This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+5 more
Summary
AI summaryTOTP codes are now auto-copied to clipboard on iOS and Android during autofill.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Copy TOTP to clipboard after autofill on iOS and Android Copy TOTP to clipboard after autofill on iOS and Android Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add unused favicon and attachment cleanup check to reduce vault size Add unused favicon and attachment cleanup check to reduce vault size Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add vault storage insights page to web app client Add vault storage insights page to web app client Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Reduce false-positive browser extension autofill matching for TOTP fields Reduce false-positive browser extension autofill matching for TOTP fields Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Android vault unlock flow uses overlay instead of app switch Android vault unlock flow uses overlay instead of app switch Source: granite4.1:30b@2026-05-21-audit Confidence: high |
— |
| Feature | Medium |
Make Android autofill vault unlock flow work via overlay Make Android autofill vault unlock flow work via overlay Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Improve API email retrieval performance Improve API email retrieval performance Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Bump fast-xml-builder from 1.1.5 to 1.2.0 in mobile-app npm_and_yarn group Bump fast-xml-builder from 1.1.5 to 1.2.0 in mobile-app npm_and_yarn group Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Web app password generator length slider works correctly for all languages Web app password generator length slider works correctly for all languages Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Update browser extension form detector to better detect password fields Update browser extension form detector to better detect password fields Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Prevent importers from adding duplicate empty attachments Prevent importers from adding duplicate empty attachments Source: granite4.1:30b@2026-05-21-audit Confidence: high |
— |
| Bugfix | Medium |
Improve browser extension startup to avoid browser warning messages Improve browser extension startup to avoid browser warning messages Source: granite4.1:30b@2026-05-21-audit Confidence: high |
— |
| Bugfix | Medium |
Fix importers adding second empty attachment for each actual existing attachment Fix importers adding second empty attachment for each actual existing attachment Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Improve browser extension startup to prevent browser warnings Improve browser extension startup to prevent browser warnings Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Apps no longer propose to link URL to a credential that already has that URL Apps no longer propose to link URL to a credential that already has that URL Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
Full changelog
What's Changed
This minor release includes various improvements and bugfixes for reported issues. Most notable new features are: 2FA code is now auto-copied to clipboard on iOS and Android during autofill, as well as improving Android vault unlock flow. This release also adds a new vault storage insights page to the web app.
Join our Discord community to stay up-to-date on the project with the latest releases and to discuss upcoming features with us.
🚀 New Features
- Copy TOTP to clipboard after autofill on iOS and Android by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2008
- Make Android autofill vault unlock flow work via overlay instead of via app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2025
- Add unused favicon and attachment cleanup check to reduce vault size by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1992
- Add vault storage insights to web app client by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1996
- Reduce false-positive browser extension autofill matching for TOTP fields by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1999
- Improve API email retrieval performance by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2015
🐞 Bug Fixes
- Web app password generator length slider does not work correctly for some languages by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2003
- Fix importers adding second empty attachment for each actual existing attachment by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2005
- Apps sometimes propose to link url to a credential that already has that url by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2012
- Improve browser extension startup to prevent browser warnings by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2013
- Update browser extension form detector to better detect password fields by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2024
🧩 Dependencies Updates
- Bump fast-xml-builder from 1.1.5 to 1.2.0 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2001
Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.29.1...0.29.2
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About aliasvault
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
Related context
Related tools
Beta — feedback welcome: [email protected]