Open
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
erdemyerebasmaz
force-pushed
the
feat/password-encrypted-seed-storage
branch
from
176c03a to
6dbf6bb
Compare
erdemyerebasmaz
force-pushed
the
feat/password-encrypted-seed-storage
branch
from
6dbf6bb to
ce3ce10
Compare
This was referenced Mar 18, 2026
erdemyerebasmaz
force-pushed
the
feat/password-encrypted-seed-storage
branch
from
ce3ce10 to
6b17a48
Compare
erdemyerebasmaz
changed the title
erdemyerebasmaz
force-pushed
the
feat/password-encrypted-seed-storage
branch
from
6453738 to
6192952
Compare
Password-encrypted seed vault using Web Crypto API: - PBKDF2 (600k iterations, SHA-256) derives an AES-GCM-256 key - AES-GCM encrypts the mnemonic; ciphertext stored in IndexedDB - Wrong password detected via GCM authentication tag failure - Durable writes via tx.oncomplete, stale connection recovery
New wallet creation now requires a password before seed generation: - PasswordForm component with strength indicator and autofill support - SetPasswordPage for create/confirm password entry - GeneratePage updated with vault-aware seed confirmation - FormError improved with layout-stable animated transitions - Autofill dark-theme CSS overrides and shake animation - Extract inline SVG icons (KeyIcon, LockIcon, ShieldCheckIcon, DownloadIcon)
Returning user flows now route through the vault: - UnlockPage for password-based vault decryption - Migration screen for legacy localStorage mnemonics - Restore flow now sets password before connecting - useBreezSdk startup detects vault/migration/no-wallet states - Vault deleted on logout; saveMnemonic removed
erdemyerebasmaz
force-pushed
the
feat/password-encrypted-seed-storage
branch
from
da40085 to
02b9c9b
Compare
Vault users must enter their password to decrypt and view the recovery phrase. Passkey users still authenticate via passkey. Replaces the old tap-to-reveal flow that read directly from localStorage.
erdemyerebasmaz
force-pushed
the
feat/password-encrypted-seed-storage
branch
from
02b9c9b to
8b657c0
Compare
erdemyerebasmaz
force-pushed
the
feat/password-encrypted-seed-storage
branch
from
8b657c0 to
c64a0a8
Compare
* Add vault architecture, auth flow pages, and startup detection docs. * Update README security note for both auth methods. * Replace em dashes with standard punctuation throughout.
erdemyerebasmaz
force-pushed
the
feat/password-encrypted-seed-storage
branch
from
ed8fea7 to
b633810
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #111
This PR implements password-encrypted seed following the Glow-Web: Password-Encrypted Seed — Fallback Auth Spec.
Summary
IndexedDB, replacing plainlocalStoragestorage.src/services/vault.ts.SetPasswordPage,UnlockPage, and migration flow for existing users. Passkey remains the default when PRF is available; recovery phrase flow is accessible via toggle or 5-tap logo gateway.FormErrorfade transitions andPasswordFormexternal submit support.Test plan
UnlockPage, enters password to decrypt vaultlocalStorageuser sees "Secure Glow" page, sets password, vault created