Passaver v1.3.1

Full Changelog: v1.3.0...v1.3.1

Passaver v1.3.0 (superseded: upgrade to v1.3.1)

Warning

Upgrade to v1.3.1. In this version, while a Fix is in progress, a password used on any page of the same site, in any tab, can replace the saved password of the login being fixed. That includes a page without HTTPS. Your real password is not exposed, but the saved one can be overwritten with the wrong value. v1.3.1 limits a Fix to the tab it opened, never lets a page without HTTPS change an HTTPS login, and asks before applying any password it didn't generate during the Fix.

To upgrade:

1. Download passaver-extension-v1.3.1.zip from the v1.3.1 release.
2. Unzip it over your existing extension folder.
3. Press reload on Passaver in chrome://extensions or edge://extensions.

Your vault is not affected and nothing needs to move. The helper (passaver-host) did not change.

Full Changelog: v1.2.1...v1.3.0

Passaver v1.2.1 (superseded: upgrade to v1.3.1)

Warning

Upgrade to v1.3.1. In this version, pressing Save after signing in on one subdomain can overwrite a login with the same username saved on another subdomain of the same site. For example, saving on www.example.com can replace the password saved for accounts.example.com. A new login made in the editor has the same problem. Your real passwords are not exposed, but a saved one can be replaced with the wrong value. v1.3.1 keeps every save on its own host, and also adds guided password fixes.

To upgrade:

1. Download passaver-extension-v1.3.1.zip from the v1.3.1 release.
2. Unzip it over your existing extension folder.
3. Press reload on Passaver in chrome://extensions or edge://extensions.

Your vault is not affected and nothing needs to move. The helper (passaver-host) did not change.

Full Changelog: v1.2.0...v1.2.1

Passaver v1.2.0 (superseded: upgrade to v1.3.1)

Warning

Upgrade to v1.3.1. This version has two problems that later versions fix:

• It can offer a saved login on a different subdomain of the same site. On shared hosting such as onrender.com, that subdomain may belong to someone else, and choosing the login there would send them your password. Fixed in v1.2.1.
• Pressing Save on one subdomain can overwrite a login with the same username saved on another subdomain. Fixed in v1.3.0.

v1.3.1 includes both fixes, plus guided password fixes.

To upgrade:

1. Download passaver-extension-v1.3.1.zip from the v1.3.1 release.
2. Unzip it over your existing extension folder.
3. Press reload on Passaver in chrome://extensions or edge://extensions.

Your vault is not affected and nothing needs to move. The helper (passaver-host) did not change.

Full Changelog: https://github.com/LeerBox/Passaver/commits/v1.2.0