diff --git a/backend/app/tests/test_imap_endpoints.py b/backend/app/tests/test_imap_endpoints.py
index d0fcebd..d868917 100644
--- a/backend/app/tests/test_imap_endpoints.py
+++ b/backend/app/tests/test_imap_endpoints.py
@@ -6,7 +6,6 @@ Covers connection testing, report fetching (foreground and background), and stat
 
 from unittest.mock import MagicMock, patch
 
-import pytest
 from fastapi.testclient import TestClient
 
 
diff --git a/backend/app/tests/test_security_extra.py b/backend/app/tests/test_security_extra.py
index 8702891..48183d1 100644
--- a/backend/app/tests/test_security_extra.py
+++ b/backend/app/tests/test_security_extra.py
@@ -6,14 +6,12 @@ create_access_token, and require_admin_auth branches not yet exercised.
 from datetime import timedelta
 
 import pytest
-from fastapi.testclient import TestClient
 from jose import jwt
 
 from app.core.security import (
     add_api_key,
     create_access_token,
     generate_api_key,
-    verify_api_key,
     verify_token,
 )
 
diff --git a/backend/app/tests/test_setup_endpoints.py b/backend/app/tests/test_setup_endpoints.py
index 3d79531..e66f8b9 100644
--- a/backend/app/tests/test_setup_endpoints.py
+++ b/backend/app/tests/test_setup_endpoints.py
@@ -51,7 +51,7 @@ class TestSetupAdmin:
             json={
                 "email": "admin@example.com",
                 "username": "admin",
-                "password": "s3cr3tpass",
+                "password": "test-placeholder-password",
             },
         )
         assert response.status_code == 201
diff --git a/backend/app/tests/test_stats_endpoints.py b/backend/app/tests/test_stats_endpoints.py
index 950158f..bdf5e35 100644
--- a/backend/app/tests/test_stats_endpoints.py
+++ b/backend/app/tests/test_stats_endpoints.py
@@ -6,7 +6,6 @@ Covers dashboard statistics and per-domain statistics with cache refresh.
 
 from unittest.mock import MagicMock, patch
 
-import pytest
 from fastapi.testclient import TestClient