diff --git a/CHANGELOG.md b/CHANGELOG.md
index 273cdf5..f3ca974 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,7 @@
 - Added a "Download Version" entry to the split-button caret on the game detail page, beside "Manual Install". It opens the same downloads modal the UPDATE button does, listing every build and mirror the thread offers, so a different version can be fetched over one already installed. Previously an installed title with no pending update had no route to that modal at all: the primary button becomes PLAY once a version is installed, and the UPDATE button only renders when an update is flagged. The entry goes straight to the downloads modal rather than through the source picker, and is shown disabled with a reason for titles with no F95zone thread linked.
 
 ### Fixed
+- Fixed MEGA v1 test timeout — legacy key derivation is intentionally slow and needed a longer test timeout.
 - Fixed the executable chooser modal shown when an importing or scanning archive contains more than one executable candidate. The renderer listened on `init-chooser` while the main process sent `init-executable-chooser`, so the candidate list never populated. The modal UI was also redesigned from a native `<select>` to a themed card list matching the client.
 - Fixed `.bat`/`.cmd` launchers silently doing nothing on Windows. They were spawned with `shell: true`, which built `cmd /c "<path>"` whose quoting splits at the first space, so `cmd` reported the truncated path (up to the space) as not recognized and the script never ran. They now spawn `cmd.exe` explicitly with `['/c', execPath]` and `shell: false`, letting Node quote the path as a single token; the working directory is still the script's folder so relative paths resolve.
 - Allow Win download links to show up for Linux platform since Linux can run both Linux version and also use Wine to run Win executable.
diff --git a/tests/mega-host.test.js b/tests/mega-host.test.js
index 946b6ea..e8216b9 100644
--- a/tests/mega-host.test.js
+++ b/tests/mega-host.test.js
@@ -395,7 +395,7 @@ describe('MEGA account crypto', () => {
     expect(account.deriveKeyV2('pw', '')).toBeNull()
   })
 
-  it('derives a v1 key deterministically', () => {
+  it('derives a v1 key deterministically', { timeout: 30000 }, () => {
     // Legacy accounts cannot be migrated from the client, so this path stays.
     const key = account.prepareKeyV1('hunter2')
     expect(key.length).toBe(16)
@@ -403,7 +403,7 @@ describe('MEGA account crypto', () => {
     expect(account.prepareKeyV1('hunter3').equals(key)).toBe(false)
   })
 
-  it('produces an 8-byte v1 password hash', () => {
+  it('produces an 8-byte v1 password hash', { timeout: 15000 }, () => {
     const key = account.prepareKeyV1('pw')
     const hash = account.stringHashV1('USER@example.com', key)
     expect(hash.length).toBe(8)