What's Changed

This maintenance release fixes a data-access issue where some users could see an item but not decrypt it (crossed-out password icon), caused by missing encryption sharekeys. It also adds an admin tool to detect and repair those missing keys.

🐛 Bug fixes

• Fix missing sharekeys on folder copy.
  When copying a folder, the copied items relied entirely on the background distribution task to create the per-user encryption keys, and items whose internal reference key (TP_USER) was missing were silently skipped. The copier and the internal reference account now get their sharekey synchronously at copy time, so a copied item is immediately usable and stays recoverable when user keys are regenerated later. Items that genuinely cannot be decrypted are now reported instead of being lost silently.
• Harden sharekey distribution (resilience).
  Key distribution was all-or-nothing: a single user with an invalid public key raised an exception that aborted the distribution for everyone. Each user is now processed independently — a failure is logged and the process continues for the remaining users, without ever deleting existing valid keys.
• Stop leaking personal-item keys on copy.
  Copying a personal item no longer queues a distribution task that would hand its key to every user; personal items stay private to their owner.

✨ New

• Admin tool: "Restore missing sharekeys" (Tools page).
  A new maintenance tool detects and recreates missing encryption sharekeys for items, custom fields and files. The analysis is a read-only pass; the repair first restores the missing internal reference keys using your own account, then a background task distributes the missing keys to every user. Only missing keys are created — existing keys are never modified, and personal items are excluded. Objects that no account can decrypt are flagged as not automatically recoverable, with guidance to have a user who can still open them re-save the item.

🛠️ Improvements

• Background user-key generation steps now log the number of skipped objects (expected for other users' personal items) as warnings, making key-distribution gaps easier to diagnose.
• Fixed a TypeError that could occur while seeding the internal reference (TP_USER) sharekeys in the repair tool.
• Documentation updated.

Full Changelog

Full Changelog: 3.2.0.5...3.2.0.6

Important

• Requires at least PHP 8.2

Languages

Please join Teampass v3 translation project on Poeditor and translate it for your language.

Installation

Follow instructions from Documentation.

Upgrade

Follow instructions from Documentation.

Ideas and comments

Are welcome ... please use Discussions.