Bramble can now link the desktop app to the browser by comparing an emoji, sync over a local link rather than the relay, and let you choose whether to keep or remove the old vault after combining.
- The extension can offer to become the default password manager.
- Adding a device to a synced vault requires the master password, and a synced vault keeps its master password.
- You can filter the vault list from the Overview cards, including by whether items have attachments, and clear the search field with a button.
- The password generator opens from the header, and a login's website can be opened from the list or item view.
- Backups can be set to keep only the latest backup, and the extension can ask for Touch ID when the popup opens.
All changes (80)
Features
- offer to become the default password manager (#135)
- clear button in the search field (#201)
- a combine hides the old vault and asks nothing
- ask whether to delete the old vault after a combine
- a vault combined in brings its alias provider and backup targets
- the old vault stays only where removing it would lose something
- a copy of an entry on both sides brings what it holds
- keeping the old vault after a combine is a choice
- no half pairings: no Not now, retries, a link per vault
- give the single desktop link to the vault that syncs with it
- one desktop link per vault
- drop the browser's empty vault once the desktop's arrives
- combine the browser's vault into the desktop's
- link the desktop app from the first screen
- tell the linking browser what the desktop vault holds
- decide what linking does from what each side holds
- one emoji check on both screens
- link to the desktop app by comparing emoji
- Noise XX link handshake with its handshake hash
- give the vault only to the browser that just paired, over the link
- tag link sync frames with a room
- keep desktop and browser on the local link, off the relay
- a synced vault keeps its master password
- adding a device requires a master password
- name any device in the group, the same on every device
- filter the list from the Overview cards
- the vault's name follows it to every device in the group
- let a biometric gate keep the key native, and name Windows Hello
- ask for Touch ID as the popup opens, opt-in (#180)
- open the password generator from the header (#162)
- filter the list to items with attachments (#157)
- open a login's website from the list and its view (#141)
- say what a "Never" auto-lock still locks on (#146)
- add a "Latest only" option to Backups to keep (#176)
Bug Fixes
- name entry types the same in the filter and the add menu (#203)
- tie the disk record to the state being written
- a save no longer writes over another window's
- copy from the disk, and hide the old vault until the user decides
- mark the old vault before the removal's wait
- a page's pipe carrying the link counts as up
- show no unlock form on an unlocked vault
- bring the link back at once with a window open, and sooner without
- let a worker from before the grant be replaced, so the link comes back
- write nothing until the open vault has loaded
- hold the link while locked, and end a half-made pairing on both sides
- finish what the user chose, and wait as long as the link does
- hold the open vault's link, and drop links only on the app's word
- keep the desktop link card through its own vault copy
- carry sync on the link's own connection after linking
- one session per native pipe a page lends
- clearer linking on both screens
- keep the held desktop link in step
- a peer skipped for the local link stays skipped
- the joining browser opens the vault copy on the link
- link the desktop app from the first screen and finish there
- name damaged entries left behind, and say only what is true about the old vault
- let go of an emoji link nobody answers
- treat Firefox's missing native host as missing, not as an older app
- derive the link emoji from a committed nonce exchange
- fall back to the relay copy and its emoji for older apps and extensions
- show a failure after the join where the screen still shows it
- count files and the alias provider before calling a vault empty
- copy held-back look-alikes into the vault that is open now
- run everything after the join against the desktop's vault
- don't reopen the popup on a finished passkey confirm (#187)
- shorten the synced master-password note
- drop the disconnect hint from the synced master-password note
- confirm a key-only vault's actions under the platform rpID too
- one prompt for tap to unlock when several keys are registered
- call the header's generator button by the screen it opens
- mark a Lock-button lock as the user's before anything shows it
- detect Google's authenticator code field (#158)
- leave the edit form by going back, so back can't reopen it (#150)
- offer the page's own subdomain's login first (#183)
- drop the breach warning when a page updates the password (#161)
Other
- chore(link): drop what the old-vault question left behind
- chore(deps): type-check with TypeScript 7, the native Go compiler
- chore(i18n): translate the revised desktop link strings
- chore(i18n): translate the desktop link strings
- test(fixtures): grow the screenshot seed to 2,100 entries
Full Changelog: 1.33.0-firefox...1.34.0-firefox