You can log in with your private key directly if you want. That's not too secure... Or you can use amber signer or a bunker (remote signers) "logging in" to nostr isn't really "login" in a traditional sense. It's "let me tell the client what my public key is and how I would like to sign events with ...

Shouldn’t really need to as a new user. We have too much paranoia around key security imo. Let new users just use it directly without extensions. Sooner or later they’ll learn best practices and can get a new key if they like. We all came here mostly with the Jack wave and no one used any extens...