sneak/AutistMask
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Clarify password role, random die, updated wording
All checks were successful
check / check (push) Successful in 14s
Details

Browse Source 
- Password help text now explains it encrypts the recovery phrase
  on disk and is not used for address derivation
- Die button generates cryptographically random phrases using
  crypto.getRandomValues(), different each click
- "roll the die for a new one" wording
- README documents full encryption scheme (PBKDF2 + AES-256-GCM)
  and explicitly notes password is not part of BIP-39 derivation
This commit is contained in:
Jeffrey Paul
2026-02-25 15:34:33 +07:00
parent 3dbf885951
commit e6d8f6acf4
3 changed files with 170 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
src/popup/index.html
View File

@@ -56,8 +56,8 @@
Add Wallet
</h1>
<p class="mb-2">
Enter your 12 or 24 word recovery phrase below, or press the
die to generate a new one.
Enter your 12 or 24 word recovery phrase below, or click the
button to roll the die for a new one.
</p>
<div class="mb-1 flex justify-end">
<button
@@ -88,8 +88,10 @@
<div class="mb-2" id="add-wallet-password-section">
<label class="block mb-1">Choose a password</label>
<p class="text-xs text-muted mb-1">
This password locks the wallet on this device. It is not
the same as your recovery phrase.
This password encrypts your recovery phrase on this
device. It does not affect your wallet addresses or
funds — anyone with your recovery phrase can restore
your wallet without this password.
</p>
<input
type="password"
@@ -154,7 +156,9 @@
<div class="mb-2" id="import-key-password-section">
<label class="block mb-1">Choose a password</label>
<p class="text-xs text-muted mb-1">
This password locks the wallet on this device.
This password encrypts your private key on this device.
Anyone with your private key can access your funds
without this password.
</p>
<input
type="password"