AliasVault Files

What's Changed

Welcome to AliasVault v0.31.0 🎉

After four months of ongoing development, this release brings a major update to the vault data model, faster and more reliable synchronization, and a completely rebuilt web app that re-uses existing components from the browser extension. The new web app feels much more responsive in everyday use, while its initial download has dropped from 40 MB to under 3 MB.

Also, the foundation for family vault sharing is here! Much of the work behind 0.31.0 went into the new vault architecture that makes sharing possible! The core functionality is working, and we're now putting the finishing touches on permissions and management interfaces. In the coming 2-3 weeks, we plan to launch a closed beta on AliasVault Cloud, giving early testers a chance to help test and validate the experience ahead of the global rollout in the next release. There are also a lot of other new improvements, check out the release notes below.

[!IMPORTANT] Update all your devices and apps to AliasVault 0.31.0 or later. This version introduces a new vault format. Once your vault is upgraded on one device, older versions can no longer open it.

Self-hosting? Update your server to 0.31.0 or later before using the updated apps.

Highlighted new features/improvements

1. Rebuilt the web app in React, reducing its initial asset download from 40 MB to under 3 MB.
2. Introduced a new vault architecture and V2 API for faster, more reliable synchronization and improved vault security.
3. Added support for custom item icons.
4. Added password character exclusions so you can leave out characters that are difficult to type.
5. Improved two-factor authentication with SHA256-based authenticator codes and better autofill for codes entered into separate digit fields.
6. The browser extension now allows you to change your master password, view security logs and delete your account. The other apps already supported this, but this now brings feature parity to all apps.
7. Improved app settings UI, modals, and other interface details.
8. Self-hosted admins can now invite new users to signup while public registration is disabled.
9. Fixed reported bugs and included many smaller tweaks.

🚀 New Features

• fix(export): defer URL.revokeObjectURL after triggering a download by @AronMav in https://github.com/aliasvault/aliasvault/pull/2419
• New Crowdin updates by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2412
• Rewrite core data architecture and switch to manifest based storage model by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2426
• Skip AliasVault infrastructure GitHub workflows on forked repositories by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2429
• New Crowdin updates by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2431
• Port current web app from Blazor WASM to React by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2433
• Centralize i18n resources for all client apps by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2435
• Favicon fetcher: retry pass for bulk extraction and refreshed user-agent handling by @AronMav in https://github.com/aliasvault/aliasvault/pull/2420
• Make app error codes and translations uniform across all client apps by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2438
• New Crowdin updates by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2436
• Remove legacy AliasVault.Client Blazor WASM project references from repo by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2441
• Raise Argon2id defaults by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2446
• Improve two-factor auth setup and disable flow in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2449
• Tweak browser extension UI to make scrollbar appear as overlay by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2456
• When switching item type in edit mode remember previous field values when switching back by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2458
• Allow to create new user invite links from admin panel when public registration is disabled by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2459 (reported by @zombiehunternr1)
• Update settings UI in all apps to be in a consistent order and make it easier to see all options by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2463
• Standardize icons in all apps and move icons to core by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2465
• Tweak signup flow terms & conditions and skip the step by default for self-hosted environments by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2467
• Harden key derivation, login protocol and vault encryption by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2470
• Remove username from vault exports metadata by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2472
• Update dependencies by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2474
• Download/upload vault manifest blobs as bytes instead of as json to prevent base64 overhead by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2485
• Add Korean language option to all apps by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2489
• Add excluded characters option to password generator settings by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2491
• Add SHA256 support to 2FA TOTP generator by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2493

🐞 Bug Fixes

• Use Public Suffix List for domain matching in autofill and passkeys by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2447 (reported by @AmarBego)
• Move browser extension login/unlock to background to continue when popup closes by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2450 (reported by @shanks3042)
• Exclude hidden private domains from email domain defaults (for self-hosted environments) by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2452
• Fix folder chooser shows deeply nested subfolders at the wrong indent level by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2454
• Enforce input size limits on server endpoints and SMTP service by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2461
• Improve browser extension 2FA autofill for separate digit forms by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2488

🧩 Dependencies Updates

• Bump qs from 6.15.3 to 6.16.0 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2427
• Bump qs from 6.15.3 to 6.16.0 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2430
• Bump the github-actions group across 7 directories with 4 updates by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2477
• Bump the nuget-minor-patch group with 24 updates by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2478
• Bump the docker-images group across 2 directories with 2 updates by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2482

New Contributors

• @AronMav made their first contribution in https://github.com/aliasvault/aliasvault/pull/2419

Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.30.7...0.31.0