SY-Pass

SY-Pass

SY-Pass is an open-source, client-side password manager and authentication utility for Fabric, Quilt, and NeoForge (Minecraft 1.21 – 1.21.1). It provides hardened local credential storage (AES-256-GCM), automated server login, chat & command password leak protection, Master Password/PIN lock, and optional cloud synchronization via the official Bitwarden CLI or self-hosted Vaultwarden instances.

Starting with v2.2.0, SY-Pass introduces an optional Master Password / PIN Vault Lock with Auto-Lock Timeout, a dedicated Streamer Mode, Command Leak Protection (intercepting /msg, /tell, etc.), Memory Sanitation (char[]) & Reflection-Proof Storage, Universal CSV Import (KeePass, 1Password, Generic), and Configurable Registration Templates.

Built with Zero External UI Dependencies using high-performance, vanilla Minecraft 1.21.1 GUI components on a modern multi-loader architecture (Architectury Loom). Operates strictly client-side and requires no server-side installation.

🚀 Key Features

• ⚡ Multi-Loader Support: Fully compatible with both Fabric (and Quilt) and NeoForge on Minecraft 1.21 – 1.21.1 with shared common logic.
• 🎨 Zero External UI Dependencies: Built entirely using vanilla GUI components (Screen, ContainerObjectSelectionList, EditBox, Button, Toast), ensuring zero mod conflicts, native look-and-feel, and blazing-fast loading speeds.
• 🔐 Master Password / PIN Lock with Auto-Lock: Protect your local vault with an optional Master Password or PIN (PBKDF2-HMAC-SHA256 with 100,000 iterations + AES-GCM). Includes configurable Auto-Lock Timeout (5, 10, 15, 30, 60 min of inactivity), instant manual lock button, emergency reset, and Bitwarden-backed recovery.
• 🔒 Memory Sanitation & Reflection Protection: Credentials are kept in memory as mutable char[] buffers and aggressively zeroed out (Arrays.fill(arr, '\0')) right after use. PasswordManager.getAllData() provides sanitized metadata with blanked passwords to completely block rogue mods and reflection inspection.
• 🎥 Streamer Mode: One-click toggle that masks server hostnames/IPs (e.g. **.*******.***), replaces custom server favicons with neutral standard icons, and disables in-place password reveals to prevent accidental leaks while streaming or recording.
• 🔑 Hardened Local Vault (AES-256-GCM): Passwords are encrypted in config/sypass/sypass.json with strict owner-only file permissions (0600), atomic writes to eliminate truncation risks, and seamless automatic migration from legacy vaults.
• 🛡️ Chat & Command Leak Protection: Client-side outgoing interception for both public chat and private messaging commands (/msg, /tell, /w). If you accidentally paste or submit a saved password, the message is blocked before leaving your client with an on-screen warning toast. Powered by the Aho-Corasick algorithm ($O(N)$) with selectable scope: Current Server Only (default) or All Servers (Global).
• ⚡ Smart & Automated Server Authentication:
  • Static Delay Login: Authenticates after a configurable tick delay upon joining.
  • Smart Auto-Login: Dynamic prompt scanning (action bar and system chat for /login, /l, or custom regex patterns).
  • Anti-Spoofing Hardening: Strict player chat spoofing protection on both Fabric and NeoForge.
  • Quick Re-Login Hotkey: Dedicated hotkey (K) for instant manual re-authentication.
• ✨ Configurable Registration Templates: Support for custom registration commands (e.g., /register %password% %password%, /reg %password%). One-step registration (/sypass register [len] or /sypass quickreg) generates a strong password, saves it, copies to clipboard, syncs to Bitwarden, and executes the command with built-in Overwrite Protection.
• 🖼️ Real Server Favicons: Automatically displays server icons (server.png / favicon) from your multiplayer list or active connection with zero-overhead GPU texture caching.
• ⭐ Favorites, Sorting & Filters: Pin favorite servers (★), filter favorites in 1 click, and cycle sort modes: Favorites First, Alphabetical (A–Z), or Last Used (🕒).
• 🎯 Active Account Highlighting: Accounts matching your currently active Minecraft nickname are highlighted in bright green with an ambient border and tooltip.
• 🔒 Process Argument Isolation (Zero-Leakage): Communicates with the Bitwarden CLI strictly via standard input (stdin). Passwords, session tokens, and vault payloads are completely invisible to system process monitors (ps, Task Manager, Process Explorer) and command-line audit logs.
• ☁️ Safe Bitwarden & Vaultwarden Cloud Sync: Full two-way sync (Pull, Push, Full Sync) via the official CLI with non-destructive conflict handling. Supports custom self-hosted server URLs. Disabled by default for a 100% local-first experience.
• 🛡️ Multi-Factor Auth & Zero-Password Routing: Native support for Authenticator apps (TOTP), Email 2FA, API Keys, and direct Session Key (BW_SESSION) unlock — access your vault without ever typing your master password inside the game!
• 📥 Universal CSV Import & Export: Export and import credentials with automatic header detection: Bitwarden CSV, KeePass (1.x & 2.x) CSV, 1Password CSV, and Generic/Browser CSVs.
• 💾 Local Encrypted Backups: Export and import encrypted backups (PBKDF2-derived) or portable unencrypted backups with restricted filesystem permissions.
• 🌐 Smart Address Matching: Automatically normalizes server IPs and hostnames, resolving connections regardless of default port specifications (:25565) or letter casing.
• 🎲 Password Generator: Cryptographically secure password generation with custom length steppers in GUI and /sypass generate [len].
• 🌐 Multilingual: 100% synchronized localization for English (en_us), Ukrainian (uk_ua), and Russian (ru_ru).

💻 Client Commands

🎮 Controls & GUI Integration

• Default Hotkeys:
  • [ — Open SY-Pass Vault Screen (configurable)
  • K — Quick Re-Login (configurable)
  • (Optional) — Customizable hotkey for Quick Register
• Menu Integration:
  • Fabric / Quilt: Integrated into ModMenu.
  • NeoForge: Integrated into the native NeoForge Mods Config Screen.
• Password Masking: Passwords remain masked by default with one-click toggles to reveal, copy, or edit.

🛠️ Requirements

• Minecraft: 1.21 – 1.21.1
• Java: 21+
• Mod Loader:
  • Fabric: Fabric Loader (>= 0.16.0) + Fabric API
  • NeoForge: NeoForge (>= 21.1.0)
• (Optional) Bitwarden CLI: Only required if Bitwarden sync is enabled. Install via system package managers (winget install Bitwarden.CLI, brew install bitwarden-cli, npm install -g @bitwarden/cli) or place the binary manually into config/sypass/bw/ (bw.exe on Windows).

🔒 Security Notice (CurseForge Compliant): SY-Pass never downloads external binaries or scripts at runtime. It interfaces strictly with locally installed or user-provided official Bitwarden CLI binaries.

⚖️ Disclaimer & Notice

This project is an independent open-source tool and is not affiliated with, endorsed by, or sponsored by Bitwarden Inc. “Bitwarden” is a registered trademark of Bitwarden Inc.