Independent software · Development journal

A little curiosity.
A lot of iteration.

From a shake-the-ball password idea to an Android vault and Autofill preview. This is the story of building Magic8 Pass—and learning what it takes to make the magic dependable.

Explore the development story ↘
RECORD / 2023—2026IN DEVELOPMENT · Public release pendingUpdated October 28, 2026
The idea

Playful beginnings.
Practical questions.

Magic8 began with a simple possibility: make generating a password feel more engaging. Themes, complexity controls, and a shake-the-ball interaction gave the experiment its personality.

The harder questions arrived with use. Where does a secret come from? How is it stored? Can it reach the right field, in the right browser, at the right moment? Those questions reshaped the project into a focused Android workflow: generate, save, unlock, and fill.

The product, explained

What Magic8 Pass does.

Create a password, keep it in your Android vault, and fill a matching login after you approve. These visual guides explain the product and its preview workflow.

Create, keep, and use: generate a password or passphrase locally, save it in an encrypted Android vault, then approve Autofill into a matching form. Android features are in preview and compatibility varies.
Open the overview with zoom controls · Download PNG

Explore the full functionality map.

See both generation paths, the three ways to save credentials, device approval, vault protection, exact-site matching, and the optional sound and fortune features.

Explore the detailed diagram →
Show the detailed diagram hereDetailed Magic8 functionality map covering local generation, Android vault storage, authenticated Autofill, optional sonic cues and fortunes, and preview limitations.

Open with zoom controls · Download PNG

The development story

Every failure changed
the next experiment.

A chronology reconstructed from the development record. Historical milestones describe what was observed at the time; they are not a claim of current release readiness.

CHAPTER 01October 11, 2023

An early creative precursor

Themed mantra and password experiments in Colab explored the creative territory. This was an earlier exploration; a direct code lineage to Magic8 has not been established.

CHAPTER 02August 7, 2025

The Magic8 concept emerges

An Android and language-model idea brought together themes, complexity controls, and the shake-the-ball interaction. An HTML / Netlify phone prototype generated random output, while theme and readability experiments struggled. Language-model integration stopped at an API error.

CHAPTER 03August 10–11, 2026

The security model changes

The design separated AI fortune text from Web Crypto random secrets. EFF word-list passphrases of six to eight words became part of the direction. The accepted behavior and reported pull-request merge marked a shift toward a more explicit security model.

CHAPTER 04August 12, 2026

Android baseline and a first vault

Capacitor and PWA work introduced credential saving, but delivery back to the browser failed. Audio, motion, sonic fingerprint, and TOTP ideas were explored as experiments; these did not establish a production MFA system.

CHAPTER 05August 13, 2026

A narrower, testable workflow

The project focused on a concrete path: generate → Magic8 Vault → Magic8 Autofill → matching form. Sharing and external-vault paths were removed from scope.

CHAPTER 06August 18–27, 2026

Limited Autofill wins

Early reports included Firefox Autofill success, work on new-password and confirmation fields, and a successful Warmind flow. Shopify still failed. Compatibility became a site-by-site problem requiring direct observation.

CHAPTER 07September 9–13, 2026

Regression discipline takes hold

Stabilizing Test 22 became more useful than repeatedly changing build numbers. A regression harness and controlled checks helped reproduce failures. A reported Shopify success was corrected to a failure—a reminder that a green test and a filled field are different evidence.

CHAPTER 08September 28, 2026

Antstream save and reuse

A user-reported Firefox flow created an Antstream account, saved credentials, and used the saved vault credentials for a fresh login. This demonstrated a specific save-and-reuse journey; it did not prove every generated-password signup flow.

CHAPTER 09October 20–23, 2026

The real-device gap

Controlled Test 107 checks passed while the expected popup was absent on the user’s device. The direction shifted toward a personal beta, with repeatable physical-device results still required.

CHAPTER 10October 26–28, 2026

From local tests to physical evidence

Mac mini development, an isolated AuthCheck flow, and emulator journeys supplied more controlled evidence. Wireless ADB testing recorded a Samsung synthetic end-to-end pass. That flow used an explicit email; automatic email capture remained unavailable.

CHAPTER 11October 28, 2026

Hardening before release

The development record describes a critical dependency-advisory fix, verified-signer and Firefox-only beta policy work, and vault, backup, and release guards. Device checks continued. The current draft remained unmerged; a public test signer was not a production signer.

CHAPTER 12Next · Pending

Release readiness is its own milestone

Protected signing, device and artifact gates, independent review, and a synthetic private beta remain part of the path forward. Automatic email capture and public release are not complete.

Controlled success is not universal site support. The milestones above preserve that distinction throughout the story.

Magic8 Pass development story: playful origins in 2023–2025; stronger foundations and an Android vault in August 2026; a generate, save, unlock, and fill workflow; learning from real website use; the October preview; and checks ahead of a wider release. Automatic email capture and broader compatibility remain pending.
The story at a glance. Download the diagram · Open full size
Where things stand

A preview, with
more to prove.

The public story documents progress and its limits. Magic8 Pass remains in development, with no production release offered here.

The next evidence that matters

  • Repeatable device and browser Autofill journeys.
  • Automatic email capture and matching behavior.
  • Protected production signing and release checks.
  • Independent review before wider adoption.
Get in touch

Questions, ideas,
and thoughtful feedback.

Questions about the project, ideas for the preview, or feedback on the workflow? Get in touch.

hello@magic8pass.com ↗