Release history
aliasvault releases
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
All releases
16 shown
Fixed error when resetting your vault via the web app.
Full changelog
What's Changed
Bugfix release resolving an issue that could cause an error when resetting your vault via the web app.
Note: This update applies to the web app / server components only. There are no changes to the browser extension or mobile apps.
🐞 Bug Fixes
- Fix bug in vault reset option in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1989
Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.29.0...0.29.1
- Self‑hosted deployments can configure custom proxy headers in mobile apps and set trusted proxies for real‑IP handling
- Admins may enable IP‑range restriction on the /admin endpoint and adjust account registration rate limits via admin settings
- Import full vault archives (including attachments & custom fields) from 1Password, Bitwarden and Proton Pass
- Improved mobile autofill prompts to link URLs to existing credentials
- New self‑hosting controls: proxy headers support, trusted proxies config, IP‑based admin access restrictions, registration rate limiting, configurable upload size
Full changelog
What's Changed
Welcome to AliasVault v0.29.0 🎉
This release makes it significantly easier to switch to AliasVault by introducing support for importing full vault archives (including attachments and custom fields) from popular password managers. It also improves the autofill experience across mobile and browser.
In addition, this update brings more flexibility and control for self-hosted deployments, alongside a range of other usability improvements and bug fixes across the apps.
Highlighted new features/improvements
- Import full vault archives (including attachments and custom fields) from 1Password, Bitwarden and Proton Pass, making it much easier to migrate to AliasVault.
- Improved mobile autofill: when no match is found, you’re now prompted to link a URL/app to an existing credential.
- Improved browser extension autofill form field detection and 2FA autofill flow.
- Improved iOS clipboard: allow to choose between local clipboard and Universal Clipboard
- New self-hosting controls, including custom proxy headers support in the mobile apps, trusted proxies configuration, IP-based
/adminaccess restrictions, account registration rate limiting and configurable upload size limits. For more info, please refer to the docs page (under installation method > Advanced) - Better overall UX with updates to item filtering, icons, credit card display, delete flows.
- Fixed multiple reported bugs
🚀 New Features
- Add option to iOS mobile app to choose between local clipboard copy and universal clipboard copy by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1916
- Add improved error message to mobile app in case of potential crash by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1927
- (feat) implement reject rcp to for external domain by @Nonobis in https://github.com/aliasvault/aliasvault/pull/1910
- Improve browser extension autofill field false positive detection by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1936
- Add account registration rate limiting option to admin by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1941
- Add 1Password .1pux import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1938
- Add Bitwarden .zip archive import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1954
- Add Proton Pass zip archive import support by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1960
- Make max upload file size limit configurable for self hosted instances by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1961
- Improve 2FA TOTP autofill prompt to show TOTP code for account that was logged in with by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1964
- Improve creditcard item display in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1966
- Update delete item UI in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1968
- Improve item type filter in all apps to also update subfolder counts by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1971
- Add custom proxy headers support to mobile applications by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1974
- Add option to limit access to admin to certain IP (ranges) for self hosted users by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1975
- Use new dynamic item icon in web app search and table views by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1977
- Add new Android autofill flow to link website/app URL to existing credential by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1978
- Add iOS autofill flow to prompt to link website/app URL to existing credential by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1980
- Allow to configure list of trusted proxies that control the set_real_ip_from flag in nginx by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1983
🐞 Bug Fixes
- Fix master password change bug in mobile app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1915
- Fix custom extension .avex/.avux selection bug for import via mobile web browser (iOS) by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1925
- Fix browser extension "vault is locked" dismiss button which doesn't work by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1932
- Fix session expire issue when using Android app with multiple Android profiles by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1933
- Add missing credit card fields to basic CSV export by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1972
- Fix issue where Android passkey create requests for certain apps didn't work by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1973
🧩 Dependencies Updates
- Bump rand from 0.8.5 to 0.9.3 in /core/rust in the cargo group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1909
- Update dotnet NuGet packages by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1914
- Bump dompurify from 3.3.2 to 3.4.0 in /apps/browser-extension in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1917
- Bump the nuget group with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1928
- Bump @xmldom/xmldom from 0.8.12 to 0.8.13 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1955
- Bump fast-xml-parser from 5.5.7 to 5.7.1 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1956
- Bump the nuget group with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1957
- Bump the npm_and_yarn group across 6 directories with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1963
Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.28.1...0.29.0
- Nested subfolder support across all apps
- Vault export formats (.avex encrypted, .avux unencrypted) with full backup data
- Browser extension auto-copies 2FA code to clipboard after autofill
Fixes browser extension autofill regression and Android boot screen improvements.
- 2FA autofill field detection
- Haptic feedback on mobile
- Password visibility toggle
- Auto-save login prompt enabled by default
- 2FA TOTP autofill support
- Built-in QR code scanner for mobile 2FA
Fixes Firefox loading issue caused by importmap ordering regression from .NET 10 migration.
Bugfix for .NET 10 upgrade regression affecting cache busting and reload behavior in self-hosted environments.
- .NET 9 to .NET 10 upgrade for server components
- Public key verification to mobile unlock flow
- Auto-save login credentials in browser extension
- Custom field drag-and-drop reordering
- Password generator max length increased to 256 chars
- New importers (RoboForm, Microsoft Edge, Enpass)
- TLS support for email servers
- Multi-URL import support
- iOS and Android authentication flow improvements
- Item sorting options
- New language support (Spanish, Romanian, Persian)
- Mobile UI updates and animations
Critical fixes for vault migration issues affecting TOTP codes and passkey migration from previous versions.
- Vault model update - only v0.26.0+ compatible
- CVE-2026-26266 - Email rendering validation vulnerability
- Custom fields support
- Folder organization
- Offline vault access and editing