Bitwarden Release Notes

Overview

• Various under-the-hood bug fixes and improvements

<!-- Release notes generated using configuration in .github/release.yml at release/2026.3-rc45 -->

What's Changed

:shipit: Feature Development

• [PM-26177] feat: Wire up device auth key to autofill service by @iinuwa in https://github.com/bitwarden/ios/pull/2300
• [PM-32575] feat: Update SSO cookies acquired try again dialog message by @fedemkr in https://github.com/bitwarden/ios/pull/2409
• [PM-33355] feat: Sync when push notification policy changed is received by @andrebispo5 in https://github.com/bitwarden/ios/pull/2442
• [PM-33846] feat: Premium upgrade feature flag by @andrebispo5 in https://github.com/bitwarden/ios/pull/2461
• [PM-32662] feat: Improve item transfer UI by @fedemkr in https://github.com/bitwarden/ios/pull/2468
• [PM-27595] feat: Improve autofill onboarding by @fedemkr in https://github.com/bitwarden/ios/pull/2465

🐛 Bug fixes

• [PM-33252] fix: Fix update profile KDF values from User decryption options on sync by @fedemkr in https://github.com/bitwarden/ios/pull/2413
• [PM-33230] fix: Remove error alert on known devices check by @fedemkr in https://github.com/bitwarden/ios/pull/2414
• [PM-33231] fix: Dismiss keyboard on sync with browser view by @fedemkr in https://github.com/bitwarden/ios/pull/2415
• [PM-33231] fix: Fix keyboard being shown on sync with browser from login screen by @fedemkr in https://github.com/bitwarden/ios/pull/2429 …

Overview

What's New

• Improved server communication reliability with enhanced cookie handling for compatible environments Improvements
• Smoother scrolling throughout the app
• Toggle buttons now include non-color visual indicators for better accessibility
• Improved push notification diagnostics for faster issue resolution
• Streamlined biometrics handling under the hood Bug Fixes
• Fixed 400 error when archiving or unarchiving a vault item
• Fixed the crash caused by credential identity store errors
• Fixed a rare app crash on startup
• Fixed long-press autofill closing unexpectedly
• Fixed missing confirmation toast after editing or deleting a vault item

<!-- Release notes generated using configuration in .github/release.yml at release/2026.3-rc44 -->

What's Changed

:shipit: Feature Development

• [PM-26177] feat: Add models and methods to register and assert account passkeys by @iinuwa in https://github.com/bitwarden/ios/pull/2295
• [PM-26177] feat: Create stub DeviceAuthKeyService by @iinuwa in https://github.com/bitwarden/ios/pull/2297
• [PM-32742] feat: Server communication cookie bootstrap config models and environment by @fedemkr in https://github.com/bitwarden/ios/pull/2378
• [PM-29876] feat: Implement server communication config SDK services by @fedemkr in https://github.com/bitwarden/ios/pull/2382
• [PM-29877] feat: Handle acquire cookies and 302 redirection for SSO cookies vendor flow by @fedemkr in https://github.com/bitwarden/ios/pull/2401 …

Overview

• Varous under-the-hood bug fixes and imrprovements

<!-- Release notes generated using configuration in .github/release.yml at release/2026.3-rc44 -->

What's Changed

:shipit: Feature Development

• [PM-26177] feat: Add models and methods to register and assert account passkeys by @iinuwa in https://github.com/bitwarden/ios/pull/2295
• [PM-26177] feat: Create stub DeviceAuthKeyService by @iinuwa in https://github.com/bitwarden/ios/pull/2297
• [PM-32742] feat: Server communication cookie bootstrap config models and environment by @fedemkr in https://github.com/bitwarden/ios/pull/2378
• [PM-29876] feat: Implement server communication config SDK services by @fedemkr in https://github.com/bitwarden/ios/pull/2382
• [PM-29877] feat: Handle acquire cookies and 302 redirection for SSO cookies vendor flow by @fedemkr in https://github.com/bitwarden/ios/pull/2401
• [PM-33089] feat: Prevent perform acquire cookies flow when app is in background by @fedemkr in https://github.com/bitwarden/ios/pull/2402
• [PM-29880] feat: Implement sync with in-app browser UI by @fedemkr in https://github.com/bitwarden/ios/pull/2403
• [PM-32575] [RC] feat: Update SSO cookies acquired try again dialog message by @fedemkr in https://github.com/bitwarden/ios/pull/2422

🐛 Bug fixes

• [PM-31717] fix: Use default keyboard for 2FA code on iPad to prevent crash by @matt-livefront in https://github.com/bitwarden/ios/pull/2357 …

Overview

What's New

• Trusted browsers now support related origins for passkey sign-in Improvements
• Improved account protection when session tokens expire
• Passphrase generator no longer inserts unwanted spaces when no separator is configured
• Long organization names no longer overflow the item owner selection screen Bug Fixes
• Fixed error when archiving or unarchiving an item
• Improved TalkBack accessibility: focus order, heading navigation, notification badge announcements, and duplicate button label fixes
• Character type toggles (A-Z, a-z, 0-9, symbols) no longer read twice with TalkBack

<!-- Release notes generated using configuration in .github/release.yml at release/2026.3-rc48 -->

What's Changed

:shipit: Feature Development

• BWA-235: Update Authenticator to use state-based navigation for top-level navigation by @david-livefront in https://github.com/bitwarden/android/pull/6586
• [PM-32714] Add cookie domain-suffix resolution and fix cloud config path exclusion by @SaintPatrck in https://github.com/bitwarden/android/pull/6589
• Add Authenticator app-lock timeout by @david-livefront in https://github.com/bitwarden/android/pull/6609
• 🍒[PM-33262] feat: Add cookie support to Glide image requests by @SaintPatrck in https://github.com/bitwarden/android/pull/6630
• 🍒[PM-32123] feat: Propagate informative cookie redirect error message by @SaintPatrck in https://github.com/bitwarden/android/pull/6631 …

Overview

• Varous under-the-hood bug fixes and imrprovements

<!-- Release notes generated using configuration in .github/release.yml at release/2026.3-rc48 -->

What's Changed

:shipit: Feature Development

• BWA-235: Update Authenticator to use state-based navigation for top-level navigation by @david-livefront in https://github.com/bitwarden/android/pull/6586
• [PM-32714] Add cookie domain-suffix resolution and fix cloud config path exclusion by @SaintPatrck in https://github.com/bitwarden/android/pull/6589
• Add Authenticator app-lock timeout by @david-livefront in https://github.com/bitwarden/android/pull/6609
• 🍒[PM-33262] feat: Add cookie support to Glide image requests by @SaintPatrck in https://github.com/bitwarden/android/pull/6630
• 🍒[PM-32123] feat: Propagate informative cookie redirect error message by @SaintPatrck in https://github.com/bitwarden/android/pull/6631
• 🍒[PM-33227] feat: Add Clear SSO Cookies button to debug menu by @SaintPatrck in https://github.com/bitwarden/android/pull/6632

🐛 Bug fixes

• PM-30892: Fix radio button spacing by @david-livefront in https://github.com/bitwarden/android/pull/6559
• PM-29866: Remove redundant content description in icon buttons by @david-livefront in https://github.com/bitwarden/android/pull/6565
• PM-29871: Add external links announcements by @david-livefront in https://github.com/bitwarden/android/pull/6566 …

Overview

• Fixed issues affecting vault exports and archived items
• Resolved missing password re-prompts when managing archived items
• Enhanced internal diagnostics and development workflows
• Streamlined dependency updates to support faster security fixes

<!-- Release notes generated using configuration in .github/release.yml at release/2026.2-rc43 -->

What's Changed

:shipit: Feature Development

• [PM-26177] feat: Add base64url Data extensions by @iinuwa in https://github.com/bitwarden/ios/pull/2294
• [PM-31592] feat: Update Sends who can view section by @andrebispo5 in https://github.com/bitwarden/ios/pull/2325
• [PM-31890] feat: Update Sends password field by @andrebispo5 in https://github.com/bitwarden/ios/pull/2333
• [PM-26177] feat: Add device auth key to keychain repository by @iinuwa in https://github.com/bitwarden/ios/pull/2293
• [PM-31593] feat: API level support for Send authentication by @andrebispo5 in https://github.com/bitwarden/ios/pull/2342

🐛 Bug fixes

• [PM-31687] fix: Prevent flight recorder crash when deleting multiple logs by @matt-livefront in https://github.com/bitwarden/ios/pull/2324
• [PM-31830] fix: Fix archived cipher update on non-premium user by @fedemkr in https://github.com/bitwarden/ios/pull/2343
• [PM-31654] fix: Update archive unavailable alert button style by @fedemkr in https://github.com/bitwarden/ios/pull/2352 …

Overview

• General under-the-hood improvements and bug fixes.

<!-- Release notes generated using configuration in .github/release.yml at release/2026.2-rc43 -->

What's Changed

:shipit: Feature Development

• [PM-26177] feat: Add base64url Data extensions by @iinuwa in https://github.com/bitwarden/ios/pull/2294
• [PM-31592] feat: Update Sends who can view section by @andrebispo5 in https://github.com/bitwarden/ios/pull/2325
• [PM-31890] feat: Update Sends password field by @andrebispo5 in https://github.com/bitwarden/ios/pull/2333
• [PM-26177] feat: Add device auth key to keychain repository by @iinuwa in https://github.com/bitwarden/ios/pull/2293
• [PM-31593] feat: API level support for Send authentication by @andrebispo5 in https://github.com/bitwarden/ios/pull/2342

🐛 Bug fixes

• [PM-31687] fix: Prevent flight recorder crash when deleting multiple logs by @matt-livefront in https://github.com/bitwarden/ios/pull/2324
• [PM-31830] fix: Fix archived cipher update on non-premium user by @fedemkr in https://github.com/bitwarden/ios/pull/2343
• [PM-31654] fix: Update archive unavailable alert button style by @fedemkr in https://github.com/bitwarden/ios/pull/2352
• [PM-32358] fix: Add master password reprompt for archive and unarchive by @matt-livefront in https://github.com/bitwarden/ios/pull/2353
• [PM-32359] fix: Include archived ciphers in file exports by @matt-livefront in https://github.com/bitwarden/ios/pull/2354 …

Overview

• Improved browser compatibility and autofill behavior
• Fixed export, archiving, and item editing bugs
• Resolved issues with passphrase generation and date handling
• Improved accessibility and interface elements
• Enhanced stability, compatibility, and network request handling

<!-- Release notes generated using configuration in .github/release.yml at release/2026.2-rc47 -->

What's Changed

✨ Community Highlight

• [PM-31980] Fix passkeys on some browsers by fixing JSON parsing by @Darkness4 in https://github.com/bitwarden/android/pull/6502
• [PM-22523] PM-19476: Allow empty string as word separator by @EranBoudjnah in https://github.com/bitwarden/android/pull/5334
• [PM-32022] Fix browser autofill dialog showing for non-default browsers by @Vateva in https://github.com/bitwarden/android/pull/6514
• [PM-32356] Fix: Use soft logout for token refresh failures to preserve account by @hwittenborn in https://github.com/bitwarden/android/pull/6545

:shipit: Feature Development

• Update AGP to v9.0.0 by @david-livefront in https://github.com/bitwarden/android/pull/6479
• PM-31926: Add Autofill reminder for Vivaldi browser by @david-livefront in https://github.com/bitwarden/android/pull/6494
• [PM-31982] Add CookieDiskSource for cookie persistence by @SaintPatrck in https://github.com/bitwarden/android/pull/6504
• [PM-31993] Add deep link utilities for cookie vendor callbacks by @SaintPatrck in https://github.com/bitwarden/android/pull/6506 …

Desktop 1.330, Browser Extension 1.58.0, Mobile 2.18.0, CLI 1.22.1, Directory Connector 2.10.1

note

Supportability Announcement

As of this release, macOS desktop apps downloaded from the App Store will require macOS Mojave (10.14) or greater. .dmg installers, available from bitwarden.com/download and Github, are not subject to the same restriction.

• Username Generator for Browser and Desktop: Generate usernames for new credentials using email-based conventions like plus addressing or using random words (see here).

• CLI - New **serve** Option: Use the —hostname option to securely bind your API web server to a host (see here).

Server 1.48.0, Web 2.28.0

The latest release includes community-requested features and the beginning of a multi-part effort to update the web vault UI. Updates to client apps (browser extension, mobile, desktop, and CLI) will come in a follow-on release:

• Username Generator for Web Vault: Generate usernames for new credentials using email-based conventions like plus addressing or using random words. A follow-on release will include the username generator for browser extensions and desktop apps (see here).

• Web Vault - Reports Page: We've updated the location and feel of the Reports page to make it easier to find and take action on report results (see here).

• Improvements to macOS & Safari Importer: We've fixed some issues that resulted in the macOS and Safari importer failing to import URLs and notes properly.

• Accessibility Improvements: This release includes a few changes that will improve the performance of Bitwarden with assistive technologies like screen readers.

Server 1.47.0, Web 2.27.0, Desktop 1.32.0, CLI 1.22.0, Directory Connector 2.9.11

The latest release focuses on improvements to individual applications so that you can use Bitwarden exactly the way you need to. Updates to mobile apps and browser extensions will come in a follow-on release:

• Vault Management API via CLI: Using the new serve CLI command, you can make API calls to a full suite of Vault Management endpoints (see here).

• Changes to export CLI Command:export no longer requires a master password, however you can now use a --password argument to set a custom encryption/decryption password for encrypted exports (see here).

• New Importers: We've added custom importers for Dashlane .csv files and 1Password .1pux files (requires 1Password v8.5+).

• Improvements to Myki Importer: Learn more.

• Deprecation of Artifact Binding: Due to security concerns, Artifact binding for SAML SSO configurations has been removed (learn more).

• Support for Docker Compose v2

Server 1.46.0, Web 2.26.0, Desktop 1.31.0, Browser Extension 1.56.0, Mobile 2.16.0, CLI 1.21.0, Directory Connector 2.9.9

To kickoff 2022, Bitwarden is pleased to release:

• Account Switching for Desktop: Log in to up to 5 accounts at once in the Bitwarden desktop app. This is the beginning of a phased rollout of this feature across Bitwarden apps, with more to come soon (see here).

• Send on iOS: You can now share a Bitwarden Send directly from the iOS share menu (see here).

• Delete Account from Mobile: You can now delete your Bitwarden account from the mobile app, but why would you (see here)?

• New Icons: We've updated the look and feel of all Bitwarden apps with all-new icons. Feast your eyes!

• Directory Connector - Azure AD Sync Performance: Performance for Directory Connector syncs against Azure Active Directory has been improved. Organizations syncing with Azure AD will not need to change their sync configuration.

• Back End Improvements: We've been hard at work improving the general performance and stability of the Bitwarden platform, which will springboard some great new features in the future.

Server 1.45.0, Web 2.25.0, Desktop 1.30.0, Browser Extension 1.55.0, Mobile 2.15.0, CLI 1.20.0

Bitwarden is proud to announce new enterprise features in the December release that add flexibility and value to the enterprise plans:

• Key Connector: (Only available to Self-hosted Organizations) When using Login with SSO with customer-managed encryption, the self-hosted Key Connector application serves cryptographic keys to Bitwarden clients as an alternative to requiring a Master Password for Vault decryption (see here).

• Families for Enterprise: (Only available to Cloud-hosted Organizations, self-hosted in a future release) Starting with this release, members of Enterprise Organizations can redeem a free Bitwarden Families Organization for sharing with up to 5 friends or family members. Families Organizations include all premium features for all 6 users and unlimited secure data sharing (see here for details).

• MacOS and Safari Importer: We've added a custom importer for passwords exported from Safari and macOS (see here for details). …

Server 1.44.0, Web 2.24.0, Desktop 1.29.0, Browser Extension 1.54.0, Mobile 2.14.0, CLI 1.19.0

The Bitwarden team is pleased to release a set of features and updates continuing our mission of making password management easy and accessible for individuals and businesses:

note

Deprecation Announcement: The Business Portal has been deprecated. Enterprise Organizations can configure Policies and Login with SSO from the Organization Manage tab.

• Vault Timeout Policy: The Vault Timeout policy will apply a maximum Vault timeout duration for all members of your Organization (see here for details).

• Disable Personal Vault Export Policy: The Disable Personal Vault Export policy will prohibit non-Owner/non-Admin members of your Organization from exporting private Vault data (see here for details).

• Auto-scale Organization Seats: Teams and Enterprise Organizations will automatically scale up user seats as new users are invited. Organizations can set a limit on scaling to prevent the seat count from exceeding a specified number (see here for details).

• Custom Vault Timeout: You can now specify a custom timeframe (Hours and Minutes) for Vault Timeout (see here for details). …

Server 1.43.0, Web 2.23.0, Desktop 1.28.3, Browser Extension 1.53.0, Mobile 2.13.0, CLI 1.18.1

The latest release of Bitwarden focuses on often requested improvements to existing functionality:

• FIDO2 WebAuthn on Mobile: Two-step Login via FIDO2 WebAuthn is now supported on iOS and Android (see here for details).

• Admin Password Reset - Automatic Enrollment Improvement: The Automatic Enrollment policy option will now prevent users from withdrawing from Admin Password Reset (see here for details).

• Browser Extension - Select Folder from Save Bar: You can now select which Folder to save an item to directly from the Browser Extension's save prompt (see here for details).

• Browser Extension - Custom Field Context Menu Item: You can now copy an HTML element name directly from the Browser Extension's context menu for easy custom field creation (see here for details).

• Web Vault - Policies Relocation: Enterprise Policies can now only be configured from your Organization's Manage → Policies screen, rather than from the Business Portal. …

tip

Interested in becoming a Provider? To get started, we ask that:

• Your business has an active Enterprise Organization.

• Your business has a client ready to be onboarded under your Provider.

Contact Us

The latest release of Bitwarden is focused on enabling Managed Service Providers (MSPs) to support their customers' password management needs:

• Provider Portal: The Provider Portal allows Managed Service Providers (MSPs) and Resellers to create and administer Organizations on behalf of customers. Using the Portal, Providers can seamlessly support credential management across multiple customers (see here for details).

• Share Verbiage Change: We've updated the Share button to Move to Organization to make it cleared that shared items are owned by the Organization. Additionally, we've updated the "shared item" indicator ( ) to match the Collections indicator ( ).

• CLI **move** Command: In keeping with the above item, the CLI share command has been changed to move (see here for details).

The Bitwarden team is happy to announce the rollout of Admin Password Reset, the latest feature purpose-built to help enterprises seeking to ensure password security at scale. This release includes:

• Admin Password Reset: Enterprise Organizations can enroll in Admin Password Reset to allow designated administrators to reset the Master Password of Organization users (see here for details).

• Master Password Re-prompt: Use the new Master Password re-prompt option to require verification of your Master Password to access sensitive Vault items as designated by the user (see here for details).

• Bulk User Management: Organization Owners and Admins can now re-send invitations, confirm accepted users, and remove users from an Organization in-bulk (see here for details).

• Event Log Export: Export event logs directly from the Web Vault (see here for details).

• Directory Connector API Key Authentication: Starting with this release, users of Directory Connector will need to use the Organization API Key to login. …

The Bitwarden team is pleased to release a set of features and updates continuing our mission of making password management easy and accessible for individuals and businesses:

• Privacy & Security Options for Send: Use a new Send Privacy option to hide your email from recipients (see here for details). To prevent abuse, File Sends will now require a verified email address. Additionally, Enterprise Organizations can implement a new policy to set the availability of the Hide Email option (see here for details).

• FIDO Updates & Expanded Support: Our FIDO implementation has been upgraded from FIDO U2F to FIDO2 WebAuthn, but existing FIDO U2F keys will retain their integrity. FIDO support has been expanded to more Browser Extensions and the Windows Desktop App (see here for details).

• Custom Fields for Keys: Custom Field values have been upgraded to support up to 5000 characters, allowing storage of keys like RSA 4096-bit SSH keys (see here for details).

• File Size Increases: You can now create File Attachments or File Sends that are up to 500 MB each. Due to device restrictions, the old 100 MB limit is still in place for Mobile Apps.

  warning …

Bitwarden is proud to announce the release of Bitwarden Send, and end-to-end encrypted solution for ephemeral sharing. This release includes:

• Bitwarden Send: Bitwarden Send is end-to-end encrypted solution for ephemeral sharing. There's lot of material about Send on our website and Help Center, but you can start here or here.

• FIDO U2F Support for Edge: Two-step Login via FIDO U2F is now available for the Web Vault and Browser Extensions in Microsoft Edge (see here for details).

• Domain Exclusion in Browser Extensions: Bitwarden Browser Extensions can now be configured with domains to explicitly not offer to remember passwords for (see here for details).

• Improved Import Error Messages: We've had lots of folks migrating to Bitwarden recently, so we cleaned up an import error message to help you reconcile issues faster (see here for details).

• Safari Web Extension Port: Our Safari App Extension has officially been ported to a Web Extension for use with Safari 14+. Due to changes to Safari, Web Extension use is now limited to only those obtained through Mac App Store downloads (see here for details).