v1.0.0-alpha.6

What's Changed

• Rail-led navigation, ink accent with a user-selectable palette by @alchaplinsky in #517
• feat(ui): brand-led empty states — logo mark, badges, mascot hero, watermark, shortcut sheet by @alchaplinsky in #518
• chore(release): bump version to 1.0.0-alpha.6 by @alchaplinsky in #519

Full Changelog: v1.0.0-alpha.5...v1.0.0-alpha.6

v1.0.0-alpha.5

What's Changed

• feat(list): show the login username under the title by @alchaplinsky in #511
• feat(auth): lock screen facelift — identity chip, wordmark, sync glyph footer by @alchaplinsky in #512
• feat(header): drop the workspace name beside the sync indicator by @alchaplinsky in #513
• feat(otp): compact clockwise dial that copies on click by @alchaplinsky in #514
• Lock screen workspace picker per the Rowel prototype by @alchaplinsky in #515
• chore(release): bump version to 1.0.0-alpha.5 by @alchaplinsky in #516

Full Changelog: v1.0.0-alpha.4...v1.0.0-alpha.5

v1.0.0-alpha.4

What's Changed

• feat(workspace): unlock the app once for every workspace by @alchaplinsky in #507
• feat(note): seal the note body in the read view until revealed by @alchaplinsky in #509
• feat(auth): change the master password for every workspace by @alchaplinsky in #508
• chore(release): bump version to 1.0.0-alpha.4 by @alchaplinsky in #510

Full Changelog: v1.0.0-alpha.3...v1.0.0-alpha.4

v1.0.0-alpha.3

What's Changed

• fix(privacy): uncover the vault after a Face ID unlock on iOS by @alchaplinsky in #500
• fix(unlock): enter the vault only once the window is in front by @alchaplinsky in #501
• feat(sync): keep the vault name in the vault so it reaches every device by @alchaplinsky in #502
• feat(workspace): delete a workspace from this device by @alchaplinsky in #503
• feat(workspace): let a restored vault arrive with its own name by @alchaplinsky in #504
• feat(workspace): delete a vault everywhere by @alchaplinsky in #505
• chore(release): bump version to 1.0.0-alpha.3 by @alchaplinsky in #506

Full Changelog: v1.0.0-alpha.2...v1.0.0-alpha.3

v1.0.0-alpha.2

What's Changed

• feat(sync): connecting a device joins the account's vaults instead of minting a second pack by @alchaplinsky in #483
• feat(workspace): every vault in the account on every device by @alchaplinsky in #484
• feat(workspace): add the account's other vaults with the password that just opened one by @alchaplinsky in #485
• feat(sync): publish writes after 2s and rerun a sync a write asked for mid-run by @alchaplinsky in #486
• feat(compact): one grey ground for the phone shell, white fields on it by @alchaplinsky in #487
• fix(autolock): lock on resume when the absence outlasted the timeout, arm from unlock by @alchaplinsky in #489
• fix(commands): narrow what scan_image and read_env_file will read by @alchaplinsky in #494
• fix(favicon): keep the icon cache inside the encrypted vault by @alchaplinsky in #491
• fix(import): cap the legacy .swftx backup size before reading it by @alchaplinsky in #496
• feat(security): privacy screen over the unlocked vault while unfocused by @alchaplinsky in #488
• fix(security): drop unused clipboard grant, cap response bodies, harden clipboard and keychain by @alchaplinsky in #493
• fix(oauth): a foreign loopback callback no longer aborts the sign-in by @alchaplinsky in #495
• fix(crypto): zeroize the derived SQLCipher key and legacy secret copies by @alchaplinsky in #497
• fix(passkeys): keep the private key in the core on reveal, merge it back on save by @alchaplinsky in #492
• fix(auth): checkpoint after rekey, retire the token file's generation on reseal by @alchaplinsky in #490
• docs(threat-model): match the document to the code by @alchaplinsky in #498
• chore(release): bump version to 1.0.0-alpha.2 by @alchaplinsky in #499

Full Changelog: v1.0.0-alpha.1...v1.0.0-alpha.2

v1.0.0-alpha.1

What's new

This is the first alpha of a near-total rewrite. Everything below landed since 0.6.13.

Electron → Tauri. The app now runs on a Rust core with the system webview. Smaller downloads, lower memory, and all crypto and vault access moved out of JavaScript.

New storage engine. Vaults are SQLite + SQLCipher instead of encrypted JSON files, with Argon2id key derivation and an automatic one-time migration from the old format.

Complete redesign. A new three-pane shell built on Tailwind v4 and a proper design system: reworked lock and setup screens, in-place entry editing, a ⌘K command palette, a password generator, Favorites and Archive, keyboard navigation throughout, and a new brand mark and icon set.

More kinds of secrets. Beyond logins: payment cards, secure notes, ID documents, SSH keys, .env files, API keys, and passkeys — each with its own layout, fields, and actions. Entries also take free-form extra fields.

Passkeys. A WebAuthn authenticator backed by the vault, plus passkey import and export via Bitwarden and the FIDO Credential Exchange Format.

Scan a card or ID. Drop a photo of a card or identity document and Swifty prefills the entry. OCR runs locally (macOS Vision / Windows OCR) — no image leaves the device.

Google Drive sync, rebuilt. An async sync engine with convergent last-writer-wins merge, packed snapshots, and restore-from-Drive on a fresh install. Drive can be connected during first-run onboarding.

Share a secret with a one-time link. Send any entry as a link that carries its own key: the payload is sealed under a fresh AES-256-GCM key and parked in your own Google Drive, so Google only ever holds ciphertext. The recipient needs no account, links expire after 24 hours, and you can revoke one at any time from Settings › Sync.

Biometric unlock. Touch ID / Face ID unlock backed by the system keychain, with key zeroization on lock.

Vault health. Password auditing in Settings › Audit, rebuilt on zxcvbn strength scoring and Have I Been Pwned breach checks over k-anonymity, so no password or full hash is ever sent.

iOS. Swifty now builds for iPhone, with a compact shell — tab bar, list-detail stack, biometric-first lock screen — and TestFlight distribution.

Security work. Webview and shell hardening, clipboard hygiene, failed-unlock backoff, staged updates that ask before restarting, a published SECURITY.md and threat model, and supply-chain gates with SBOM and build provenance in CI.

Imports. Bring your vault from other password managers through a common importer interface, plus CSV and CXF.

Full Changelog: v0.6.13...v1.0.0-alpha.1

0.6.13

v0.6.13

Update notarization script

0.6.12

• Fix one time passwords refreshing when switching between entries
• Remove password audit feature for now as it slows down authentication experience

0.6.11

Changes

• Fix close window exception on Windows
• Update dependencies

Handle offline error in auto updater

v0.6.10

Version bump