Yeah, onboarding could use some love. This happens a lot with Nostr projects. It's built by Nostr nerds for Nostr nerds and to them "nsec" is super obvious. They really should NOT ENCOURAGE PASTING NSEC as it is not secure and explain how to generate an nsec and how to use a browser extension / wallet to log in.