Releases: Keyfount/desktop
Releases · Keyfount/desktop
Keyfount Desktop v0.0.1
First release of the Keyfount desktop app — a deterministic password manager that derives your credentials from a master password, the site, and your email, locally, with no vault and no cloud sync required.
Shipped as a single macOS Universal DMG (Apple Silicon + Intel).
⚠️ Unsigned build. Not yet code-signed or notarised, so macOS Gatekeeper will flag it as coming from an unidentified developer. To open it: right-click the app in Finder → Open, then confirm. A signed + notarised build will follow once signing credentials are in place.
Highlights since the start of the project
Core
- Deterministic password derivation in the Rust core — no stored passwords, no vault required.
- Counter-based password rotation from the account detail view.
- Per-site password profiles and default-profile autofill configuration.
Desktop app (Tauri)
- Full setup / unlock flow with master password, PIN, and biometric unlock.
- Bitwarden-style 6-group categorised settings, with real sub-pages.
- Accounts list, account detail, generator, vault switching/creation, and a sync screen with a URL → auth → approved/rejected stepper.
- Vault export/import and a danger-zone wipe.
Security
- At-rest encryption of
vault.dbwith SQLCipher. - Enforced idle auto-lock timer.
- PIN blob persisted in a sidecar so unlock-with-PIN survives restarts.
Sync
SyncableStatev2 with tombstones and authoritative apply.- Encrypted
pending_opsqueue (enqueue-then-drain, pull-before-push). - Per-account "last synced" stamp with push/pull direction.
Mobile (Android + iOS)
- Complete mobile shell — top bar, bottom nav, generator/accounts/settings/vault screens, pull-to-search.
- iOS AutoFill Credential Provider extension with biometric/master gating and create-account parity.
- Biometric + PIN unlock with native iOS support; KeyfountTheme + Liquid Glass styling.
Quality
- Accessibility: focus trap + restore-focus on modals.
- Full EN/FR internationalisation.
- Realistic Playwright e2e suite covering both the desktop and mobile shells.
- CI: shared
verify.yml(lint, typecheck, Rust fmt/clippy/tests + golden vectors, e2e, build) gating every PR, plus automated releases.