AliasVault Files

What's Changed

This release focuses on security hardening, stability and quality-of-life improvements across AliasVault. Highlighted changes: the web app now includes a new auto-lock timeout. The mobile apps now support blocking screenshots and screen recording, enabled by default. The browser extension and mobile app can now export to .avex/.avux, making it possible to create encrypted vault backups directly from all clients.

Android autofill now also works in more browsers through compatibility mode, including Edge, Opera and others. Passkeys are displayed better on all clients. Many other fixes and UX/UI refinements have been added based on community feedback, including:

• Favicons now render better in the mobile app
• Imports from other password managers have been improved for better attachment import support
• Improve Android mobile app compatibility with larger vaults, reducing memory usage

See the full list of improvements below.

🚀 New Features

• Update architecture documentation for new datamodel structure introduced in 0.31.0 by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2523
• Add optional key rotate functionality to password change screen in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2526
• Add .avex/.avux export options to browser extension and mobile app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2529
• Update mobile app minimum PIN length from 4 to 6 digits by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2531
• Make browser extension accept any char (letters included) when setting up a new PIN by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2532 (reported by @StefPanther)
• Improve vault sharing invite flow by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2538
• Require TLS in mobile app release builds by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2540 (reported by @nmochea)
• Core readability refactoring and fixes by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2544
• Update google play store logo by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2554 (reported by @xuars)
• Increase identity generator supported age ranges by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2559
• Add auto-lock timeout to web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2563
• Add screen capture protection to mobile apps by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2568 (reported by @shanks3042)
• Add about page to browser extension and mobile app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2570
• Add Android autofill support for Edge, Opera and other browsers via compatibility mode by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2572
• Update docs with IPv4 requirement by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2578 (reported by @vincegre)
• Show item name instead of passkey title in Android and improve passkey display across all clients by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2583
• Show username field generate button for all item types by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2600 (reported by @Rayfor000)

🐞 Bug Fixes

• Update TOTP countdown to adhere to custom settings in mobile app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2557
• Reject accented characters in username check before registration by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2566
• Fix favicon rendering in mobile app by normalizing SVG structure by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2573 (reported by @mjacobs64)
• Update Proton Pass and Bitwarden importers to handle new attachment format by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2575 (reported by @LenzGr)
• Improve reset vault option in web app to prevent another device merge of bringing deleted items back by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2577 (reported by @LenzGr)
• Improve error reporting in clients when the vault download is interrupted by the network by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2579 (reported by @hey-zane)
• Fix Android crash on large vaults by passing and storing the vault as raw bytes by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2580 (reported by @pilotpirx68)
• Include credentials without a username in Android and iOS autofill suggestions by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2581 (reported by @cycyx)
• Keep selected domain when regenerating alias email by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2599 (reported by @Rayfor000)
• Update folder sort to be alphabetical case-insensitive in all platforms by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2601 (reported by @Rayfor000)

🧩 Dependencies Updates

• Bump nginx from 1.31.0 to 1.31.6 in /apps/web in the docker-images group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2525
• Bump nginx from 1.31.6 to 1.31.8 in /apps/web in the docker-images group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2545
• Bump Microsoft.AspNetCore.DataProtection and 13 others by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2546

Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.31.1...0.31.2