You can now link the desktop app and browser extension, combine their vaults, and choose whether to keep the old vault after combining.
- Adding a device to a synced group now requires the master password, and the vault and device names are shared across the group.
- The desktop app and browser extension sync over a local link rather than the relay.
- Android autofill now trusts Waterfox, offers the page's own subdomain first on mobile, and shows login suggestions on Android keyboards.
- The password generator opens from the header, and the vault list can be filtered from Overview cards, by attachments, or with a search field that has a clear button.
- Backups can be set to keep only the latest backup.
All changes (69)
Features
- trust Waterfox for web autofill (#202)
- clear button in the search field (#201)
- a combine hides the old vault and asks nothing
- ask whether to delete the old vault after a combine
- a vault combined in brings its alias provider and backup targets
- the old vault stays only where removing it would lose something
- a copy of an entry on both sides brings what it holds
- keeping the old vault after a combine is a choice
- no half pairings: no Not now, retries, a link per vault
- drop the browser's empty vault once the desktop's arrives
- combine the browser's vault into the desktop's
- link the desktop app from the first screen
- tell the linking browser what the desktop vault holds
- decide what linking does from what each side holds
- one emoji check on both screens
- Noise XX link handshake with its handshake hash
- give the vault only to the browser that just paired, over the link
- keep desktop and browser on the local link, off the relay
- a synced vault keeps its master password
- adding a device requires a master password
- name any device in the group, the same on every device
- filter the list from the Overview cards
- the vault's name follows it to every device in the group
- let a biometric gate keep the key native, and name Windows Hello
- open the password generator from the header (#162)
- keep the vault out of the app switcher's preview (#148)
- filter the list to items with attachments (#157)
- open a login's website from the list and its view (#141)
- say what a "Never" auto-lock still locks on (#146)
- add a "Latest only" option to Backups to keep (#176)
Bug Fixes
- name entry types the same in the filter and the add menu (#203)
- tie the disk record to the state being written
- a save no longer writes over another window's
- copy from the disk, and hide the old vault until the user decides
- mark the old vault before the removal's wait
- show no unlock form on an unlocked vault
- bring the link back at once with a window open, and sooner without
- let a worker from before the grant be replaced, so the link comes back
- write nothing until the open vault has loaded
- hold the link while locked, and end a half-made pairing on both sides
- finish what the user chose, and wait as long as the link does
- hold the open vault's link, and drop links only on the app's word
- keep the desktop link card through its own vault copy
- clearer linking on both screens
- a peer skipped for the local link stays skipped
- link the desktop app from the first screen and finish there
- name damaged entries left behind, and say only what is true about the old vault
- let go of an emoji link nobody answers
- derive the link emoji from a committed nonce exchange
- fall back to the relay copy and its emoji for older apps and extensions
- show a failure after the join where the screen still shows it
- count files and the alias provider before calling a vault empty
- copy held-back look-alikes into the vault that is open now
- run everything after the join against the desktop's vault
- don't reopen the popup on a finished passkey confirm (#187)
- shorten the synced master-password note
- drop the disconnect hint from the synced master-password note
- confirm a key-only vault's actions under the platform rpID too
- one prompt for tap to unlock when several keys are registered
- virtualize the AutoFill picker list on iOS and Android
- call the header's generator button by the screen it opens
- mark a Lock-button lock as the user's before anything shows it
- leave the edit form by going back, so back can't reopen it (#150)
- offer the page's own subdomain's login first (#183)
- declare inline suggestion support so the keyboard shows logins (#147)
Other
- chore(link): drop what the old-vault question left behind
- chore(deps): type-check with TypeScript 7, the native Go compiler
- chore(i18n): translate the revised desktop link strings
- chore(i18n): translate the desktop link strings
Full Changelog: 0.27.0-android...0.28.0-android