Vaultwarden

Key highlights in this release:

• Updated web vault to 2025.7.0
• Improved password policies
• Enhanced admin interface and usability
• Fixed issues with Yubico key validation
• Resolved account recovery and key rotation problems
• Improved login form and custom fields handling

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

Key highlights in this release:

• Updated web-vault to v2025.5.0
• New registration flow with email verification
• Added support for mutual TLS and attachment export
• CLI now supports uploading send files with truncated filenames
• IP addresses now logged on invalid email 2FA attempts
• TOTP menu and web-client email 2FA support added
• Resolved CVE-2025-25188 and other dependency issues
• Enhanced admin interface and CLI usability
• Fixed an issue with admin diagnostics

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

Key highlights in this release:

• Fixed icon redirect issues affecting desktop clients
• Improved collection management and member editing
• Enhanced security with workflow updates
• Added bulk access functionality for collections

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

Key highlights in this release:

• Fixed issues with icons not working on desktop clients
• Resolved problems with invites not always working
• Improved DUO settings configuration
• Enhanced manager rights
• Fixed mobile client sync issues

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

⚠️ Security Fixes

• Critical vulnerabilities requiring admin token configuration
• Admin backend access risks with sendmail and favicon manipulation
• Multi-organization user privilege exploitation potential

Key highlights in this release:

• Updated web-vault to v2025.1.1
• Added partial manage role support for collections
• Manager role is converted to a Custom role with either Manage All Collections or per collection. Admins and Owners probably want to check and verify if the rights are still correct.
• The OCI containers and binaries are signed via GitHub Attestations. This allows you to verify an OCI image or even the vaultwarden binary located within the OCI image.

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

Key highlights in this release:

• Fixed security vulnerability affecting organization groups (not relevant to Vaultwarden on umbrelOS)
• Enhanced security measures and optimizations
• Improved SMTP configuration handling
• Various bug fixes and stability improvements

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

Key highlights in this release:

• Fixed push notification functionality
• Improved organization member management
• Enhanced sync compatibility with native clients
• Various bug fixes and stability improvements

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

⚠️ This release includes important security fixes. Updating is strongly recommended.

Key highlights in this release:

• Improved organization import functionality
• Enhanced security measures
• Various bug fixes and stability improvements

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

⚠️ Security update: This release includes important security fixes. Update recommended.

Key highlights in this release:

• Improved compatibility with native mobile apps
• Enhanced email template system
• Various security improvements

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

Key highlights in this release:

• Fixed issues with iOS sync and field types
• Improved collection management functionality
• Fixed organization invite URL handling
• Enhanced email system compatibility

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

Key highlights in this release:

• Fixed collection management for managers
• Improved compatibility with Windows targets

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

Key highlights in this release:

• Fixed syncing and login issues with native mobile clients
• Added CLI option to backup SQLite database
• Improved email templates for invites, 2FA incomplete logins, and new logins

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

🚨 This release includes several security fixes. We recommend updating as soon as possible.

Key highlights in this release:

• Updated web-vault to v2024.6.2
• Fixed issues with password reset enrollment
• Improved HTTP client
• Added support for MFA with Duo's Universal Prompt
• Increased maximum note size to 100,000 characters
• Fixed issues with adding ciphers to organizations on native iOS app
• Improved secure send file uploads

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

This release updates Vaultwarden from v1.30.3 to v1.31.0.

Major changes and New Features:

• Initial support for the beta releases of the new native mobile apps

• Removed support for WebSocket traffic on port 3012, as it's been integrated on the main HTTP port for a few releases

• Updated included web vault to 2024.5.1

General mention:

Bitwarden has changed the push API endpoints which affects the EU region endpoint users. If you use the push functionality and use the EU region you need to update push.bitwarden.eu to api.bitwarden.eu.

Changes:

• Improve JWT RSA key initialization and avoid saving public key

• Remove custom WebSocket code

• Replace panic with a graceful exit

• Small improvements around email change

• Change timestamp data type

• Fix manager permission within groups

• Automatically use email address as 2fa provider

• Fix typos

• Update chrono and sqlite

• Update Rust and crates

• Use async verify for Yubikey

• Update web-vault to v2024.3.1 (new vertical layout)

• Update Key Rotation web-vault v2024.3.x

• Implement custom DNS resolver

• Add extra (unsupported) container build arch's

• Pass in collection ids to notifier when sharing cipher

• Improve access to collections via groups

• Fix emergency access invites

• Some fixes for the new mobile apps

• Update Rust, crates and web-vault

• Improve Commentary Aesthetics

• Optimize Dockerfiles

• Also delete organization_api_key when deleting organizations

• Fix public api for domains with path prefix

• Update Alpine to version 3.20

• Differentiate external groups by organization id

• Remove old knowndevice route

• Update admin interface dependencies

• Update rust and remove unused header values

• Fix some nightly build errors

• Fix some more nightly errors and remove lint that will become an error by default

• Change API and structs to camelCase

• Fix cipher creation on new android app

• Remove mimalloc workaround

• Change some missing PascalCase keys

• Fix collections and native app issue

• Fix duplicate folder creations during import

• Remove duplicate registry step

• Add group support for Cipher::get_collections()

• Switch registry cache compression algorithm to zstd

• Update crates and web-vault

• Some fixes for emergency access

The full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

This release updates Vaultwarden from v1.30.0 to v1.30.3.

This is a minor release to fix some issues with push notification device registration and docker healthcheck. As well as some issues with the Login with device feature, and restore the alpine docker tag that was missing on the latest release.

Changes:

• Fix push device registration

• Decrease JWT Refresh/Auth token

• Prevent generating an error during ws close

• Fix attachment upload size check

The full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

This release updates Vaultwarden from v1.29.1 to v1.30.1.

Major changes and New Features:

• Added passkey support, allowing the browser extensions to store and use your passkeys, make sure the extension is updated to version 2023.10.0 or newer for passkey support.

• Updated web vault to 2023.10.0.

• Fixed crashes in ARMv6 devices

• Fixed crashes when trying to create/edit a cipher in the mobile applications.

The full release notes are available at https://github.com/dani-garcia/vaultwarden/releases

This release updates Vaultwarden from v1.25.0 to v1.29.1. It includes many bug fixes and performance improvements, as well as the following new features:

• Support for Forward Email
• WebSocket notifications now work via the default HTTP port
• The latest Bitwarden Directory Connector can be used now
• Support for Argon2 key derivation for the admin page token
• and more!

The full release notes are available at https://github.com/dani-garcia/vaultwarden/releases