KeePassNC 0.18.0

Added

• Tags are manageable now. Right-click a tag in the sidebar (or open the "⋯" menu in the list header while you look at it, which also works on a phone) to rename or remove it. Renaming to a name that exists already merges the two. Removing takes the tag off every entry, the entries stay, and Undo puts it back. Drag entries onto a tag to add it, ticked ones come along. Every entry a tag change touches gets a history entry, like any other edit.
• Import from Nextcloud Passwords, Passman and Bitwarden JSON files. For Passwords take "Backup or export" → "Database backup": folders, tags and extra fields come along, and Passman's files as attachments. Passwords' German CSV and Passman's CSV work too.
• Imports can carry extra fields, the summary names the format, and an export protected with a password is turned away with a hint.
• Several entries at once. Ctrl/Cmd+click selects an entry, Shift+click selects everything in between, Ctrl+A selects the whole list, or press the new select button next to the sort menu (handy on a phone) and just tap. A bar replaces the list header and moves, tags (add or remove) or deletes the lot, in the recycle bin it restores them. Deleting offers Undo like for a single entry. Drag one selected entry onto a group and the others come along. Esc or "Done" ends it. Tag changes leave a history entry on every entry they touch, like any other edit. After a CSV import, sorting 300 entries into groups is no longer a one-by-one job.
• The entry editor says so when another entry has the same password: "Also used in: Amazon, eBay", right under the strength bar. It names two entries at most ("… (+198)" for a password that sits in hundreds) and never takes more than two lines. It follows the health report's rules (references and entries left out of the report don't count) and goes away when you tick "Leave out of password health". Quiet text, no pop-up.

Changed

• An import that carries a bare TOTP secret (Passman, Bitwarden) completes it to an otpauth:// URL with name and issuer, exactly like the entry editor does, so authenticator apps and KeePassXC show a proper label.
• The App Store summary says what the app is: "Secure password manager for KeePass databases, right inside Nextcloud". A thin divider separates it from the description.

Fixed

• Accessibility pass, measured with axe-core on the main views (light, dark, phone). The page has a main landmark and a heading now; the entry list, the command palette and a few fields (expiry date, number of words, key derivation iterations, file pickers, attachment input) have proper names; the save button keeps its name on a phone, where only the icon shows. The mouse-only copy buttons in a list row are hidden from screen readers (the entry view and Ctrl+B / Ctrl+C do the same). The green "in sync" pill, the red "expired" badge and the grey "No file chosen" got a touch darker to reach a 4.5:1 contrast. The browser tests now run axe-core over these views, so it stays that way.

KeePassNC 0.17.1

Fixed

• "No file chosen" in the file pickers is grey in every dialog (it was blue outside the sign-in screen) and as big as the button beside it.
• The empty master password field on the sign-in screen hides its caret, so it no longer sits in the middle of the centred placeholder.

KeePassNC 0.17.0

Added

• The name of an extra field in the entry editor suggests the names already used in your database, like the tags do (KeePassXC 2.8 has the same).
• CSV import understands Proton Pass: the vault becomes the group, and the email column fills in the user name when there is none.

Changed

• The dialog "Master password and key file" drops the heading above the password fields, the field names say it already. The note about backup copies says they open with the previous credentials (password and key file), not just the password.
• Quieter sign-in screen, the same in Nextcloud and on the standalone page: the "decrypted in your browser only" note is a tooltip on the Open button, the version shares a line with "Create one", the file and password fields lose their headings (the placeholder says it, screen readers still get the name), and the fold-out is called "More options".
• On wide windows the master password field is big, centred and reaches a little over the edges of the card, as far as there is room. Narrow windows and phones keep the normal field.
• A remembered key file is a quiet line "Key file "…" remembered" with "Forget" (long names are cut, "Forget" stays); the "use" checkbox is gone, it is always used unless you pick another file by hand.
• The "Local file" tab and the key file under "More options" look like the Nextcloud tab: a field with the file name and a button instead of the browser's own file picker or a dashed box.
• Every file picker (sign-in, CSV import, merge, change master password / key file, new database) uses that look now, and you can drop a file onto it.
• Generator dialog (opened from the tool bar, not from the editor): a click on the password copies it, like on the generator page.
• Attachments are added and removed in the entry editor now, together with the other changes, and only land in the entry (and its history) when you press Apply. The entry view just shows them, with preview and download. The editor has a drop area: drag files onto it or click it to choose them. New entries can take attachments right away.

Fixed

• CSV import no longer lets a file point at your other entries: a {REF:…} in an imported title, user name, password, URL or notes is imported as plain text (and the import summary says how many entries had one). Otherwise a CSV from elsewhere could slip another entry's password into an entry's login. KeePassXC 2.8 closed the same hole for its browser extension.

KeePassNC 0.16.3

Fixed

• Databases that were saved by KeePassDX (Android) could fail to open with "too large number": some apps write a huge "never" value as an expiry date. Those dates are read now (as the latest date KeePass can show) instead of aborting the whole file.

KeePassNC 0.16.2

Changed

• The search field looks like an input now: light background and a visible border instead of the dark grey fill, so it invites typing.
• Database → Settings: "Master password and key file", "Merge with another copy" and "CSV import / export" now lead back to Database → Settings when you cancel or close them, instead of dropping you into the vault view. The CSV dialog got the Cancel button it was missing, and the note about backup copies in "Master password and key file" is shorter and plainer.

KeePassNC 0.16.1

Changed

• Picking a database from your Nextcloud ("Browse") shows the last known contents of a folder straight away and refreshes them once the server has answered, instead of an empty "Loading …". The session token for the first request is fetched as soon as the open-vault screen appears, which saves one round trip on slow connections. Folder and file names are kept in the browser tab only (session storage), nothing else.

Fixed

• On phones, the Database and Settings dialogs no longer run past the right edge of the screen. The Database dialog got more compact tabs and tiles, and the issue chips sit under the entry name. The status line at the bottom wraps to two lines instead of cutting the message off. The password strength ("Good · 98 bit") in the entry view stays on one line, and on very narrow screens (up to 340 px) only the word is shown (the bits stay in the tooltip).

KeePassNC 0.16.0

Added

• Chinese (zh-CN) as a third language. The app follows the browser or the Nextcloud language, and the language list offers 中文 next to Deutsch and English.

Changed

• The dice icon (password generator) has fuller pips, so they no longer look so thin next to the other toolbar icons.
• The key icon (copy password on hover in the entry list) now sits centred in its button, and the hover icons are a touch larger.
• The URL field no longer hands out other entries' secrets: {REF:P@…} and references to protected fields stay as they are when the URL is shown, opened (click, Ctrl+Shift+U) or copied. Otherwise an imported or merged entry with a URL like https://evil.example/?p={REF:P@T:} would hand you a link with another entry's password in it. The entry's own {PASSWORD} and protected fields still go in when you open or copy the URL (old-school ?pass=… logins keep working), but the shown URL and the link keep the placeholder, so the password isn't on screen. Everything else ({USERNAME}, {S:Host}, {REF:U@…} …) resolves as before, and so does the password field.
• "Key file & offline options" on the open-vault screen now always starts folded, even with the offline copy switched on. One click away, a lot less card.

Fixed

• Unfolding those options inside Nextcloud no longer nudges the frame and the shield watermark sideways: the open-vault card now scrolls inside its panel instead of the whole page growing a scrollbar.
• On a Nextcloud in a sub-folder, the app page could stay completely empty: some instances hand out every app path with the webroot twice (/nc/nc/apps/...), so not a single file loaded. KeePassNC now cleans up the doubled path and shows a hint that names the setting to fix in config.php. The icons in the app menu are covered too. The "Open with KeePassNC" entry in Files is out of our hands there: Nextcloud loads that script itself, so the instance has to be fixed in config.php.
• A few texts were stuck in one language: the "Open with KeePassNC" action in Files is now English in an English Nextcloud, TOTP errors on an entry follow the interface language, the no-JavaScript notice is bilingual, and the path placeholders on the open-vault screen no longer show German folder names in English.
• The "Open with KeePassNC" action and the "+ New" entry in Files speak Chinese in a Chinese Nextcloud now, too.
• Locking (by hand or after inactivity) now closes every open dialog too. Before, a dialog such as the large password view, an entry's history or an attachment preview stayed on top of the sign-in screen, plaintext included, and the TOTP code kept ticking in the background.

KeePassNC 0.15.0

Added

• A page for the password generator alone (web-generator/), for hosting it on its own, e.g. as pass.example.org: passphrases, passwords and Simple, no sign-in, and a CSP that allows no network connections at all. It speaks German or English by browser language, with a small switch at the bottom. See docs/HOSTING.md.

Changed

• The generator's "Regenerate" button moved down next to the strength bars, so the preview gets the full width.
• The generator's small hint lines (word list source, bits per block) became tooltips on "Words", "Word list" and "Blocks"; the dotted underline shows where. The word list credits are in the README.
• The standalone page opens a local file by default, so you can try it without a server; the switch to Nextcloud/WebDAV is the same one as before and is remembered. Inside Nextcloud nothing changes.
• The "click a .kdbx file in Files" tip on the open-vault screen is a tooltip on the file label and field now, instead of a line of its own.

KeePassNC 0.14.1

Changed

• The password generator sits still now: the preview keeps a fixed height (five lines for passphrases, two for Simple, and for passwords exactly as tall as the passphrase dialog), so dragging a slider or switching tabs no longer makes the window hop. Shorter values sit centred in it.
• Passphrase options got tidier: the word list moves up next to the separator, and the capitalisation menu becomes a "First letter upper case" checkbox like in Simple. Upper case and one-word-upper are gone; a saved choice of either falls back to lower case.
• Password health fills its second row: "No issues" counts the entries that are fine, "Older than a year" the passwords that haven't changed in over a year (going by the entry history). Age is just a nudge and doesn't lower the score.
• A touch more polish on the shield mark: softly rounded tips and corners, the same everywhere.

Fixed

• The buttons under Database → Settings wrap into a tidy grid instead of running off the edge with a scrollbar.

KeePassNC 0.14.0

Added

• The search also matches the group path, so typing a folder name finds what's inside it (as in KeePass 2.60).

Fixed

• On phones the last entry in the list scrolls clear of the + button instead of hiding behind it.

Changed

• A mark of its own: the shield now carries a keyhole instead of a check mark. It's a little wider with softer shoulders, and the keyhole is a circle on a shaft whose end repeats the point of the shield. It's the same drawing everywhere: the app icon in Nextcloud, the sign-in page, the big watermark (the standalone page gets it behind its dark panel too), the header of the standalone page. New: a favicon and a home-screen icon, so the browser tab and your phone's home screen show it too.
• In Nextcloud the app now sits in a rounded panel in front of your instance colour, the way the native apps do (8px margin, 16px corners, edge to edge below 1024px). A calmer sign-in page (in Nextcloud's high-contrast themes the decoration steps aside, and "‹ Files" is a quiet line above the title). Inside Nextcloud it's now just the card under the header, no big blue panel next to it. A file you opened from Files shows up as a small card with its name and folder instead of a read-only path field. The key file and the offline copy tuck away under "Key file & offline options" until you need them (they open by themselves once you pick a key file). The eye for the master password sits inside the field, and "Delete local data" moved from the page footer into the settings. A touch more warmth, too: a small shield next to the title, a soft, neutral spotlight behind the card, a huge, barely-there shield in the corner, a thin accent edge, and one quiet line saying it's decrypted in your browser only. Opening has a little moment now: a sweep on the button while it decrypts, the lock springs open, and the vault fades in (skipped if your system asks for less motion). The field label gets small capitals, the card breathes a bit more, and it glows slightly while you type.