Skip to content

Release history

aliasvault releases

Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.

All releases

16 shown

No immediate action
0.29.3 Breaking risk

Autofill improvements + performance

No immediate action
0.29.2 New feature

Auto-copy TOTP

0.29.1 Bug fix

Fixed error when resetting your vault via the web app.

Full changelog

What's Changed

Bugfix release resolving an issue that could cause an error when resetting your vault via the web app.

Note: This update applies to the web app / server components only. There are no changes to the browser extension or mobile apps.

🐞 Bug Fixes

  • Fix bug in vault reset option in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1989

Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.29.0...0.29.1

0.29.0 New feature
⚠ Upgrade required
  • Self‑hosted deployments can configure custom proxy headers in mobile apps and set trusted proxies for real‑IP handling
  • Admins may enable IP‑range restriction on the /admin endpoint and adjust account registration rate limits via admin settings
Notable features
  • Import full vault archives (including attachments & custom fields) from 1Password, Bitwarden and Proton Pass
  • Improved mobile autofill prompts to link URLs to existing credentials
  • New self‑hosting controls: proxy headers support, trusted proxies config, IP‑based admin access restrictions, registration rate limiting, configurable upload size
Full changelog

What's Changed

Welcome to AliasVault v0.29.0 🎉

This release makes it significantly easier to switch to AliasVault by introducing support for importing full vault archives (including attachments and custom fields) from popular password managers. It also improves the autofill experience across mobile and browser.

In addition, this update brings more flexibility and control for self-hosted deployments, alongside a range of other usability improvements and bug fixes across the apps.

Highlighted new features/improvements

  1. Import full vault archives (including attachments and custom fields) from 1Password, Bitwarden and Proton Pass, making it much easier to migrate to AliasVault.
  2. Improved mobile autofill: when no match is found, you’re now prompted to link a URL/app to an existing credential.
  3. Improved browser extension autofill form field detection and 2FA autofill flow.
  4. Improved iOS clipboard: allow to choose between local clipboard and Universal Clipboard
  5. New self-hosting controls, including custom proxy headers support in the mobile apps, trusted proxies configuration, IP-based /admin access restrictions, account registration rate limiting and configurable upload size limits. For more info, please refer to the docs page (under installation method > Advanced)
  6. Better overall UX with updates to item filtering, icons, credit card display, delete flows.
  7. Fixed multiple reported bugs

🚀 New Features

  • Add option to iOS mobile app to choose between local clipboard copy and universal clipboard copy by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1916
  • Add improved error message to mobile app in case of potential crash by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1927
  • (feat) implement reject rcp to for external domain by @Nonobis in https://github.com/aliasvault/aliasvault/pull/1910
  • Improve browser extension autofill field false positive detection by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1936
  • Add account registration rate limiting option to admin by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1941
  • Add 1Password .1pux import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1938
  • Add Bitwarden .zip archive import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1954
  • Add Proton Pass zip archive import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1960
  • Make max upload file size limit configurable for self hosted instances by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1961
  • Improve 2FA TOTP autofill prompt to show TOTP code for account that was logged in with by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1964
  • Improve creditcard item display in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1966
  • Update delete item UI in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1968
  • Improve item type filter in all apps to also update subfolder counts by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1971
  • Add custom proxy headers support to mobile applications by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1974
  • Add option to limit access to admin to certain IP (ranges) for self hosted users by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1975
  • Use new dynamic item icon in web app search and table views by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1977
  • Add new Android autofill flow to link website/app URL to existing credential by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1978
  • Add iOS autofill flow to prompt to link website/app URL to existing credential by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1980
  • Allow to configure list of trusted proxies that control the set_real_ip_from flag in nginx by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1983

🐞 Bug Fixes

  • Fix master password change bug in mobile app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1915
  • Fix custom extension .avex/.avux selection bug for import via mobile web browser (iOS) by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1925
  • Fix browser extension "vault is locked" dismiss button which doesn't work by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1932
  • Fix session expire issue when using Android app with multiple Android profiles by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1933
  • Add missing credit card fields to basic CSV export by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1972
  • Fix issue where Android passkey create requests for certain apps didn't work by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1973

🧩 Dependencies Updates

  • Bump rand from 0.8.5 to 0.9.3 in /core/rust in the cargo group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1909
  • Update dotnet NuGet packages by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1914
  • Bump dompurify from 3.3.2 to 3.4.0 in /apps/browser-extension in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1917
  • Bump the nuget group with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1928
  • Bump @xmldom/xmldom from 0.8.12 to 0.8.13 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1955
  • Bump fast-xml-parser from 5.5.7 to 5.7.1 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1956
  • Bump the nuget group with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1957
  • Bump the npm_and_yarn group across 6 directories with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1963

Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.28.1...0.29.0

0.28.0 New feature
Notable features
  • Nested subfolder support across all apps
  • Vault export formats (.avex encrypted, .avux unencrypted) with full backup data
  • Browser extension auto-copies 2FA code to clipboard after autofill
0.27.2 Bug fix

Fixes browser extension autofill regression and Android boot screen improvements.

0.27.1 New feature
Notable features
  • 2FA autofill field detection
  • Haptic feedback on mobile
  • Password visibility toggle
0.27.0 New feature
Notable features
  • Auto-save login prompt enabled by default
  • 2FA TOTP autofill support
  • Built-in QR code scanner for mobile 2FA
0.26.6 Bug fix

Fixes Firefox loading issue caused by importmap ordering regression from .NET 10 migration.

0.26.5 Bug fix

Bugfix for .NET 10 upgrade regression affecting cache busting and reload behavior in self-hosted environments.

0.26.4 New feature
Breaking changes
  • .NET 9 to .NET 10 upgrade for server components
Security fixes
  • Public key verification to mobile unlock flow
Notable features
  • Auto-save login credentials in browser extension
  • Custom field drag-and-drop reordering
  • Password generator max length increased to 256 chars
0.26.3 New feature
Notable features
  • New importers (RoboForm, Microsoft Edge, Enpass)
  • TLS support for email servers
  • Multi-URL import support
0.26.2 New feature
Security fixes
  • iOS and Android authentication flow improvements
Notable features
  • Item sorting options
  • New language support (Spanish, Romanian, Persian)
  • Mobile UI updates and animations
0.26.1 Bug fix

Critical fixes for vault migration issues affecting TOTP codes and passkey migration from previous versions.

0.26.0 Breaking risk
Breaking changes
  • Vault model update - only v0.26.0+ compatible
Security fixes
  • CVE-2026-26266 - Email rendering validation vulnerability
Notable features
  • Custom fields support
  • Folder organization
  • Offline vault access and editing

Beta — feedback welcome: [email protected]