AnaseroseDev

WordSelah v1 (demo) is officially shipped! 🚀 A desktop scripture companion that displays KJV Bible verses alongside personalized declarations. This release establishes the foundation. Next: a 2 hour scheduler, preferences, and SQLite integration. 🔗 github.com/Anaserose/WordSel…

Testing MyPass v3 in a real browser found a bug my unit tests missed. The New Item form moved your cursor to the first field 30 milliseconds after opening. Type fast and your text landed in the wrong box. Fix: focus immediately, no timer.

The twelfth, a guard against files outside the interface folder, slipped through until I added a test for it. A test suite that has never failed proves nothing.

To check that my tests actually work I broke MyPass on purpose in 12 places: leaking passwords into the item list, switching auto-lock off, removing the server's security checks. The tests caught 11 straight away.

If a password manager can't show you its tests, ask why.

MyPass v3 has 120 automated tests. Some of them open real data files written by v2, so "old vaults still open" is checked, not assumed. Others start the real server and try to break in: wrong token, wrong host, a path that escapes the folder.

Passphrase mode in the MyPass generator: 3 to 10 words, your separator, optional capitals and a number, with the strength shown in bits. The word list is small for now, about 190 words, so use 7 or more words.

Upgrading from MyPass v2? Your vault opens in v3 unchanged. I tested it against real v2 data files. Old entries show "not recorded" for their age instead of being wrongly flagged as old.

Type a password while saving it in MyPass and a live meter rates it from Terrible to Excellent, with an estimate in bits. Dictionary words, repeats and simple sequences count against you, so "Summer2019!" doesn't get a pass.

MyPass v3 adds categories, favorites, search and editing. Work Email Banking Shopping Social Entertainment Nothing fancy, everything findable.

Copy a password in MyPass and your clipboard is cleared 30 seconds later, but only if it still holds that password. It won't wipe something you copied afterward.

Auto-lock: pick 2, 5 or 10 minutes. After that much idle time MyPass locks the vault and clears it from the app's memory. The timer is enforced in Python, not just in the page.

The v3 generator makes random characters or passphrases, 8 to 64 characters long, with an option to avoid look-alikes like I, l, 1, O and 0. It uses Python's secrets module, not random.

Watchtower in MyPass v3 scores your vault out of 100 and shows your weak, reused and old passwords at a glance, then lists what to fix first. The check runs on your computer. Nothing is sent anywhere.

What the recovery passphrase really is: a second key to your vault. If someone steals your data folder, a weak passphrase is a weak door. Use a long sentence you'll remember and nobody could guess.

The new MyPass interface runs in your browser, but nothing leaves your computer. A tiny server listens only on your own machine, and every request needs a random token that exists only in the link printed in your terminal. It loads nothing from the internet.

MyPass saves your vault by writing a temporary file and then swapping it in. A crash in the middle of a save shouldn't leave you with half a vault.

Why offline matters: no server to breach, no sync to intercept, no outage. The trade-off is that you are your own backup. Copy your data folder somewhere safe.

Five wrong password attempts and MyPass locks the account for 24 hours. The honest part: that protects the login screen only. Someone holding a copy of your files can guess offline, so a long master password is your real protection. Accepting suggestion on how i can fix this

MyPass never stores your master password. When you log in, it runs your password through a key-stretching function 390,000 times and checks whether the result can unlock the vault key. That makes brute-force guessing slow.

How a MyPass vault is locked: your passwords go in one file, encrypted with a random key. That key is itself locked twice, once by your master password and once by your recovery passphrase. Nothing readable is stored. #CyberSecurity