Release notes

New Features

• Encryptio browser extension published on Chrome Web Store, Firefox Add-ons and Microsoft Edge Add-ons.
• Users can install the extension directly from the stores for autofill and vault access from any page.

New Features

• Secure password sharing: share credentials with other Encryptio users via RSA encryption; only the recipient can decrypt.
• Secure sharing page: Shared with me / Sent shares, revoke on sender side, delete on recipient side.
• Email notification to recipient when a password is shared; option to remove the share after saving it to the vault.
• Secure sharing link in Account menu and Share Password in dashboard Password menu.
• Advanced dashboard filters: search by title, username, URL and notes (server-side)
• Filters by type: all, with URL, without URL, with notes, without notes
• Result sorting (title, creation date, last modified) with pagination that preserves filters
• Dedicated message when search returns no results with Reset filters link
• Detailed password history: PasswordRevision model, logging on create/update/import
• Change history section in password view (Premium) with Created/Modified list and date
• Change history for secret notes too: SecretNoteRevision model, section in note view (Premium).
• Password Health Check: security analysis now uses PasswordService.strength() with suggestions for each weak password (Premium).

New Features

• Improved UI/UX with Premium badges on buttons
• Optimized password generator: disabled automatic cleanup on generator page
• Ampliato set caratteri speciali per password (!@#$%^&*()-_=+.,?~)
• Fixed modals moving during mouse movement
• Fixed aria-hidden bugs on Bootstrap modals
• Removed non-working 'Change View' button from dashboard
• Improved user auto-backup logic with data change detection
• Implemented granular backup/restore system for individual users (JSON)
• Fixed indentation errors in email service
• Fixed undefined variable in admin registration notification
• Secret Notes now correctly limited to Premium users

Security Updates

• User backups now saved exclusively in the database (filesystem/S3 removed)
• Improved password special character security with extended set
• Fixed variable scope issues in email service

Breaking Changes

New Features

• Full HTMX integration implemented to improve user experience
• Migrated 19 form templates to HTMX for partial DOM updates without page reload
• Added automatic loading spinners during requests
• Implemented real-time password search with debounce
• Improved error handling with updates only to affected sections
• Added interactive confirmations for critical actions
• Optimized PasswordClient with configurable feature flags to reduce runtime overhead
• Implemented automatic feature detection in DOM for automatic optimization
• Added CSS analysis and optimization system
• Implemented tools for CSS variable and selector analysis
• Added encrypted secret notes system with tag support
• Implemented secure file sharing system with optional password
• Added automatic scheduler for cleaning up expired shared files
• Improved CSP3 handling for HTMX inline styles compatibility
• Fixed bug in password generator (JavaScript client initialization)
• Aligned site version with current changelog

Security Updates

• Improved CSP3 handling to maintain security with dynamic HTMX
• Added input validation for secret notes system
• Implemented end-to-end encryption for shared files

New Features

• Fixed bug in advanced password search
• Fixed issue with deletion of users with completed registration
• Fixed cutoff calculation for inactive user deletion
• Improved Redis lock handling for key rotation
• Fixed token creation bug for key rotation
• Added fallback for Redis when unavailable
• Improved error handling and logging for critical operations

Security Updates

• Fixed bug that deleted users with completed registration
• Improved security in distributed lock handling
• Strengthened input validation to prevent edge cases

New Features

• Implemented full two-factor authentication (2FA) system
• Added dark theme with automatic toggle
• Automatic encryption key rotation system
• Implemented security scanner for vulnerabilities
• Added complete audit trail system
• Improved session system with configurable timeout
• Implemented advanced security middleware
• Added real-time security monitoring
• 2FA recovery codes system
• Implemented automatic cache cleanup for secure logout
• Added support for advanced session manager
• Request logging system for security
• Implemented context processors for security
• Added IP utilities for geolocation
• Achieved Grade A+ on Mozilla Observatory

Security Updates

• Implemented Content Security Policy (CSP) with dynamic nonce
• Added Strict Transport Security (HSTS) at 1 year with preload
• Advanced rate limiting system to prevent brute force
• CSRF protection with dynamic tokens
• Complete security headers (COOP, COEP, CORP)
• XSS prevention with advanced input validation
• Progressive account lockout system
• Automatic cleanup of sensitive data from memory
• Security token validation with automatic rotation
• Suspicious login attempt monitoring system
• Permissions-Policy for browser API control
• Secure cookie configuration with SameSite=Strict

Breaking Changes

Known Issues

New Features

• Implemented full subscription system with PayPal
• Added contract and agreement management system
• Implemented detailed password history
• Integrated payment system
• Added advanced admin panel
• Email service for notifications
• Implemented trial manager for trial periods
• Advanced error handling with detailed logging
• Automatic database backup system

Security Updates

• AES-256 encryption for all sensitive data
• Password hashing with dynamic salt
• Implemented protection against SQL injection
• Complete server-side input validation system

Breaking Changes

Known Issues

New Features

• Secure data export system (JSON/CSV)
• Advanced password generator with strength check
• Responsive dashboard for mobile devices
• Quick password search system
• Performance optimizations for large datasets
• In-app notification system

Security Updates

• Improved session protection with secure cookies
• Automatic logout for inactivity
• Real-time password strength validation

Breaking Changes

New Features

• Flask architecture with modular Blueprint
• Secure authentication with Flask-Login
• AES-256 encryption for password storage
• Modern responsive user interface
• Complete user registration system
• PostgreSQL database with automatic migrations