v1.19.0 - Organisation Controls, Accessibility & Undo Everywhere #1440

rathlinus · 2026-10-29T20:48:00Z

rathlinus
Oct 29, 2026
Maintainer

1.19.0 (2026-10-29)

1.19.0 gives admins an Organisation area: signatures, disclaimers and template libraries per domain or group, external mail warnings, idle and session time limits, settings locked to a value, and one switch that stops all traffic to third-party services. On Stalwart 1.0, group mailboxes share tags and templates, a colleague can be made a delegate in one step, and mail deleted for good can be recovered from Stalwart's archive. A new Accessibility page in Settings has presets, text size and spacing, reading aids for mail and keyboard options, and the app was gone through with screen readers, the keyboard, contrast themes and large text. A usability pass made dialogs, menus, wording and phone layouts work the same way in Mail, Calendar, Contacts and Files, and added Undo for most mail actions, a Files trash and printing. Thai is a new language.

Thank you for your donations:

You? Become a sponsor!

One-time

@systemflair
@bultester
Anonymous
Anonymous
Anonymous

Monthly

Changes

Accessibility: Text size is now a share of the text size set in the browser, from 87.5% to 200%, instead of a fixed 14, 16 or 18 px, and small text everywhere follows it. The Animations switch is now Reduce motion, which follows the system unless you set it

Features

Organisation: The admin panel has an Organisation area where the user policy applies to everyone, a domain or a group. Admins can lock any setting to a chosen value or only preset it, accessibility options included, and export and import the whole policy as one file; an import names the locks and defaults it changes. Users see "Set by your organisation" next to a locked setting
Organisation: Admins can set an organisation signature with placeholders for each user's name, address, company, job title, department and phone numbers, per domain or group, and lock it so it replaces everyone's own signature. Users fill in their details once under Settings > Account. Lines whose details are empty are left out ([Feature]: Admin-configured default/global email signature #908, thanks @chutescarabee7)
Organisation: Admins can add a legal disclaimer that goes below every message when it is sent, never into drafts, and is shown read-only in the composer
Organisation: Admins can give every user a library of templates, per domain or group, that users pick under "Organisation" in the template picker and can copy but not change
Templates: On Stalwart 1.0, members of a group mailbox share team templates, and users' own templates are kept in their account so they follow them to every browser. Templates already in a browser move over on the first sign-in. Admins can lock team templates or leave users only the organisation and team templates
Tags: On Stalwart 1.0, members of a group mailbox see the same tag names and colors on its mail, in the list, the tag picker, the sidebar and the unified inbox. They edit them under Settings > Folders & tags, where tags already on the group's mail can be given a name. Admins can lock the list per domain or group, for example so only team leads change it (tag is not working in shared folders #470, [Feature]: Admin policy gate to list the Tags above the shared mailboxes #1310, thanks @andrei-miron and @HOLOEYE-JZ)
Organisation: Admins can label mail from outside the organisation with an "External" chip and have users confirm before sending to or inviting external recipients (composer, quick reply and meeting invitations), per domain or group. Partner domains and contacts count as internal. This replaces the External Mail Warning plugin, whose safe domains can be imported. Plugins can read api.host.features.externalSenderLabel and externalRecipientWarning
Organisation: Admins can sign users out after a time without activity or a fixed time after sign-in, per domain or group. A countdown with "Stay signed in" comes first, open and minimised messages and quick replies are saved as drafts, and the login page says why
Delegates: Settings > Sharing gives a colleague read, or read and write, access to all mail folders or just the Inbox, calendars and contacts in one step, lists who has access to what, and removes access everywhere at once. Admins can hide it per domain or group and limit every share dialog to read access on Organisation > Sharing
Recover deleted items: On Stalwart Enterprise with archiving turned on, users bring back mail they deleted for good under Settings > Recover deleted items, or from a link in Trash when there is something to recover. Restored mail goes back to the Inbox unread. Admins can limit how many days back it lists or hide it per domain or group (Feature Request: Recover deleted (archived) e-mail from the Bulwark UI #1319, thanks @svandive)
Privacy: One switch, NO_THIRD_PARTY_TRAFFIC or Organisation > Security, stops every connection to services outside your own servers: telemetry, the version check, the built-in push relay, the official extension directory, sender icons, MyMemory translation, map links, OpenPGP key lookups and remote pictures in mail. Plugins that need network access don't run, and the page's CSP allows only the hosts you configured. Push registrations move to your own relay. The admin page lists what stays reachable ([Feature]: Add a fail-closed policy to disable optional third-party egress #903, thanks @rickgoud)
Team inbox: The new official Team inbox plugin lets members of a team mailbox assign messages to each other, mark them done, and filter by "Assigned to me" and "Open"
Plugins: Plugins can add keyword filters to the message list, shown as chips above it, put icons on row badges, show actions only in team mailboxes or for some keywords, change several keywords in one step, see the user's own account and which mailboxes are team mailboxes, and keep a small shared value in a team mailbox on Stalwart 1.0. Looking people up in the directory needs the new directory:read permission. Plugins can no longer set $draft, $junk, $notjunk or $phishing
Plugins: api.ui.openPage moves the tab to one of the plugin's own pages (feat(plugins): api.ui.openPage moves the tab to one of the plugin's own pages #1406, thanks @HOLOEYE-JZ). A plugin's search result snippet can mark what matched (feat(plugins): let a plugin search result's snippet mark what matched #1418, thanks @HOLOEYE-JZ), and the results block holds its place while a plugin is still searching (feat(plugins): hold the search results block's place while a plugin still searches #1419, thanks @HOLOEYE-JZ)
Accessibility: Settings has an Accessibility page. Presets for screen readers, low vision, dyslexia, focus, keyboard and motor, motion and seizure safety, and deaf and hard of hearing users change several options at once and can be undone. Alt+Shift+A opens text size, contrast, motion and the presets from anywhere, and a button in the navigation bar can do the same
Accessibility: Text can use Atkinson Hyperlegible Next, Lexend or OpenDyslexic, with more line, letter, word and paragraph spacing. More contrast works on any theme, and transparency can be reduced, links underlined, the focus outline made thicker and the pointer made larger
Accessibility: Reading aids for mail: a reader view in the app's font, spacing and colours, read aloud with the browser's voice while highlighting what it reads, a reading mask that dims all but a band of lines, animated images paused behind a play button, HTML mail as plain text by default or per message, lines of about 80 characters, wide mail scaled down to the pane, HTML mail in the app's font and colours, and message bodies at the chosen text size
Accessibility: Calendar, tag and folder colours can use a colour-blind-safe palette, and names can show next to colours: a tag's letter in its dot and the calendar's name on events
Accessibility: Large targets make buttons, menu items, rows and switches 44 px. Simple mode shows one column and, if wanted, a paged message list. Submenus, previews and the rail peek can open only on click, and tags, filter rules, apps, accounts and Pro tabs can be reordered without dragging
Accessibility: Single-key shortcuts can be turned off. Every app has landmarks, a page heading, skip links and F6 to move between panes, and ? opens the keyboard shortcuts of the app you are in
Accessibility: Screen readers are told when a folder or search has loaded, how much new mail came, when a draft is saved and when the connection drops, and toasts are read out, errors assertively. Toasts stay while focused, Alt+Shift+N jumps to the newest, and the notification duration also covers undo toasts, errors and reminders. Visual alerts flash the tab title slowly, and plugin notifications stay off the desktop during do not disturb
Accessibility: Plain language gives simpler English and German wording for sign-in, errors and Settings. Technical terms in Settings and the admin area get short explanations that work with keyboard, touch and screen readers
Accessibility: Optional confirmations before deleting, archiving and sending, a prompt for alt text when an image goes into a message, an accessible example message in the template picker, and a default font and size for new messages
Admin: Links to an accessibility statement, a barrier report, help, Easy Read and sign language show on the login page, in the settings sidebar and in the account menu when set with ACCESSIBILITY_STATEMENT_URL, ACCESSIBILITY_FEEDBACK_URL, HELP_URL, EASY_READ_URL and SIGN_LANGUAGE_URL
Admin: OAUTH_REVOKE_ON_SIGN_OUT=false keeps the refresh token valid on sign-out, so Stalwart 1.0 keeps Bulwark in the user's connected applications and doesn't ask for consent again ([Bug]: Bulwark is requesting the refresh token grant to be revoked #1388, thanks @Beckid)
Login: LOGIN_USERNAME_PLACEHOLDER sets the placeholder of the login email field ([Feature]: Configurable placeholder for the login email field #1423, thanks @DerFolder)
Login: The SSO-only login page offers "Remember me", and the box decides for every single sign-on path (Feature: explicit remember-session choice on SSO-only login #1437, thanks @marketstead-dave)
Setup: The setup wizard shows in the browser's language, in all 29 languages
Mail: Ctrl+Z or z undoes the last mail actions, newest first, marking read or unread, stars and tags included. Delete to Trash, archive, move, spam report and remove from folder offer Undo in their toast, also after a move to another account and in lists that mix accounts
Mail: Scheduled messages can be cancelled back into Drafts and rescheduled in the Schedule send dialog. "This morning" and "This afternoon" are offered as schedule times while they are still ahead ([Feature]: Add to the list of proposed Scheduled times "In the morning" #1390, thanks @PoltoS)
Mail: Before sending, Bulwark warns about unfilled placeholders such as [Your name], in every app language, and about unfinished text. The warning can be turned off
Mail: Attachments can be saved to Files from the message, from shared and group mailboxes too
Mail: The list header has a Sort menu and the folder's actions, and the filter panel is simpler, with on/off toggles, date and size ranges and every field in view
Mail: A click anywhere beside a row's avatar or checkbox ticks it ([Feature]: increase size of selection hitbox in both normal and mountain view #1381, thanks @mmomjian)
Mail: A message whose sender check failed shows a warning shield instead of the sender icon
Composer: Quoted reply history collapses behind an ellipsis ([Feature]: Collapse quoted history in the reply composer #1405, thanks @pcatapan)
Composer: A recipient chip's menu moves it between To, Cc and Bcc, and the tag and template pickers can make a new tag or open the template manager
Command palette: Mail's commands (reply, archive, delete, move, read state, spam, go to a folder), Calendar's, Contacts' and Files' commands, plugin pages, account switching and "search everything" are in the palette. Apps can add their own commands
Print: Print or Ctrl+P prints a clean copy of the page instead of the app shell: the calendar's month, week, day, agenda, tasks and single events, and contact lists, contacts, groups and directory entries
Calendar: Events can be searched from the toolbar, with / and from the command palette
Calendar: Light event colours show events tinted with a colour bar, as in Outlook
Calendar: A cancellation mail offers to remove the cancelled meeting from the calendar ([Feature]: Handle iMIP meeting cancellations: remove cancelled events from the calendar or provide a “Remove from calendar” action #1425, thanks @chutescarabee7)
Calendar: Dragging or resizing a repeating event asks which occurrences move, and the move can be undone. A single click on a month day or the all-day row opens the quick editor for an all-day event, and Shift+F10 opens an event's menu
Contacts: Address books and contact categories can be deleted in Settings, and contacts move with Move to…
Files: Deleted files go to a trash with Restore, Delete permanently and Empty trash. Files and folders move with Move to… and a folder picker, a folder downloads as a zip built in the browser with progress and cancel, and images and other files open in one preview with ←/→ to the next file
Files: With a document editor configured, "New file" also creates Word, Excel, PowerPoint, OpenDocument and (where the editor edits PDFs) PDF files and opens them in the editor. It offers the formats the editor can edit; admins can narrow the list with WOPI_NEW_FILE_FORMATS and add their own blank templates, or other formats, with WOPI_TEMPLATE_DIR ([Feature]: Offer WOPI-supported formats in the file manager's "New file" action #1393, thanks @Monarobase)
Files: The Files settings sync with the other settings, with export, reset and a one-time move from this device
Phone: Every app's phone header has notifications, the command palette and the account avatar, and Contacts gets a create button and long-press menus like Mail and Files
i18n: Thai (feat(i18n): Add Enterprise Thai (th) localization catalog & integration #1379, thanks @phumiphat2201)

Performance

Mail: Shared accounts' folders load in batched, parallel requests instead of one request per account ([Bug]: Folder tree takes ~14 s to load with 300 shared accounts (one Mailbox/get request per account) #1409, thanks @truesysadmin)
Tags: Tag counts come from one Keyword/get on servers that count keywords (perf: count tags with one Keyword/get on servers that count keywords #1399, thanks @lucamzanon), and a hidden tab recounts once it is shown instead of on every push (perf: recount tags in a hidden tab once it is shown, not on every push #1400, thanks @lucamzanon)
Push: The keep-alive echo is skipped while the push stream is live (perf: skip the keep-alive echo while the push stream is live #1401, thanks @lucamzanon)

Fixes

Accessibility: Every form field, icon button and switch has a name screen readers read out, and password managers can fill the sign-in form. Dialogs, file previews, the document editor, the search palette and plugin dialogs keep the focus inside and give it back when they close
Accessibility: The message list is one Tab stop that screen readers read row by row. The calendar grid and mini calendar work with arrow keys and read events with their date, the contact and files lists move with the keyboard, and menus, grid cells and other roving-focus controls show the focus outline
Accessibility: Text contrast is at least 4.5:1 in every built-in theme, light and dark. Switches, selections and pressed buttons stay visible in Windows contrast themes, small controls have at least a 24 px target, and toasts move away from the focused control
Accessibility: With a large browser text size the message list stays visible next to the reader and cut-off labels wrap, Aurora Glass turns solid when transparency is reduced, and animations inside mail stop with reduce motion
Dialogs: Dialogs share one shell with the close button at the end, Escape, outside click and a discard prompt for typed changes, and their title stays in view while the content scrolls. The app's own dialogs replace browser prompts and confirm boxes, and leaving an editor or admin page with unsaved changes asks first, also on browser Back
Wording: The same action has the same word, icon and place across Mail, Calendar, Contacts, Files and Settings, labels use sentence case, delete prompts say what is lost, and German addresses you formally everywhere
Mail: A message has the same actions in its row menu, the reader's ⋮ and the phone panel. The selection bar has Archive, Report spam and a menu with the rest, the phone conversation view has Archive, Delete, Report spam, Mark as unread and Move, and a swipe archives or deletes a conversation row too
Mail: Delete follows the Delete action setting, archiving a conversation leaves your sent copy in Sent, Undo after Report spam puts the message back, and View source shows the message's real source
Mail: Clearing search filters keeps the open folder ([Bug]: Clicking on clear in the inbox creates visual bug #1430, thanks @creyD), system folder names are translated in advanced search ([Bug]: Translation doesn't apply to dropdown menu #1429, thanks @creyD), and a rule run on existing messages reads From, To and Cc conditions on Stalwart ([Bug]: Applying a rule to existing messages fails on Stalwart for From/To/Cc text conditions #1424, thanks @creyD)
Mail: A dmarc pass no longer comes with a warning about failed checks ([Bug]: Calendar invitation banner reports "authentication checks failed" on mail that passes DMARC #1403, thanks @Fneufneu), a DKIM pass reported only by header.i counts (Sender verification ignores DKIM passes reported with header.i only #1420, thanks @DerFolder), and invitations from users on your own domains aren't flagged as unverified ([Bug]: Calendar invitation banner: false "unverified / sender ≠ organizer" warnings for RSVP replies and same-server mail #1374, thanks @chlw)
Mail: Failed attachment downloads and partial or failed "Download all" say so (fix: show errors when attachment downloads fail #1426, fix: report partial and failed attachment ZIP downloads #1428, thanks @VasilisNtovolos), permanent bulk deletes that partly failed are reconciled (fix: reconcile confirmed permanent bulk deletions #1384, thanks @VasilisNtovolos), and the attachments of a previewed .eml preview too (fix(files): preview the attachments of a previewed .eml #1395, thanks @lucamzanon)
Mail: Conversations show the scheduled status ([Bug]: Scheduled email displays schedule time instead of target send time and lacks pending indicator in conversations #1359, thanks @arnauda-gh), folder counts update as soon as a send removes its draft ([Bug]: Drafts briefly shows a count of 1 after sending a message #1412, thanks @NobinKhan), and a mail sent right after a proxy outage goes out from the account's identity ([Bug]: Send right after a brief proxy outage submits a mail with no From address and an @localhost Message-ID #1377, thanks @kisaanu)
Mail: Attachment icons in the reader are coloured by file type like in the list, a mail's own overflow no longer adds a second scrollbar, and pushed notifications stay silent during do not disturb
Composer: A send no longer races the autosave (fix(compose): a send no longer races the autosave armed during an in-flight save #1394, thanks @lucamzanon), a draft written in another client keeps its paragraph spacing ([Bug]: Opening a draft written by another client re-flows its paragraph spacing #1416, thanks @b3rsrk), the footer drops its labels when the composer is narrow ([Bug]: Compose footer controls overlap in narrow windows #1375, thanks @rgaliull), and the install card stays off the Send button and remembers "Not now" ([Bug]: PWA install card covers the quick-reply Send button, and "Not now" is not remembered #1411, thanks @NobinKhan)
Sign-in: The two-factor prompt shows as the next step instead of an error (Login: "two-factor code required" is shown as an error #1422, thanks @DerFolder), password and two-factor settings show after a password and code sign-in ([Bug]: Settings >> Security view missing PW and 2FA controls #1432, thanks @JamesJosephFinn), Lite on Stalwart no longer opens the browser's login dialog when the access token expired, uploads included (Lite: native Basic auth dialog when the access token expired (Stalwart also sends a Basic challenge) #1396, thanks @robinbohnen), and the account security docs open on bulwarkmail.org ([Bug]: Unable to access security-related options when using external SSO for Stalwart #1387, thanks @DodoLeDev). Every app asks for a fresh two-factor code, not only Mail
Calendar: Default alerts get account-wide unique ids ([Bug]: Calendar default alert re-use alert IDs which must be unique #1435, thanks @rich0), a shared calendar shows the colour the server gives it ([Bug]: Shared calendars get a random color even when the server provides one #1414, thanks @chodid), and one account's tasks stay out of another's task list (fix: keep one account's tasks out of another's task list #1380, thanks @HOLOEYE-JZ)
Calendar: Week and day view fill with the visible hours and mark events that run past them, a saved event comes into view, short events open on click, and events you can't change offer no Edit, Delete, drag or resize
Contacts: Exports are valid vCard 4.0 ([Bug]: vCard export declares VERSION:3.0 but writes vCard 4.0 syntax, so Outlook imports contacts badly #1407, thanks @motofix), escaped colons in imported vCard notes are decoded ([Bug]: Google Contacts vCard 3.0 import leaves escaped colons (\:) in notes (Webmail and Mobile) #1438, thanks @tacky6775), and a new or duplicated contact shows after saving
Files: Files list on Stalwart 1.0 when the account holds more nodes than one request returns ([Bug]: Opening Files with many nodes does not work #1385, thanks @IchiganCS), and Back closes a preview or the document editor instead of leaving Files
Plugins: Full-height app pages fill the page (Full-height app-page plugins remain content-sized #1357, thanks @yontani), and search stops waiting for plugin results when it fails
Right-to-left: In Arabic, Hebrew and Persian, arrows, panels, drawers and the phone sidebar are mirrored, events sit on the right day, and senders, subjects and event titles keep their own text direction
Phone: Tour steps open the screen they point at, toasts sit above the bottom bars and can be swiped away, and calendar, contact and settings rows put their actions behind a ⋮ menu
Build: The production build's type check stays within 2 GB of memory ([Bug]: Node out of memory (Ineffective mark-compacts near heap limit) when building Bulwark under constrained system #1431, thanks @bagasme)
Demo: Switching demo accounts no longer crashes, and forwarding as attachment, export, view source and file previews work in the demo

This discussion was created from the release v1.19.0 - Organisation Controls, Accessibility & Undo Everywhere.

Navigation Menu

Bulwark Mail

v1.19.0 - Organisation Controls, Accessibility & Undo Everywhere #1440

Uh oh!

{{title}}

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

Bulwark Mail

v1.19.0 - Organisation Controls, Accessibility & Undo Everywhere #1440

Uh oh!

rathlinus Oct 29, 2026 Maintainer

1.19.0 (2026-10-29)

Changes

Features

Performance

Fixes

Replies: 0 comments

rathlinus
Oct 29, 2026
Maintainer