feat: an "Allow weak passwords" setting lets a new wallet have a short password (closes #674)

Settings has a new "Allow weak passwords" checkbox, off in a new profile. While it is off, AddWallet refuses a password shorter than 12 characters, as before. While it is on, AddWallet accepts any password that is not empty. Key derivation is unchanged: one Argon2id derivation at libsodium's interactive setting. README's Key Decisions now states those parameters and why one light derivation is enough: the password's length is what protects the stored secret. The screens say "password", as README's wording rules require, so the setting is "Allow weak passwords". Model: opus-5-5
2026-10-26 22:35:02 +01:00
parent bf8aa9f5dd
commit 387f40689e
8 changed files with 149 additions and 12 deletions
@@ -425,6 +425,8 @@ see everything unfiltered.
 Click the gear icon on the home screen to access settings:

 - **Wallets**: Your wallets, and "+ Add wallet".
+- **Passwords**: Tick "Allow weak passwords" to choose a password shorter than
+  12 characters when you add a wallet.
 - **Tracked Tokens**: The ERC-20 tokens tracked across all addresses, and "+ Add
  token".
 - **Display**: Toggle whether tracked tokens with zero balance are shown, switch