Secura 2.1.0 Release Notes

Secura 2.1.0 Release Notes

Release Summary

This update improves documentation quality and introduces a new security-focused feature: a built-in Password Generator. While this is not a breaking release, it strengthens the overall usability and security toolkit of Secura.

---

New Feature — Password Generator

A secure and customizable Password Generator has been added to Secura.

Users can now:

• Generate strong, random passwords
• Customize password length
• Include/exclude:
  • Uppercase letters
  • Lowercase letters
  • Numbers
  • Special characters

This feature enhances user security by encouraging the creation of high-entropy passwords directly within the application.

---

📚 Documentation Improvements

• Fixed formatting and structure issues in the README.md
• Improved clarity and readability
• Updated feature descriptions
• Ensured setup and usage instructions are accurate

These changes improve onboarding for new users and contributors.

---

🔐 Security Impact

• Encourages stronger password hygiene
• Reduces reliance on weak or reused passwords
• Improves overall vault security practices

---

📌 Changelog (Highlights)

• New Feature: Built-in customizable password generator
• Documentation: README fixes and structural improvements

---

🔢 Versioning

Previous version: 2.0.0
New version: 2.1.0 (Minor release – new feature, no breaking changes)

Secura 2.0.0 – Release Notes

Secura 2.0.0 Release Notes

Release Summary

This release introduces major security improvements and new features for the vault unlock system:

1. SessionKey security fix (Breaking Change)

   • The master encryption key is no longer exposed to the renderer.
   • All sensitive operations now occur entirely in the main process.
   • Any code relying on accessing the key in the renderer will break, integrations are updated accordingly.

2. Password rate-limiting with exponential backoff (New Feature)

   • Vault unlock attempts are now protected from brute-force attacks.
   • After multiple wrong password attempts, the user is temporarily blocked.
   • Lockout time grows exponentially with each consecutive failed attempt.
   • Countdown feedback is displayed in the unlock screen to show remaining wait time.

3. Renderer type updates and UI improvements

   • window.vault.unlock now returns { success: boolean; waitTime?: number } instead of {key: Buffer|.
   • Unlock screen disables the submit button during lockout and shows a live countdown.
   • TypeScript types updated to enforce safety and prevent misuse.

---

Security Impact

• High – the SessionKey is now fully protected and never exposed outside the main process.
• Reduces risk of memory dump attacks or malicious renderer manipulation.
• Exponential backoff reduces brute-force attack risk while keeping UX friendly.

---

Changelog (Highlights)

• Breaking: SessionKey removed from renderer → secure main process storage.
• New Feature: Rate-limiting with exponential backoff for vault unlock attempts.
• New Feature: Countdown UI + submit button disable during lockout.
• Refactor / TypeScript: Updated unlock function signature in window.vault.

---

Versioning Recommendation

• Previous version: 1.0.0
• New version: 2.0.0 (Major bump due to breaking security fix)

Secura v1.0.0

We are excited to announce the first official release of Secura!

This release marks the initial version of our project, providing a solid foundation for future updates.

Key Highlights:

• Core functionality implemented and tested
• Stable initial architecture
• Ready for community feedback and contributions

Thank you to everyone who contributed to making this first release possible. We look forward to building and improving Secura together!