Nostr WoT Extension version history - 10 versions
Nostr WoT Extension by Nostr WoT
Nostr WoT Extension version history - 10 versions
Be careful with old versions! These versions are displayed for testing and reference purposes.You should always use the latest version of an add-on.
Latest version
Version 0.8.18
Released Oct 24, 2026 - 986.42 KBWorks with firefox 140.0 and later, android 142.0 and later- Import or recover accounts through one flow. Supported passkeys and backups are detected automatically, and recovered accounts are shown before saving.
- Recover compatible accounts from other apps, including Nosskey backups, while preserving the original identity.
- Fix Wi-Fi pairing by sound on computers using 44.1 kHz audio devices.
Changed- Unify account import and recovery, detect supported passkey and backup formats automatically, and preview recovered accounts before saving. Keep technical troubleshooting collapsed and account creation separate.
- Import compatible accounts from other apps through the shared identity SDK, including Nosskey backups, without changing their original keys.
- Refuse adding an account the vault already signs for when the vault was locked during import.
- Fix sound pairing timing out on computers using a 44.1 kHz audio device by decoding through a 48 kHz audio graph.
- Restore optional Wi-Fi pairing by sound. Listening starts only on request, stops after one attempt or 30 seconds, and still requires phone confirmation. The decoder now works with the extension’s existing security policy.
Source code released under GNU General Public License v3.0 only
Older versions
Version 0.8.17
Released Oct 22, 2026 - 874.36 KBWorks with firefox 140.0 and later, android 142.0 and later- Avoid repeated fingerprint prompts during passkey account creation and recovery. Setup stays open while the account is saved, and confirming the initial auto-lock choice reuses the verification you just completed.
Fixed- Keep the setup wizard mounted when the first account appears, preventing repeated recovery writes or passkey registration.
- Confirm the initial auto-lock choice after passkey creation or restoration without asking for another fingerprint. The one-use setup authorization expires after five minutes and is revoked by locking, account switching or reauthentication; later Security changes still require verification.
Source code released under GNU General Public License v3.0 only
Version 0.8.16
Released Oct 22, 2026 - 873.53 KBWorks with firefox 140.0 and later, android 142.0 and later- Stop the flood of relay sign-in prompts. When a client such as Coracle asks to sign in to many relays at once, choose Always for ALL relays (on this site or on ALL sites) and the other waiting prompts clear on their own. Every grant is listed in Permissions → Relay authentication, where you can revoke it.
Source code released under GNU General Public License v3.0 only
Version 0.8.15
Released Oct 21, 2026 - 872.46 KBWorks with firefox 140.0 and later, android 142.0 and later- Roll your own recovery phrase with real dice or a coin. Create offers a game in its own tab: record each throw and watch the die roll or the coin flip, until you reach 256 bits. The phrase is checkable offline (coin flips are the raw bits; dice use SHA-256 like Coldcard) and is never shown in that tab.
- Find post-quantum keys, Web of Trust and the local network bridge together under a new Experimental menu, now at the end of the menu after Archive. Post-quantum setup moves off the home screen and out of Security; an atom next to your account name shows when its post-quantum keys are on.
- Label accounts that have no profile name: tap the tag next to them in the account picker and type a name inline.
- Onboarding no longer stops at follow suggestions when relays are unreachable. Profiles load in advance; if none answers within 8 seconds the step is skipped, and publishing the follow list never waits more than 10 seconds.
Source code released under GNU General Public License v3.0 only
Version 0.8.14
Released Oct 21, 2026 - 854.7 KBWorks with firefox 140.0 and later, android 142.0 and later- Pair Nostr WoT on your phone as an experimental local signer over Wi-Fi or supported Bluetooth browsers. Confirm the matching pairing code on the phone; scan a Wi-Fi QR or paste its link on the computer.
- Send signing and encryption approval requests directly to the phone, including relay sign-ins, app data and following-list events. The phone can remember site-specific decisions.
- Pair without unlocking an extension vault or importing the phone's public key. Temporary Network accounts are removed when the bridge tab closes, preserving existing accounts.
- Use one Disconnect action, clearer setup instructions and a visible reminder to keep the bridge page open.
- Transfer Bluetooth requests in larger safe packets when supported, with fallback for older phone builds.
- Reject invalid external signatures and show an activity record and error notice. Correct wallet date filtering to start at local midnight.
- Sound pairing is unavailable in this release because its decoder is incompatible with extension security policy. Use QR or paste for Wi-Fi pairing.
- Invalidate in-flight local signing capabilities when switching to phone signing, including pairing the already-active account.
Compatibility
The local bridge remains experimental and requires a compatible Nostr WoT phone build. Bluetooth depends on browser Web Bluetooth support; Wi-Fi remains available independently. Phone mode supports NIP-07 signing and classic NIP-04/NIP-44 encryption. Wallet identity operations, internal publishing and post-quantum operations remain unavailable while the phone signer is selected. A disconnected phone never falls back to local keys.Source code released under GNU General Public License v3.0 only
Version 0.8.13
Released Oct 17, 2026 - 773.3 KBWorks with firefox 140.0 and later, android 142.0 and later- Create and unlock a vault with a compatible passkey, with provider, encrypted-file and explicit relay recovery options. Keep password and seed setup available.
- Manage named passkeys and check recovery availability from Security. Restore from a provider snapshot or relay copy, or select an encrypted recovery file.
- Explore archived events in a full browser tab, reveal private messages on demand and delete selected local records.
- Open the popup faster and recover from unanswered background reads. Refresh edited profiles immediately and preserve profile drafts when unlocking is needed.
- Count quoted routing fees against automatic-payment allowances and prevent retries after an uncertain NWC payment outcome.
Full changelog: https://github.com/nostr-wot/nostr-wot-extension/blob/fc7580f6de5ebb4ddba74714655b9a95b4e99858/CHANGELOG.md
Also included in the attached source archive.Source code released under GNU General Public License v3.0 only
Version 0.8.12
Released Oct 6, 2026 - 883.84 KBWorks with firefox 140.0 and later, android 142.0 and later- Download and import ordinary signed-event NDJSON without a file password; verify account ownership and signatures before merging, while retaining support for old encrypted exports.
- Open Archive download and import dialogs above the full extension popup instead of inside the card.
Source code released under MIT License
Version 0.8.11
Released Oct 6, 2026 - 882.71 KBWorks with firefox 140.0 and later, android 142.0 and later- Add Account Archive in Settings: manual or scheduled sync across all selected relays, encrypted local storage, relay groups and resumable checkpoints.
- Sync relays concurrently with shared deduplicated storage. Show event counts, archive size, progress, error details and independent per-relay retries.
- Export and import password-encrypted archives. Migrate eligible original signed events to a verified destination after confirmation, retry failures once after the first pass, and inspect remaining failed events.
- Authenticate archive queries when relays request it, including responses prefixed with ERROR:. Retry recoverable failures up to three times and report relay configuration failures accurately.
- Prevent stalled language or theme initialization from leaving the popup blank by rendering bundled defaults after a bounded wait.
Archive- Configure hourly, daily or weekly automatic sync, or sync manually. Archive settings use profile relays by default, reusable relay groups and validated custom relay URLs. Archive does not add an onboarding step.
- Preserve existing records and per-relay checkpoints during retries. Event counts include verified events already stored; the archive total stays deduplicated. Continue active work between bounded slices without waiting for another alarm.
- Keep migration progress, results and pause controls inside Migrate archive. Start migration checks the destination with a normal bounded query and opens a confirmation before publishing. Migration preserves local data and original signatures, and skips ineligible events.
- Resume the failed-event retry pass after worker interruption. Show remaining event IDs, kinds, dates, relay responses and attempt counts in Failed events.
Popup startup- Render bundled English and theme defaults after 1.5 seconds if preference initialization stalls, then apply saved preferences when available. Preserve the existing splash and fade timing.
Maintenance- Pin the test-only DOM dependency to a working version and make the remote-signer refusal fixture use an unlocked test vault, preventing stalled compatibility tests without weakening production unlock checks.
- Document Archive storage, authentication, import/export and migration boundaries, and update source-build and Mozilla reviewer instructions.
Source code released under MIT License
Version 0.8.10
Released Oct 1, 2026 - 761.98 KBWorks with firefox 140.0 and later, android 142.0 and later- Keep login available for explicitly supported clients that use a nonstandard authentication format. Show a prominent risk warning explaining that the client uses the wrong authentication standard, and ask users to contact its developers about NIP-98. Require separate one-time approval for every request; preserve frame, origin, account and timestamp checks. Backend automation and saved relay grants never authorize this format.
- Open an optional feedback form after uninstalling the extension in supported browsers. No account identifiers, wallet data or tracking parameters are added to the URL.
Source code released under MIT License
Version 0.8.4
Released Sep 28, 2026 - 703.17 KBWorks with firefox 140.0 and later, android 142.0 and laterSource code released under MIT License