You spoke and I listened.

Everyone loves the idea of a NFC card for #nostr #safebox but many were concerned about the security.

So I added a PIN that the holder would memorize or write down separately from the card. If the card is stolen, without the PIN, it completely useless. If the holder re-issues a new card, then the stolen card is completely dead.

All of functions the use the card can optionally request a PIN and send it along to the vault. If the PIN does not validate, then nothing. This is over and above all of the other security measures. In my opinion this is just as strong as those card and payment terminals out there - even better because all of logic and code exists on the server. And if the vault doesn't trust the server, then nothing happens