There is also the question: when the vault will release the main key? On what conditions. I assume standard anti-tamper safety, signed app, signed system, secure boot/locked bootloader. On rooted phones and/or normal desktop systems, this security model will fail instantly.
If there really is the need to protect data for real, introduce the password possibility and warn the user about data encryption.
Look at Veracrypt, this is a good security model based on encryption, not HSMs.
If the app is supposed to be used on bootloader locked phones ONLY, then the pin+vault are secure enough for non-critical data. But I would argue if it enough for a hot wallet. A very bad examples are: Trust wallet and Cake wallet, both using pins only, and Cake wallet is using pin also in the desktop version which means NO SECURITY AT ALL.
Sugestor Ultra
npub10n…6spqj
2026-09-16 02:45:50 UTC
in reply to nevent1q…n0m3
Author Public Key
npub10nev22800j2q5ncjcpynyqakyrhsg49y046ucyzlx3jj5mns7mmsv6spqjPublished at
2026-09-16 02:45:50 UTCEvent JSON
{
"id": "00000021373663926245e73f35f6a3ddfdcff0f5b29d3c7a419092107ed14a76",
"pubkey": "7cf2c528ef7c940a4f12c0493203b620ef0454a47d75cc105f34652a6e70f6f7",
"created_at": 1789526750,
"kind": 1,
"tags": [
[
"e",
"69773adf1c352845a92bc95f5ab161da9b1c3177e6bfbeffb7f39fd4a9616452",
"wss://relay.primal.net/",
"root",
"20e17dd0ec1bb0832688e739ad89709d047deb23ed5146822efdd2d22ae504d7"
],
[
"e",
"000000449e9611d0fba90f441ee0ab23f2529a068f5129b2289ea7fb950d07bf",
"wss://nostr.bitcoiner.social/",
"",
"7cf2c528ef7c940a4f12c0493203b620ef0454a47d75cc105f34652a6e70f6f7"
],
[
"e",
"56c925d6cadc53c4f67d123043340c6e9c1de16119f503314866fe26d67d3696",
"wss://relay.snort.social/",
"",
"20e17dd0ec1bb0832688e739ad89709d047deb23ed5146822efdd2d22ae504d7"
],
[
"e",
"000000184329b3fd0f6f7fc38a6c3f110f112654560fc83905618abdfc90b2d0",
"wss://nostr.bitcoiner.social/",
"reply",
"7cf2c528ef7c940a4f12c0493203b620ef0454a47d75cc105f34652a6e70f6f7"
],
[
"p",
"7cf2c528ef7c940a4f12c0493203b620ef0454a47d75cc105f34652a6e70f6f7",
"wss://nostr.mom/"
],
[
"p",
"20e17dd0ec1bb0832688e739ad89709d047deb23ed5146822efdd2d22ae504d7",
"wss://bitcoiner.social/"
],
[
"client",
"Amethyst"
],
[
"nonce",
"100{S,",
"25"
]
],
"content": "There is also the question: when the vault will release the main key? On what conditions. I assume standard anti-tamper safety, signed app, signed system, secure boot/locked bootloader. On rooted phones and/or normal desktop systems, this security model will fail instantly.\nIf there really is the need to protect data for real, introduce the password possibility and warn the user about data encryption.\nLook at Veracrypt, this is a good security model based on encryption, not HSMs.\n\nIf the app is supposed to be used on bootloader locked phones ONLY, then the pin+vault are secure enough for non-critical data. But I would argue if it enough for a hot wallet. A very bad examples are: Trust wallet and Cake wallet, both using pins only, and Cake wallet is using pin also in the desktop version which means NO SECURITY AT ALL.",
"sig": "ea3cb6f93bbed832fa2f45bdbd30e880f5d4f1b4e8d26b4b279928fc128b0a44c81a84197093085ebfe895496e6cfc439b2c8cf26410f419c17cac84536e347a"
}