Autograph

A NIP-07 signer extension for Firefox and Chromium. Your keys live in the extension, encrypted at rest; sites request signatures and you approve them. Your keys never reach a website.

Install on Firefox

Install the signed extension directly from this site. Firefox verifies the Mozilla signature and keeps the extension current through this site's update feed.

Install for Firefox

Install on Chromium

Chromium browsers currently load autograph as an unpacked extension from a local build:

  1. Clone the repository and build it (make build, or npm ci && npx wxt build)
  2. Open chrome://extensions and enable Developer mode
  3. Load unpacked and select .output/chrome-mv3/

Unpacked installs do not update automatically; rebuild and reload to upgrade.

Provenance

Releases are signed by Mozilla's add-on service, stored content-addressed on Blossom, and announced with signed Nostr release events. The update feed at /autograph/updates.json is derived from those events and carries the release hash.