What's Changed
This release focuses on security hardening, stability and quality-of-life improvements across AliasVault. Highlighted changes: the web app now includes a new auto-lock timeout. The mobile apps now support blocking screenshots and screen recording, enabled by default. The browser extension and mobile app can now export to .avex/.avux, making it possible to create encrypted vault backups directly from all clients.
Android autofill now also works in more browsers through compatibility mode, including Edge, Opera and others. Passkeys are displayed better on all clients. Many other fixes and UX/UI refinements have been added based on community feedback, including:
- Favicons now render better in the mobile app
- Imports from other password managers have been improved for better attachment import support
- Improve Android mobile app compatibility with larger vaults, reducing memory usage
See the full list of improvements below.
🚀 New Features
- Update architecture documentation for new datamodel structure introduced in 0.31.0 by @lanedirt in #2523
- Add optional key rotate functionality to password change screen in web app by @lanedirt in #2526
- Add .avex/.avux export options to browser extension and mobile app by @lanedirt in #2529
- Update mobile app minimum PIN length from 4 to 6 digits by @lanedirt in #2531
- Make browser extension accept any char (letters included) when setting up a new PIN by @lanedirt in #2532 (reported by @StefPanther)
- Improve vault sharing invite flow by @lanedirt in #2538
- Require TLS in mobile app release builds by @lanedirt in #2540 (reported by @nmochea)
- Core readability refactoring and fixes by @lanedirt in #2544
- Update google play store logo by @lanedirt in #2554 (reported by @xuars)
- Increase identity generator supported age ranges by @lanedirt in #2559
- Add auto-lock timeout to web app by @lanedirt in #2563
- Add screen capture protection to mobile apps by @lanedirt in #2568 (reported by @shanks3042)
- Add about page to browser extension and mobile app by @lanedirt in #2570
- Add Android autofill support for Edge, Opera and other browsers via compatibility mode by @lanedirt in #2572
- Update docs with IPv4 requirement by @lanedirt in #2578 (reported by @vincegre)
- Show item name instead of passkey title in Android and improve passkey display across all clients by @lanedirt in #2583
- Show username field generate button for all item types by @lanedirt in #2600 (reported by @Rayfor000)
🐞 Bug Fixes
- Update TOTP countdown to adhere to custom settings in mobile app by @lanedirt in #2557
- Reject accented characters in username check before registration by @lanedirt in #2566
- Fix favicon rendering in mobile app by normalizing SVG structure by @lanedirt in #2573 (reported by @mjacobs64)
- Update Proton Pass and Bitwarden importers to handle new attachment format by @lanedirt in #2575 (reported by @LenzGr)
- Improve reset vault option in web app to prevent another device merge of bringing deleted items back by @lanedirt in #2577 (reported by @LenzGr)
- Improve error reporting in clients when the vault download is interrupted by the network by @lanedirt in #2579 (reported by @hey-zane)
- Fix Android crash on large vaults by passing and storing the vault as raw bytes by @lanedirt in #2580 (reported by @pilotpirx68)
- Include credentials without a username in Android and iOS autofill suggestions by @lanedirt in #2581 (reported by @cycyx)
- Keep selected domain when regenerating alias email by @lanedirt in #2599 (reported by @Rayfor000)
- Update folder sort to be alphabetical case-insensitive in all platforms by @lanedirt in #2601 (reported by @Rayfor000)
🧩 Dependencies Updates
- Bump nginx from 1.31.0 to 1.31.6 in /apps/web in the docker-images group across 1 directory by @dependabot[bot] in #2525
- Bump nginx from 1.31.6 to 1.31.8 in /apps/web in the docker-images group across 1 directory by @dependabot[bot] in #2545
- Bump Microsoft.AspNetCore.DataProtection and 13 others by @dependabot[bot] in #2546
Full Changelog: 0.31.1...0.31.2