Version 1.0.6
2026-09-27 ● current release- Security
Argon2id is now the default key-derivation function for new databases (was Argon2d) on every platform; local vault and key files are created with owner-only permissions.
- Security
Local saves now merge instead of silently overwriting when the file changed on disk; Auto-Type re-verifies the target window continuously, not just once.
- Security
PIN lockout with an escalating delay after repeated wrong guesses; a wrong PIN now also counts toward the opt-in “erase after N failures” threshold.
- Windows
TPM-backed storage for the quick-unlock PIN, with an opt-in tier gated by a genuine Windows Hello prompt; secure overwrite-then-delete panic wipe.
- Android
The master password lives in a wipeable in-memory buffer instead of an immutable string, matching Desktop — it is cleared from memory when a vault locks.
- Desktop
QR-code generator, background sync, in-app update check, identity-document tagging, multi-window support and cross-window drag-and-drop on macOS.
- Packaging
Windows installer switched to a per-user install (no admin/UAC prompt); a portable Windows build (
.zip, no install) is now offered alongside it; Linux.debpackages are now built root-owned.
71459f704e189250e6f50cd7182b4e6fe84ec8a94551820d7b4efb5d75f66e3a
76dbce47e9f3ab2b7d1a79b24a5074c664ba6b426bd3aeae09c8d5bc8caa4bfc
a35f1b08898af8f9ee48e700f6eb4a39865e0aa541984c6618f4f9c846ef473e
70a1c96cec6e4ebf3a89a2c1a385631ea045ca627a1e379a7d0dec9ec38768db