Keyguard Updates & Release Notes

This release introduces several new capabilities for managing GPG keys, improves support for KeePass KDBX vaults, and includes various platform-specific stability fixes.

GPG and SSH

Added an option to export GPG public and private keys as .asc.

Added an option to send the verification email when uploading a GPG public key.

Caches by-email VKS responses during throttle windows.

Key names are now fetched after unlocking if displaying key names is disabled.

Platform improvements and fixes

KDBX databases with a key file set no longer require a password.

Displays a more detailed error message when failing to open a URI on desktop platforms.

Fixed a crash on Android when the file picker reports that no activity was found.

Fixed an issue on Windows where the agent process was not stopped before closing the IPC transport.

Fixed copying on macOS.

This release introduces biometric unlock on Windows with Windows Hello, a major overhaul of the OpenPGP pipeline, and significant improvements to sync conflict resolution for KDBX users.

• e009f2ed - refactor: Fix Detekt violations
• baba1021 - Revert "deps: Bump Compose"
• a2373ed1 - refactor: Move Zip service in a util/zip/ KMP module
• a885d303 - refactor: Move Zxcvbn implementation in a util/zxcvbn/ KMP module
• a69856db - chore: Smaller changelog summary is better
• a98219e7 - tests: Clean-up some of the GPG smoke tests
• 5e1ad797 - Merge pull request #1552 from AChep/localization_action
• 1d475f0e - chore: Bump app version to 3.1.0
• bb293191 - tests: Handle elevated Windows child owner
• a38ec41a - fix: Correct Windows hello credential handling
• 44079329 - [AUTO] Update localization library
• 7b296301 - feat: Windows Hello biometric unlock
• 6edcc818 - fix: Support K-9 signing key selection requests
• f2beb82e - tests: Cache UI Automation instance
• c78d836d - refactor: Fix Detekt violations
• 54b991c4 - chore: Pre-install required Rust components during Rust setup step
• f204d80f - Merge pull request #1557 from AChep/dependabot/github_actions/crowdin/github-action-2.17.1
• 96070065 - Merge pull request #1561 from AChep/gpmpasskeysprivapps_action
• aace6d70 - @sannidhyaroy has signed the CLA in #1563
• 38cb70b0 - improvement(GPG): Confirm signer identities with local certification authorities
• 4b2e5b57 - fix(UI): Align hardware unlock button row on the GPG unlock dialog
• 14a2ef22 - chore: merge Compose Multiplatform 1.12.0 upgrade
• 3d11dcaa - deps: Bump Compose
• e2533faf - fix: Disable pending usage history runner on Wear OS #1558
• 97f97cfc - fix: Run pending usage history on default dispatcher #1559
• 4d337c7b - fix: Explicitly disable HTTP cache on download requests
• 880c719f - fix(Bitwarden): Split GPG keys into multiple fields to avoid 5000 symbols limit
• 3a6f49cf - improvement: GPG certificate user ID replace/revoke UI
• c84611e6 - [AUTO] Update GPM Credential Privileged Apps JSON
• 004bf736 - improvement: GPG certificate reconciliation during normal import
• cad26986 - improvement: Add Titanium browser as privileged #1560
• f24669eb - refactor: Fix Lint complains
• dfdd520c - improvement: Reconcile changes in GPG certificates during a conflict
• 5b173e0e - improvement: 3-way merge for conflict resolution for KDBX
• 68ad89a9 - fix: Encode passkey key value as URL-safe base64, fixes incompatibility with BW #1559
• 0a76d715 - fix: Reject invalid keyserver responses
• 499dfb99 - improvement: Preserve GPG revocation evidence and reassess key status
• 7701a732 - improvement: Get GPG key restoration and revocation status
• 4598912e - chore(deps): bump crowdin/github-action from 2.17.0 to 2.17.1
• b8ed80d1 - fix(GPG): Preserve local key material during keyserver refresh
• dbf7024d - fix(agent): Verify macOS login ancestry for approval reuse #1549
• 547645b3 - docs(llm): Take AGENTS.md a bit more seriously
• a493d04a - fix: Update GPG and SSH agent paths on Linux and macOS
• 247a0b80 - fix: Harden SSH and GPG socket lifecycle & discovery
• 3f2d0479 - fix(macOS): Mark gpg agent binary as executable on release
• b732b696 - improvement: Add user ID management and deterministic certificate reconciliation
• 3a57ecea - feat: Overhaul OpenPGP pipeline
• 2dbe4aca - fix(sync): propagate fatal errors
• 96a0c256 - feat: Type a password from memory and compare it with a stored one #1533
• 4edd59b9 - docs: Remove the mention that Keyguard is largely JVM dependent
• 9673b43c - fix(Desktop): Stop SSH/GPG agent IPC servers on shutdown #1548
• 5f6b22e7 - improvement: Explicitly forbid database downgrade #1547
• 1e5ad1b4 - Merge pull request #1546 from ilkecan/fix/desktop-okhttp-bom
• acd217ce - @ilkecan has signed the CLA in #1546
• 56e21e5c - fix(Desktop): Declare the okhttp BOM in desktopApp
• 24827f50 - docs: Note that we do not have browser extension

This release addresses a critical stability issue for Windows users.

Fixes and Improvements

Resolved an issue that caused the application to crash on startup on Windows.

This release introduces comprehensive GPG key management, extends the SSH/GPG agent to Windows, and delivers a completely reworked synchronization engine for KeePass (KDBX) vaults. It also adds major new integrations for Android, WebDAV support for remote vaults, and numerous security and performance enhancements across all platforms.

GPG Key Management and Agent on Windows

Keyguard now includes first-class support for managing GPG keys and using them through an integrated agent, which is now also available on Windows.

GPG Key Management: You can now import, manage, and use GPG keys directly within Keyguard. It is also now possible to set or modify the expiration date for GPG keys and subkeys.

Agent on Windows: The SSH and GPG agents are now available on Windows, providing seamless integration with development tools, terminals, and Git.

Caller-Scoped Approval: Agent requests can be approved on a per-caller basis, allowing you to grant persistent access for trusted applications without being prompted for every operation.

Platform Support: Added support for GPG key item types on Wear OS and resolved an issue where agent-related items were not displayed correctly on Windows.

Security and Reliability: The GPG and SSH agents have been hardened with stricter key policy enforcement during signing and decryption, public key validation before imports, and more robust connection handling.

Reworked KeePass (KDBX) Sync and Attachments

The engine for handling KeePass (KDBX) vaults has been overhauled for significantly improved reliability, performance, and attachment management.

New Sync Pipeline: The synchronization process is now more robust, performing better conflict resolution and handling unstable network connections more gracefully.

Large File Support: The maximum supported attachment size has been increased to 500 MB. KDBX vaults are now processed using a streaming encoder and decoder to reduce memory usage, especially for vaults with large attachments.

Reliable Attachment Sync: Attachments are now staged locally before upload, preventing data loss and ensuring that file changes are synchronized reliably.

Improved Error Handling: A clear error message is now shown when attempting to add an attachment that exceeds the size limit. The app also better preserves original error details during decoding and avoids unnecessary unlock retries when an incorrect key is used.

New Android Integrations

Keyguard's integration with the Android ecosystem has been expanded with powerful new capabilities for developers and third-party app users.

OpenKeychain Provider: Keyguard can now act as an OpenKeychain-compatible provider, allowing apps like Termux to use your SSH and GPG keys for authentication and signing operations.

Credential Exchange (CXF): Added support for Credential Exchange (CXF), enabling secure credential sharing with other compatible Android applications.

Enhanced Autofill Security: Autofill is now more secure, validating both the package name and the signing identity of the target application before filling credentials.

Storage and Backup Fixes: Introduced a recovery mechanism for certain types of encrypted storage failures and ensured all sensitive application data is correctly excluded from automatic Android backups.

Security Enhancements

This release includes several important security improvements to protect your data.

Clipboard Protection: On macOS and Windows, copying sensitive fields (like passwords) now prevents them from being stored in the system's clipboard history.

Hardened KDBX Parsing: Strengthened the parsing of KDBX files from untrusted sources by enforcing limits on key derivation functions (KDF) and validating internal file structures to guard against malformed databases.

Secure Temporary Files: Temporary files created during sync or other operations are now securely permissioned on Windows.

UI and Usability Improvements

Customizable Navigation: The main navigation bar can now be customized. You can add your own filters for quick access to specific item types and reorder the tabs to suit your workflow.

Link Vault Items: You can now create links between vault items. The "Related Items" section has been promoted to a first-class field for better visibility and ease of use.

Easier Folder Creation: It is now simpler to create nested folder structures.

Smarter Selections: When vault items are trashed or archived, they are now automatically removed from any active selection to prevent unintended actions.

Incognito Fields on Desktop: On desktop platforms, password fields now block input method editors (IMEs) to prevent sensitive text from being captured by third-party keyboard utilities.

Fixes and Improvements

WebDAV Support: You can now connect to and browse WebDAV servers to open and save your vault files. Compatibility has been improved for servers that do not support atomic write operations.

Bitwarden Sync: Improved the reliability of Bitwarden vault synchronization by containing JSON parsing failures to a single item and hardening the underlying connection handling.

Flatpak: Fixed an issue that caused a missing tray icon in the Flatpak distribution on Linux.

Watchtower: Watchtower now correctly flags passwords that have appeared in a data breach even a single time.

Performance: Optimized performance for vault list loading, search, and Watchtower scans.

Data Libraries: Updated internal libraries and data sources for passkeys, two-factor authentication services, and public domain suffix lists.

On desktop, the UI scale can now be overridden using the keyguard.uiScale JVM property. In-app links have also been updated to point to the new project website.

All changes

• e0eb233f - chore: Bump app name to 2.14.2
• d82df23f - docs: Add QR codes page
• a00987f3 - docs: Add Large type page
• 4ad4030c - docs: Add Appearance page
• 2a2c293b - refactor: Remove now unused SSH agent timeout animation #1454
• a540575e - chore: Bump arrow to 2.2.3
• 8dc6edef - chore: Bump haze to 2.0.0-alpha03
• ab0f1632 - chore: Bump okhttp to 5.4.0
• 4c9da771 - chore: Bump sqlcipher-android to 4.16.0
• 87cae0d2 - chore: Bump Compose to 1.12.0-alpha02
• 1385123d - improvement(web): Better mobile layout
• 29f95e92 - build(deps): Bump dbusJava from 5.1.1 to 5.2.0 (#1189)
• ca36e6fe - build(deps): Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18 (#1429)
• f1294677 - build(deps): Bump richtext from 1.0.0-alpha03 to 1.0.0-alpha05 (#1365)
• ac332c8d - build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#1453)
• 68c8b5f4 - build(deps): Bump apple-actions/import-codesign-certs (#1384)
• 3d49f640 - [AUTO] Update localization library (#1459)
• 24343cb8 - [AUTO] Update Public suffix list (#1458)
• 6092c0ad - [AUTO] Update justdeleteme library (#1457)
• d08290b2 - [AUTO] Update two-factor auth library (#1456)
• 162d8bfc - fix(desktop): allow overriding UI scale via keyguard.uiScale JVM property (#1421)
• e765565d - improvement: Update links to the new website
• 1d662f59 - fix(web): Adjust device frames to the screenshots fits perfectly
• 0ead05d1 - chore: Use a proper worflow prefix
• 5fcb8433 - fix(web): Clip logo in the header to a rounded rectangle
• 0573ac92 - chore: Bump server/web/ dependencies
• bef5cafb - feat: Static website with documentation & marketing fluf

Forgot to bump the app version name for the release, there were no changes comparing to the previous one:

KeePass file watching on Android is now more reliable, particularly for files accessed via the content:// scheme and on older OS versions. One-time password generation has been improved; exported otpauth:// URIs are now spec-compliant and the mOTP period has been corrected to the standard 10 seconds. This release also rejects pre-login KDF downgrades, cleans up stale SSH agent state on restart, and properly binds the agent socket in Flatpak environments.

All changes

65e25991 - chore: Bump app version name to 2.14.1

KeePass file watching on Android is now more reliable, particularly for files accessed via the content:// scheme and on older OS versions. One-time password generation has been improved; exported otpauth:// URIs are now spec-compliant and the mOTP period has been corrected to the standard 10 seconds. This release also rejects pre-login KDF downgrades, cleans up stale SSH agent state on restart, and properly binds the agent socket in Flatpak environments.

All changes

• 793c953a - fix: Reject pre-login KDF downgrade
• 14edc0ff - fix(Android): Observe the .kdbx file under content:// scheme
• ffd0b477 - fix(otpauth): Make exported otpauth:// URIs spec-compliant
• a378651b - fix: Use the standard 10s period for mOTP instead of a custom 30s one
• 1d95b0e2 - fix: Fully clean-up old stale ssh agent state on agent restart
• 5b0f47b6 - fix: Http connection leak if file preview fails early
• 5a8ee16c - fix: Notification worker now respects app's lifecycle
• 5d68da5d - fix: Support desktop file watcher cancellation
• b9177ecc - fix(KeePass): Support file watching before Android 10
• 5ce5d665 - fix: Propagate HIBP password range HTTP errors
• dc3485c6 - refactor(Linux): Observe portal color scheme over DBus
• efd7ff3d - refactor: Safely handle case where biometric result contains no crypto object
• 3622a4a6 - fix(Desktop): Prevent URL override command execution from blocking on output
• ffe5ef92 - fix(Sync): Compare cipher folder using local ids
• e0f3a96e - fix(export): Fail on attachment download errors
• f3164a6e - fix: reject unsupported MD5 OTP algorithms
• c763a09f - fix(Desktop): Bind SSH agent socket to a visible path in flatpak #640
• 51b1bf81 - Add required display length for flatpak metadata (#1452)
• 4efd77bf - @JustAdreamerFL has signed the CLA in #1452
• 92f31e17 - fix(Desktop): Mark concealed Linux clipboard contents as sensitive (#1448)
• 36146845 - @jbwfu has signed the CLA in #1448

This update introduces automatic vault backups to protect against data loss, along with fixes to improve backup reliability. On desktop, you can now use Ctrl+Shift+L to lock your vault, and issues with popup window and quick search focus have been resolved. The SSH agent now includes a request history viewer and improved timeout management. Additionally, the network timeout has been increased to 30 seconds and Android autofill performance is enhanced.

All changes

ade168ba - chore: Missing jdkVersion declaration
f52c4704 - chore: Bump app version to 2.14.0
99002681 - tests: Correct stale Backup behavior
b08d4c1f - fix(Desktop): Request foreground on Windows / Linux when showing a popup window
0d98b246 - fix(Desktop): After quick search pops up for a second time it does not auto-focus the input field
6262d80e - improvement(MacOS): Better Popup window management with Accessory path
afd67b44 - chore: Bump Compose to 1.11.1
e0627190 - chore: Use 'jetbrains' java distribution
970d04c9 - ui: Add a Planeta component for visualizing a fingerprint
0b92748e - Merge pull request #1446 from AChep/localization_action
3ff4d0b6 - Merge pull request #1445 from AChep/justdeleteme_action
c9f637ce - Merge pull request #1444 from AChep/gpmpasskeysprivapps_action
2e076616 - Merge pull request #1443 from AChep/tfa_2factorauth_action
debd7f03 - Merge pull request #1442 from AChep/tld_public_suffix_list_action
172033c8 - [AUTO] Update localization library
627ddd5d - [AUTO] Update justdeleteme library
f0c92522 - [AUTO] Update GPM Credential Privileged Apps JSON
3b6fd302 - [AUTO] Update two-factor auth library
1968bcae - [AUTO] Update Public suffix list
a83e0ca9 - Merge pull request #1438 from AChep/localization_action
466a5239 - [AUTO] Update localization library
1821c264 - improvement(Desktop): Ctrl+Shift+L to lock the vault
1948405e - improvement: Increase network timeout from 10s to 30s
155e0138 - fix: Correct Auto-resume text phrase for downloading-failed attachments
97881ea2 - feat(SshAgent): Store public keys on disk when enabled for an easier list request processing
3f22b932 - fix: Avoid leaving partial files on failed decrypt during attachment downloading
9fd3fce0 - fix(Backup): Clean-up newly downloaded blobs if backup fails mid-way
61f4a228 - improvement(UI): Align visual style between Backup repo component and code snippets
e1619bd1 - fix: Correct SSH agent setup instructions via config file #1440
40cf1490 - fix(Backup): Surface attachment decryption errors as a special type
c91c91f4 - fix(Desktop): Shutdown SSH agent daemon after main app quits
86357423 - fix: Show SSH request timeout animation even if animations are disabled #1439
fc9de9f0 - fix: Drive SSH agent request expiry from the manager, never from the UI #1439
9d7e05a3 - improvement: View SSH agent request history
d1e6204a - refactor: Extract shared JSON resource list loader
93d5ea6f - refactor: Extract shared service directory list helpers
b3e89639 - improvement(Android): Offload autofill's structure parsing to worker thread where possible
8ec5196b - perf(send): avoid polling for expired state
7847a20b - fix(send): avoid leaking expired state timer
9cd5c540 - feat: Automatic vault backups #534 #1405
b030a2b0 - experiment: Get iOS to the point where it can log in into a Bitwarden account & sync it
2540d82d - experiment: Stub iOS app module
6857681c - fix: Require domain boundary for URL matching
d71b3eb6 - refactor: Validate received Argon2 prelogin parallelism value
720916ea - fix: Normalize URLs before URL matching/checking
33fbec11 - tests: Add Luhn impl tests
25244f12 - fix: Reject invalid HOTP/TOTP digit counts
c026e3af - fix: Preserve reprompt property during cipher merge
46c3e1c6 - refactor(Desktop): Use argv commands for navigation fallbacks
ae12fb43 - fix(Desktop): Allocate JNA strings by UTF-8 byte length
77dc38e6 - fix: Unbiased password generator random selection
5310010d - fix: Guard Argon2 memory conversion overflow