v1.15.2

Your list, arranged your way

Groups arrived in 1.11.0, but setting them up meant opening each account's Edit
form, one at a time. This release is about handling a long list without that.

• Right-click an account for everything you can do with it: copy its code,
  pin it, move it to a group, select it, share its codes, edit or delete it.
  The menu opens from the keyboard too: the menu key or Shift+F10 on an
  account or a group chip, then the arrow keys.
• Groups in a few clicks. + at the end of the group strip names a new
  group and then lets you tick the accounts that go in it. Select in an
  account's menu ticks as many as you like, and Move to group sends them
  all at once — into a group, a new one, or out of every group. While the
  list is in your own order, dragging an account onto a group's chip moves it
  there.
• Rename or delete a group by right-clicking its chip. Deleting a group
  never deletes accounts: they move to No group, and the dialog says so.
  Renaming a group onto a name already in use merges the two.
• Delete several at once. The selection bar has a Delete beside Move to
  group. The confirmation names the accounts and its button carries the count
  ("Delete (3)"); all of them go in one write, each retired against sync as a
  single delete is, and Undo puts every one back in its place.
• Undo follows every one of these: a move, a delete, a group emptied by
  mistake — each toast carries it, and it puts every account back where it
  was.
• Reorder the groups by dragging their chips. The order is kept inside the
  accounts themselves, so it is encrypted with them when a password is set,
  and it comes back from an export.
• Pin to top. A pinned account stays above the rest whatever the sort
  order, and is marked with a pin. The desktop app's quick picker puts pinned
  accounts first too, after the ones that match the app in front.
• The group strip scrolls. With more groups than fit, the mouse wheel
  scrolls it sideways, an arrow appears at the edge that has more, and the
  chosen group scrolls into view. Before, the rest could only be reached with
  a sideways trackpad swipe.
• The full group name on hover, at once, the way an account's name already
  showed — a long group name cut to "G…" could not be read before.

Keyboard

• Type anywhere to search, and Enter copies the first match: three
  letters, Enter, paste.
• ↓ from the search box moves into the list, ↑ ↓ walk it, Enter
  copies the account in focus.

Moving from another app

• Proton Authenticator exports now import directly (Settings → Export in
  Proton, without a password; a password-protected export is refused with a
  note saying how to export it plainly).
• 2FAS .2fas files can be picked in the import dialogs; they were
  supported but the file picker did not offer them.
• Add account has "Moving from another app? Import a file · Paste links"
  at the bottom of both tabs, so the import is not only in Settings.

Also new

• The first screen sits in the middle of the window instead of against
  its top, and its choices are cards that lift under the pointer and arrive
  one after another.
• "No QR code on this page" now offers the two ways out: scan the code on
  your phone with the camera, or type the key instead.
• "Scan the QR code on this page" on the first screen is offered only
  where it can work: not when the welcome page opened the extension by itself
  (there is no click to grant the capture), not on authenticator.sh, and not
  on a browser page such as a new tab. Before, the welcome page — where every
  new install first sees the extension — offered it, and it could only fail.
• The welcome page knows where the icon is. Asked by authenticator.sh —
  the one site the extension answers — the extension now also says whether
  its icon is on the toolbar (chrome.action.getUserSettings; Chrome 153
  pins new extensions there for some people). If it is, the page skips the
  "find it behind the puzzle piece, then pin it" instructions.
• Dialogs, menus and the selection bar arrive instead of appearing
  at once: 120–180 ms of fade and scale, only on the way in, and none at all
  when the system asks for reduced motion. Moving between screens stays
  instant.
• Toasts no longer pile up. The same message again counts up ("×4") in one
  toast, and no more than three are on screen; a toast with Undo outlives
  plain ones.
• The backup reminder stays away while cloud backup already keeps an
  up-to-date copy of your accounts, and comes back if it stops.
• The cloud backup offer appears only once there are accounts to back up,
  and explains how the backup works.
• The banner for our password manager is gone.

What the extension now sends

The daily check-in described in 1.14.0 and 1.15.0 gains these, and nothing
else:

• How many groups your accounts are in — a number, never their names.
• How the list is shown (normal, compact or hidden) and the
  operating system as Chrome names it (win, mac, linux, cros…).
• Sharing codes by link: that the share window was opened, that a link
  was made — for how many minutes, with a password or not, with the default,
  a custom or no label, how many digits, whether the QR code was shown — that
  it failed and why, and that it was copied. Never the account, the label's
  text or the link.
• The "no QR code" way out: which of its two ways was taken, and the
  "Import a file · Paste links" line in Add account, as kinds.

Never an account's name, issuer, secret or the site it is for. The full list is
in the README under "What is sent to our server".

No new permissions. Still no host permissions and no content scripts.