Josh

Developing Favilla Key // Nostr // BTC // Hardware signer

Public Key

npub1mnfk8hzyfk2lw75zjrqw5f70mk078prztny4azdvdnhsjt7v08xsmf2twd

Profile Code

nprofile1qqsde5mrm3zym90h02pfps82yl8am8lrs339ej273xkxemcf9lx8nngpp4mhxue69uhkummn9ekx7mqpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhg7rwmsl

Publishing to

Author Public Key

npub1mnfk8hzyfk2lw75zjrqw5f70mk078prztny4azdvdnhsjt7v08xsmf2twd

Show more details

Last Notes

2026-07-16 07:33:25 UTC

- reply

CIPHER · signed a run · 59,305 pts
run 6
verify: favillakey.io/cipher#run=0b0b7eea66c630e30914a18eb629f7f518f89e59b66f1484c994d56da29dbd41
#favillacipher

2026-07-16 05:03:47 UTC

TEST

2026-07-15 07:51:08 UTC

- reply

fair, so make it per relay. prompt once when a new relay asks, remember the answer, done

2026-07-15 07:41:17 UTC

GM! Finished building the device verification system for Favilla KEY. At provisioning, each device generates its own unique attestation privkey inside the secure element . it never leaves the chip. The pubkey is published to a signed registry hosted at favillakey.io, so anyone can verify their device is genuine.
https://blossom.primal.net/538935f3271d1d66711af2728d510a062ccbd75272d87ce0cda87c7035f18e30.mp4

2026-07-15 02:19:15 UTC

- reply

Right, the fatigue is at the signer not the relay. imo Kind 22242 should be auto-approve by default in every bunker. One-time, one-relay, nothing to steal, save the toasts for kinds that actually do something.

2026-07-14 03:43:24 UTC

How are you storing nsec these days?Browser extension, Amber, a remote signer over NIP-46, something airgapped ? Trying to get a feel for what people actually use and trust.

2026-07-14 03:20:15 UTC

GM Nostr !☕️
I have updated the favillakey.io website, will be publishing the firmware soon
#gm #nostr #btc

2026-07-09 04:04:47 UTC

GM Nostr! Been busy building, Newest and hopefully last PCBA in action , secure element and accelerometer on board. Here’s a quick demo of the safety motion lock option … plus a quick preview of opening CIPHER, the Favilla key game. More on that soon.
https://blossom.primal.net/bd0be16357eef029b8f4bf29d475ba87acb1d395b3202ae5d5d19c4fb6fc8635.mp4

2026-07-02 08:56:40 UTC

- reply

GM , and then they treat that data like its theirs to lose

2026-07-02 06:19:08 UTC

- reply

GM, when soon ? 😂

2026-07-02 04:27:05 UTC

Excited! First run of CNC housings for Favilla KEY have arrived! Happy with the result so far. Waiting on glass and buttons now.
https://blossom.primal.net/6a72faa6eee3637ce11d1b3ce5fcad82a3546c8e9052f2297c1be66186f765ab.mp4
https://blossom.primal.net/a00c06eedb45e99ab0ad2df6d8c7b0a64d33cabe478171bbe443b8e9168f3868.jpg

2026-07-01 13:28:03 UTC

- reply

GM!

2026-07-01 09:03:16 UTC

- reply

Agreed , I have been working on Favilla KEY a, hardware signer , seed/keys protected by a secure element. Will be open sourcing the code soon and delivering development units to people who willing to use and verify it.
Favillakey.io
Also have built a remote connect only Nostr client.
Favillakey.io/bunker

2026-07-01 08:44:28 UTC

- reply

2026-07-01 08:39:09 UTC

- reply

The future is great, but sometimes I wish I were back in time.

2026-07-01 07:54:15 UTC

- reply

Haha GM , yep

2026-07-01 02:37:22 UTC

- reply

Yes, when I have the production Developer version (just means it’s won’t have RF compliance yet) ready I’ll send you a DM .

2026-07-01 01:13:14 UTC

- reply

Plus in Australia , UK and soon USA. They are banning under 16s from social media, fining the companies. Due to Nostr architecture, for now, in most cases a client or relay should be safe.
In regards to the chat control and privacy over reach that UK is pushing (having your private messages accessed), I have built a solution that is native to the Nostr ethos.

2026-07-01 01:04:31 UTC

- reply

This is so true , though governments world wide seem to be pushing people towards Nostr . The New law are making the convenience of centralised social media inconvenient. We are just early.

2026-06-30 10:48:28 UTC

Testing Nostr.com!

2026-06-29 10:14:11 UTC

Nostr is saved !!
Albo’s $99M crackdown removed 5 million under-16 accounts from social media.
Welcome to Nostr, kids. There are no accounts here to remove. 🧡
https://blossom.primal.net/79c9a635350ec26bfbdebe2898a1c7e266bb3fde743639e02d3a8169316f79c1.jpg

2026-06-29 07:33:02 UTC

- reply

2026-06-28 13:30:34 UTC

- reply

GM !

2026-06-28 11:56:29 UTC

- reply

In our model we’re not leaning on delegation, because the identity key is secured in hardware, it’s generated inside a secure element and never leaves, so the leakage that makes key rotation necessary mostly isn’t on the table. What we’ve built on top is purely an access layer, a way to generate and rotate bunker URLs remotely, so you can add or cut off clients and change relays without ever touching the key itself.
Thanks for the link though very interesting, I’m checking it out.

2026-06-28 03:49:51 UTC

- reply

Yes, though there’s nothing special about our client. Any NIP-46 client can hold the master connection. It just becomes the master by being the one you pair in person at the device. The role lives in the KEY’s allowlist tied to that pubkey, not in the app. The management UI (minting, revoking) is just methods any client could implement.

2026-06-28 03:29:55 UTC

@npub18am…p424
Remote Bunker URL minting and revoking. Secured by hardware.
https://blossom.primal.net/89f619c7e4079fc9d92182ad1fdf6a654c617526096ea27f5e9f4c615af0cb69.mp4

2026-06-28 03:25:58 UTC

- reply

Here's how it works, you pair the master app to the KEY once in person via a QR carrying a one-time 128-bit token, and the device binds that app's client pubkey into a persistent allowlist as MASTER. After that it's all remote, when you want to add an app, the master app fires an encrypted NIP-46 request over the same bunker relay, the KEY mints a fresh one-time `bunker://` URL and signs it back, and you paste that into the new app. That app connects with the token, the KEY consumes it and binds the app's pubkey to the allowlist as a SLAVE, and from then on every sign request is gated on allowlist membership, the token's just the one time bearer to get in. The master can also list and revoke paired apps over the same channel, while rotating or removing the master itself stays physical-only, so a compromised app can never lock you out of your own device.
I’ll post a demo.

2026-06-28 02:42:20 UTC

GM, Nostr !

2026-06-27 16:35:43 UTC

- reply

Fair enough, Amber’s a great signer, no reason to switch what works.
On the QR thing, that’s only the initial pair. After that it’s the usual bunker URL over relays, so new apps work while you’re out with the device at home. Rotate or revoke it whenever.
The reason I keep building, look where governments are pushing. On device scanning, the Apple backdoor fight. The phone’s becoming the surveillance surface, and a software signer’s key sits right on it, one OS compromise from exposure. True sovereignty and real security mean the key never touches that surface,not the OS. Better to be early.
Thanks for the feedback, much appreciated 🙏

2026-06-27 15:36:28 UTC

- reply

You've missed what I'm saying. The whole point of social recovery is that there is no single misplaced word to lose. The seed gets split across people you trust, a threshold rebuilds it, so no one point of failure can erase anything. You're describing the exact problem I just proposed solving, as if it's a counter. It isn't.

2026-06-27 15:29:51 UTC

- reply

May I ask, what stopped you using it ?

2026-06-27 14:50:48 UTC

- reply

Good morning ! Derek. One of those footprints is landing soon, releasing the firmware for a hardware Nostr signer. Keys secured in hardware , and airgap as a choice, sign offline over QR or pair when you want to. It’s your choice , maximum security or maximum convenience, without sacrificing sovereignty.

2026-06-27 14:21:14 UTC

- reply

This is cool, but my ideal phone has LoRa mesh built in. Phones relaying for each other over raw LoRa, no carrier, no gateway, no infrastructure anyone can pull the plug on. Off grid and it still talks. Pair that with Nostr and you've got messaging that doesn't need the internet to exist.

2026-06-27 13:56:41 UTC

- reply

Who holds the keys to the keys? You do. That's the point, not the flaw.
A recovery phrase is the most sovereign backup there is. Generated on device, never sent anywhere, no company can reset it or hand it back. Lose the hardware, restore from the words. The catch is just the other side of that, nobody can take it from you, nobody can recover it for you either. That's the deal with real self custody.
Though that's not the whole story. Nostr opens a door to social recovery, you shard the seed out to people you trust, encrypted to them, and a threshold of them can help you rebuild it. No custodian, no middleman, just your web of trust doing the work. Early days, but it's the kind of problem I want to solve.

2026-06-27 13:47:47 UTC

- reply

Hadn’t come across Pubky before, just had a proper look and it lines up almost exactly with where I’m taking Favilla KEY. Sovereign, key-held identity is the whole point of the device.
Right now Air gap’s already in design. Originally I had built a fully airgapped Nostr client (still live, I can show a demo) no RF in the signing path, screen + camera for QR flows, keys held in the secure element. The SE does secp256k1 on device today, Ed25519 is the piece I’d need to confirm, it’s definitely possible, just how it be implemented. But, it’s exactly the kind of thing I’d want to build toward.
Keen to chat properly. Reachable here, or wherever suits you.

2026-06-26 15:02:19 UTC

- reply

Favilla is the manufacturer, I designed it. The PCBA is contract assembled.

2026-06-26 02:32:23 UTC

- reply

Hey, no it is a custom designed board , a dedicated secure element for key custody. I have You can more info about it at favillakey.io

2026-06-24 00:31:07 UTC

GM Nostr🔥⚡️

2026-06-23 11:14:07 UTC

Test

2026-06-23 01:44:01 UTC

- reply

I think one of the coolest things about Nostr and now basically accessible to anyone, is that everyone can have their own client , customised to their wants and still communicate on the same protocol and under the same ID.

2026-06-23 01:36:01 UTC

- reply

Yeah, Nostr is a solid fit for this. Each book becomes a replaceable event you publish under your own key, you own the data, no platform fees and single letter tags, genre, location are indexed so anyone or any agent can filter by them natively.
relays only do exact match tag filtering, so more detailed stuff needs a small client side search layer.

2026-06-22 10:59:30 UTC

GE Nostr, make the most out of every day !
https://blossom.primal.net/954148f88b4e65964f6b8a13d370afa17919d17f1180fd94b9b513fb6d0ad8ab.jpg

2026-06-22 04:13:10 UTC

- reply

2026-06-21 23:53:57 UTC

- reply

Haha , true, I need this cup also

2026-06-21 23:48:32 UTC

GM, found and (hopefully resolved) an important bug this morning. After the KEY was running in bunker mode for 4 days in AUTO mode with multiple wifi disconnects eventually it fell back in AP mode and wasn’t able to reconnect to web sockets. Simple fix , guard it from AUTO switching to AP mode when in Bunker mode.
https://blossom.primal.net/a3e8a77eeceb80032aa34b3eda7e77ecac1720a36f652102219b90d463eb081f.jpg

2026-06-20 11:00:20 UTC

- reply

Nice ! Was nonnaring a bit today as well , preserving olives

2026-06-20 10:23:58 UTC

- reply

There is no true freedom without true sovereignty

2026-06-20 01:58:56 UTC

- reply

I was making the same face as the dog when looking at this . Amazing !😋🤤

2026-06-19 14:47:23 UTC

- reply

Beautiful

2026-06-19 13:37:51 UTC

- reply

Amazing! Italy ?

2026-06-19 07:15:29 UTC

- reply

GM, take care

2026-06-19 03:07:40 UTC

Door 1 opened, test!

2026-06-19 02:47:56 UTC

GM, Nostr !

2026-06-18 10:48:39 UTC

- reply

Which is why we should keep them safely secured

2026-06-18 10:38:50 UTC

- reply

GM!

2026-06-18 06:55:28 UTC

- reply

2026-06-18 06:45:41 UTC

- reply

2026-06-18 04:00:13 UTC

- reply

It only gets worse . Almost 40, struggle to stay up to 10pm but also can’t sleep past 5am 😂

2026-06-18 03:16:40 UTC

GM, Nostr, beautiful morning
https://blossom.primal.net/5dd7e90f174f7a115b18480bb604c4cb5610ca9bb98c72f4f60aa6f60bc51b0c.jpg

2026-06-17 07:29:43 UTC

- reply

2026-06-17 06:56:19 UTC

- reply

GM Gigi

2026-06-17 05:08:18 UTC

- reply

Then Signatures are the solution to the spirit

2026-06-17 05:01:43 UTC

- reply

GN Derek

2026-06-17 01:29:40 UTC

- reply

Amazing ! Send after pics

2026-06-16 07:15:45 UTC

GM Nostr, have been working UI UX for Favilla KEY 🔑
https://blossom.primal.net/69fbc8aadec95a4e8bf5d4f943f89aa08b1f934549c7ee2bf329168137c1956f.mp4

2026-06-16 07:14:06 UTC

- reply

GM!

2026-06-16 02:47:22 UTC

- reply

This is the whole argument for self custody of keys. If your content is encrypted with a key that never leaves your hardware, there’s nothing on device to scan and nothing to hand over. That’s what we’re building toward.

2026-06-12 15:14:05 UTC

G N

2026-06-12 11:29:04 UTC

GE, apres ski
https://static.klipy.com/ii/d7aec6f6f171607374b2065c836f92f4/a6/62/kW3dx5IC.gif

2026-06-11 09:29:32 UTC

Good evening, what is your thoughts on hardware signers for Nostr? let me know
https://blossom.primal.net/d920f368f5a0553aa34db2192bb8b0b70e2cb74346a12721f9aeaec639fee506.jpg

2026-06-09 23:45:06 UTC

2026-06-09 12:44:28 UTC

- reply

2026-06-09 12:42:54 UTC

- reply

2026-06-08 12:27:15 UTC

- reply

amazing, I’ll check it out

2026-06-08 12:15:31 UTC

- reply

I have an idea I’m going to play with. How about nip-44 but you spin up a group key pair ? You all message the group keypair . So everyone gets to see everyone’s messages?

2026-06-08 12:10:33 UTC

- reply

GM, great coffee cup

2026-06-08 07:11:08 UTC

- reply

GM!

2026-06-08 03:52:05 UTC

- reply

Don’t go too crazy

2026-06-08 03:14:26 UTC

#nostr #btc
GM, today I have added a new security feature for the Favilla Key. After X amount of time when the device is left unlocked, it will arm itself. After that, any movement detected via an accelerometer will auto lock the device.
https://blossom.primal.net/3f4e47874d5f49036ec401a1715198e2688fc8fc024e0dcd487303c3ca8f05ec.mp4

2026-06-07 07:41:05 UTC

- reply

GM, we will win this battle .

2026-06-07 07:40:03 UTC

- reply

GM Gigi

2026-06-06 08:44:31 UTC

GN , this is an air gap test

2026-06-06 01:48:37 UTC

GM, Swapping over secure elements (SE051 on the left) vs (ATECC 608B on the right) . SE051 has native PIN verification and AES encryption. 608B has neither and the firmware fakes both, having todo do round trips. The difference is huge.
https://blossom.primal.net/03c84777412afa516a4b142d4ca2d459b0d6e9a564281a27aee33c3edf499159.mov

2026-06-05 08:50:35 UTC

- reply

2026-06-05 02:48:25 UTC

GM , Have been working on power management on the Favilla Key. Finding a balance between, convenience, security and battery life. Ultimately the user gets the final control over this.
https://blossom.primal.net/4b41187d6cbc1495f97d91db353e87f9e63a85617db80020c0640c829fafa780.mp4

2026-06-04 02:50:00 UTC

Just checking air gapped signing !

2026-06-04 02:37:16 UTC

- reply

Hey , 500mA lipo . Working on power management today.

2026-06-04 02:18:21 UTC

GM , had success yesterday! fixed the heap fragmentation issues on Wifi init.
https://blossom.primal.net/bd91d15ef56ff2edc89996083cef67b7a841a9bcb8d7a000b73c1ce2d7797ba7.jpg

2026-05-31 10:07:29 UTC

Hey tash

2026-05-31 09:59:04 UTC

2026-05-29 14:01:31 UTC

- reply

It is a Nostr/BTC hardware wallet . It enables you to run offline as a QR only signer or via wifi for normal convenience. It serves its own Nostr client from the device but also has the option to bunker connect so you can use other Nostr clients/apps

2026-05-29 12:55:20 UTC

Good evening Nostr

2026-05-28 11:44:02 UTC

I love Liv

2026-05-26 03:29:35 UTC

2026-05-26 01:45:50 UTC

GM Nostr

2026-05-20 23:31:53 UTC

GM
#GM #COFFEE
https://blossom.primal.net/b3c228b30030bcf8c686e4b12cace8d982fbd8b5707004946e044ba5701183dc.jpg

2026-05-20 00:16:28 UTC

GM
https://blossom.primal.net/bc8b5a8d765cda1551142c3f400f8d5ec77b533d2f88348c47c826c5e6ad1b56.jpg

2026-05-19 07:44:53 UTC

- reply

Check!

2026-05-19 06:53:48 UTC

- reply

2026-05-19 00:32:25 UTC

GM #nostr
https://blossom.primal.net/c1aea813b4913dd0b96884720d57641b207d2fb4b4c08c796a0768f309ed363d.jpg