Changelog
All notable changes to this project will be documented in this file.
Unreleased
1.13.1 - 2020-10-23
Fixed
- OpenKeychain authentication would fail with
LifecycleOwner com.zeapo.pwdstore.git.GitServerConfigActivity@f578da1 is attempting to register while current state is RESUMED. LifecycleOwners must call register before they are STARTED.
Added
- Add support for domain-level autofill in DuckDuckGo's F-Droid builds.
- Support gopass MIME secret encoding
Changed
- The newly added automatic synchronisation feature has been rolled back due to multiple issues with its implementation.
1.13.0 - 2020-10-22
Fixed
- Some classes of errors would be swallowed by an unhelpful 'Invalid remote: origin' message
- Repositories created within APS would contain invalid
.gpg-id
files with no ability to fix them from the app - Button labels were invisible in Autofill phishing warning screen
- Unsupported authentication modes would appear briefly in the server config screen
Added
- Add GPG key selection step to onboarding flow
- Allow configuring an app-wide HTTP(S) proxy
- Add option to automatically sync repository on app launch
- Add a quickfix for invalid HTTPS URLs that contain a custom port
1.12.1 - 2020-10-13
Fixed
- Certain operations like folder creation with GPG keys would fail with
java.lang.IllegalStateException
. - ECDSA key exchanges failed resulting in users being unable to clone repositories.
1.12.0 - 2020-09-24
Added
- Allow sorting by recently used
- Add Bromite, Ungoogled Chromium and Kiwi to supported browsers list for Autofill
- Add ability to view the Git commit log
- Allow generating ECDSA and ED25519 keys for SSH
- Add support for multiple/fallback authentication methods for SSH
- Add warning when the custom SSH port in a URL could potentially be ignored
Changed
- A descriptive error message is shown if no username is specified in the Git server settings
- Remove explicit protocol choice from Git server settings, it is now inferred from your URL
- 'Show hidden folders' is now 'Show hidden files and folders'
- Generated SSH keys are now stored in the Android Keystore if available, and encrypted at rest otherwise
- Allow using device's screen lock credentials to secure generated SSH key
- Update onboarding UI
- Update translations
Fixed
- Git server protocol and authentication mode are only updated when explicitly saved
- Remember HTTPS password during a sync operation
- Unable to use show/hide password option for password/passphrase after first attempt was wrong
- TOTP values shown might some times be stale and considered invalid by sites
- Symlinks are no longer clobbered by the app (only available on Android 8 and above)
- Workaround lack of SSH connection reuse capabilities on some Git hosts like Bitbucket
1.11.3 - 2020-08-27
Fixed
- Delete stored HTTPS password on connection errors (such as failed authentication)
1.11.2 - 2020-08-24
Fixed
- Saving a password after creating it fails to finish commit operation
- HTTPS authentication did not prompt users for password
1.11.1 - 2020-08-21
Fixed
- App failed to start on Android 7 and below
1.11.0 - 2020-08-18
Added
- Allow changing the branch used for Git operations
- Allow setting a subdirectory key when creating folders
- Allow adding digits/symbols in XkPasswd generated passwords using a mask-like value (
dds
gives you two digits and a symbol, and so on)
Changed
- The Git repository URL can now be specified directly
- Slightly reduce APK size
- Always show the parent path in entries
- Passwords will no longer be copied to the clipboard by default
- Notify user if there was nothing to push
Fixed
- Allow creating nested directories directly
- I keep saying this but for real: error message for wrong SSH/HTTPS password is properly fixed now
- Fix crash when OpenKeychain is not installed
- Clone operation won't leave user on an empty password list upon failure
- Cloning a new repository to external storage wouldn't work
- UI froze for some people when deleting existing files from the external directory
1.10.3 - 2020-07-30
Fixed
- Worked around a dependency bug that would crash the Autofill service when triggered on an OTP field
1.10.2 - 2020-07-30
Fixed
- Properly handle cases where files contain only TOTP secrets and no password
- Correctly hide TOTP import button when TOTP secret/OTPAUTH URL is already present in extra content
- SMS OTP Autofill no longer crashes when invoked and correctly asks for the required permission on first use
1.10.1 - 2020-07-23
Fixed
- Using long key IDs in .gpg-id no longer leads to a crash
- Long key IDs and fingerprints are now correctly forwarded to OpenKeychain
Added
- Support for multiple GPG IDs in .gpg-id
- Creating an entry in an empty store now lets you select keys to initialize .gpg-id with
1.10.0 - 2020-07-22
Changed
- A brand new icon to go with our biggest update ever!
- Light theme is now a consistent white across the board with ample contrast
- XkPassword generator is now easier to use with less configuration options
- Edit screen now has better protection and guidance for invalid names
- Improved biometric authentication UX on app start
- Improved password list UI
Fixed
- Folder names that were very long did not look right
- Error message for wrong SSH/HTTPS password now looks cleaner
- Fix authentication failure with usernames that contain the
@
character - Text input boxes were illegible on dark theme
- Top-level password names had inconsistent top margin making them look askew
- Password Store no longer ignores the selected OpenKeychain key
- Password export now happens in a separate process, preventing possible freezes
Added
- TOTP support is reintroduced by popular demand. HOTP continues to be unsupported and heavily discouraged.
- Initial support for detecting and filling OTP fields with Autofill
- OTP codes can be automatically filled from SMS (requires Android P+ and Google Play Services)
- Importing TOTP secrets using QR codes
- Support for ed25519/ECDSA SSH keys
- Navigate into newly created folders and scroll to newly created passwords
- Support per-directory keys
- Full pt-BR localization
1.9.2 - 2020-06-30
Fixed
- App crashes upon launching the app for the first time
1.9.1 - 2020-06-28
Fixed
- Remember passphrase option did not work with old-style keys (generated either before 2019 or by passing
-m PEM
to new versions of OpenSSH)
Added
- Add GNU IceCatMobile to the list of supported browsers for Autofill
1.9.0 - 2020-06-21
Fixed
- 'Draw over other apps' permission dialog opens when attempting to use Oreo Autofill
- Old app shortcuts are now removed when the local repository is deleted
Added
- Completely revamped decypted password view
- Add support for better, more secure Keyex's and MACs with a brand new SSH backend
- Allow manually marking domains for subdomain-level association. This will allow you to keep separate passwords for
site1.example.com
andsite2.example.com
and have them show as such in Autofill. - Provide better messages for OpenKeychain errors
- Rename passwords and categories
Changed
- BREAKING: Remove support for HOTP/TOTP secrets - Please use FIDO keys or a dedicated app like Aegis or andOTP
- Reduce Autofill false positives on username fields by removing "name" from list of heuristic terms
- Reduced app size
- Improve IME experience with server config screen
- Removed edit password option from long-press menu.
- Batch deletion now does not require manually confirming for each password
- Better commit messages on password deletion
1.8.1 - 2020-05-24
Fixed
- Don't strip leading slash from repository paths
1.8.0 - 2020-05-23
Added
- Allow user to abort password move when it is replacing an existing file
- Allow setting a default username for Autofill
- Add no authentication mode for working with public repositories
Changed
- More UI related tweaks, changes and improvements
- Improved error messages and internal logic for server configuration
Fixed
- Add the following fields to encrypted username detection: user, account, email, name, handle, id, identity.
- Improved detection of broken or incomplete git repositories
- Better UX flow for storage permissions
1.7.2 - 2020-04-29
Added
- Settings option to enable debug logging
Changed
- SSH Keygen UI was improved
- Default key length for SSH Keygen is now 4096 bits
- Settings items were rearranged and cleaned up
- Autofill icons in dark mode are now more legible
Fixed
- Failure to detect if repository was not cloned which broke Git operations
- Search results were inaccurate if root directory's name started with a dot (.)
- Saving git username and email did not provide user-facing confirmation
1.7.1 - 2020-04-23
Fixed
- Autofill message does not show OK button when many browsers are installed
- Autofill message does not get marked as shown when dismissed
- App crashes when using type-independent sort
- Storage permission not requested when using existing external repository
1.7.0 - 2020-04-21
Added
- Oreo Autofill support
- Securely remember HTTPS password/SSH key passphrase
Fixed
- Text input box theming
- Password repository held in non-hidden storage no longer fails
- Remove ambiguous and confusing URL field in server config menu and heavily improve UI for ease of use.
1.6.0 - 2020-03-20
Added
- Copy implicit username (password filename) by long pressing
- Create xkpasswd style passwords
- Swipe on password list to synchronize repository
Fixed
- Resolve memory leaks on password decryption
- Can't delete folders containing a password
1.5.0 - 2020-02-21
Added
- Fast scroller with alphabetic hints
- UI button to create new folders
- Option to directly start searching when opening the app
- Option to always search from root folder regardless of the currently open folder
Changed
- Logging is now enabled in release builds
- Searching now shows folders as well as the passwords inside them
Fixed
- OpenKeychain errors cause app crash
1.4.0 - 2020-01-24
Added
- Add save-and-copy button
- Dark theme
- Setting to save OpenKeychain auth id
- Add number of passwords to folders
Changed
- Updated UI design and iconograph
- Biometric authentication
- Use new OpenKeychain integration library
Fixed
- Snackbars showing behind keyboards
1.3.2 - 2018-12-23
Changed
- Improve French translation.
Fixed
- Extra field is multi-line.
1.3.1 - 2018-10-18
Fixed
- Fix default sort order bug.
1.3.0 - 2018-10-16
Added
- Allow app to be installed on external media (SD card).
- Change password sort order.
- Display HOTP code if present.
- Open search view on keyboard press.
Changed
- Use adaptive icon.
- Password entry is more secure.
- Clean paths on password list view.
- Improve Chinese translation.
- Don't show hidden files and directories.
Fixed
- Fix clipboard clearing.
- Wrap long passwords.
1.2.0.75 - 2018-05-31
Added
- Add Arabic translation.
- Warn user that remembering SSH passphrase is currently insecure.
Changed
- Update Japanese assets.
Fixed
- Fix elements overlapping.