Storing private key (nsec) without encryption in local storage may be a security risk

[cfahrenholz]

Describe the Bug

I attempted to review how the private key is stored locally. From what I could see, it is stored without encryption. This poses a potential security risk if someone gains access to the device and can read or copy the values from local storage.

Expected Behavior

Please consider encrypting the private key provided by the user, for example, using react-secure-storage.

This site also explains the potential security risks involved.

If I have not investigated the code correctly, I apologize in advance.