FROSTNostr — t-of-n threshold Nostr signer

Member identity

This is your personal Nostr key. It is never the group key, never a FROST share, and never leaves this browser. It authenticates your DKG and signing coordination messages.

Save member nsec in this browser (localStorage, plaintext) — off by default

Identity verification

Create a group (DKG)

Every member runs DKG together. The group public key is the sum of each member's constant-term commitment. No dealer, no reconstructed secret. Membership is fixed at DKG time.

Group name

Threshold t

Members n

Coordination relays (one per line, capped at 4)

Coordination is ephemeral. All members need at least one common relay; 3–4 is typical.

Your groups

DKG transcript

Full cryptographic audit of group formation — commitments, proofs of knowledge, per-member verifying shares, and the derived group key.

No group selected.

Group chat

No group selected

Compose as the group

Ctrl/⌘ + Enter to sign · coordination is ephemeral, other members must be online

Session inspector

Every value in the signing round — nonce commitments, binding factors, Lagrange coefficients, shares, and independent BIP340 verification.

No session yet.

Roster

Active relay pool

FROSTNostr never opens more than 4 relays at once. The active set is chosen by heuristics: trusted-relay reputation + measured latency + reliability history.

Relay catalog

Event log

RFC 9591 self-tests

In-browser checks against the noble-curves FROST implementation: DKG consistency, Lagrange interpolation, binding factors, nonce-reuse rejection, tamper detection, and BIP340 verification.