Bitwarden Release Notes

Overview

Improved account security

Clearer password generator actions

Better TalkBack support across the app

Password fields no longer reveal their length

What's Changed

✨ Community Highlight

[PM-42349] fix: use fixed-length password mask by @488315 in #7293

Feature Development

PM-43459: feat: Update how we hash the master password by @david-livefront in #7381

PM-43002: feat: Update inline generator UI by @david-livefront in #7394

[PM-41293] feat: Add identity field-key mapping to fill-assist by @aj-rosado in #7342

PM-27867: feat: Use SDK for prelogin API by @david-livefront in #7357

[PM-41294] feat: Build and fill identity autofill partitions through a multi-partition pipeline by @aj-rosado in #7369

[PM-41295] feat: Detect and fill extended address for identity autofill by @aj-rosado in #7371

🐛 Bug fixes

PM-43235: bug: Remove edit button for disabled Send types by @david-livefront in #7374

PM-42349: bug: Hide static password mask when field is blank by @david-livefront in #7376

PM-43342, PM-43343, PM-43373: bug: Hide copy and share options from disabled Send by @david-livefront in #7377

PM-43353, PM-43354: bug: Update accessibility roles for improved TalkBack support by @david-livefront in #7378

VULN-988: bug: Additional GMS validation for CXP export by @david-livefront in #7367

PM-43354: bug: Fix Version copy button announcement by @david-livefront in #7400

⚙️ Maintenance

[QA-2428] Add testTag to the Make a copy button on the View Send screen by @Corbet-BW in #7356

Crowdin Pull by @bw-ghapp[bot] in #7362

Chore: Update AGP and Gradle Wrapper to latest versions by @david-livefront in #7368

PM-43250: chore: Change email param on 'hashPassword' to salt by @david-livefront in #7372

Crowdin Pull by @bw-ghapp[bot] in #7385

Chore: Addresses minor lint warnings by @david-livefront in #7397

📦 Dependency Updates

Update SDK to 3.0.0-8685-752729a9 by @bw-ghapp[bot] in #7355

[deps]: Update fastlane to v2.238.0 by @renovate[bot] in #7331

[deps]: Update kotlin by @renovate[bot] in #7387

[deps]: Update protobuf monorepo to v4.36.1 by @renovate[bot] in #7388

Update SDK to 3.0.0-8791-6e68a109 by @bw-ghapp[bot] in #7365

Update SDK to 3.0.0-8826-20e5595c by @bw-ghapp[bot] in #7395

🎨 Other

Add Basque language support by @SaintPatrck in #5059

New Contributors

@488315 made their first contribution in #7293

Full Changelog: v2026.9.0-bwpm...v2026.9.1-bwpm

Builds Source: https://github.com/bitwarden/android/actions/runs/35384637995

Original source

Overview

Clearer password generator actions

Various under-the-hood bug fixes and improvements

What's Changed

Feature Development

[PM-32153] feat: Split master password authentication/unlock data in register-finish request by @matt-livefront in #3019

[PM-37877] feat: Implement SDK KM state bridge by @matt-livefront in #2940

🐛 Bug fixes

[PM-43234] fix: Hide Edit option for non-compliant Sends in the send list menu by @matt-livefront in #3031

[PM-37884] fix: Show the scan card button when editing a card by @andrebispo5 in #3015

[PM-43016] fix: Load item types before vault refresh and reload on sync by @fedemkr in #3022

[PM-42462] fix: Show None as the vault item picker placeholder by @andrebispo5 in #2992

[PM-42025] fix: Show a toast after a vault item is saved by @andrebispo5 in #2993

[PM-43223] [PM-43220] fix: Update "Who can view" and "Deletion date" menu footer text by @matt-livefront in #3035

[PM-43340] [PM-43372] fix: Hide Remove Password, Copy Link, and Share Link options for non-compliant Sends in the send list menu by @matt-livefront in #3034

[pm-38360] fix: DatePicker a11y fixes by @morganzellers-bw in #3030

[PM-42673] fix: Make filling the primary action on the inline generator sheet by @morganzellers-bw in #3046

[PM-43874] fix: Moves "Use this password/passphrase/username" button for generator by @morganzellers-bw in #3060

⚙️ Maintenance

[PM-37888] refactor: Remove unused AccountEncryptionKeys wrapper by @matt-livefront in #2861

📦 Dependency Updates

[deps]: Update SwiftProtobuf to v1.38.1 by @renovate[bot] in #2966

[deps]: Update SnapshotTesting to v1.19.4 by @renovate[bot] in #2965

[deps]: Update csv to v3.3.6 by @renovate[bot] in #2964

Full Changelog: v2026.9.0-bwpm...v2026.9.1-bwpm

Builds Source: https://github.com/bitwarden/ios/actions/runs/35626776617

Original source

Overview

Various under-the-hood bug fixes and improvements

What's Changed

Feature Development

[PM-32153] feat: Split master password authentication/unlock data in register-finish request by @matt-livefront in #3019

[PM-37877] feat: Implement SDK KM state bridge by @matt-livefront in #2940

🐛 Bug fixes

[PM-43234] fix: Hide Edit option for non-compliant Sends in the send list menu by @matt-livefront in #3031

[PM-37884] fix: Show the scan card button when editing a card by @andrebispo5 in #3015

[PM-43016] fix: Load item types before vault refresh and reload on sync by @fedemkr in #3022

[PM-42462] fix: Show None as the vault item picker placeholder by @andrebispo5 in #2992

[PM-42025] fix: Show a toast after a vault item is saved by @andrebispo5 in #2993

[PM-43223] [PM-43220] fix: Update "Who can view" and "Deletion date" menu footer text by @matt-livefront in #3035

[PM-43340] [PM-43372] fix: Hide Remove Password, Copy Link, and Share Link options for non-compliant Sends in the send list menu by @matt-livefront in #3034

[pm-38360] fix: DatePicker a11y fixes by @morganzellers-bw in #3030

[PM-42673] fix: Make filling the primary action on the inline generator sheet by @morganzellers-bw in #3046

[PM-43874] fix: Moves "Use this password/passphrase/username" button for generator by @morganzellers-bw in #3060

⚙️ Maintenance

[PM-37888] refactor: Remove unused AccountEncryptionKeys wrapper by @matt-livefront in #2861

📦 Dependency Updates

[deps]: Update SwiftProtobuf to v1.38.1 by @renovate[bot] in #2966

[deps]: Update SnapshotTesting to v1.19.4 by @renovate[bot] in #2965

[deps]: Update csv to v3.3.6 by @renovate[bot] in #2964

Full Changelog: v2026.9.0-bwa...v2026.9.1-bwa

Builds Source: https://github.com/bitwarden/ios/actions/runs/35384644507

Original source

What's Changed

Added the option to share vault items through a secure link

Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

• [PM-38402] fix(desktop): fix IPC listeners that were never getting removed by @fabiand93 in #20945
• [PM-42039] fix(desktop): access keyctl keys from their owning thread by @nurfed1 in #22449
• [PM-42093] Fix case-sensitive URI scheme checks by @jashkarangiya in #22477

Feature Development

• [PM-40320] feat: Add bulk action support to shared VaultItemsTableComponent by @jaasen-livefront in #22260
• Autotype: generate AppData from filtered, currenty running applications by @neuronull in #22656
• Remove SSH Agent v1 by @neuronull in #22762
• [PM-42170] feat: Wire quick copy icon setting to the new vault table by @jaasen-livefront in #22790
• [CL-1232] Show rounded corner in desktop layout for VFO1 by @vleague2 in #22832
• [CL-1240] side nav responsive behavior by @BryanCunningham in #22879
• [CL-998] filter menu and dialog spec follow-up by @willmartian in #22891
• desktop-autofill: Windows native passkey fixes by @iinuwa in #22894
• Autotype: move shortcut component to shared lib by @neuronull in #22898
• [CL-1312] Add accordion auto height option by @vleague2 in #22938
• [PM-43047] Introduce new import vendor icons by @harr1424 in #22953
• [PM-42897] Move the vault banner above the vault header and add to shared folder/my folder pages by @jengstrom-bw in #23014
• [PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060
• [PM-42490] feat: Add right click menu to the VFO1 vault table by @jaasen-livefront in #23062
• [PM-42878] Add subscription ended callout to VFO1 archive view by @nick-livefront in #23066
• [PM-43267] Tools share library to support temporary item sharing by @mcamirault in #23079
• Auth/PM-43337 - Submit login form on Enter from the remember-email checkbox by @JaredSnider-Bitwarden in #23085
• [PM-34732] remove feature flag, add flag for callout feature by @BTreston in #23091
• Add beta templates for Github issue reports by @trmartin4 in #23095
• [PM-43257] Update and Consolidate Autotype MVP & GA FF Logic by @coltonhurst in #23099
• [PM-43088] Add My items chip filter to org vault's All vault items page by @gbubemismith in #23102
• [PM-39982] Wire temporary item sharing in all clients by @mcamirault in #23152
• Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183
• [PM-41885] Add render and main process autotype ga services by @coltonhurst in #23189
• [PM-37378] Extend vault filter memory to Desktop by @shane-melton in #23226
• Autotype: Generate AppData from active window by @neuronull in #23243
• [CL-1334] Add min-height to table toolbar and remove tooltips from filter menus by @vleague2 in #23258
• [PM-44120] Isolate Beta desktop keychain entries from stable by @trmartin4 in #23551

🐛 Bug fixes

• Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899
• [PM-42825] Filter out provider organizations by @nick-livefront in #23016
• [PM-43083][PM-43122] Show header breadcrumbs and identity tiles for every vault scope by @gbubemismith in #23021
• Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046
• [CL-1296] Ensure table content does not have clipped focus rings by @vleague2 in #23076
• [PM-43253] Show suspended organization icon in the Password Manager side nav by @jaasen-livefront in #23082
• align mark and measure with abstraction docs by @audreyality in #23090
• [PM-42971] Ensure area around nav collapse button is clickable by @vleague2 in #23100
• [CL-1321][CL-1322] misc filter dialog fixes by @willmartian in #23148
• PM-43471: Add missing enabled flag for vault-next storybooks by @nikwithak in #23159
• [PM-43374] Correct trash detection in desktop vault batch action bar by @gbubemismith in #23175
• [PM-43366] Improve tooltip support in filter menu and toolbar by @vleague2 in #23177
• [PM-43674] refactor(icon-tile): render glyph with bit-icon by @BryanCunningham in #23185
• [PM-43460, PM-43461] feat: Nest collections and folders in filter chips by @nick-livefront in #23190
• [PM-43348] Render live vault updates on the desktop list by @gbubemismith in #23191
• [PM-43681] With voiceover on and navigating by keyboard, highlighted button border persists when expanding/contracting show more/less by @jengstrom-bw in #23216
• [CL-1320] Update how multi filter menu chips are treated when selected by @vleague2 in #23218
• [PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220
• [PM-43782] fix: uncheck select-all after clearing a capped selection by @jaasen-livefront in #23227
• fix(shared-unlock): Set destinations before starting shared unlock by @quexten in #23230
• [PM-43479] Allow horizontal scrolling in table-v2 on desktop by @willmartian in #23250
• [PM-43840] Update instances of collection to instead use shared folder by @harr1424 in #23254
• [PM-43838] fix: center empty vault description text on desktop by @gbubemismith in #23261
• [PM-43869] Disable at-risk password notifications in shared item Sends by @mcamirault in #23295

⚙️ Maintenance

• [deps]: Update actions/setup-node action to v7 by @renovate in #22473
• [PM-412222] Update sdk decryption failure dialog copy and design by @shane-melton in #22619
• Auth/PM-42704 - Rename auth icons to be generic for reuse by @JaredSnider-Bitwarden in #22786
• feat(desktop): Allow overriding the IPC socket directory by @quexten in #22911
• feat(desktop): Add an isolated debug run script for desktop by @quexten in #22912
• feat(desktop): Add development icon for desktop dev build by @quexten in #22915
• desktop: Refactor packing and signing build phases by @iinuwa in #23020
• build: Delete unused package.json scripts for desktop by @iinuwa in #23055
• [BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087
• Autosync Crowdin Translations for desktop by @bw-ghapp in #23106
• [PM-34732] Clean up by @BTreston in #23176
• Update Cargo.toml by @iinuwa in #23179
• [PM-43366] Mute flaky filter menu popover test for now by @vleague2 in #23196
• [PM-43776] Fix circular dependency in view password history service by @shane-melton in #23215
• Autosync Crowdin Translations for desktop by @bw-ghapp in #23251
• Autosync Crowdin Translations for desktop by @bw-ghapp in #23267
• Bump client version(s) by @github-actions in #23332

📦 Dependency Updates

• [deps] UI Foundation: Update svgo to v4.0.2 [SECURITY] by @renovate in #22008
• Update sdk-internal to 0.2.0-main.1015 by @bw-ghapp in #22989
• Update sdk-internal to 0.2.0-main.1020 by @bw-ghapp in #23068
• Update sdk-internal to 0.2.0-main.1034 by @bw-ghapp in #23277

New Contributors

• @fabiand93 made their first contribution in #20945
• @jashkarangiya made their first contribution in #22477

Full Changelog: desktop-v2026.9.0...desktop-v2026.9.1

Original source

What's Changed

Various under-the-hood improvements and minor bug fixes

Feature Development

[PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060

Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183

🐛 Bug fixes

Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899

Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046

align mark and measure with abstraction docs by @audreyality in #23090

[PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220

⚙️ Maintenance

[deps]: Update actions/setup-node action to v7 by @renovate in #22473

[PM-42666] ts-strict for cli files by @BTreston in #22782

Use SEND_KDF_ITERATIONS instead of magic number by @djsmith85 in #23067

[BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087

Bump client version(s) by @github-actions in #23332

📦 Dependency Updates

Update sdk-internal to 0.2.0-main.1015 by @bw-ghapp in #22989

Update sdk-internal to 0.2.0-main.1020 by @bw-ghapp in #23068

Update sdk-internal to 0.2.0-main.1034 by @bw-ghapp in #23277

Full Changelog: cli-v2026.9.0...cli-v2026.9.1

Original source

What's Changed

Added the option to share vault items through a secure link

Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

[PM-39190] [PM-19354] fix(generator): restore catch-all website-name option by @esteve in #21338

[PM-42093] Fix case-sensitive URI scheme checks by @jashkarangiya in #22477

Feature Development

Add more support for DDG browser by @kspearrin in #22696

[PM-40904] feat: Add extension popup header item count and vault switcher by @jaasen-livefront in #22858

[PM-42902] wire inline menu prompt component by @dan-livefront in #22883

[CL-998] filter menu and dialog spec follow-up by @willmartian in #22891

[PM-40905] Extension - FAB implementation by @nick-livefront in #22897

[CL-1312] Add accordion auto height option by @vleague2 in #22938

[PM-43047] Introduce new import vendor icons by @harr1424 in #22953

[PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060

[PM-43267] Tools share library to support temporary item sharing by @mcamirault in #23079

Auth/PM-43337 - Submit login form on Enter from the remember-email checkbox by @JaredSnider-Bitwarden in #23085

[PM-34732] remove feature flag, add flag for callout feature by @BTreston in #23091

Add beta templates for Github issue reports by @trmartin4 in #23095

[CL-1297] Use bit-item for table-v2 list presentation by @willmartian in #23097

[PM-39982] Wire temporary item sharing in all clients by @mcamirault in #23152

[CL-1249] extension scroll area updates by @BryanCunningham in #23154

[PM-42385] Add empty autofill section description by @shane-melton in #23182

Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183

[CL-1334] Add min-height to table toolbar and remove tooltips from filter menus by @vleague2 in #23258

🐛 Bug fixes

init runtime before autofill orchestrator by @addisonbeck in #22789

Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899

[PM-41548] Consider frame URLs when resolving blocked domain entries by @jprusik in #23018

Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046

fix(table-v2): do not accept undefined urlStore values as seeded filter values by @nick-livefront in #23051

[CL-1318] Prevent pages with small y-scroll from snapping back to top when scrolled by @vleague2 in #23058

[CL-1296] Ensure table content does not have clipped focus rings by @vleague2 in #23076

align mark and measure with abstraction docs by @audreyality in #23090

[CL-1321][CL-1322] misc filter dialog fixes by @willmartian in #23148

[PM-43363] fix: Wrap long unbroken text in status lockup by @jaasen-livefront in #23150

[PM-43451] fix: Rename and separate the no-folder filter option by @jaasen-livefront in #23153

[PM-41425] fix: apply untrusted iframe check to fill assist targeted fields by @bensbits91 in #23155

[PM-43450] bugfix: No items show up with 'Items with no folder' filter by @nikwithak in #23157

PM-43471: Add missing enabled flag for vault-next storybooks by @nikwithak in #23159

[PM-43366] Improve tooltip support in filter menu and toolbar by @vleague2 in #23177

[PM-43674] refactor(icon-tile): render glyph with bit-icon by @BryanCunningham in #23185

[PM-43676] harden tagAsExternal by @audreyality in #23187

[PM-43460, PM-43461] feat: Nest collections and folders in filter chips by @nick-livefront in #23190

[PM-43726] fix: filter browser type chip to only show vault-present types by @nick-livefront in #23202

[PM-43743] introduce IntraprocessMessagingSubject by @audreyality in #23203

[CL-1320] Update how multi filter menu chips are treated when selected by @vleague2 in #23218

[PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220

[PM-43782] fix: uncheck select-all after clearing a capped selection by @jaasen-livefront in #23227

fix(shared-unlock): Set destinations before starting shared unlock by @quexten in #23230

[PM-43840] Update instances of collection to instead use shared folder by @harr1424 in #23254

[PM-43869] Disable at-risk password notifications in shared item Sends by @mcamirault in #23295

⚙️ Maintenance

[deps]: Update actions/setup-node action to v7 by @renovate in #22473

[PM-412222] Update sdk decryption failure dialog copy and design by @shane-melton in #22619

Auth/PM-42704 - Rename auth icons to be generic for reuse by @JaredSnider-Bitwarden in #22786

feat(browser): Add a Chrome debug launcher for the extension by @quexten in #22913

[BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087

[PM-43269] Browser: Update Health category details button variant and intro CTA images by @lastbestdev in #23103

Autosync Crowdin Translations for browser by @bw-ghapp in #23105

[PM-34732] Clean up by @BTreston in #23176

[PM-42366] Reconstruct IPC content-script messages before relaying by @coroiu in #23192

[PM-43366] Mute flaky filter menu popover test for now by @vleague2 in #23196

[PM-43776] Fix circular dependency in view password history service by @shane-melton in #23215

[PM-42469] communicate sender only through trusted channels by @audreyality in #23249

Autosync Crowdin Translations for browser by @bw-ghapp in #23252

Autosync Crowdin Translations for browser by @bw-ghapp in #23268

Bump client version(s) by @github-actions in #23332

core-js removal from chrome and version bump by @addisonbeck in #23464

📦 Dependency Updates

[deps] UI Foundation: Update svgo to v4.0.2 [SECURITY] by @renovate in #22008

Update sdk-internal to 0.2.0-main.1015 by @bw-ghapp in #22989

Update sdk-internal to 0.2.0-main.1020 by @bw-ghapp in #23068

Update sdk-internal to 0.2.0-main.1034 by @bw-ghapp in #23277

New Contributors

@esteve made their first contribution in #21338

@jashkarangiya made their first contribution in #22477

Full Changelog: browser-v2026.9.2...browser-v2026.9.3

Original source

What's Changed

Added the option to share vault items through a secure link

Expanded Manage Send policies to control vault item sharing

Updated subscription pages to show your upcoming renewal amount, tax, and date

Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

[PM-42093] Fix case-sensitive URI scheme checks by @jashkarangiya in #22477

Feature Development

[SM-1588] Secrets Versioning + feature flag by @cd-bitwarden in #19405

[PM-40320] feat: Add bulk action support to shared VaultItemsTableComponent by @jaasen-livefront in #22260

[PM-37378] VFO1 persist active filters by @shane-melton in #22533

Add more support for DDG browser by @kspearrin in #22696

[PM-42170] feat: Wire quick copy icon setting to the new vault table by @jaasen-livefront in #22790

[PM-38575] feat: hide payment modal for sales-assisted trials by @cyprain-okeke in #22805

Add breadcrumbs to Auth settings pages by @nikwithak in #22855

PM-40900: Add breadcrumbs to Admin-Console settings pages by @nikwithak in #22857

PM-40896: Add breadcrumbs to data recovery settings by @nikwithak in #22859

[CL-1240] side nav responsive behavior by @BryanCunningham in #22879

[CL-998] filter menu and dialog spec follow-up by @willmartian in #22891

[CL-1312] Add accordion auto height option by @vleague2 in #22938

PM-40898: Add breadcrumbs to Billing settings pages by @nikwithak in #22945

PM-40901: Add breadcrumbs to tools-owned settings pages by @nikwithak in #22951

[PM-43047] Introduce new import vendor icons by @harr1424 in #22953

[PM-42897] Move the vault banner above the vault header and add to shared folder/my folder pages by @jengstrom-bw in #23014

[PM-42838] Implement new dialog UI by @BTreston in #23056

[PM-42844] invite link dialog state and service by @BTreston in #23059

[PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060

[PM-42845] add guided tour of invite link by @BTreston in #23061

[PM-42490] feat: Add right click menu to the VFO1 vault table by @jaasen-livefront in #23062

[PM-42878] Add subscription ended callout to VFO1 archive view by @nick-livefront in #23066

[PM-39929] Billing Error Card by @sbrown-livefront in #23070

[PM-39929] Subscription Card Updates for Subscription Preview by @sbrown-livefront in #23071

[PM-39929] Component Updates to Standalone by @sbrown-livefront in #23072

[PM-38770] Implements support for new toggle on Invite Link modal by @JaredScar in #23077

[PM-43267] Tools share library to support temporary item sharing by @mcamirault in #23079

Auth/PM-43337 - Submit login form on Enter from the remember-email checkbox by @JaredSnider-Bitwarden in #23085

[PM-40806] self host warning for invite link by @BTreston in #23088

[PM-34732] remove feature flag, add flag for callout feature by @BTreston in #23091

[PM-43088] Add My items chip filter to org vault's All vault items page by @gbubemismith in #23102

[PM-42298] Integrate vault dialogs and coachmarks with VFO1 UX by @shane-melton in #23104

[PM-39929] Cart translation keys and discount duration label by @sbrown-livefront in #23147

[PM-39929] Preview-driven organization subscription page by @sbrown-livefront in #23151

[PM-39982] Wire temporary item sharing in all clients by @mcamirault in #23152

[PM-42524] feat: Update vault name and billing email fields on the shared organization form by @cyprain-okeke in #23181

Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183

[CL-1334] Add min-height to table toolbar and remove tooltips from filter menus by @vleague2 in #23258

🐛 Bug fixes

[PM-16095] validation message updates by @JaredScar in #22807

[PM-42858] Implement changes for policy for vault banner info callout by @JaredScar in #22889

[PM-42854] bugs with policies drawers by @JaredScar in #22893

Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899

[PM-42853] bugs with policies list fixes by @JaredScar in #22931

[PM-42825] Filter out provider organizations by @nick-livefront in #23016

[PM-43083][PM-43122] Show header breadcrumbs and identity tiles for every vault scope by @gbubemismith in #23021

Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046

[PM-43245] fix: Apply container-type to side nav scroll container by @BryanCunningham in #23074

[CL-1296] Ensure table content does not have clipped focus rings by @vleague2 in #23076

[PM-42854] Fix terminology changes for VFO 1 by @JaredScar in #23080

[PM-42853] Fix header for policies by @JaredScar in #23081

[PM-43253] Show suspended organization icon in the Password Manager side nav by @jaasen-livefront in #23082

[PM-43292] feat: Allow creating folders and shared folders from the toolbar's new item menu by @nick-livefront in #23089

align mark and measure with abstraction docs by @audreyality in #23090

[PM-42364] Missing SSO external ID and external ID from members dialog by @JaredScar in #23096

[PM-42971] Ensure area around nav collapse button is clickable by @vleague2 in #23100

[PM-43432] fix DI by @BTreston in #23144

[CL-1321][CL-1322] misc filter dialog fixes by @willmartian in #23148

PM-43471: Add missing enabled flag for vault-next storybooks by @nikwithak in #23159

[PM-43374] Correct trash detection in desktop vault batch action bar by @gbubemismith in #23175

[PM-43366] Improve tooltip support in filter menu and toolbar by @vleague2 in #23177

[PM-43674] refactor(icon-tile): render glyph with bit-icon by @BryanCunningham in #23185

[PM-43631] fix: add breadcrumbs to the settings Add plan page by @jaasen-livefront in #23188

[PM-43460, PM-43461] feat: Nest collections and folders in filter chips by @nick-livefront in #23190

[PM-43681] With voiceover on and navigating by keyboard, highlighted button border persists when expanding/contracting show more/less by @jengstrom-bw in #23216

[CL-1320] Update how multi filter menu chips are treated when selected by @vleague2 in #23218

[PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220

[PM-43791] fix: net line-item discounts into the cart summary subtotal by @sbrown-livefront in #23223

[PM-43632] custom user with manage user permission logged out when inviting user server direct call by @JaredScar in #23225

[PM-43782] fix: uncheck select-all after clearing a capped selection by @jaasen-livefront in #23227

fix(shared-unlock): Set destinations before starting shared unlock by @quexten in #23230

[PM-43840] Update instances of collection to instead use shared folder by @harr1424 in #23254

[PM-43727] fix: treat empty folderId as no folder in SDK move ciphers by @gbubemismith in #23257

[PM-43869] Disable at-risk password notifications in shared item Sends by @mcamirault in #23295

⚙️ Maintenance

Convert Secrets Manager integrations page to tabbed layout by @maxkpower in #21438

[deps]: Update actions/setup-node action to v7 by @renovate in #22473

[PM-412222] Update sdk decryption failure dialog copy and design by @shane-melton in #22619

[PM-42663] Update ts-strict for components by @BTreston in #22774

[PM-42664] Refactor libs/common for ts-strict by @BTreston in #22779

[PM-42662] Update ac models for ts-strict by @BTreston in #22783

Auth/PM-42704 - Rename auth icons to be generic for reuse by @JaredSnider-Bitwarden in #22786

[BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087

[PM-43233] Instrument the Access Intelligence report flow by @Banrion in #23101

Autosync Crowdin Translations for web by @bw-ghapp in #23107

[BRE-2215] Add UAT environment web build and artifact by @michalchecinski in #23173

[PM-34732] Clean up by @BTreston in #23176

[PM-43366] Mute flaky filter menu popover test for now by @vleague2 in #23196

[PM-43776] Fix circular dependency in view password history service by @shane-melton in #23215

[PM-43773] Add server-side verification to HEC connect dialogs by @Banrion in #23222

Autosync Crowdin Translations for web by @bw-ghapp in #23253

Autosync Crowdin Translations for web by @bw-ghapp in #23255

Autosync Crowdin Translations for web by @bw-ghapp in #23269

Revert "[PM-43773] Add server-side verification to HEC connect dialogs" by @Banrion in #23296

Bump client version(s) by @github-actions in #23332

📦 Dependency Updates

[deps] UI Foundation: Update svgo to v4.0.2 [SECURITY] by @renovate in #22008

Update sdk-internal to 0.2.0-main.1015 by @bw-ghapp in #22989

Update sdk-internal to 0.2.0-main.1020 by @bw-ghapp in #23068

Update sdk-internal to 0.2.0-main.1034 by @bw-ghapp in #23277

New Contributors

@jashkarangiya made their first contribution in #22477

Full Changelog: web-v2026.9.0...web-v2026.9.1

Original source

(The listed release number is for the Bitwarden Server. Other version numbers released in this cycle include Web 2026.9.1, Browser Extension 2026.9.3, Desktop 2026.9.1, Mobile 2026.9.1, and CLI 2026.9.1)

Password Manager

• Unlock with passkeys: Passkeys can now unlock your web app or browser extension. This grows existing passkey support beyond logging in, letting you access your vault without entering the master password.
• Desktop app UI update: The desktop app UI has been updated, and more updates will follow.
• New default width for extensions: Browser extensions have a new, wider default width. You can change back to the narrow version interface or to an extra wide one from the Appearance menu.

Original source

Overview

Improved account security

Smoother folder menus and clearer confirmations when saving

Fixed plan details not updating after upgrading to Premium

Fixed Manage devices screen not showing new login requests

What's Changed

Feature Development

PM-31118: feat: Add support for SDK pin unlock by @david-livefront in #7289

[PM-41291] feat: Add model and data layer for Identity Autofill by @aj-rosado in #7232

PM-33857: feat: Add User Notification Policy banner by @david-livefront in #7303

PM-32858: feat: Update password salt creation by @david-livefront in #7312

[PM-41292] feat: Add heuristic detection for identity autofill fields by @aj-rosado in #7233

PM-32154: Feat: Update salt for new registration model by @david-livefront in #7324

PM-42849: Feat: Update Debug menu UI by @david-livefront in #7338

PM-42467: feat: Add debug menu option to share settings by @david-livefront in #7350

🐛 Bug fixes

[PM-36378] fix: Show the new folder created snackbar by @andrebispo5 in #7299

[PM-36231] fix: Show Select without dashes on vault add edit menus by @andrebispo5 in #7301

[PM-36379] fix: Show the item type in the save snackbar by @andrebispo5 in #7308

[PM-36378] fix: Remove the period from the new folder created snackbar by @andrebispo5 in #7336

[PM-41929] fix: Update the manage devices screen when a passwordless request push is received by @aj-rosado in #7280

[PM-40535] fix: Organization policy restriction notice padding and icon by @andrebispo5 in #7341

[PM-36378] fix: Remove "New folder created" snackbar from add/edit cipher flow by @andrebispo5 in #7345

PM-42839, PM-42840, PM-42841, PM-42842: bug: Minor DatePicker bug fixes by @david-livefront in #7343

[PM-41836] fix: Promote Plan screen off Free view without requiring an in-flight checkout by @aj-rosado in #7337

[PM-36376] fix: Clear folder and owner dropdown lag after a card scan by @andrebispo5 in #7353

🍒 PM-43235: bug: Remove edit button for disabled Send types by @david-livefront in #7375

⚙️ Maintenance

Crowdin Pull by @bw-ghapp[bot] in #7291

PM-42381: chore: Separate AuthState and organizations from AuthRepository by @david-livefront in #7296

Chore: Update app version name to 2026.9.0 by @david-livefront in #7317

PM-42616: Chore: Consolidate keys model by @david-livefront in #7322

Crowdin Pull by @bw-ghapp[bot] in #7327

chore: Rollback setpassword API changes by @david-livefront in #7349

Added workflow placeholder by @mpbw2 in #7351

📦 Dependency Updates

Deps: Update OkHttp to v5.5.0 by @david-livefront in #7307

Deps: Update Androidx dependencies by @david-livefront in #7306

Deps: Update AGP to v9.3.2 by @david-livefront in #7305

Update SDK to 3.0.0-8495-c1b859a9 by @bw-ghapp[bot] in #7295

Deps: Update Firebase by @david-livefront in #7310

Deps: Update Junit to v6.1.3 by @david-livefront in #7314

Deps: Update to Kotlin v2.4.10 by @david-livefront in #7315

Deps: Update Google dependencies by @david-livefront in #7316

Deps: Update to Glide v5.0.9 by @david-livefront in #7318

Deps: Update Androidx Camera dependencies by @david-livefront in #7323

[deps]: Update csv to v3.3.6 by @renovate[bot] in #7330

[deps]: Update com.google.devtools.ksp to v2.3.11 by @renovate[bot] in #7329

[deps]: Update slackapi/slack-github-action action to v4 by @renovate[bot] in #7334

[deps]: Update codecov/codecov-action action to v7 by @renovate[bot] in #7333

[deps]: Update actions/checkout action to v7 by @renovate[bot] in #7332

[deps]: Lock file maintenance by @renovate[bot] in #7335

Update SDK to 3.0.0-8671-5d8ae614 by @bw-ghapp[bot] in #7320

🎨 Other

llm: Dispatch bitwarden-software-engineer as a subagent for SDK-update evaluation by @SaintPatrck in #7313

llm: Exclude claude-code-action's restored config paths from the SDK-update push guard by @SaintPatrck in #7321

Full Changelog: v2026.8.1-bwpm...v2026.9.0-bwpm

Builds Source: https://github.com/bitwarden/android/actions/runs/34485247881

Original source

Overview

Various under-the-hood bug fixes and improvements

What's Changed

Feature Development

PM-31118: feat: Add support for SDK pin unlock by @david-livefront in #7289

[PM-41291] feat: Add model and data layer for Identity Autofill by @aj-rosado in #7232

PM-33857: feat: Add User Notification Policy banner by @david-livefront in #7303

PM-32858: feat: Update password salt creation by @david-livefront in #7312

[PM-41292] feat: Add heuristic detection for identity autofill fields by @aj-rosado in #7233

PM-32154: Feat: Update salt for new registration model by @david-livefront in #7324

PM-42849: Feat: Update Debug menu UI by @david-livefront in #7338

PM-42467: feat: Add debug menu option to share settings by @david-livefront in #7350

🐛 Bug fixes

[PM-36378] fix: Show the new folder created snackbar by @andrebispo5 in #7299

[PM-36231] fix: Show Select without dashes on vault add edit menus by @andrebispo5 in #7301

[PM-36379] fix: Show the item type in the save snackbar by @andrebispo5 in #7308

[PM-36378] fix: Remove the period from the new folder created snackbar by @andrebispo5 in #7336

[PM-41929] fix: Update the manage devices screen when a passwordless request push is received by @aj-rosado in #7280

[PM-40535] fix: Organization policy restriction notice padding and icon by @andrebispo5 in #7341

[PM-36378] fix: Remove "New folder created" snackbar from add/edit cipher flow by @andrebispo5 in #7345

PM-42839, PM-42840, PM-42841, PM-42842: bug: Minor DatePicker bug fixes by @david-livefront in #7343

[PM-41836] fix: Promote Plan screen off Free view without requiring an in-flight checkout by @aj-rosado in #7337

[PM-36376] fix: Clear folder and owner dropdown lag after a card scan by @andrebispo5 in #7353

🍒 PM-43235: bug: Remove edit button for disabled Send types by @david-livefront in #7375

⚙️ Maintenance

Crowdin Pull by @bw-ghapp[bot] in #7291

PM-42381: chore: Separate AuthState and organizations from AuthRepository by @david-livefront in #7296

Chore: Update app version name to 2026.9.0 by @david-livefront in #7317

PM-42616: Chore: Consolidate keys model by @david-livefront in #7322

Crowdin Pull by @bw-ghapp[bot] in #7327

chore: Rollback setpassword API changes by @david-livefront in #7349

Added workflow placeholder by @mpbw2 in #7351

📦 Dependency Updates

Deps: Update OkHttp to v5.5.0 by @david-livefront in #7307

Deps: Update Androidx dependencies by @david-livefront in #7306

Deps: Update AGP to v9.3.2 by @david-livefront in #7305

Update SDK to 3.0.0-8495-c1b859a9 by @bw-ghapp[bot] in #7295

Deps: Update Firebase by @david-livefront in #7310

Deps: Update Junit to v6.1.3 by @david-livefront in #7314

Deps: Update to Kotlin v2.4.10 by @david-livefront in #7315

Deps: Update Google dependencies by @david-livefront in #7316

Deps: Update to Glide v5.0.9 by @david-livefront in #7318

Deps: Update Androidx Camera dependencies by @david-livefront in #7323

[deps]: Update csv to v3.3.6 by @renovate[bot] in #7330

[deps]: Update com.google.devtools.ksp to v2.3.11 by @renovate[bot] in #7329

[deps]: Update slackapi/slack-github-action action to v4 by @renovate[bot] in #7334

[deps]: Update codecov/codecov-action action to v7 by @renovate[bot] in #7333

[deps]: Update actions/checkout action to v7 by @renovate[bot] in #7332

[deps]: Lock file maintenance by @renovate[bot] in #7335

Update SDK to 3.0.0-8671-5d8ae614 by @bw-ghapp[bot] in #7320

🎨 Other

llm: Dispatch bitwarden-software-engineer as a subagent for SDK-update evaluation by @SaintPatrck in #7313

llm: Exclude claude-code-action's restored config paths from the SDK-update push guard by @SaintPatrck in #7321

Full Changelog: v2026.8.1-bwa...v2026.9.0-bwa

Builds Source: https://github.com/bitwarden/android/actions/runs/33804330161

Original source

Overview

Clearer Shortcuts actions and messages

Various under-the-hood bug fixes and improvements

What's Changed

Feature Development

[PM-40248] feat: Enforce Send access controls via Send Controls policy by @matt-livefront in #2906

[PM-40460] feat: Enforce Send type restriction via Send Controls policy by @matt-livefront in #2909

[PM-38792] feat: Enforce Send deletion date via Send Controls policy by @matt-livefront in #2910

[PM-41028] feat: Restrict View Send screen for policy non-compliant Sends by @matt-livefront in #2920

🐛 Bug fixes

[PM-42523] fix: Restore AppIntents localization strings and detect their usage by @fedemkr in #3005

[PM-41957] fix: Show New folder created toast on all folder creation paths by @andrebispo5 in #2991

[PM-41957] fix: Remove new folder snackbar from add/edit item flow and trailing period by @andrebispo5 in #3011

[PM-40478] fix: Update Send tab visibility immediately after policy sync by @matt-livefront in #2917

[PM-43234] fix: Hide Edit option for non-compliant Sends in the send … by @matt-livefront in #3032

⚙️ Maintenance

Crowdin Pull by @bw-ghapp[bot] in #2961

[PM-42492] chore: Update Xcode to 26.6 by @fedemkr in #2997

chore: Fix Localizable.strings file by @github-actions[bot] in #2963

Added workflow placeholder by @mpbw2 in #3018

📦 Dependency Updates

Update public suffix list by @github-actions[bot] in #2990

[deps]: Update slackapi/slack-github-action action to v4 by @renovate[bot] in #2971

[deps]: Update actions/checkout action to v7 by @renovate[bot] in #2970

[deps]: Update actions/cache action to v6 by @renovate[bot] in #2969

[deps]: Update fastlane to v2.238.0 by @renovate[bot] in #2967

🎨 Other

[PM-37811] llm: Add audit build warnings command by @fedemkr in #2674

llm: Dispatch bitwarden-software-engineer as a subagent for SDK-update evaluation by @SaintPatrck in #2998

llm: Exclude claude-code-action's restored config paths from the SDK-update push guard by @SaintPatrck in #2999

llm: Fix sdk-surface-diff.sh false REMOVED on uniffi's split access modifier by @SaintPatrck in #3001

Full Changelog: v2026.8.1-bwpm...v2026.9.0-bwpm

Builds Source: https://github.com/bitwarden/ios/actions/runs/34499169910

Original source