin wallet and does not manage bitcoin or tokens on other blockchains. If you need to hold assets across several networks, a dedicated wallet is a better fit.

07

How to install Nkcli on Windows

  1. 1

    Download the release

    Download only from the official website or the project's GitHub Releases page at github.com/mdzz-club/nkcli. Avoid mirrors, file-sharing sites and links posted in forums or chat groups, since these can carry modified files.

  2. 2

    Verify the file

    Compare the SHA-256 checksum of the downloaded file with the value published on the release page. If the project provides a signature, check it as well. If no checksum or signature is available, be more cautious before running the file.

  3. 3

    Run the installer

    Start the Windows installer and follow the prompts. Accept the default install location unless you have a specific reason to change it, and make sure the installer is the file you verified in the previous step.

  4. Confirm the command works

    Open Command Prompt or PowerShell and run nkcli help. If the command list appears, the program is installed and reachable from your terminal. This is also the quickest way to review the available options before you start managing keys.

08

How to use Nkcli

Nkcli runs from the terminal, so the basic workflow is to open a shell, load your keys and use the commands the tool exposes. The help output is the authoritative list of options for your version, so start there rather than relying on memory.

  1. Open Command Prompt or PowerShell and move to the folder where you want to keep your working files.
  2. Run nkcli help to see the full list of commands and their descriptions.
  3. Create or import the key you plan to manage, following the prompts for a passphrase if encryption is offered.
  4. Store the seed phrase or key backup somewhere offline before you rely on the identity for anything important.
  5. Use the signing features only with the client or script you trust, and check which key it is requesting.
  6. Review your stored keys periodically and remove any that you no longer need.
09

Pros & cons

Pros
  • Free and open source, so the code can be inspected
  • Manages several Nostr identities in one tool
  • Supports NIP-46 remote signing for use with other apps
  • Supports NIP-06 key derivation from a seed phrase
  • Encrypts the private key instead of storing it as plain text
  • Ready-made Windows build or installer available
Cons
  • No code updates since April 2023, so the project should be treated as unmaintained
  • Command-line only, which is less approachable for beginners
  • Focused on Nostr keys, so it does not cover other blockchains
  • Security fixes and compatibility with newer Nostr changes cannot be assumed
10

Is Nkcli safe?

Nkcli handles private keys, so treat installation as a security decision. Download the program only from the official website or the GitHub Releases page for the mdzz-club/nkcli project. Verify the SHA-256 checksum or signature before you run the file. Never enter a seed phrase or private key on third-party websites, including sites that offer to restore, sync or verify your key.

The project has not received code updates since April 2023, so known issues may remain unfixed. Check the latest version on the official website and review the repository's activity before using the tool with significant funds or important identities. Choose a strong passphrase for the encrypted key, and keep backups offline.

  • Official source only. Download from github.com/mdzz-club/nkcli. Ignore ads and lookalike domains.
  • Check the SHA-256. Compare the installer hash with the value the developer publishes before running it.
  • Never share your seed phrase. No developer, support agent or website — including CryptApps — will ever ask for it.
11

Alternatives

Most tools in the Nostr space are graphical clients, such as Amethyst and Gossip, designed for reading and posting. Nkcli takes a different path. It concentrates on the key layer, managing identities and signing on behalf of other applications through NIP-46.

In the terminal, NAK is a broader console toolkit for many everyday Nostr tasks, while Nostr Commander RS is a CLI client for sending and reading messages. Nkcli is narrower than either. If your main need is safely holding keys and handing signing to other apps, it is the more specialized choice. If you need a full client, one of the other programs is the better pick.

12

Specifications

Price
Free
Type
Open source
License
—
Latest version
1.1.3
Last update
11 Apr 2023
Windows support
Yes (Windows build or installer)
Source code
github.com/mdzz-club/nkcli
13

Frequently asked questions

Nkcli can be used safely if you take basic precautions. Download it only from the official GitHub Releases page, verify the SHA-256 checksum, and never enter a seed phrase on third-party websites. Because the project has not been updated since April 2023, consider the risks carefully before storing important keys in it.

Yes, nkcli is free and open source. You can download the Windows build or installer without payment and review the source code on GitHub. Being free does not make it a substitute for careful key management, so the safety steps in this guide still apply.

NIP-46 is a Nostr standard for remote signing. It lets a client ask a separate signer to sign events, so the private key does not need to be stored inside the client. Nkcli supports it so you can use one managed identity across apps while keeping the key in one place under your control.

Yes, nkcli supports NIP-06, which describes how a Nostr key pair is derived from a BIP-39 seed phrase. This allows you to restore an identity from a recovery phrase you already have. Keep that phrase offline, because anyone who obtains it can regenerate the same keys.

No, nkcli is a command-line tool. You run it from Command Prompt or PowerShell and type commands such as nkcli help to see the available options. Users who prefer buttons and windows should look at graphical Nostr clients instead.

The most recent code update is dated April 11, 2023, so the project should be considered unmaintained. The latest version is 1.1.3. Check the GitHub repository for recent activity before relying on it, and consider a more actively developed tool if you need ongoing support.

14

Verdict

Nkcli is a focused, free tool for people who want to manage Nostr keys from the terminal and hand signing to other apps through NIP-46. It suits developers, testers and experienced users who already understand key security. It is less suitable for beginners, for anyone who needs a graphical client, and for anyone who expects ongoing updates, since the project has not seen code changes since April 2023. If you choose nkcli for Windows, use it with offline backups and a strong passphrase, and compare it with more actively maintained alternatives first.

Download now