Skip to content

Strengthen vault password policy#28

Merged
sidhujag merged 1 commit intomasterfrom
hardening/password-policy
Apr 25, 2026
Merged

Strengthen vault password policy#28
sidhujag merged 1 commit intomasterfrom
hardening/password-policy

Conversation

@sidhujag
Copy link
Copy Markdown
Member

Summary

  • Centralize the vault password policy at a 16-character minimum with passphrase-oriented copy.
  • Apply the policy consistently to registration, empty-vault import first write, VaultContext first-write saves, and password changes.
  • Keep login/unlock compatibility for existing passwords while removing stale 8-character guidance from login.

Test plan

  • CI=true npm test -- --watch=false --runInBand src/pages/Register.test.js src/pages/Login.test.js src/components/ChangePasswordCard.test.js src/components/VaultImportModal.test.js src/context/VaultContext.test.js

Made with Cursor

Centralize the vault password floor at 16 characters and apply it to registration, first-write import, and password rotation before expensive crypto work runs.

Made-with: Cursor
@sidhujag
Copy link
Copy Markdown
Member Author

@codex review

@chatgpt-codex-connector
Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Already looking forward to the next diff.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@sidhujag sidhujag merged commit 7f79494 into master Apr 25, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant