Keep: FROST Nostr Signer

Keep is a FROST (Flexible Round-Optimized Schnorr Threshold Signatures) threshold signing app and dedicated Nostr event signer for Android. It lets you hold FROST key shares on your phone and sign Nostr events without any single device ever holding the full private key.

Keep implements the NIP-55 Android Signer protocol and NIP-46 remote signing, so any compatible Nostr client can request signatures directly.

Features:
- FROST threshold signing (2-of-3, 3-of-5, etc.)
- NIP-55 Android Signer protocol
- NIP-46 remote signing (bunker service)
- Import and export FROST shares via QR code or text
- Multiple account support
- Per-app signing permissions and policies
- Biometric and PIN authentication
- Hardware-backed key storage (Android Keystore)
- NIP-44 encryption and decryption
- SOCKS proxy support (Tor)
- Encrypted backup and restore

The co-signing prompt now shows which request is asking to sign, and marks that label as unverified when nothing has proven it, so a name on its own cannot suggest the request was checked. Random number generation that cannot reach a trusted source now stops the operation instead of quietly continuing with a weaker one. A legacy key share is erased only after a copy is confirmed stored. Stored values are bound to the key they were saved under, so a value cannot be read back under a different key