AnaseroseDev retweeted
Bug I caught while debugging MyPass 🐛
The Reveal button worked...
until you clicked it again.
The password would show, but wouldn't hide properly.
The fix was to check what is actually displayed against the real password instead of relying on separate state.
AnaseroseDev retweeted
Bug 🐛
My 24 hour login lockout had another problem.
When the lockout expired, the next wrong password could immediately trigger another 24-hour lockout.
The timer expired, but the attempt state wasn't being reset properly.
Fixed the expiration logic.
AnaseroseDev retweeted
MyPass started with zero external packages.
The encrypted version doesn't.
I'm now using the `cryptography` package in Python because I needed proper encryption rather than trying to build cryptography myself.
AnaseroseDev retweeted
MyPass V1:
Open the JSON file → passwords are readable.
Main build:
Open the vault → encryption means you don't get readable passwords.
That's the biggest security change between the demo and the real application.
AnaseroseDev retweeted
A password shouldn't simply become an encryption key by doing something like `hash(password)`.
I'm using PBKDF2 to derive a key from the password and salt.
The security details are becoming a whole project of their own.
AnaseroseDev retweeted
Why does MyPass use hundreds of thousands of PBKDF2 iterations? 🤔
Because password-derived keys shouldn't be cheap to guess.
Increasing the work required for each derivation makes large-scale guessing more expensive.
Now I know why KDF parameters matter for security.
AnaseroseDev retweeted
Random late night thought;
AI is making it easier than ever to build things.
which makes me wonder…. if the real advantage now is simply knowing what’s actually worth building.
AnaseroseDev retweeted
Someone asked me what happens to a password when it's saved.
So that's exactly what I'm looking at.
From the moment it's entered → processed → encrypted → saved → retrieved after reopening the app.
Following one password through the entire system 🧐
AnaseroseDev retweeted
Weekend productivity is so unpredictable.
You can either finish your whole to-do list or spend 6 hours scrolling and call it rest.
AnaseroseDev retweeted
Bug I caught while debugging 🐛
The Reveal button worked…
until you clicked it again.
The password would reveal, but the second click wouldn’t hide it properly.
I changed the logic so the button checks what is currently displayed then decides to reveal or hide the password
AnaseroseDev retweeted
One thing I'm learning while building MyPass:
How do you turn a user's master password into a key that can actually be used for encryption?
That's where key derivation functions come in.
I'm currently learning how this fits into the next version of MyPass. 🔐
AnaseroseDev retweeted
Why the demo came first
I didn't start MyPass with encryption.
I started with a simple Python demo.
Why?
I wanted to prove the UI, account flow and vault functionality worked before adding another layer of software development complexity.
Now I'm rebuilding the storage.
decided to work on a project without any harness or coding agent just for learning sake
This has been one of the most painful things ive done all week
after making the folder structure I just stared at the boilerplate for like an hour
how did you guys do this before AI ?
AnaseroseDev retweeted
Replying to @Sambhav_Gandhi
No surprise in this,tats how freshers r and we also came into the industry like tat,they r fresh out of college and u got to invest time to train them but once they start delivering , no looking back, if u don’t hire freshers now who will be ur experienced employees after 10 yrs
AnaseroseDev retweeted
What’s the difference between:
"null"
"undefined"
"NaN"
They all look innocent… until they break your code. 😂












