What's new
This is the first alpha of a near-total rewrite. Everything below landed since 0.6.13.
Electron → Tauri. The app now runs on a Rust core with the system webview. Smaller downloads, lower memory, and all crypto and vault access moved out of JavaScript.
New storage engine. Vaults are SQLite + SQLCipher instead of encrypted JSON files, with Argon2id key derivation and an automatic one-time migration from the old format.
Complete redesign. A new three-pane shell built on Tailwind v4 and a proper design system: reworked lock and setup screens, in-place entry editing, a ⌘K command palette, a password generator, Favorites and Archive, keyboard navigation throughout, and a new brand mark and icon set.
More kinds of secrets. Beyond logins: payment cards, secure notes, ID documents, SSH keys, .env files, API keys, and passkeys — each with its own layout, fields, and actions. Entries also take free-form extra fields.
Passkeys. A WebAuthn authenticator backed by the vault, plus passkey import and export via Bitwarden and the FIDO Credential Exchange Format.
Scan a card or ID. Drop a photo of a card or identity document and Swifty prefills the entry. OCR runs locally (macOS Vision / Windows OCR) — no image leaves the device.
Google Drive sync, rebuilt. An async sync engine with convergent last-writer-wins merge, packed snapshots, and restore-from-Drive on a fresh install. Drive can be connected during first-run onboarding.
Share a secret with a one-time link. Send any entry as a link that carries its own key: the payload is sealed under a fresh AES-256-GCM key and parked in your own Google Drive, so Google only ever holds ciphertext. The recipient needs no account, links expire after 24 hours, and you can revoke one at any time from Settings › Sync.
Biometric unlock. Touch ID / Face ID unlock backed by the system keychain, with key zeroization on lock.
Vault health. Password auditing in Settings › Audit, rebuilt on zxcvbn strength scoring and Have I Been Pwned breach checks over k-anonymity, so no password or full hash is ever sent.
iOS. Swifty now builds for iPhone, with a compact shell — tab bar, list-detail stack, biometric-first lock screen — and TestFlight distribution.
Security work. Webview and shell hardening, clipboard hygiene, failed-unlock backoff, staged updates that ask before restarting, a published SECURITY.md and threat model, and supply-chain gates with SBOM and build provenance in CI.
Imports. Bring your vault from other password managers through a common importer interface, plus CSV and CXF.
Full Changelog: v0.6.13...v1.0.0-alpha.1