don't ever paste your nsec into random client apps

use a signing device

apps often ask for an nsec, for convenience (or laziness)

you should only do this for throwaway accounts

check out nsecbunker, dedicated signing apps, browser extensions, or ideally - hardware devices, if it's an account you actually want to keep secure.