What's Changed

Maintenance and feature release. It introduces an externalized backup engine, one-click browser-extension configuration, user avatars, LDAP login restriction by group, and several API and PHP-FPM improvements.

Upgrading from 3.2.0.1 is recommended for all installations.

🚀 Pre-release Disclaimer: Version 3.2.0.2 is currently a pre-release. It has been heavily tested, but it now needs a real-world "baptism by fire" by the community. We strongly advise testing it in a non-production environment first.

New features

• Externalized backups: a third backup mode alongside on-the-fly and scheduled: automated or manual encrypted copies to an external destination. Adds .tpbackup packages (database + documents), backup health metrics, automatic purge of old temporary backup directories, and unit tests for the packaging functions.
• Browser-extension auto-configuration: configure the browser extension in one click from the web app. TeamPass detects the extension and pushes the settings, or provides a downloadable configuration file to import from the extension Options page. The password is never transmitted: a revocable Personal Access Token is used. Admin-gated by the new Allow extension auto-configuration for all users toggle (Settings → API → Browser extension).
• User profile avatars: users can upload and delete a profile picture; images are automatically resized and optimized (up to 10 MB source).
• LDAP login restriction by group: new allowed login group DN option restricts LDAP/AD login to members of a given group (groupOfNames, groupOfUniqueNames, posixGroup). Non-members are denied before any local account is created.
• Item notification subscriptions: new notification table backing per-item change subscriptions and the related email notifications, with hardened link targeting and HTML escaping.

API

• Custom fields: read and write item custom fields through the API (item/get, item/create, item/update).
• OAuth2/SSO API access: OAuth2 users can now authenticate via a Personal Access Token at POST /api/authorizeToken (gated by oauth2_api_enabled). See docs/api/api-basic.md.
• Tags: item tags are correctly split on whitespace or commas.

Performance (PHP-FPM)

• Reliable resolution of a real PHP CLI binary for background tasks under PHP-FPM (no more php-fpm/false mis-detection).
• Optional early response flush after item creation (fastcgi_finish_request).
• New admin settings: cli_php_binary_path and enable_fastcgi_finish_request. Upload size limits aligned with the front web server.
• New documentation: docs/install/performance.md.

Docker

• Fix #5236: persist the install state across container recreation so TeamPass no longer re-runs the installer on every restart (entrypoint, compose, and nginx adjustments).

Fixes & improvements

• PR fixes:
  • #5231 (scheduled backup directory resolver),
  • #5232 (notification email link & subscription icon state),
  • #5233 (avatar handling & notification email edge cases),
  • #5237 (Add Externalized Backups and .tpbackup Package).
• More robust upgrade process and installer seeding.

Full Changelog

3.2.0.1...3.2.0.2

Important

• Requires at least PHP 8.2

Languages

Please join Teampass v3 translation project on Poeditor and translate it for your language.

Installation

Follow instructions from Documentation.

Upgrade

Follow instructions from Documentation.

Ideas and comments

Are welcome ... please use Discussions.