Josh

We’ve built Favilla KEY to encrypt all your cached DMs when the device is locked. So if they unlock your phone they still get nothing. Truth is they can back door your phone and all your installed apps regardless . Full security phone, Nostr native is a project on the horizon.

2026-10-02 12:40:19 GMT

- reply

What exactly do you find works better ?

2026-10-02 11:15:41 GMT

- reply

Yum, we make sauerkraut, need to try making kimchi

2026-10-02 10:44:12 GMT

- reply

Thanks , it’s in regards to the design of Favilla key , in particular battery life.

2026-10-02 10:42:14 GMT

- reply

👋 thanks for the feedback

2026-10-02 05:36:56 GMT

Where do you mostly use Nostr ?
At home?
Away from home ?
% split ?

2026-10-01 23:08:43 GMT

- reply

GM from Fremantle

2026-10-01 13:22:25 GMT

- reply

2026-10-01 13:20:42 GMT

- reply

GM ! Alive and kicking ⚡️⚡️

2026-10-01 05:03:54 GMT

- reply

GM ⚡️☕️

2026-10-01 03:47:02 GMT

- reply

It is 👍 I’m also an electrician FYI

2026-10-01 01:52:34 GMT

GM, ⚡️☕️ looking over the sacrifices that had to be made, In order to get to where it is today. Both hardware and software. #POW
https://blossom.primal.net/60cfde82117b9b603df300d05d16cecf11b954de93d89a19383fbc8a53cfb230.jpg

2026-10-01 01:47:14 GMT

- reply

Very cool, love following your works

2026-09-30 22:44:06 GMT

- reply

Agreed. The device is only a signer. The wallet is the keys and the keys come from the seed, so cold or hot is decided by where the entropy came from and whether you could see it. A seed from a bad RNG was hot before it was ever written.

2026-09-30 10:34:05 GMT

- reply

GM ⚡️☕️

2026-09-30 10:33:44 GMT

- reply

GM ⚡️☕️

2026-09-30 10:29:41 GMT

GM.. Had to delete primal..in order to connect/post to relay.primal.net from my own client .. should have kept an eye on the ages ago, I have basically only been posting to Damus and favillaKey 😂

2026-09-30 04:39:27 GMT

- reply

Who made you ?

2026-09-30 04:32:41 GMT

GM #asknostr I’m unable to reach relay.primal.net from Australia today. Nos.lol / nostr.mom / Nostr.band are also timing out.
Anyone else having this issue ?
Thanks

2026-09-30 03:05:24 GMT

Test, checking seen on relay list

2026-09-29 12:02:46 GMT

- reply

SimpleX is still an installed app from a UK company, shipped through Apple and Google. A compelled release can be pushed to every phone silently.

2026-09-29 11:49:14 GMT

- reply

GM⚡️

2026-09-29 11:46:58 GMT

- reply

2026-09-29 11:46:29 GMT

- reply

💯 Every installed chat app is one update away from being a wiretap. The vendor controls the app store listing, the push channel and usually the key backup, so a quiet request to the company is all it takes. You never see the build change. That is why we did it differently with the Favilla KEY. The chat client is served from the device itself, the Nostr key lives on a separate keeper MCU and never leaves it, and there is no company in the middle that can be leaned on because there is nothing for us to hand over.

2026-09-29 11:40:37 GMT

- reply

GM !

2026-09-28 12:44:50 GMT

- reply

GM! Haha I actually built in proof of walk. The Favilla KEY has a pedometer and CIPHER (the arcade game on it) credits every step you take as in-game embers. Walk to earn, then spend in game to improve your ability to grind Hashes.

2026-09-28 12:31:14 GMT

- reply

Prior to my last hardware upgrade, this is legit how I power cycled to Nostr on the favillaKEY 🤣

2026-09-28 12:23:42 GMT

- reply

Bitcoiners should get this instinctively. Bitcoin is valuable because it's scarce and the scarcity is enforced by physics, not permission. Ideas are the opposite. Infinite supply, zero cost to copy, no work to reproduce. A patent is a central bank for ideas. Someone prints artificial scarcity and hands the monopoly to whoever filed first. The proof of work isn't the idea, it's the delivery. Build it, ship it, keep shipping. That's the only ownership that doesn't need a state to back it.

2026-09-28 08:09:57 GMT

- reply

GM , every step of the way

2026-09-28 05:57:16 GMT

GM . Fixed a few things today thanks to changing out the power monitoring IC. Battery % is now reliable, more importantly fixed an issue that kept the MCU and Wifi at full power for requests that never came.
The runtime has now doubled, even if you leave it in Nostr mode with wifi up and the client running.
https://blossom.primal.net/8b455ddc1a0a5f282a297b3809245af9c2ca2f6830f089727b696606c864cb10.mp4

2026-09-28 03:59:09 GMT

2026-09-28 01:27:24 GMT

- reply

💯 ideas are free, execution isn’t.

2026-09-27 22:53:05 GMT

- reply

I thought that was a feature , not a bug

2026-09-27 21:54:14 GMT

- reply

Define digital sovereignty

2026-09-27 11:59:48 GMT

- reply

Very cool

2026-09-27 11:58:38 GMT

- reply

GM! 💯

2026-09-27 11:42:07 GMT

- reply

Send it !

2026-09-26 11:37:24 GMT

- reply

I can see your post

2026-09-26 11:29:59 GMT

- reply

How large is it ?

2026-09-26 11:27:15 GMT

- reply

Gm! Have a great day !

2026-09-26 11:21:53 GMT

- reply

Embrace it !

2026-09-26 10:57:39 GMT

- reply

Is this multiplayer?

2026-09-26 10:55:42 GMT

GM! Every client you post from and every signer you sign with was built by someone and pushed to your phone by someone. Which means somewhere there's a company that can be handed a piece of paper. Not a warrant you'd ever see. Just a quiet requirement, and an update that arrives looking exactly like every other update. Nobody would know. Not the users, sometimes not even most of the people at the company. It's already happened, more than once, and the only reason we know is that a few people refused and got loud. So the question was never whether you trust the builder. It's whether the builder is even in a position to say no. Worth asking of every app on your phone. Worth asking where the door is.

2026-09-26 10:42:09 GMT

- reply

Did they give you any reasons why they rejected it ?

2026-09-26 10:25:34 GMT

- reply

Send pics !

2026-09-26 09:09:01 GMT

13 years ago , 13 years to go ! Freo

2026-09-26 03:33:59 GMT

- reply

Mate that sucks , which app was it ?

2026-09-25 23:52:18 GMT

- reply

That clients still hold the nsec in a browser tab, or on a phone behind an app and a firmware update, or on a firmware signer, on a protocol whose whole point is that you own your identity. If you don't control the key you don't own it, and one XSS or one bad update proves that permanently.

2026-09-25 23:48:23 GMT

- reply

All at once ? Or random followers periodically?

2026-09-25 23:14:03 GMT

- reply

The part passkeys got right is that keys don't belong in browsers. The part they got wrong is who holds the key. There's no known backdoor in passkeys, but you'd never know if there was one, and the platform already has a front door through account recovery. I've spent the year building the other version of that trade. The Favilla KEY keeps the Nostr key on a small keeper MCU that only ever signs a hash, the browser never sees it, nothing syncs anywhere, and recovery is a seed you hold rather than an email. Same phishing resistance, no platform in the loop. Not for everyone, but for anyone with an identity they can't afford to lose.

2026-09-25 22:28:15 GMT

- reply

It has to be cut. If the main MCU were compromised the worst it could do is paint a fake ceremony and phish the PIN, and that PIN is useless on its own. That scenario had me worried early on, someone forgets the power reset and a hostile main MCU just walks them through a fake one, so I built it so that can't happen. Holding both buttons drives the charger's power path directly through a small logic circuit. The firmware isn't in that loop and can't reach the keeper's reset line at all. The keeper then decides for itself whether it lost power. It reads its own reset flags and uptime at boot and won't open the Bitcoin door unless it actually did, so a hostile main MCU can ask nicely and just gets refused.
Dev units will be available very soon. I am just testing one last hardware change to get more life out of the battery when at rest. If you’d like to help test it I’ll happily send you one.

2026-09-25 14:23:55 GMT

- reply

Late to this but it's been rattling around since I read it. Rotation is the protocol half. The other half, the nsec sitting in a browser tab at all, is a client problem and one I've spent the year on with the Favilla KEY. the key stays on a separate keeper MCU that never parses anything, only signs hashes, so XSS or an RCE on the main MCU gets a bounded oracle, not the key. Happy to send you a dev unit to attack when they're ready.

2026-09-25 09:35:59 GMT

GM. The Favilla KEY's two door design is finally proven on real hardware. One device, two lives that never overlap: power on and pick one. Nostr is the online life, WiFi on, signing notes from your phone. Bitcoin is the airgapped life, the radios are never initialised and transactions go in and out by QR only. Pick Nostr and the Bitcoin seed is locked until you pull the battery. That lock is not a setting. Your keys are only ever decrypted inside a second MCU we call the keeper, isolated from the main MCU, with its reset line wired so only a real power cut can boot it. On that boot it tells the secure element "fresh start", and the secure element's own policy will not release the seed without it. So the main MCU, the one with the WiFi, can never be online in a power on life that can reach the seed: a battery pull erases whatever an exploit left in its RAM, and the seed is only ever released into a life that has never touched the network. We then played the attacker: a firmware for the main MCU that skips every check, ignores the keeper and lies about the fresh start, with the keeper's wires cut. The secure element refused every time.
https://blossom.primal.net/63eab4e707e3a8e5266ad3d6455a6f7ec55428182b31b2f2f7982f9a79a699f8.mp4

2026-09-24 01:49:04 GMT

- reply

How do ?

2026-09-23 06:44:23 GMT

- reply

GM to you !

2026-09-17 09:42:52 GMT

- reply

GM!

2026-09-13 23:55:34 GMT

GM! Spent last week making the Favilla KEY open its Bitcoin wallet only after a real power cut. Battery physically disconnected from MCUs and the secure element, not a software reboot. Anything running in memory is gone before the seed is ever unwrapped l and radios never come up in that made, so you know the code is in the state it shipped and the device is offline when it sign.
This week is multisig. I’d rather no single device, ours included, be the only thing that can spend.
Dev units soon for those that want to try and break one.
https://blossom.primal.net/82ed08247aeb8145429fe90b32b320808b4303fc2b3645fc144732d650635d9f.jpg

2026-09-13 09:44:25 GMT

- reply

What’s happened to primal ?

2026-09-12 00:26:33 GMT

@npub1f4c…2jya
GM bot, What is your opinions on Nostr hardware signers like favillaKey ?

2026-09-11 12:01:02 GMT

- reply

GM!

2026-09-11 10:18:55 GMT

Good days work on Favilla KEY.
First BTC transaction signed under the new model.
The Nostr privkey is now stored on a seperate MCU. If someone managed to get code running on the wifi connected MCU the worst they can do is ask it to sign things until you reboot, they cannot extract the key.
Bitcoin use is now stricter. Its use and features cannot be accessed unless the unit is physically powered off and on. gated by the second MCU and the secure elements new policy.
Hopefully one last PCB spin and then DEV units should be available soon for external testing.

2026-09-10 04:02:32 GMT

- reply

CIPHER · signed a run · 35,279 pts
46820 steps forged into embers · run 205
verify: favillakey.io/cipher#run=e2ecb26ec6676c3ab6307a61edf3eb6c3f6c10f67262a61c60edc2466e2e2de7
#favillacipher

2026-09-04 23:07:34 GMT

- reply

Thanks for noticing it, appreciate that.
On attention, honestly I’ve been spending my time building rather than marketing. I’d rather have a product that sells itself once it’s done properly than hype something that isn’t finished.
On Bitcoin and Nostr biting each other, you’re right, and that’s been the core design problem from day one. A Nostr signer needs radios and a client, which is exactly what a Bitcoin signer is meant to avoid. A lot of thought has gone into stopping an RCE in the first place and minimising the blast radius if one ever lands, with the private keys staying safe as the number one priority in the worst case.
We’ve also tried to be flexible about how paranoid you want to be. Most features can run fully airgapped or require more acknowledgment on the device if that’s your thing, or at the other end you can let it auto sign or ignore certain things based on what you choose. Either way the private keys stay protected. Happy to go deeper if you’re curious.
I’m working on getting fully functional dev units out soon so people can actually use them and try to break them.

2026-08-23 07:17:07 GMT

GM, spent the week in the highlands with amazing friends, beautiful country, a few drams were had
https://blossom.primal.net/fc4606e808c5b899a8eaaada717a7a9bf904fa15c7e4be8e10ad260692e743e5.jpg
https://blossom.primal.net/10aa30ba6dfc82fb12405a751ae483c4a79427418df0b4a3a20e2bbd16ff45a2.jpg
https://blossom.primal.net/203348543d41c2de961827b08b089e4a9ae314243a53160b15b9aa0d8412d2ea.jpg
https://blossom.primal.net/8bda9db607a00c39c6285d645963d089429fcf6f992fb6060d3e273c8f9f289b.jpg

2026-08-19 08:47:09 GMT

2026-08-15 19:59:08 GMT

2026-08-04 11:05:40 GMT

- reply

GM!

2026-08-04 11:05:29 GMT

- reply

GM!

2026-08-04 11:04:48 GMT

GM ! been working on some interesting ideas for entropy and verification. Here’s where I’ve landed so far:
The user sees 256 bits of entropy generated from the Secure Element and can verify it, then does the same again with 256 bits from the camera sensor. The two are XORed together, so a compromised Secure Element vendor can’t backdoor the seed and the whole process is as verifiable as possible.
https://blossom.primal.net/6b3121af244f826c681c2b9175db88470ede60411fe86481720fa597a5a7eeb3.mp4
https://blossom.primal.net/5cffb5e83bdfebc902ac848e781d294dd77e5813883e8277fd5baab4ad0adeca.mp4

2026-08-04 00:38:19 GMT

GM, I hope everyone is well. It has Been a rough week.
Been working on entropy generation and verification, using different methods, should hopefully be interesting to some. I will try and have something to share soon.

2026-08-02 22:17:48 GMT

- reply

Hey, do you mind sharing what issues are you having with them? Thanks

2026-08-01 13:46:53 GMT

- reply

Feels like sometimes we get 9 lives . Only by chance .

2026-08-01 12:23:32 GMT

Felt sick after this attack on Coldcard users, still not feeling right.
My thoughts are with everyone who lost coins.
I don't own one. I had been seriously considering it. I believe diversity in storage and in manufacturers is critical, precisely as insurance against a backdoor or a code error in any single vendor.
I wasn't affected. But I managed to reach friends in time who were.
And note how this was found, the firmware was open. Anyone could read it, reproduce it, verify it. Closed firmware has the same class of bug, you just never get told. Proprietary code is an exposure waiting to happen.
This is a lesson learnt, and it will strengthen Bitcoin. But it's a hard one.
We are only as sovereign as the seed we generate.
Going forward this will need to be just as important as our methods of self custody.

2026-07-29 08:51:18 GMT

- reply

CIPHER · signed a run · 163,676 pts
30984 steps forged into embers · run 148
verify: favillakey.io/cipher#run=7e435c7b74e296bfe9fb8e287b42e311e0944ab3c837c29e7815fd5f6f265de0
#favillacipher

2026-07-29 05:55:50 GMT

- reply

CIPHER · signed a run · 87,486 pts
30984 steps forged into embers · run 145
verify: favillakey.io/cipher#run=08ab6bbfdd32d68fc1f8a9a10fc7ea0927fb6bc20b566e0828966f07a6130e2c
#favillacipher

2026-07-29 04:12:46 GMT

- reply

CIPHER · signed a run · 19,874 pts
30984 steps forged into embers · run 138
verify: favillakey.io/cipher#run=212969daa84dca5fd385e17f3339f7a4c452b1552c6c80eb9805ef67759a5fa9
#favillacipher

2026-07-29 01:38:15 GMT

- reply

😂

2026-07-28 00:24:28 GMT

- reply

Made me laugh 😂

2026-07-28 00:22:53 GMT

- reply

My feed keeps flowing

2026-07-27 05:22:59 GMT

- reply

GM 👋

2026-07-27 04:31:47 GMT

Anyone using noStrudel?

2026-07-27 04:31:40 GMT

Anyone using noStrudel?

2026-07-27 04:18:24 GMT

Test

2026-07-27 02:40:28 GMT

- reply

That looks amazing

2026-07-27 00:23:52 GMT

Air gapped signing … video attached
https://blossom.primal.net/0d04bb8c3a5a8a08843e4bdc54a642f11eadf9aaf7f5a83d0b57a17d31d8efb7.mp4

2026-07-27 00:22:29 GMT

GM, demo of Air-gapped Nostr signing.

2026-07-27 00:18:44 GMT

GM, airgap note

2026-07-26 23:18:42 GMT

- reply

GM, ☕️ and BF done ✅ ready for some bew challenges ! How’s your day ?

2026-07-26 07:59:42 GMT

- reply

No, the media never touches the KEY, that’s browser to browser WebRTC. Setup needs a relay, but the relay only carries an encrypted wrap signed by the KEY. You can host your own relay and TURN. Scripts will be public, both are fields in settings that can be customised.

2026-07-25 16:50:01 GMT

- reply

Sorry for your loss ❤️

2026-07-25 02:22:57 GMT

GM, Nostr ☕️ have a great day

2026-07-25 01:44:41 GMT

- reply

I love this

2026-07-24 08:31:35 GMT

- reply

Been on that robo juice

2026-07-24 06:02:56 GMT