This release reworks linking between the desktop app and browser extensions, adds biometric unlock, and improves list filtering.
- The desktop app now links a browser to a specific vault with a single emoji check, and closing the connect dialog or a stalled attempt cancels the link cleanly.
- Linked desktop and browser copies now sync directly over the local link instead of through the relay, and each browser is listed once after pairing completes.
- Adding a device to a synced vault asks for the master password, and the vault’s name now follows it to every device in the group.
- You can unlock the desktop app with Windows Hello on Windows or Touch ID on macOS.
- The vault list can be filtered from the Overview cards, a new filter shows items with attachments, and the header now opens the password generator.
All changes (97)
Features
- clear button in the search field (#201)
- list each linked browser once
- a combine hides the old vault and asks nothing
- ask whether to delete the old vault after a combine
- a vault combined in brings its alias provider and backup targets
- the old vault stays only where removing it would lose something
- a copy of an entry on both sides brings what it holds
- keeping the old vault after a combine is a choice
- no half pairings: no Not now, retries, a link per vault
- list a linked browser only once it completes the pairing
- drop the browser's empty vault once the desktop's arrives
- combine the browser's vault into the desktop's
- link the desktop app from the first screen
- tell the linking browser what the desktop vault holds
- decide what linking does from what each side holds
- one emoji check on both screens
- link a browser with one emoji check
- Noise XX link handshake with its handshake hash
- give the vault only to the browser that just paired, over the link
- tag link sync frames with a room
- keep desktop and browser on the local link, off the relay
- a synced vault keeps its master password
- adding a device requires a master password
- name any device in the group, the same on every device
- filter the list from the Overview cards
- the vault's name follows it to every device in the group
- Windows Hello unlock (#180)
- Touch ID unlock on macOS (#180)
- let a biometric gate keep the key native, and name Windows Hello
- open the password generator from the header (#162)
- filter the list to items with attachments (#157)
- open a login's website from the list and its view (#141)
- say what a "Never" auto-lock still locks on (#146)
- add a "Latest only" option to Backups to keep (#176)
Bug Fixes
- name entry types the same in the filter and the add menu (#203)
- tie the disk record to the state being written
- a save no longer writes over another window's
- copy from the disk, and hide the old vault until the user decides
- mark the old vault before the removal's wait
- show no unlock form on an unlocked vault
- bring the link back at once with a window open, and sooner without
- let a worker from before the grant be replaced, so the link comes back
- write nothing until the open vault has loaded
- a browser removed from the sync group loses its link
- hold the link while locked, and end a half-made pairing on both sides
- finish what the user chose, and wait as long as the link does
- hold the open vault's link, and drop links only on the app's word
- no credential or fill for a browser whose pairing is pending
- wait for a linked browser to finish, instead of asking for another
- retry an invite it could not prepare, with no window until it is ready
- pin an old app-wide link to the vault it syncs with
- keep the desktop link card through its own vault copy
- say press Link once the vault's invite is ready
- carry sync on the link's own connection after linking
- clearer linking on both screens
- link browsers to a vault, not to the app
- start sync once the first device joins
- a peer skipped for the local link stays skipped
- the joining browser opens the vault copy on the link
- link the desktop app from the first screen and finish there
- name damaged entries left behind, and say only what is true about the old vault
- let go of an emoji link nobody answers
- a stray link attempt leaves the dialog open, and only Rust binds the invite
- derive the link emoji from a committed nonce exchange
- closing the Connect dialog cancels a link for good, and a stalled link times out
- fall back to the relay copy and its emoji for older apps and extensions
- show a failure after the join where the screen still shows it
- count files and the alias provider before calling a vault empty
- copy held-back look-alikes into the vault that is open now
- run everything after the join against the desktop's vault
- send a panel fill only to the browser on that page
- keep each browser's reported page to itself
- don't reopen the popup on a finished passkey confirm (#187)
- shorten the synced master-password note
- drop the disconnect hint from the synced master-password note
- confirm a key-only vault's actions under the platform rpID too
- one prompt for tap to unlock when several keys are registered
- call the header's generator button by the screen it opens
- stop the AppImage's page dying on color emoji
- check for the Touch ID item without prompting
- don't re-arm Touch ID behind the user's back
- bring the Windows Hello prompt to the front
- mark a Lock-button lock as the user's before anything shows it
- leave the edit form by going back, so back can't reopen it (#150)
Refactors
- remove the code pairing the app no longer offers
Documentation
- Windows Hello signs one challenge the same every time
Other
- chore(nix): refresh the pnpm hash for the new lockfile
- chore(link): drop what the old-vault question left behind
- chore: use support@bramble.sh as the contact email
- chore(nix): refresh the pnpm hash for the new lockfile
- chore(nix): refresh the pnpm hash for the new lockfile
- chore(deps): type-check with TypeScript 7, the native Go compiler
- test(desktop): a token-gated dev-only bridge for driving the app from e2e tests
- chore(i18n): translate the revised desktop link strings
- chore(i18n): translate the desktop link strings
- build(macos): sign releases for Touch ID unlock
- build(desktop): ship the browser-link proxy as the sidecar on every platform
Full Changelog: 0.15.0-desktop...0.16.0-desktop