Register a new identity, or sign in with one you already have. Either way your private key stays in this browser.
Create a new identity. All you need is a handle and a password: a fresh key is generated here, encrypted with that password and stored in this browser.
Sign in with an identity you already have. Your nsec is used only in this browser and never transmitted.