bitwarden/clients web-v2026.9.1

Web v2026.9.1

on GitHub

What's Changed

• Added the option to share vault items through a secure link
• Expanded Manage Send policies to control vault item sharing
• Updated subscription pages to show your upcoming renewal amount, tax, and date
• Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

• [PM-39190] [PM-19354] fix(generator): restore catch-all website-name option by @esteve in #21338
• [PM-38402] fix(desktop): fix IPC listeners that were never getting removed by @fabiand93 in #20945
• [PM-42039] fix(desktop): access keyctl keys from their owning thread by @nurfed1 in #22449
• [PM-42093] Fix case-sensitive URI scheme checks by @jashkarangiya in #22477

Feature Development

• desktop-autofill: Windows native passkey fixes by @iinuwa in #22894
• [CL-998] filter menu and dialog spec follow-up by @willmartian in #22891
• [PM-42902] wire inline menu prompt component by @dan-livefront in #22883
• [PM-38575] feat: hide payment modal for sales-assisted trials by @cyprain-okeke in #22805
• Add breadcrumbs to Auth settings pages by @nikwithak in #22855
• [PM-42845] add guided tour of invite link by @BTreston in #23061
• [PM-42844] invite link dialog state and service by @BTreston in #23059
• Remove SSH Agent v1 by @neuronull in #22762
• Add more support for DDG browser by @kspearrin in #22696
• [PM-39929] Billing Error Card by @sbrown-livefront in #23070
• Autotype: move shortcut component to shared lib by @neuronull in #22898
• [CL-1232] Show rounded corner in desktop layout for VFO1 by @vleague2 in #22832
• PM-40898: Add breadcrumbs to Billing settings pages by @nikwithak in #22945
• PM-40900: Add breadcrumbs to Admin-Console settings pages by @nikwithak in #22857
• PM-40896: Add breadcrumbs to data recovery settings by @nikwithak in #22859
• PM-40901: Add breadcrumbs to tools-owned settings pages by @nikwithak in #22951
• [CL-1297] Use bit-item for table-v2 list presentation by @willmartian in #23097
• [PM-42897] Move the vault banner above the vault header and add to shared folder/my folder pages by @jengstrom-bw in #23014
• [PM-42490] feat: Add right click menu to the VFO1 vault table by @jaasen-livefront in #23062
• Auth/PM-43337 - Submit login form on Enter from the remember-email checkbox by @JaredSnider-Bitwarden in #23085
• [PM-40904] feat: Add extension popup header item count and vault switcher by @jaasen-livefront in #22858
• [PM-42170] feat: Wire quick copy icon setting to the new vault table by @jaasen-livefront in #22790
• [PM-43047] Introduce new import vendor icons by @harr1424 in #22953
• [PM-40905] Extension - FAB implementation by @nick-livefront in #22897
• [PM-43088] Add My items chip filter to org vault's All vault items page by @gbubemismith in #23102
• [PM-34732] remove feature flag, add flag for callout feature by @BTreston in #23091
• [PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060
• Autotype: generate AppData from filtered, currenty running applications by @neuronull in #22656
• Add beta templates for Github issue reports by @trmartin4 in #23095
• [PM-40320] feat: Add bulk action support to shared VaultItemsTableComponent by @jaasen-livefront in #22260
• [PM-43267] Tools share library to support temporary item sharing by @mcamirault in #23079
• [CL-1312] Add accordion auto height option by @vleague2 in #22938
• [PM-42385] Add empty autofill section description by @shane-melton in #23182
• [PM-42878] Add subscription ended callout to VFO1 archive view by @nick-livefront in #23066
• [PM-42838] Implement new dialog UI by @BTreston in #23056
• [PM-38770] Implements support for new toggle on Invite Link modal by @JaredScar in #23077
• [PM-43257] Update and Consolidate Autotype MVP & GA FF Logic by @coltonhurst in #23099
• [PM-42298] Integrate vault dialogs and coachmarks with VFO1 UX by @shane-melton in #23104
• [PM-42524] feat: Update vault name and billing email fields on the shared organization form by @cyprain-okeke in #23181
• [PM-41885] Add render and main process autotype ga services by @coltonhurst in #23189
• [PM-39929] Subscription Card Updates for Subscription Preview by @sbrown-livefront in #23071
• [PM-39929] Component Updates to Standalone by @sbrown-livefront in #23072
• [PM-39929] Cart translation keys and discount duration label by @sbrown-livefront in #23147
• [PM-37378] VFO1 persist active filters by @shane-melton in #22533
• [SM-1588] Secrets Versioning + feature flag by @cd-bitwarden in #19405
• Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183
• [PM-39929] Preview-driven organization subscription page by @sbrown-livefront in #23151
• [PM-39982] Wire temporary item sharing in all clients by @mcamirault in #23152
• [PM-40806] self host warning for invite link by @BTreston in #23088
• [PM-41953] Add beta icon to header and side nav by @trmartin4 in #22903
• Autotype: Generate AppData from active window by @neuronull in #23243
• [PM-37378] Extend vault filter memory to Desktop by @shane-melton in #23226
• [CL-1334] Add min-height to table toolbar and remove tooltips from filter menus by @vleague2 in #23258
• [CL-1249] extension scroll area updates by @BryanCunningham in #23154
• [CL-1240] side nav responsive behavior by @BryanCunningham in #22879
• fix(beta): Updated extension icon size by @trmartin4 in #23350
• [PM-44120] Isolate Beta desktop keychain entries from stable by @trmartin4 in #23551

🐛 Bug fixes

• [PM-42854] bugs with policies drawers by @JaredScar in #22893
• [PM-42858] Implement changes for policy for vault banner info callout by @JaredScar in #22889
• [PM-16095] validation message updates by @JaredScar in #22807
• [CL-1318] Prevent pages with small y-scroll from snapping back to top when scrolled by @vleague2 in #23058
• [PM-42853] bugs with policies list fixes by @JaredScar in #22931
• fix(table-v2): do not accept undefined urlStore values as seeded filter values by @nick-livefront in #23051
• [PM-43245] fix: Apply container-type to side nav scroll container by @BryanCunningham in #23074
• [PM-42853] Fix header for policies by @JaredScar in #23081
• [PM-43083][PM-43122] Show header breadcrumbs and identity tiles for every vault scope by @gbubemismith in #23021
• Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899
• [PM-42854] Fix terminology changes for VFO 1 by @JaredScar in #23080
• [CL-1296] Ensure table content does not have clipped focus rings by @vleague2 in #23076
• [PM-42971] Ensure area around nav collapse button is clickable by @vleague2 in #23100
• [PM-41548] Consider frame URLs when resolving blocked domain entries by @jprusik in #23018
• [PM-43432] fix DI by @BTreston in #23144
• [CL-1321][CL-1322] misc filter dialog fixes by @willmartian in #23148
• [PM-43363] fix: Wrap long unbroken text in status lockup by @jaasen-livefront in #23150
• [PM-43253] Show suspended organization icon in the Password Manager side nav by @jaasen-livefront in #23082
• PM-43471: Add missing enabled flag for vault-next storybooks by @nikwithak in #23159
• [PM-43292] feat: Allow creating folders and shared folders from the toolbar's new item menu by @nick-livefront in #23089
• [PM-43450] bugfix: No items show up with 'Items with no folder' filter by @nikwithak in #23157
• init runtime before autofill orchestrator by @addisonbeck in #22789
• [PM-43451] fix: Rename and separate the no-folder filter option by @jaasen-livefront in #23153
• [PM-42825] Filter out provider organizations by @nick-livefront in #23016
• [PM-43366] Improve tooltip support in filter menu and toolbar by @vleague2 in #23177
• align mark and measure with abstraction docs by @audreyality in #23090
• [PM-43676] harden tagAsExternal by @audreyality in #23187
• [PM-43348] Render live vault updates on the desktop list by @gbubemismith in #23191
• [PM-43374] Correct trash detection in desktop vault batch action bar by @gbubemismith in #23175
• [PM-43631] fix: add breadcrumbs to the settings Add plan page by @jaasen-livefront in #23188
• [PM-43674] refactor(icon-tile): render glyph with bit-icon by @BryanCunningham in #23185
• Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046
• [PM-42364] Missing SSO external ID and external ID from members dialog by @JaredScar in #23096
• [PM-43726] fix: filter browser type chip to only show vault-present types by @nick-livefront in #23202
• [PM-43743] introduce IntraprocessMessagingSubject by @audreyality in #23203
• [PM-43791] fix: net line-item discounts into the cart summary subtotal by @sbrown-livefront in #23223
• [PM-43460, PM-43461] feat: Nest collections and folders in filter chips by @nick-livefront in #23190
• [PM-41425] fix: apply untrusted iframe check to fill assist targeted fields by @bensbits91 in #23155
• [PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220
• [PM-43632] custom user with manage user permission logged out when inviting user server direct call by @JaredScar in #23225
• [CL-1320] Update how multi filter menu chips are treated when selected by @vleague2 in #23218
• [PM-43479] Allow horizontal scrolling in table-v2 on desktop by @willmartian in #23250
• [PM-43782] fix: uncheck select-all after clearing a capped selection by @jaasen-livefront in #23227
• [PM-43681] With voiceover on and navigating by keyboard, highlighted button border persists when expanding/contracting show more/less by @jengstrom-bw in #23216
• [PM-43727] fix: treat empty folderId as no folder in SDK move ciphers by @gbubemismith in #23257
• [PM-43840] Update instances of collection to instead use shared folder by @harr1424 in #23254
• [PM-43838] fix: center empty vault description text on desktop by @gbubemismith in #23261
• fix(shared-unlock): Set destinations before starting shared unlock by @quexten in #23230
• [PM-43869] Disable at-risk password notifications in shared item Sends by @mcamirault in #23295

⚙️ Maintenance

• [PM-42662] Update ac models for ts-strict by @BTreston in #22783
• feat(desktop): Allow overriding the IPC socket directory by @quexten in #22911
• Use SEND_KDF_ITERATIONS instead of magic number by @djsmith85 in #23067
• [PM-42663] Update ts-strict for components by @BTreston in #22774
• [PM-42664] Refactor libs/common for ts-strict by @BTreston in #22779
• Auth/PM-42704 - Rename auth icons to be generic for reuse by @JaredSnider-Bitwarden in #22786
• [PM-42666] ts-strict for cli files by @BTreston in #22782
• [BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #23105
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #23106
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #23107
• feat(desktop): Add an isolated debug run script for desktop by @quexten in #22912
• [BRE-2215] Add UAT environment web build and artifact by @michalchecinski in #23173
• [PM-34732] Clean up by @BTreston in #23176
• [PM-43233] Instrument the Access Intelligence report flow by @Banrion in #23101
• desktop: Refactor packing and signing build phases by @iinuwa in #23020
• build: Delete unused package.json scripts for desktop by @iinuwa in #23055
• [PM-42366] Reconstruct IPC content-script messages before relaying by @coroiu in #23192
• Update Cargo.toml by @iinuwa in #23179
• [PM-43366] Mute flaky filter menu popover test for now by @vleague2 in #23196
• [PM-412222] Update sdk decryption failure dialog copy and design by @shane-melton in #22619
• feat(desktop): Add development icon for desktop dev build by @quexten in #22915
• [PM-43776] Fix circular dependency in view password history service by @shane-melton in #23215
• [deps]: Update actions/setup-node action to v7 by @renovate[bot] in #22473
• Convert Secrets Manager integrations page to tabbed layout by @maxkpower in #21438
• [PM-43773] Add server-side verification to HEC connect dialogs by @Banrion in #23222
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #23251
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #23252
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #23253
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #23255
• [PM-43269] Browser: Update Health category details button variant and intro CTA images by @lastbestdev in #23103
• Autosync Crowdin Translations for web by @bw-ghapp[bot] in #23269
• Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #23267
• Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #23268
• Revert "[PM-43773] Add server-side verification to HEC connect dialogs" by @Banrion in #23296
• feat(browser): Add a Chrome debug launcher for the extension by @quexten in #22913
• Bump client version(s) by @github-actions[bot] in #23332
• [PM-42469] communicate embedded sender only through trusted messaging channels (#23249) by @audreyality in #23334
• core-js removal from chrome and version bump by @addisonbeck in #23464

📦 Dependency Updates

• Update sdk-internal to 0.2.0-main.1015 by @bw-ghapp[bot] in #22989
• Update sdk-internal to 0.2.0-main.1020 by @bw-ghapp[bot] in #23068
• Update sdk-internal to 0.2.0-main.1034 by @bw-ghapp[bot] in #23277
• [deps] UI Foundation: Update svgo to v4.0.2 [SECURITY] by @renovate[bot] in #22008

New Contributors

• @esteve made their first contribution in #21338
• @fabiand93 made their first contribution in #20945
• @jashkarangiya made their first contribution in #22477

Full Changelog: web-v2026.9.0...web-v2026.9.1