SFT-4339: ran auto backup after renaming the device
What changed, and why it matters
This commit makes the Passport hardware wallet automatically create a backup after the user renames the device. The change is a functional improvement to ensure the new device name is preserved in backups, not a fix for an exploitable security flaw. There is no indication of a vulnerability or attack scenario.
No security action required. Treat as a normal firmware improvement. Reviewers may verify that AutoBackupFlow handles failure gracefully and does not block the rename UI on backup errors.
Security signals we found
Functional change, not a vulnerability patch
Uses existing AutoBackupFlow, no new crypto or auth code
No input validation changes
No privilege boundary changes
Evidence from the diff
The rename_device_flow.py module now imports AutoBackupFlow and invokes it after a successful device rename. Previously, renaming the device did not trigger an automatic backup, so the stored backup could retain the old device name until the next scheduled backup. The patch closes that gap by running the existing auto-backup flow immediately after the rename completes.
Changed components
ports/stm32/boards/Passport/modules/flows/rename_device_flow.pyInspect captured patch +2 / −0
diff --git a/ports/stm32/boards/Passport/modules/flows/rename_device_flow.py b/ports/stm32/boards/Passport/modules/flows/rename_device_flow.py
index 90264cf..13ab180 100644
--- a/ports/stm32/boards/Passport/modules/flows/rename_device_flow.py
+++ b/ports/stm32/boards/Passport/modules/flows/rename_device_flow.py
@@ -19,6 +19,7 @@ class RenameDeviceFlow(Flow):
from utils import spinner_task
from tasks import delay_task
from pages import SuccessPage
+ from flows import AutoBackupFlow
name = settings.get('device_name', None) or ''
result = await TextInputPage(initial_text=name,
@@ -44,5 +45,6 @@ class RenameDeviceFlow(Flow):
await spinner_task('Renaming Device', delay_task, args=[1000, False])
await SuccessPage(text='Device renamed successfully').show()
+ await AutoBackupFlow().run()
self.set_result(True)
Why this scored 16/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.