AliasVault Files

What's Changed

Welcome to AliasVault v0.28.0 🎉

This release adds support for nested subfolders to all AliasVault apps, and also includes a new comprehensive backup format: .avex (AliasVault Encrypted eXport) and .avux (AliasVault Unencrypted eXport). The new export formats allow you to manually create a full backup of your vault, including credentials, passkeys, attachments, favicons, and more. It also makes it easy to transfer your vault to another server (e.g., from cloud to self-hosted or vice versa) without losing data.

Highlighted new features/improvements

1. You can now use nested subfolders in your vault, giving you more flexibility in how you organize your credentials.
2. New comprehensive encrypted and unencrypted vault export formats for easy backup and data transfer to other AliasVault servers via web app.
3. The browser extension now automatically copies the 2FA code to the clipboard after autofill events, allowing you to easy paste it into a 2FA confirm field.
4. Improve 2FA autofill field detection in browser extension.
5. Add password strength indicator to account registration and password change screens in web app.
6. Misc improvements to email UI and various bugfix and usability improvements.

[!TIP]
Sneak preview: Alongside these improvements, we’re actively working behind the scenes on new major updates to AliasVault. One of the biggest upcoming features is vault sharing, which requires significant changes to many core systems. To ensure everything is stable and well-integrated, we're bundling these updates into a larger release soon. Stay tuned, a lot of exciting updates are on the way.

🚀 New Features

• Add subfolder support to all apps by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1874
• Add custom aliasvault export format which contains all vault data by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1834
• Improve TOTP code detection in browser extension by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1849
• fix: guard against undefined credentials.create/get in WebAuthn override by @saschabuehrle in https://github.com/aliasvault/aliasvault/pull/1856
• Add more auto-lock timeout options to browser extension and mobile app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1872
• Update GitHub actions to use Node.js 24 compatible actions by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1886
• Update all existing password importers to support nested folder imports by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1888
• Improve 2FA autofill form detection in browser extension by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1890
• Add automatic 2FA copy to clipboard function to browser extension by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1892
• Add load more button to emails page in browser extension and mobile apps by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1897
• New Crowdin updates by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1887

🐞 Bug Fixes

• Add rate-limiting to local password unlock and update password unlock error UI by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1826
• Auto-disable email alias when item is deleted in browser extension by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1831
• Prevent websites keyboard shortcuts from firing when interacting with browser extension autofill input fields by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1833
• Fix bug with opening email attachments in mobile app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1847
• Fix browser extension issue triggered by some websites (e.g. VNC viewers) by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1855
• Fix bug in web app emails page responsive mode (small screen) not switching pages by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1895

🧩 Dependencies Updates

• Bump tar from 7.5.10 to 7.5.11 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1835
• Bump undici from 6.23.0 to 6.24.0 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1840
• Bump fast-xml-parser from 4.5.4 to 5.5.6 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1844
• Bump json from 2.18.1 to 2.19.2 in /docs in the bundler group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1850
• Bump fast-xml-parser from 5.5.6 to 5.5.7 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1851
• Bump the npm_and_yarn group across 6 directories with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1852
• Bump activesupport from 7.2.2 to 7.2.3.1 in /docs in the bundler group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1860
• Bump the npm_and_yarn group across 6 directories with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1864
• Bump the npm_and_yarn group across 3 directories with 2 updates by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1865
• Bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1869
• Bump brace-expansion from 1.1.12 to 1.1.13 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1870
• Bump @xmldom/xmldom from 0.8.11 to 0.8.12 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1873
• Bump defu from 6.1.4 to 6.1.6 in /apps/browser-extension in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1878
• Bump lodash from 4.17.23 to 4.18.1 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1880
• Bump vite from 7.1.12 to 7.3.2 in /core/vault in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1881
• Bump the npm_and_yarn group across 3 directories with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1882
• Bump addressable from 2.8.7 to 2.9.0 in /docs in the bundler group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1883
• Bump react-server-dom-webpack from 19.0.3 to 19.0.5 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1898

New Contributors

• @saschabuehrle made their first contribution in https://github.com/aliasvault/aliasvault/pull/1856

Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.27.2...0.28.0