Skip to content

aliasvault

Secrets & Credentials

A privacy‑first password manager with built‑in email aliasing, fully end‑to‑end encrypted and self‑hostable.

TypeScript Latest 0.29.3 · 3d ago Security brief →

Features

  • Generates strong passwords for every site
  • Creates disposable email aliases to protect real addresses
  • End‑to‑end encryption with no third‑party dependencies
  • Self‑hosted deployment via Docker (script or compose)
  • Cross‑platform apps: web, browser extensions, iOS and Android

Recent releases

View all 16 releases →
No immediate action
0.29.3 Breaking risk

Autofill improvements + performance

No immediate action
0.29.2 New feature

Auto-copy TOTP

0.29.1 Bug fix

Fixed error when resetting your vault via the web app.

Full changelog

What's Changed

Bugfix release resolving an issue that could cause an error when resetting your vault via the web app.

Note: This update applies to the web app / server components only. There are no changes to the browser extension or mobile apps.

🐞 Bug Fixes

  • Fix bug in vault reset option in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1989

Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.29.0...0.29.1

0.29.0 New feature
⚠ Upgrade required
  • Self‑hosted deployments can configure custom proxy headers in mobile apps and set trusted proxies for real‑IP handling
  • Admins may enable IP‑range restriction on the /admin endpoint and adjust account registration rate limits via admin settings
Notable features
  • Import full vault archives (including attachments & custom fields) from 1Password, Bitwarden and Proton Pass
  • Improved mobile autofill prompts to link URLs to existing credentials
  • New self‑hosting controls: proxy headers support, trusted proxies config, IP‑based admin access restrictions, registration rate limiting, configurable upload size
Full changelog

What's Changed

Welcome to AliasVault v0.29.0 🎉

This release makes it significantly easier to switch to AliasVault by introducing support for importing full vault archives (including attachments and custom fields) from popular password managers. It also improves the autofill experience across mobile and browser.

In addition, this update brings more flexibility and control for self-hosted deployments, alongside a range of other usability improvements and bug fixes across the apps.

Highlighted new features/improvements

  1. Import full vault archives (including attachments and custom fields) from 1Password, Bitwarden and Proton Pass, making it much easier to migrate to AliasVault.
  2. Improved mobile autofill: when no match is found, you’re now prompted to link a URL/app to an existing credential.
  3. Improved browser extension autofill form field detection and 2FA autofill flow.
  4. Improved iOS clipboard: allow to choose between local clipboard and Universal Clipboard
  5. New self-hosting controls, including custom proxy headers support in the mobile apps, trusted proxies configuration, IP-based /admin access restrictions, account registration rate limiting and configurable upload size limits. For more info, please refer to the docs page (under installation method > Advanced)
  6. Better overall UX with updates to item filtering, icons, credit card display, delete flows.
  7. Fixed multiple reported bugs

🚀 New Features

  • Add option to iOS mobile app to choose between local clipboard copy and universal clipboard copy by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1916
  • Add improved error message to mobile app in case of potential crash by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1927
  • (feat) implement reject rcp to for external domain by @Nonobis in https://github.com/aliasvault/aliasvault/pull/1910
  • Improve browser extension autofill field false positive detection by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1936
  • Add account registration rate limiting option to admin by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1941
  • Add 1Password .1pux import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1938
  • Add Bitwarden .zip archive import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1954
  • Add Proton Pass zip archive import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1960
  • Make max upload file size limit configurable for self hosted instances by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1961
  • Improve 2FA TOTP autofill prompt to show TOTP code for account that was logged in with by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1964
  • Improve creditcard item display in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1966
  • Update delete item UI in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1968
  • Improve item type filter in all apps to also update subfolder counts by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1971
  • Add custom proxy headers support to mobile applications by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1974
  • Add option to limit access to admin to certain IP (ranges) for self hosted users by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1975
  • Use new dynamic item icon in web app search and table views by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1977
  • Add new Android autofill flow to link website/app URL to existing credential by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1978
  • Add iOS autofill flow to prompt to link website/app URL to existing credential by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1980
  • Allow to configure list of trusted proxies that control the set_real_ip_from flag in nginx by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1983

🐞 Bug Fixes

  • Fix master password change bug in mobile app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1915
  • Fix custom extension .avex/.avux selection bug for import via mobile web browser (iOS) by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1925
  • Fix browser extension "vault is locked" dismiss button which doesn't work by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1932
  • Fix session expire issue when using Android app with multiple Android profiles by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1933
  • Add missing credit card fields to basic CSV export by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1972
  • Fix issue where Android passkey create requests for certain apps didn't work by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1973

🧩 Dependencies Updates

  • Bump rand from 0.8.5 to 0.9.3 in /core/rust in the cargo group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1909
  • Update dotnet NuGet packages by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1914
  • Bump dompurify from 3.3.2 to 3.4.0 in /apps/browser-extension in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1917
  • Bump the nuget group with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1928
  • Bump @xmldom/xmldom from 0.8.12 to 0.8.13 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1955
  • Bump fast-xml-parser from 5.5.7 to 5.7.1 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1956
  • Bump the nuget group with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1957
  • Bump the npm_and_yarn group across 6 directories with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1963

Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.28.1...0.29.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
2,694
Forks
83
Languages
TypeScript C# HTML

Install & Platforms

Install via
docker shell-script
Platforms
linux macos windows arm64
Mobile
Android IOS

Community & Support

Alternative to

traditional password managers

Beta — feedback welcome: [email protected]