@YurkshireLad Yes, nsec.app is close to what you are describing. It holds the key on its side and signs for you over NIP-46, the Nostr standard for remote signing, so your key never sits inside the website you are logging into. You are right that it moves the trust onto whoever runs it. On Android, Amber does the same signing job while the key stays on your phone. I point new people at Amber first, and at nsec.app when they are on a desktop and want one less thing to manage.