SY-Pass

In-game password manager with auto-login and optional Bitwarden sync.

SY-Pass [Fabric] 1.3.0 (1.21 - 1.21.1)

File namesypass-fabric-1.3.0-mc1.21-1.21.1.jar

Supported game versions

modImplementation "curse.maven:sy-pass-1680443:8844236"

modImplementation "curse.maven:sy-pass-1680443:8844236"

Learn more about Curse Maven

Zero Runtime Downloads: Completely eliminated all dynamic executable downloading code (HttpURLConnection, zip extraction, background binary fetching). The mod never downloads external binaries at runtime.
Local & System CLI Prerequisite: The mod strictly interfaces with an official Bitwarden CLI installed by the user (winget, brew, npm) or manually placed into config/sypass/bw (bw.exe).
OS-Tailored Instructions: The CLI setup screen dynamically provides installation instructions specific to your operating system (Windows, Linux, or macOS).

Direct Session Key (BW_SESSION) Login: Added a dedicated authentication tab allowing users to authenticate using an active session token obtained via bw unlock in their terminal. Your Bitwarden master password never needs to be entered inside the game client!
Dynamic Terminal Hints: Context-aware terminal hints displaying the exact command syntax for your OS (./bw unlock on Linux/macOS vs .\bw.exe unlock on Windows).

Bitwarden is Fully Optional: Bitwarden sync is disabled by default for a 100% local-first password management experience.
Dedicated Sub-Menu: Moved Bitwarden configuration into its own dedicated sub-menu within Settings (matching the Backups menu), ensuring the settings interface fits comfortably on all screen resolutions and GUI scales.
Safe Link Confirmation: External links (documentation, registration) now use Minecraft's native ConfirmLinkScreen dialog with open/copy options for security and user consent.
Context-Aware Password List: The cloud sync button and cloud badges are now hidden when Bitwarden integration is turned off.

Updated Ukrainian (uk_ua), English (en_us), and Russian (ru_ru) localizations for all interfaces, including ModMenu descriptions.
Cleaned up obsolete thread pools and temporary download states.

Zero-Leakage CLI Integration: Switched Bitwarden CLI communication from process command-line arguments to standard input (stdin). Sensitive credentials and master passwords are no longer visible to external process monitors (such as Task Manager, Process Explorer, or ps).
POSIX File Permissions: The encryption key (sypass.key) and vault (sypass.json) are now saved with strict 0600 permissions (read/write by owner only) on Unix-like systems.
Atomic File Writes: Vault saving now uses atomic temp-file swapping to prevent file corruption during sudden crashes or system power losses.
Encryption Algorithm Upgrade: Automatic seamless migration to AES/GCM/NoPadding cipher specification.
Chat Injection & Spoofing Guard: Strict sanitization of newline characters (\r, \n) before sending commands to prevent chat command injection.
Memory & Log Sanitization: User emails are masked in debug logs, and master password memory buffers are securely cleared immediately after closing dialogs.

Micro-Stutter Elimination: Pre-compiled static regular expressions across all GUI render paths, completely eliminating FPS drops when scrolling large password lists.
In-Place UI Updates: The "Copied!" button indicator now updates its visual state in-place without triggering an expensive re-layout of the entire scroll container.
Dedicated Worker Thread: Decoupled CLI and network operations from the shared ForkJoinPool into an isolated, bounded daemon thread pool.

Race Condition Resolution: Fixed an issue where the legacy auto-login timer (1.5s default) triggered prematurely before the server prompt appeared, bypassing the Smart Auto-Login mechanism.
Fallback Timeout System: Introduced a 5-second (100-tick) fallback timeout that ensures auto-login still triggers on "silent" servers that do not send prompt messages.
Cooldown Tracking Fix: Resolved an edge-case timestamp bug that caused duplicate command dispatches during multi-phase BungeeCord/Velocity server transitions.

Chat & Action Bar Packet Inspection: Real-time scanning of incoming server packets for /login and /l authentication requests.
Instant Response: Triggers login immediately upon receiving the server's prompt, eliminating unnecessary delay timers.
Proxy & Anti-Spoofing Support: Works seamlessly across BungeeCord and Velocity sub-server transfers while strictly ignoring fake prompts sent by other players in public chat.

One-Click Registration: Added /sypass register [length] and /sypass quickreg commands, along with a configurable hotkey.
Full Automation: Automatically generates a cryptographically secure password, saves it to the local vault, syncs it with Bitwarden, dispatches /register <pass> <pass>, and copies it to your clipboard.
Overwrite Protection: Built-in safeguards prevent accidental overwriting of existing credentials for previously registered servers.

Modular Feature Toggles: Independent settings toggles for Auto-Login, Smart Chat Trigger, Auto-Register, Overwrite Protection, and HUD Toasts.
Adaptive Dynamic Toasts: Rewritten toast notification renderer supporting auto-expanding widths (up to 235px) and multi-line descriptions without text clipping.
Locked Vault Handling: Improved notification feedback when the Bitwarden vault is locked.

Quick Re-Login Hotkey: Bound to K by default to manually trigger /login <password> on demand.
Smart Address Normalization: Hostnames are now case-insensitive, strip trailing dots, and normalize the default Minecraft port (:25565) while preserving custom ports.
Automatic Vault Migration: Existing saved servers are automatically migrated to normalized address entries on first launch.

Local AES-256-GCM Encrypted Vault: Secure credential storage located in config/sypass/sypass.json protected by a machine-generated cryptographic key.
Automatic Login: Automatically dispatches /login <password> upon connecting to multiplayer servers with configurable delay and anti-spam limits.
Bitwarden CLI Integration: Full two-way synchronization (Pull, Push, and Full Sync) with official Bitwarden vaults.
Two-Factor Authentication (2FA): Comprehensive support for TOTP authenticator apps and email 2FA verification challenges.
Self-Hosted Vaultwarden: Full support for custom server API URLs.
Backup System: Export and import vaults as plain JSON or PBKDF2-derived AES-GCM encrypted backup files.
Modern GUI: Responsive dual-pane settings interface powered by owo-lib (opened via P keybind or ModMenu).
Multilingual: Full translation support for English, Ukrainian, and Russian.

This mod has no additional files