aliasvault
Secrets & CredentialsA privacy‑first password manager with built‑in email aliasing, fully end‑to‑end encrypted and self‑hostable.
Features
- Generates strong passwords for every site
- Creates disposable email aliases to protect real addresses
- End‑to‑end encryption with no third‑party dependencies
- Self‑hosted deployment via Docker (script or compose)
- Cross‑platform apps: web, browser extensions, iOS and Android
Recent releases
View all 16 releases →Fixed error when resetting your vault via the web app.
Full changelog
What's Changed
Bugfix release resolving an issue that could cause an error when resetting your vault via the web app.
Note: This update applies to the web app / server components only. There are no changes to the browser extension or mobile apps.
🐞 Bug Fixes
- Fix bug in vault reset option in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1989
Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.29.0...0.29.1
- Self‑hosted deployments can configure custom proxy headers in mobile apps and set trusted proxies for real‑IP handling
- Admins may enable IP‑range restriction on the /admin endpoint and adjust account registration rate limits via admin settings
- Import full vault archives (including attachments & custom fields) from 1Password, Bitwarden and Proton Pass
- Improved mobile autofill prompts to link URLs to existing credentials
- New self‑hosting controls: proxy headers support, trusted proxies config, IP‑based admin access restrictions, registration rate limiting, configurable upload size
Full changelog
What's Changed
Welcome to AliasVault v0.29.0 🎉
This release makes it significantly easier to switch to AliasVault by introducing support for importing full vault archives (including attachments and custom fields) from popular password managers. It also improves the autofill experience across mobile and browser.
In addition, this update brings more flexibility and control for self-hosted deployments, alongside a range of other usability improvements and bug fixes across the apps.
Highlighted new features/improvements
- Import full vault archives (including attachments and custom fields) from 1Password, Bitwarden and Proton Pass, making it much easier to migrate to AliasVault.
- Improved mobile autofill: when no match is found, you’re now prompted to link a URL/app to an existing credential.
- Improved browser extension autofill form field detection and 2FA autofill flow.
- Improved iOS clipboard: allow to choose between local clipboard and Universal Clipboard
- New self-hosting controls, including custom proxy headers support in the mobile apps, trusted proxies configuration, IP-based
/adminaccess restrictions, account registration rate limiting and configurable upload size limits. For more info, please refer to the docs page (under installation method > Advanced) - Better overall UX with updates to item filtering, icons, credit card display, delete flows.
- Fixed multiple reported bugs
🚀 New Features
- Add option to iOS mobile app to choose between local clipboard copy and universal clipboard copy by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1916
- Add improved error message to mobile app in case of potential crash by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1927
- (feat) implement reject rcp to for external domain by @Nonobis in https://github.com/aliasvault/aliasvault/pull/1910
- Improve browser extension autofill field false positive detection by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1936
- Add account registration rate limiting option to admin by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1941
- Add 1Password .1pux import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1938
- Add Bitwarden .zip archive import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1954
- Add Proton Pass zip archive import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1960
- Make max upload file size limit configurable for self hosted instances by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1961
- Improve 2FA TOTP autofill prompt to show TOTP code for account that was logged in with by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1964
- Improve creditcard item display in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1966
- Update delete item UI in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1968
- Improve item type filter in all apps to also update subfolder counts by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1971
- Add custom proxy headers support to mobile applications by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1974
- Add option to limit access to admin to certain IP (ranges) for self hosted users by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1975
- Use new dynamic item icon in web app search and table views by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1977
- Add new Android autofill flow to link website/app URL to existing credential by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1978
- Add iOS autofill flow to prompt to link website/app URL to existing credential by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1980
- Allow to configure list of trusted proxies that control the set_real_ip_from flag in nginx by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1983
🐞 Bug Fixes
- Fix master password change bug in mobile app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1915
- Fix custom extension .avex/.avux selection bug for import via mobile web browser (iOS) by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1925
- Fix browser extension "vault is locked" dismiss button which doesn't work by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1932
- Fix session expire issue when using Android app with multiple Android profiles by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1933
- Add missing credit card fields to basic CSV export by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1972
- Fix issue where Android passkey create requests for certain apps didn't work by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1973
🧩 Dependencies Updates
- Bump rand from 0.8.5 to 0.9.3 in /core/rust in the cargo group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1909
- Update dotnet NuGet packages by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1914
- Bump dompurify from 3.3.2 to 3.4.0 in /apps/browser-extension in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1917
- Bump the nuget group with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1928
- Bump @xmldom/xmldom from 0.8.12 to 0.8.13 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1955
- Bump fast-xml-parser from 5.5.7 to 5.7.1 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1956
- Bump the nuget group with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1957
- Bump the npm_and_yarn group across 6 directories with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1963
Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.28.1...0.29.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.