Desktop v2026.10.0

What's Changed

💙 Community Highlight

• [PM-42038] Add desktop biometric unlock support to the CLI by @nurfed1 in #22448
• [PM-43951] Add rotation icons (calendar, pause-circle, resume) by @reneelund08 in #23346
• [PM-42997] Clear policiesNew state when the sync response contains no policies by @tom27052006 in #22929
• [PM-42977] Added a length to the passphrase generated by @Jbziscool in #22906
• [PM-44145] [PM-24830] Add regression test for Chrome CSV note import by @MrSerWin in #23506
• [PM-44109] Fix: LastPass direct import corrupts non-ASCII characters (bullets, smart quotes) by @jaykaplon in #23481
• [PM-44235] Group 1Password import sources and add the direct import dialogs by @detunized in #23559

Feature Development

• [PM-42846] Wire up the invite link callout dialog by @BTreston in #23217
• [PM-43141] Introduce new import source component by @harr1424 in #23031
• Updated extension icon size by @trmartin4 in #23342
• [PM-38885] feat: Show sales rep contact message on sales-assisted trial banner by @cyprain-okeke in #23036
• [PM-40417] feat: Source the Premium to organization upgrade cart from the invoice preview by @cyprain-okeke in #23048
• [PM-44001] Add pm-43231-access-intelligence-performance-at-scale feature flag by @Banrion in #23366
• [PM-43143] Admin Console owned importer changes by @harr1424 in #23198
• feat(dev-ex): Add a debug launch script for the CLI by @quexten in #23273
• Autotype GA: port MVP type input and add execute_autotype by @neuronull in #23335
• [PM-43679] Adjust min-width so that long vendor names are truncated by @harr1424 in #23352
• [PM-43142] Vault owned importer changes by @harr1424 in #23197
• Updated icons with sized versions. by @trmartin4 in #23425
• [PM-42836] feat: Update the sponsored Families redemption page for VFO1 by @cyprain-okeke in #23304
• [PM-39106] Remove pm-34423-staged-status feature flag by @sven-bitwarden in #23422
• [PM-43756] Terminology/description change quickly for autofill policy by @JaredScar in #23363
• [PM-40421] feat: Preview-driven premium subscription page with applied-balance cart by @amorask-bitwarden in #23390
• [PM-43684] Show Decryption failures and dialog in VFO1 UX on Web by @shane-melton in #23298
• [PAM-242] Mount the PAM nav slot in the individual user layout by @Hinton in #23483
• [PM-39411] feat: Wire flight recorder into clients behind flag by @dani-garcia in #23448
• feat: Toast automation biometric requests and results by @quexten in #23482
• [CL-1316] feat: Make the vfo1 side nav logo header sticky on scroll by @BryanCunningham in #23339
• [PM-44120] Isolate Beta desktop keychain entries from stable by @trmartin4 in #23485
• [PM-41920] Add WiFi network and unknown item type handling to Proton Pass by @mcamirault in #23156
• [CL-1327] Remove rounded desktop corner from non-Mac OS by @vleague2 in #23498
• [PM-40550][PM-40553] Remove batch bar feature flags by @nick-livefront in #23456
• [PM-42229] Update accordion height to auto in shared folder card grid by @jengstrom-bw in #23561
• [PM-31298][PM-31299] Remove webauthn related origins feature flag by @djsmith85 in #23229
• [PM-43938] Call new organization collections endpoint behind performance flag by @Banrion in #23417
• [PM-44425] Add SDK-backed organization login cipher fetch to CipherService by @shane-melton in #23610
• [PM-43785] Login only organization cipher fetch for Access Intelligence by @Banrion in #23567

❗ Breaking Changes

• [PM-42019] SDK breaking change fix: pass collection type arg to SDK importer by @harr1424 in #23306
• PM-41073: Consume breaking changes from SDK making all children of CipherView decrypted by @nikwithak in #22245

🐛 Bug fixes

• [PM-42038] Gate CLI desktop biometric unlock behind a flag by @quexten in #23333
• [PM-42474] fix: validate initiator in auto-submit redirect handler by @bensbits91 in #23078
• [PM-43844] Remove extra space between Import and Add buttons in table header by @jengstrom-bw in #23341
• [PM-43945] Adds trimming/sanitization to frontend of sending invites to emails v… by @JaredScar in #23300
• [PM-43846] Prepopulate import dialog by @nick-livefront in #23345
• fix: track vault items table rows by cipher id to prevent icon flicker by @nick-livefront in #23256
• [PM-43777] Password Manager product switcher focus highlight gets stuck on by @jengstrom-bw in #23347
• [PM-43971] Hide callout if link is already configured by @BTreston in #23367
• [PM-43844] Move tw-hidden to coachmark component by @jengstrom-bw in #23391
• [PM-43728] VFO1 Item Id query param handling by @shane-melton in #23302
• [PM-43970] Work around for saving domains via the tour by @BTreston in #23388
• [PM-43841] Update URL terminology by @BTreston in #23364
• [PM-44114] Revert change detection by @BTreston in #23484
• [PM-44084] Utilizes the vfo name for success toast when the vfo1 foundation flag on by @JaredScar in #23460
• [PM-44040] fix: Remove period and em dash in My folders empty state by @gbubemismith in #23470
• [PM-44038] Move Add plan next to Subscription in settings nav by @jaasen-livefront in #23471
• [PM-44072] Drop the startup sync from desktop init by @quexten in #23447
• [PM-44071] Dedupe key state emissions by @quexten in #23446
• [PM-43947] Allow share when org settings allow owners/admins to manag… by @mcamirault in #23349
• [PM-44070] Emit feature flags only when their value changes by @quexten in #23445
• PM-39391 resolved flickering when toggling send rows by @bmbitwarden in #23328
• Auth/PM-40943 - Extension - Duo 2FA - Improve DuoResult Validation by @JaredSnider-Bitwarden in #23224
• PM-43842 changed folder label on import by @bmbitwarden in #23435
• [CL-1342] Independent Browser Filters by @nick-livefront in #23494
• [PM-42019] Fix import folder/collection count logic by @harr1424 in #23266
• PM-44046: bugfix: Decryption error is returned when the user leaves org by @nikwithak in #23496
• [PM-43358] fix: Fix account switcher badge icon spacing by @nick-livefront in #23578
• [PM-44197] Decrypt refreshed ciphers via CipherService by @quexten in #23542
• [PM-44222] Keep item URL params while the reprompt is open by @shane-melton in #23586
• [PM-44269] use native messaging for Safari biometrics when SDK IPC is on by @mzieniukbw in #23566
• [PM-44101] fix: Add truncate option to bitLink and truncate shared folder names by @nick-livefront in #23577
• [PM-41263][PM-41035] Add userId on auto-confirm method chain by @trmartin4 in #23428
• [PM-43786] perf(dirt): speed up exposed-password check at scale by @Banrion in #22853
• [PM-44516] Temporarily hide item history on item Sends (#23730) by @mcamirault in #23762
• [PM-44168] Render the popup loading spinner only while loading (#23528) by @willmartian in #23862

⚙️ Maintenance

• fea...

CLI v2026.10.0

What's Changed

💙 Community Highlight

• [PM-42038] Add desktop biometric unlock support to the CLI by @nurfed1 in #22448
• [PM-43951] Add rotation icons (calendar, pause-circle, resume) by @reneelund08 in #23346
• [PM-42997] Clear policiesNew state when the sync response contains no policies by @tom27052006 in #22929
• [PM-42977] Added a length to the passphrase generated by @Jbziscool in #22906
• [PM-44145] [PM-24830] Add regression test for Chrome CSV note import by @MrSerWin in #23506
• [PM-44109] Fix: LastPass direct import corrupts non-ASCII characters (bullets, smart quotes) by @jaykaplon in #23481
• [PM-44235] Group 1Password import sources and add the direct import dialogs by @detunized in #23559

Feature Development

• [PM-42846] Wire up the invite link callout dialog by @BTreston in #23217
• [PM-43141] Introduce new import source component by @harr1424 in #23031
• Updated extension icon size by @trmartin4 in #23342
• [PM-38885] feat: Show sales rep contact message on sales-assisted trial banner by @cyprain-okeke in #23036
• [PM-40417] feat: Source the Premium to organization upgrade cart from the invoice preview by @cyprain-okeke in #23048
• [PM-44001] Add pm-43231-access-intelligence-performance-at-scale feature flag by @Banrion in #23366
• [PM-43143] Admin Console owned importer changes by @harr1424 in #23198
• feat(dev-ex): Add a debug launch script for the CLI by @quexten in #23273
• Autotype GA: port MVP type input and add execute_autotype by @neuronull in #23335
• [PM-43679] Adjust min-width so that long vendor names are truncated by @harr1424 in #23352
• [PM-43142] Vault owned importer changes by @harr1424 in #23197
• Updated icons with sized versions. by @trmartin4 in #23425
• [PM-42836] feat: Update the sponsored Families redemption page for VFO1 by @cyprain-okeke in #23304
• [PM-39106] Remove pm-34423-staged-status feature flag by @sven-bitwarden in #23422
• [PM-43756] Terminology/description change quickly for autofill policy by @JaredScar in #23363
• [PM-40421] feat: Preview-driven premium subscription page with applied-balance cart by @amorask-bitwarden in #23390
• [PM-43684] Show Decryption failures and dialog in VFO1 UX on Web by @shane-melton in #23298
• [PAM-242] Mount the PAM nav slot in the individual user layout by @Hinton in #23483
• [PM-39411] feat: Wire flight recorder into clients behind flag by @dani-garcia in #23448
• feat: Toast automation biometric requests and results by @quexten in #23482
• [CL-1316] feat: Make the vfo1 side nav logo header sticky on scroll by @BryanCunningham in #23339
• [PM-44120] Isolate Beta desktop keychain entries from stable by @trmartin4 in #23485
• [PM-41920] Add WiFi network and unknown item type handling to Proton Pass by @mcamirault in #23156
• [CL-1327] Remove rounded desktop corner from non-Mac OS by @vleague2 in #23498
• [PM-40550][PM-40553] Remove batch bar feature flags by @nick-livefront in #23456
• [PM-42229] Update accordion height to auto in shared folder card grid by @jengstrom-bw in #23561
• [PM-31298][PM-31299] Remove webauthn related origins feature flag by @djsmith85 in #23229
• [PM-43938] Call new organization collections endpoint behind performance flag by @Banrion in #23417
• [PM-44425] Add SDK-backed organization login cipher fetch to CipherService by @shane-melton in #23610
• [PM-43785] Login only organization cipher fetch for Access Intelligence by @Banrion in #23567

❗ Breaking Changes

• [PM-42019] SDK breaking change fix: pass collection type arg to SDK importer by @harr1424 in #23306
• PM-41073: Consume breaking changes from SDK making all children of CipherView decrypted by @nikwithak in #22245

🐛 Bug fixes

• [PM-42038] Gate CLI desktop biometric unlock behind a flag by @quexten in #23333
• [PM-42474] fix: validate initiator in auto-submit redirect handler by @bensbits91 in #23078
• [PM-43844] Remove extra space between Import and Add buttons in table header by @jengstrom-bw in #23341
• [PM-43945] Adds trimming/sanitization to frontend of sending invites to emails v… by @JaredScar in #23300
• [PM-43846] Prepopulate import dialog by @nick-livefront in #23345
• fix: track vault items table rows by cipher id to prevent icon flicker by @nick-livefront in #23256
• [PM-43777] Password Manager product switcher focus highlight gets stuck on by @jengstrom-bw in #23347
• [PM-43971] Hide callout if link is already configured by @BTreston in #23367
• [PM-43844] Move tw-hidden to coachmark component by @jengstrom-bw in #23391
• [PM-43728] VFO1 Item Id query param handling by @shane-melton in #23302
• [PM-43970] Work around for saving domains via the tour by @BTreston in #23388
• [PM-43841] Update URL terminology by @BTreston in #23364
• [PM-44114] Revert change detection by @BTreston in #23484
• [PM-44084] Utilizes the vfo name for success toast when the vfo1 foundation flag on by @JaredScar in #23460
• [PM-44040] fix: Remove period and em dash in My folders empty state by @gbubemismith in #23470
• [PM-44038] Move Add plan next to Subscription in settings nav by @jaasen-livefront in #23471
• [PM-44072] Drop the startup sync from desktop init by @quexten in #23447
• [PM-44071] Dedupe key state emissions by @quexten in #23446
• [PM-43947] Allow share when org settings allow owners/admins to manag… by @mcamirault in #23349
• [PM-44070] Emit feature flags only when their value changes by @quexten in #23445
• PM-39391 resolved flickering when toggling send rows by @bmbitwarden in #23328
• Auth/PM-40943 - Extension - Duo 2FA - Improve DuoResult Validation by @JaredSnider-Bitwarden in #23224
• PM-43842 changed folder label on import by @bmbitwarden in #23435
• [CL-1342] Independent Browser Filters by @nick-livefront in #23494
• [PM-42019] Fix import folder/collection count logic by @harr1424 in #23266
• PM-44046: bugfix: Decryption error is returned when the user leaves org by @nikwithak in #23496
• [PM-43358] fix: Fix account switcher badge icon spacing by @nick-livefront in #23578
• [PM-44197] Decrypt refreshed ciphers via CipherService by @quexten in #23542
• [PM-44222] Keep item URL params while the reprompt is open by @shane-melton in #23586
• [PM-44269] use native messaging for Safari biometrics when SDK IPC is on by @mzieniukbw in #23566
• [PM-44101] fix: Add truncate option to bitLink and truncate shared folder names by @nick-livefront in #23577
• [PM-41263][PM-41035] Add userId on auto-confirm method chain by @trmartin4 in #23428
• [PM-43786] perf(dirt): speed up exposed-password check at scale by @Banrion in #22853
• [PM-44516] Temporarily hide item history on item Sends (#23730) by @mcamirault in #23762
• [PM-44168] Render the popup loading spinner only while loading (#23528) by @willmartian in #23862

⚙️ Maintenance

• fea...

Browser v2026.10.0

What's Changed

💙 Community Highlight

• [PM-42038] Add desktop biometric unlock support to the CLI by @nurfed1 in #22448
• [PM-43951] Add rotation icons (calendar, pause-circle, resume) by @reneelund08 in #23346
• [PM-42997] Clear policiesNew state when the sync response contains no policies by @tom27052006 in #22929
• [PM-42977] Added a length to the passphrase generated by @Jbziscool in #22906
• [PM-44145] [PM-24830] Add regression test for Chrome CSV note import by @MrSerWin in #23506
• [PM-44109] Fix: LastPass direct import corrupts non-ASCII characters (bullets, smart quotes) by @jaykaplon in #23481
• [PM-44235] Group 1Password import sources and add the direct import dialogs by @detunized in #23559

Feature Development

• [PM-42846] Wire up the invite link callout dialog by @BTreston in #23217
• [PM-43141] Introduce new import source component by @harr1424 in #23031
• Updated extension icon size by @trmartin4 in #23342
• [PM-38885] feat: Show sales rep contact message on sales-assisted trial banner by @cyprain-okeke in #23036
• [PM-40417] feat: Source the Premium to organization upgrade cart from the invoice preview by @cyprain-okeke in #23048
• [PM-44001] Add pm-43231-access-intelligence-performance-at-scale feature flag by @Banrion in #23366
• [PM-43143] Admin Console owned importer changes by @harr1424 in #23198
• feat(dev-ex): Add a debug launch script for the CLI by @quexten in #23273
• Autotype GA: port MVP type input and add execute_autotype by @neuronull in #23335
• [PM-43679] Adjust min-width so that long vendor names are truncated by @harr1424 in #23352
• [PM-43142] Vault owned importer changes by @harr1424 in #23197
• Updated icons with sized versions. by @trmartin4 in #23425
• [PM-42836] feat: Update the sponsored Families redemption page for VFO1 by @cyprain-okeke in #23304
• [PM-39106] Remove pm-34423-staged-status feature flag by @sven-bitwarden in #23422
• [PM-43756] Terminology/description change quickly for autofill policy by @JaredScar in #23363
• [PM-40421] feat: Preview-driven premium subscription page with applied-balance cart by @amorask-bitwarden in #23390
• [PM-43684] Show Decryption failures and dialog in VFO1 UX on Web by @shane-melton in #23298
• [PAM-242] Mount the PAM nav slot in the individual user layout by @Hinton in #23483
• [PM-39411] feat: Wire flight recorder into clients behind flag by @dani-garcia in #23448
• feat: Toast automation biometric requests and results by @quexten in #23482
• [CL-1316] feat: Make the vfo1 side nav logo header sticky on scroll by @BryanCunningham in #23339
• [PM-44120] Isolate Beta desktop keychain entries from stable by @trmartin4 in #23485
• [PM-41920] Add WiFi network and unknown item type handling to Proton Pass by @mcamirault in #23156
• [CL-1327] Remove rounded desktop corner from non-Mac OS by @vleague2 in #23498
• [PM-40550][PM-40553] Remove batch bar feature flags by @nick-livefront in #23456
• [PM-42229] Update accordion height to auto in shared folder card grid by @jengstrom-bw in #23561
• [PM-31298][PM-31299] Remove webauthn related origins feature flag by @djsmith85 in #23229
• [PM-43938] Call new organization collections endpoint behind performance flag by @Banrion in #23417
• [PM-44425] Add SDK-backed organization login cipher fetch to CipherService by @shane-melton in #23610
• [PM-43785] Login only organization cipher fetch for Access Intelligence by @Banrion in #23567

❗ Breaking Changes

• [PM-42019] SDK breaking change fix: pass collection type arg to SDK importer by @harr1424 in #23306
• PM-41073: Consume breaking changes from SDK making all children of CipherView decrypted by @nikwithak in #22245

🐛 Bug fixes

• [PM-42038] Gate CLI desktop biometric unlock behind a flag by @quexten in #23333
• [PM-42474] fix: validate initiator in auto-submit redirect handler by @bensbits91 in #23078
• [PM-43844] Remove extra space between Import and Add buttons in table header by @jengstrom-bw in #23341
• [PM-43945] Adds trimming/sanitization to frontend of sending invites to emails v… by @JaredScar in #23300
• [PM-43846] Prepopulate import dialog by @nick-livefront in #23345
• fix: track vault items table rows by cipher id to prevent icon flicker by @nick-livefront in #23256
• [PM-43777] Password Manager product switcher focus highlight gets stuck on by @jengstrom-bw in #23347
• [PM-43971] Hide callout if link is already configured by @BTreston in #23367
• [PM-43844] Move tw-hidden to coachmark component by @jengstrom-bw in #23391
• [PM-43728] VFO1 Item Id query param handling by @shane-melton in #23302
• [PM-43970] Work around for saving domains via the tour by @BTreston in #23388
• [PM-43841] Update URL terminology by @BTreston in #23364
• [PM-44114] Revert change detection by @BTreston in #23484
• [PM-44084] Utilizes the vfo name for success toast when the vfo1 foundation flag on by @JaredScar in #23460
• [PM-44040] fix: Remove period and em dash in My folders empty state by @gbubemismith in #23470
• [PM-44038] Move Add plan next to Subscription in settings nav by @jaasen-livefront in #23471
• [PM-44072] Drop the startup sync from desktop init by @quexten in #23447
• [PM-44071] Dedupe key state emissions by @quexten in #23446
• [PM-43947] Allow share when org settings allow owners/admins to manag… by @mcamirault in #23349
• [PM-44070] Emit feature flags only when their value changes by @quexten in #23445
• PM-39391 resolved flickering when toggling send rows by @bmbitwarden in #23328
• Auth/PM-40943 - Extension - Duo 2FA - Improve DuoResult Validation by @JaredSnider-Bitwarden in #23224
• PM-43842 changed folder label on import by @bmbitwarden in #23435
• [CL-1342] Independent Browser Filters by @nick-livefront in #23494
• [PM-42019] Fix import folder/collection count logic by @harr1424 in #23266
• PM-44046: bugfix: Decryption error is returned when the user leaves org by @nikwithak in #23496
• [PM-43358] fix: Fix account switcher badge icon spacing by @nick-livefront in #23578
• [PM-44197] Decrypt refreshed ciphers via CipherService by @quexten in #23542
• [PM-44222] Keep item URL params while the reprompt is open by @shane-melton in #23586
• [PM-44269] use native messaging for Safari biometrics when SDK IPC is on by @mzieniukbw in #23566
• [PM-44101] fix: Add truncate option to bitLink and truncate shared folder names by @nick-livefront in #23577
• [PM-41263][PM-41035] Add userId on auto-confirm method chain by @trmartin4 in #23428
• [PM-43786] perf(dirt): speed up exposed-password check at scale by @Banrion in #22853
• [PM-44516] Temporarily hide item history on item Sends (#23730) by @mcamirault in #23762
• [PM-44168] Render the popup loading spinner only while loading (#23528) by @willmartian in #23862

⚙️ Maintenance

• fea...

Web v2026.10.0

What's Changed

• Improved unlock speed
• Improved Proton Pass imports to include more item types
• Fixed vault failing to load when certain SSH key items were present
• Fixed special characters being garbled in LastPass imports
• Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

• [PM-42038] Add desktop biometric unlock support to the CLI by @nurfed1 in #22448
• [PM-43951] Add rotation icons (calendar, pause-circle, resume) by @reneelund08 in #23346
• [PM-42997] Clear policiesNew state when the sync response contains no policies by @tom27052006 in #22929
• [PM-42977] Added a length to the passphrase generated by @Jbziscool in #22906
• [PM-44145] [PM-24830] Add regression test for Chrome CSV note import by @MrSerWin in #23506
• [PM-44109] Fix: LastPass direct import corrupts non-ASCII characters (bullets, smart quotes) by @jaykaplon in #23481
• [PM-44235] Group 1Password import sources and add the direct import dialogs by @detunized in #23559

Feature Development

• [PM-42846] Wire up the invite link callout dialog by @BTreston in #23217
• [PM-43141] Introduce new import source component by @harr1424 in #23031
• Updated extension icon size by @trmartin4 in #23342
• [PM-38885] feat: Show sales rep contact message on sales-assisted trial banner by @cyprain-okeke in #23036
• [PM-40417] feat: Source the Premium to organization upgrade cart from the invoice preview by @cyprain-okeke in #23048
• [PM-44001] Add pm-43231-access-intelligence-performance-at-scale feature flag by @Banrion in #23366
• [PM-43143] Admin Console owned importer changes by @harr1424 in #23198
• feat(dev-ex): Add a debug launch script for the CLI by @quexten in #23273
• Autotype GA: port MVP type input and add execute_autotype by @neuronull in #23335
• [PM-43679] Adjust min-width so that long vendor names are truncated by @harr1424 in #23352
• [PM-43142] Vault owned importer changes by @harr1424 in #23197
• Updated icons with sized versions. by @trmartin4 in #23425
• [PM-42836] feat: Update the sponsored Families redemption page for VFO1 by @cyprain-okeke in #23304
• [PM-39106] Remove pm-34423-staged-status feature flag by @sven-bitwarden in #23422
• [PM-43756] Terminology/description change quickly for autofill policy by @JaredScar in #23363
• [PM-40421] feat: Preview-driven premium subscription page with applied-balance cart by @amorask-bitwarden in #23390
• [PM-43684] Show Decryption failures and dialog in VFO1 UX on Web by @shane-melton in #23298
• [PAM-242] Mount the PAM nav slot in the individual user layout by @Hinton in #23483
• [PM-39411] feat: Wire flight recorder into clients behind flag by @dani-garcia in #23448
• feat: Toast automation biometric requests and results by @quexten in #23482
• [CL-1316] feat: Make the vfo1 side nav logo header sticky on scroll by @BryanCunningham in #23339
• [PM-44120] Isolate Beta desktop keychain entries from stable by @trmartin4 in #23485
• [PM-41920] Add WiFi network and unknown item type handling to Proton Pass by @mcamirault in #23156
• [CL-1327] Remove rounded desktop corner from non-Mac OS by @vleague2 in #23498
• [PM-40550][PM-40553] Remove batch bar feature flags by @nick-livefront in #23456
• [PM-42229] Update accordion height to auto in shared folder card grid by @jengstrom-bw in #23561
• [PM-31298][PM-31299] Remove webauthn related origins feature flag by @djsmith85 in #23229
• [PM-43938] Call new organization collections endpoint behind performance flag by @Banrion in #23417
• [PM-44425] Add SDK-backed organization login cipher fetch to CipherService by @shane-melton in #23610
• [PM-43785] Login only organization cipher fetch for Access Intelligence by @Banrion in #23567

❗ Breaking Changes

• [PM-42019] SDK breaking change fix: pass collection type arg to SDK importer by @harr1424 in #23306
• PM-41073: Consume breaking changes from SDK making all children of CipherView decrypted by @nikwithak in #22245

🐛 Bug fixes

• [PM-42038] Gate CLI desktop biometric unlock behind a flag by @quexten in #23333
• [PM-42474] fix: validate initiator in auto-submit redirect handler by @bensbits91 in #23078
• [PM-43844] Remove extra space between Import and Add buttons in table header by @jengstrom-bw in #23341
• [PM-43945] Adds trimming/sanitization to frontend of sending invites to emails v… by @JaredScar in #23300
• [PM-43846] Prepopulate import dialog by @nick-livefront in #23345
• fix: track vault items table rows by cipher id to prevent icon flicker by @nick-livefront in #23256
• [PM-43777] Password Manager product switcher focus highlight gets stuck on by @jengstrom-bw in #23347
• [PM-43971] Hide callout if link is already configured by @BTreston in #23367
• [PM-43844] Move tw-hidden to coachmark component by @jengstrom-bw in #23391
• [PM-43728] VFO1 Item Id query param handling by @shane-melton in #23302
• [PM-43970] Work around for saving domains via the tour by @BTreston in #23388
• [PM-43841] Update URL terminology by @BTreston in #23364
• [PM-44114] Revert change detection by @BTreston in #23484
• [PM-44084] Utilizes the vfo name for success toast when the vfo1 foundation flag on by @JaredScar in #23460
• [PM-44040] fix: Remove period and em dash in My folders empty state by @gbubemismith in #23470
• [PM-44038] Move Add plan next to Subscription in settings nav by @jaasen-livefront in #23471
• [PM-44072] Drop the startup sync from desktop init by @quexten in #23447
• [PM-44071] Dedupe key state emissions by @quexten in #23446
• [PM-43947] Allow share when org settings allow owners/admins to manag… by @mcamirault in #23349
• [PM-44070] Emit feature flags only when their value changes by @quexten in #23445
• PM-39391 resolved flickering when toggling send rows by @bmbitwarden in #23328
• Auth/PM-40943 - Extension - Duo 2FA - Improve DuoResult Validation by @JaredSnider-Bitwarden in #23224
• PM-43842 changed folder label on import by @bmbitwarden in #23435
• [CL-1342] Independent Browser Filters by @nick-livefront in #23494
• [PM-42019] Fix import folder/collection count logic by @harr1424 in #23266
• PM-44046: bugfix: Decryption error is returned when the user leaves org by @nikwithak in #23496
• [PM-43358] fix: Fix account switcher badge icon spacing by @nick-livefront in #23578
• [PM-44197] Decrypt refreshed ciphers via CipherService by @quexten in #23542
• [PM-44222] Keep item URL params while the reprompt is open by @shane-melton in #23586
• [PM-44269] use native messaging for Safari biometrics when SDK IPC is on by @mzieniukbw in #23566
• [PM-44101] fix: Add truncate option to bitLink and truncate shared folder names by @nick-livefront in #23577
• [PM-41263][PM-41035] Add userId on auto-confirm method chain by @trmartin4 in #23428
• [PM-43786] perf(dirt): speed up exposed-password check at scale by @Banrion in #22853
• [PM-44516] Temporari...

Web v2026.9.1

What's Changed

• Added the option to share vault items through a secure link
• Expanded Manage Send policies to control vault item sharing
• Updated subscription pages to show your upcoming renewal amount, tax, and date
• Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

• [PM-42093] Fix case-sensitive URI scheme checks by @jashkarangiya in #22477

Feature Development

• [SM-1588] Secrets Versioning + feature flag by @cd-bitwarden in #19405
• [PM-40320] feat: Add bulk action support to shared VaultItemsTableComponent by @jaasen-livefront in #22260
• [PM-37378] VFO1 persist active filters by @shane-melton in #22533
• Add more support for DDG browser by @kspearrin in #22696
• [PM-42170] feat: Wire quick copy icon setting to the new vault table by @jaasen-livefront in #22790
• [PM-38575] feat: hide payment modal for sales-assisted trials by @cyprain-okeke in #22805
• Add breadcrumbs to Auth settings pages by @nikwithak in #22855
• PM-40900: Add breadcrumbs to Admin-Console settings pages by @nikwithak in #22857
• PM-40896: Add breadcrumbs to data recovery settings by @nikwithak in #22859
• [CL-1240] side nav responsive behavior by @BryanCunningham in #22879
• [CL-998] filter menu and dialog spec follow-up by @willmartian in #22891
• [CL-1312] Add accordion auto height option by @vleague2 in #22938
• PM-40898: Add breadcrumbs to Billing settings pages by @nikwithak in #22945
• PM-40901: Add breadcrumbs to tools-owned settings pages by @nikwithak in #22951
• [PM-43047] Introduce new import vendor icons by @harr1424 in #22953
• [PM-42897] Move the vault banner above the vault header and add to shared folder/my folder pages by @jengstrom-bw in #23014
• [PM-42838] Implement new dialog UI by @BTreston in #23056
• [PM-42844] invite link dialog state and service by @BTreston in #23059
• [PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060
• [PM-42845] add guided tour of invite link by @BTreston in #23061
• [PM-42490] feat: Add right click menu to the VFO1 vault table by @jaasen-livefront in #23062
• [PM-42878] Add subscription ended callout to VFO1 archive view by @nick-livefront in #23066
• [PM-39929] Billing Error Card by @sbrown-livefront in #23070
• [PM-39929] Subscription Card Updates for Subscription Preview by @sbrown-livefront in #23071
• [PM-39929] Component Updates to Standalone by @sbrown-livefront in #23072
• [PM-38770] Implements support for new toggle on Invite Link modal by @JaredScar in #23077
• [PM-43267] Tools share library to support temporary item sharing by @mcamirault in #23079
• Auth/PM-43337 - Submit login form on Enter from the remember-email checkbox by @JaredSnider-Bitwarden in #23085
• [PM-40806] self host warning for invite link by @BTreston in #23088
• [PM-34732] remove feature flag, add flag for callout feature by @BTreston in #23091
• [PM-43088] Add My items chip filter to org vault's All vault items page by @gbubemismith in #23102
• [PM-42298] Integrate vault dialogs and coachmarks with VFO1 UX by @shane-melton in #23104
• [PM-39929] Cart translation keys and discount duration label by @sbrown-livefront in #23147
• [PM-39929] Preview-driven organization subscription page by @sbrown-livefront in #23151
• [PM-39982] Wire temporary item sharing in all clients by @mcamirault in #23152
• [PM-42524] feat: Update vault name and billing email fields on the shared organization form by @cyprain-okeke in #23181
• Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183
• [CL-1334] Add min-height to table toolbar and remove tooltips from filter menus by @vleague2 in #23258

🐛 Bug fixes

• [PM-16095] validation message updates by @JaredScar in #22807
• [PM-42858] Implement changes for policy for vault banner info callout by @JaredScar in #22889
• [PM-42854] bugs with policies drawers by @JaredScar in #22893
• Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899
• [PM-42853] bugs with policies list fixes by @JaredScar in #22931
• [PM-42825] Filter out provider organizations by @nick-livefront in #23016
• [PM-43083][PM-43122] Show header breadcrumbs and identity tiles for every vault scope by @gbubemismith in #23021
• Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046
• [PM-43245] fix: Apply container-type to side nav scroll container by @BryanCunningham in #23074
• [CL-1296] Ensure table content does not have clipped focus rings by @vleague2 in #23076
• [PM-42854] Fix terminology changes for VFO 1 by @JaredScar in #23080
• [PM-42853] Fix header for policies by @JaredScar in #23081
• [PM-43253] Show suspended organization icon in the Password Manager side nav by @jaasen-livefront in #23082
• [PM-43292] feat: Allow creating folders and shared folders from the toolbar's new item menu by @nick-livefront in #23089
• align mark and measure with abstraction docs by @audreyality in #23090
• [PM-42364] Missing SSO external ID and external ID from members dialog by @JaredScar in #23096
• [PM-42971] Ensure area around nav collapse button is clickable by @vleague2 in #23100
• [PM-43432] fix DI by @BTreston in #23144
• [CL-1321][CL-1322] misc filter dialog fixes by @willmartian in #23148
• PM-43471: Add missing enabled flag for vault-next storybooks by @nikwithak in #23159
• [PM-43374] Correct trash detection in desktop vault batch action bar by @gbubemismith in #23175
• [PM-43366] Improve tooltip support in filter menu and toolbar by @vleague2 in #23177
• [PM-43674] refactor(icon-tile): render glyph with bit-icon by @BryanCunningham in #23185
• [PM-43631] fix: add breadcrumbs to the settings Add plan page by @jaasen-livefront in #23188
• [PM-43460, PM-43461] feat: Nest collections and folders in filter chips by @nick-livefront in #23190
• [PM-43681] With voiceover on and navigating by keyboard, highlighted button border persists when expanding/contracting show more/less by @jengstrom-bw in #23216
• [CL-1320] Update how multi filter menu chips are treated when selected by @vleague2 in #23218
• [PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220
• [PM-43791] fix: net line-item discounts into the cart summary subtotal by @sbrown-livefront in #23223
• [PM...

Desktop v2026.9.1

What's Changed

• Added the option to share vault items through a secure link
• Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

• [PM-38402] fix(desktop): fix IPC listeners that were never getting removed by @fabiand93 in #20945
• [PM-42039] fix(desktop): access keyctl keys from their owning thread by @nurfed1 in #22449
• [PM-42093] Fix case-sensitive URI scheme checks by @jashkarangiya in #22477

Feature Development

• [PM-40320] feat: Add bulk action support to shared VaultItemsTableComponent by @jaasen-livefront in #22260
• Autotype: generate AppData from filtered, currenty running applications by @neuronull in #22656
• Remove SSH Agent v1 by @neuronull in #22762
• [PM-42170] feat: Wire quick copy icon setting to the new vault table by @jaasen-livefront in #22790
• [CL-1232] Show rounded corner in desktop layout for VFO1 by @vleague2 in #22832
• [CL-1240] side nav responsive behavior by @BryanCunningham in #22879
• [CL-998] filter menu and dialog spec follow-up by @willmartian in #22891
• desktop-autofill: Windows native passkey fixes by @iinuwa in #22894
• Autotype: move shortcut component to shared lib by @neuronull in #22898
• [CL-1312] Add accordion auto height option by @vleague2 in #22938
• [PM-43047] Introduce new import vendor icons by @harr1424 in #22953
• [PM-42897] Move the vault banner above the vault header and add to shared folder/my folder pages by @jengstrom-bw in #23014
• [PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060
• [PM-42490] feat: Add right click menu to the VFO1 vault table by @jaasen-livefront in #23062
• [PM-42878] Add subscription ended callout to VFO1 archive view by @nick-livefront in #23066
• [PM-43267] Tools share library to support temporary item sharing by @mcamirault in #23079
• Auth/PM-43337 - Submit login form on Enter from the remember-email checkbox by @JaredSnider-Bitwarden in #23085
• [PM-34732] remove feature flag, add flag for callout feature by @BTreston in #23091
• Add beta templates for Github issue reports by @trmartin4 in #23095
• [PM-43257] Update and Consolidate Autotype MVP & GA FF Logic by @coltonhurst in #23099
• [PM-43088] Add My items chip filter to org vault's All vault items page by @gbubemismith in #23102
• [PM-39982] Wire temporary item sharing in all clients by @mcamirault in #23152
• Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183
• [PM-41885] Add render and main process autotype ga services by @coltonhurst in #23189
• [PM-37378] Extend vault filter memory to Desktop by @shane-melton in #23226
• Autotype: Generate AppData from active window by @neuronull in #23243
• [CL-1334] Add min-height to table toolbar and remove tooltips from filter menus by @vleague2 in #23258
• [PM-44120] Isolate Beta desktop keychain entries from stable by @trmartin4 in #23551

🐛 Bug fixes

• Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899
• [PM-42825] Filter out provider organizations by @nick-livefront in #23016
• [PM-43083][PM-43122] Show header breadcrumbs and identity tiles for every vault scope by @gbubemismith in #23021
• Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046
• [CL-1296] Ensure table content does not have clipped focus rings by @vleague2 in #23076
• [PM-43253] Show suspended organization icon in the Password Manager side nav by @jaasen-livefront in #23082
• align mark and measure with abstraction docs by @audreyality in #23090
• [PM-42971] Ensure area around nav collapse button is clickable by @vleague2 in #23100
• [CL-1321][CL-1322] misc filter dialog fixes by @willmartian in #23148
• PM-43471: Add missing enabled flag for vault-next storybooks by @nikwithak in #23159
• [PM-43374] Correct trash detection in desktop vault batch action bar by @gbubemismith in #23175
• [PM-43366] Improve tooltip support in filter menu and toolbar by @vleague2 in #23177
• [PM-43674] refactor(icon-tile): render glyph with bit-icon by @BryanCunningham in #23185
• [PM-43460, PM-43461] feat: Nest collections and folders in filter chips by @nick-livefront in #23190
• [PM-43348] Render live vault updates on the desktop list by @gbubemismith in #23191
• [PM-43681] With voiceover on and navigating by keyboard, highlighted button border persists when expanding/contracting show more/less by @jengstrom-bw in #23216
• [CL-1320] Update how multi filter menu chips are treated when selected by @vleague2 in #23218
• [PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220
• [PM-43782] fix: uncheck select-all after clearing a capped selection by @jaasen-livefront in #23227
• fix(shared-unlock): Set destinations before starting shared unlock by @quexten in #23230
• [PM-43479] Allow horizontal scrolling in table-v2 on desktop by @willmartian in #23250
• [PM-43840] Update instances of collection to instead use shared folder by @harr1424 in #23254
• [PM-43838] fix: center empty vault description text on desktop by @gbubemismith in #23261
• [PM-43869] Disable at-risk password notifications in shared item Sends by @mcamirault in #23295

⚙️ Maintenance

• [deps]: Update actions/setup-node action to v7 by @renovate in #22473
• [PM-412222] Update sdk decryption failure dialog copy and design by @shane-melton in #22619
• Auth/PM-42704 - Rename auth icons to be generic for reuse by @JaredSnider-Bitwarden in #22786
• feat(desktop): Allow overriding the IPC socket directory by @quexten in #22911
• feat(desktop): Add an isolated debug run script for desktop by @quexten in #22912
• feat(desktop): Add development icon for desktop dev build by @quexten in #22915
• desktop: Refactor packing and signing build phases by @iinuwa in #23020
• build: Delete unused package.json scripts for desktop by @iinuwa in #23055
• [BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087
• Autosync Crowdin Translations for desktop by @bw-ghapp in #23106
• [PM-34732] Clean up by @BTreston in #23176
• Update Cargo.toml by @iinuwa in #23179
• [PM-43366] Mute flaky filter menu popover test for now by @vleague2 in #23196
• [PM-43776] Fix circular dependency in view password history service by @shane-melton in [#23215](https://gi...

CLI v2026.9.1

What's Changed

• Various under-the-hood improvements and minor bug fixes

Feature Development

• [PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060
• Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183

🐛 Bug fixes

• Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899
• Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046
• align mark and measure with abstraction docs by @audreyality in #23090
• [PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220

⚙️ Maintenance

• [deps]: Update actions/setup-node action to v7 by @renovate in #22473
• [PM-42666] ts-strict for cli files by @BTreston in #22782
• Use SEND_KDF_ITERATIONS instead of magic number by @djsmith85 in #23067
• [BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087
• Bump client version(s) by @github-actions in #23332

📦 Dependency Updates

• Update sdk-internal to 0.2.0-main.1015 by @bw-ghapp in #22989
• Update sdk-internal to 0.2.0-main.1020 by @bw-ghapp in #23068
• Update sdk-internal to 0.2.0-main.1034 by @bw-ghapp in #23277

Full Changelog: cli-v2026.9.0...cli-v2026.9.1

Browser v2026.9.3

What's Changed

• Added the option to share vault items through a secure link
• Various under-the-hood improvements and minor bug fixes

💙 Community Highlight

• [PM-39190] [PM-19354] fix(generator): restore catch-all website-name option by @esteve in #21338
• [PM-42093] Fix case-sensitive URI scheme checks by @jashkarangiya in #22477

Feature Development

• Add more support for DDG browser by @kspearrin in #22696
• [PM-40904] feat: Add extension popup header item count and vault switcher by @jaasen-livefront in #22858
• [PM-42902] wire inline menu prompt component by @dan-livefront in #22883
• [CL-998] filter menu and dialog spec follow-up by @willmartian in #22891
• [PM-40905] Extension - FAB implementation by @nick-livefront in #22897
• [CL-1312] Add accordion auto height option by @vleague2 in #22938
• [PM-43047] Introduce new import vendor icons by @harr1424 in #22953
• [PM-43249] Model changes to support temporary item sharing by @mcamirault in #23060
• [PM-43267] Tools share library to support temporary item sharing by @mcamirault in #23079
• Auth/PM-43337 - Submit login form on Enter from the remember-email checkbox by @JaredSnider-Bitwarden in #23085
• [PM-34732] remove feature flag, add flag for callout feature by @BTreston in #23091
• Add beta templates for Github issue reports by @trmartin4 in #23095
• [CL-1297] Use bit-item for table-v2 list presentation by @willmartian in #23097
• [PM-39982] Wire temporary item sharing in all clients by @mcamirault in #23152
• [CL-1249] extension scroll area updates by @BryanCunningham in #23154
• [PM-42385] Add empty autofill section description by @shane-melton in #23182
• Auth/PM-43265 - Password Prelogin - Adopt new SDK LoginClient Constructor by @JaredSnider-Bitwarden in #23183
• [CL-1334] Add min-height to table toolbar and remove tooltips from filter menus by @vleague2 in #23258

🐛 Bug fixes

• init runtime before autofill orchestrator by @addisonbeck in #22789
• Fix success message never showing for large file Sends (PM-42901) by @adudek-bw in #22899
• [PM-41548] Consider frame URLs when resolving blocked domain entries by @jprusik in #23018
• Retry pending Send deletes during full sync (PM-42963) by @adudek-bw in #23046
• fix(table-v2): do not accept undefined urlStore values as seeded filter values by @nick-livefront in #23051
• [CL-1318] Prevent pages with small y-scroll from snapping back to top when scrolled by @vleague2 in #23058
• [CL-1296] Ensure table content does not have clipped focus rings by @vleague2 in #23076
• align mark and measure with abstraction docs by @audreyality in #23090
• [CL-1321][CL-1322] misc filter dialog fixes by @willmartian in #23148
• [PM-43363] fix: Wrap long unbroken text in status lockup by @jaasen-livefront in #23150
• [PM-43451] fix: Rename and separate the no-folder filter option by @jaasen-livefront in #23153
• [PM-41425] fix: apply untrusted iframe check to fill assist targeted fields by @bensbits91 in #23155
• [PM-43450] bugfix: No items show up with 'Items with no folder' filter by @nikwithak in #23157
• PM-43471: Add missing enabled flag for vault-next storybooks by @nikwithak in #23159
• [PM-43366] Improve tooltip support in filter menu and toolbar by @vleague2 in #23177
• [PM-43674] refactor(icon-tile): render glyph with bit-icon by @BryanCunningham in #23185
• [PM-43676] harden tagAsExternal by @audreyality in #23187
• [PM-43460, PM-43461] feat: Nest collections and folders in filter chips by @nick-livefront in #23190
• [PM-43726] fix: filter browser type chip to only show vault-present types by @nick-livefront in #23202
• [PM-43743] introduce IntraprocessMessagingSubject by @audreyality in #23203
• [CL-1320] Update how multi filter menu chips are treated when selected by @vleague2 in #23218
• [PM-42963] Roll back an orphaned file Send when its creation is cancelled mid-upload by @adudek-bw in #23220
• [PM-43782] fix: uncheck select-all after clearing a capped selection by @jaasen-livefront in #23227
• fix(shared-unlock): Set destinations before starting shared unlock by @quexten in #23230
• [PM-43840] Update instances of collection to instead use shared folder by @harr1424 in #23254
• [PM-43869] Disable at-risk password notifications in shared item Sends by @mcamirault in #23295

⚙️ Maintenance

• [deps]: Update actions/setup-node action to v7 by @renovate in #22473
• [PM-412222] Update sdk decryption failure dialog copy and design by @shane-melton in #22619
• Auth/PM-42704 - Rename auth icons to be generic for reuse by @JaredSnider-Bitwarden in #22786
• feat(browser): Add a Chrome debug launcher for the extension by @quexten in #22913
• [BRE-2213] Rename PR target workflows for clarity by @michalchecinski in #23087
• [PM-43269] Browser: Update Health category details button variant and intro CTA images by @lastbestdev in #23103
• Autosync Crowdin Translations for browser by @bw-ghapp in #23105
• [PM-34732] Clean up by @BTreston in #23176
• [PM-42366] Reconstruct IPC content-script messages before relaying by @coroiu in #23192
• [PM-43366] Mute flaky filter menu popover test for now by @vleague2 in #23196
• [PM-43776] Fix circular dependency in view password history service by @shane-melton in #23215
• [PM-42469] communicate sender only through trusted channels by @audreyality in #23249
• Autosync Crowdin Translations for browser by @bw-ghapp in #23252
• Autosync Crowdin Translations for browser by @bw-ghapp in #23268
• Bump client version(s) by @github-actions in #23332
• core-js removal from chrome and version bump by @addisonbeck in #23464

📦 Dependency Updates

• [deps] UI Foundation: Update svgo to v4.0.2 [SECURITY] by @renovate in #22008
• Update sdk-internal to 0.2.0-main.1015 by @bw-ghapp in #22989
• Update sdk-internal to 0.2.0-main.1020 by @bw-ghapp in #23068
• Update sdk-internal to 0.2.0-main.1034 by @bw-ghapp in #23277

New Contributors

• @esteve made their first contribution in #21338
• @jashkarangiya made their first contribution in #22477

Full Changelog: browser-v2026.9.2...browser-v2026.9.3

Desktop v2026.9.1-beta.1

What's Changed

Beta release for UX redesign.

Browser v2026.9.2

What's Changed

⚙️ Maintenance

• core-js removal from chrome and version bump by @addisonbeck in #23462

Full Changelog: browser-v2026.9.1...browser-v2026.9.2