PocketVault v2.5.1

PocketVault v2.5.1

This is the official Play App Signing build generated from the same Android App Bundle published on Google Play.

• Version name: 2.5.1
• Version code: 11
• Package name: com.turisla.hellopocket
• Source tag: v2.5.1
• Source commit: 9f715b72bf5418e45c94e6a6e5983b0cdda32a23
• Distribution artifact: Play-generated signed Universal APK
• Play App Signing certificate SHA-256: 80:D6:DE:92:50:30:84:33:55:BE:73:7D:49:F8:F6:A4:16:85:5A:B6:CD:59:44:5A:AC:93:F2:7C:64:10:E7:F1
• Uploaded AAB SHA-256: 050244b7e15b1603f4ef10066e228ef758dab4c36335260f3c40a37b13735941
• Universal APK SHA-256: 964fe30460dbb598a86d3b15a779e4288309c36a69653d46f4aa4793072b14e9

Changes

Added

• A narrowly scoped, one-time migration for early V2 vaults and backups. The app authenticates core data, TOTP entries, and every referenced attachment before activation, creates an automatic .hpb backup of an installed vault, and then atomically switches to the upgraded directory.
• Dedicated messages for a failed safety upgrade and for legacy V2 vaults that require the master password instead of biometric convenience unlock.

Changed

• Early V2 Keysets wrapped with the historical 100,000-iteration PBKDF2 parameter are accepted only for authenticated migration. The upgraded vault receives a fresh salt, a new vault identifier, associated-data-bound ciphertext, complete authenticated snapshot metadata, and a 600,000-iteration Keyset wrapper.
• Early V2 backup imports are normalized to the current format before they can replace an installed vault. V1 remains unsupported and is never migrated or overwritten.

Fixed

• A 2.5.0 compatibility regression that reported some valid early V2 vaults as damaged even though their files had not been overwritten.
• Password hints from early V2 configurations are readable again after an incorrect master-password attempt.
• Automatic-backup retention now runs only after a migrated or imported vault is activated successfully, so a failed switch cannot remove older backup history.

Verification

The attached APK was downloaded from Google Play Console, carries a verified Source Stamp, and is signed with the official Play App Signing certificate.
The Google Play and GitHub distributions use the same package name and signing identity.

Only the Play-generated Universal APK is attached to this release. The AAB is retained locally for traceability and is not distributed as an installable GitHub asset.

PocketVault v2.5.0

PocketVault v2.5.0

This is the official Play App Signing build generated from the same Android App Bundle published on Google Play.

• Version name: 2.5.0
• Version code: 10
• Package name: com.turisla.hellopocket
• Source tag: v2.5.0
• Source commit: a99faf54eea4cdf11b3ab1fa5f47400fa1ef4990
• Distribution artifact: Play-generated signed Universal APK
• Play App Signing certificate SHA-256: 80:D6:DE:92:50:30:84:33:55:BE:73:7D:49:F8:F6:A4:16:85:5A:B6:CD:59:44:5A:AC:93:F2:7C:64:10:E7:F1
• Uploaded AAB SHA-256: 4f8d4d76d4869174745306ed94f6cf3c3bd6b3bcaf26d895b48e914b392355a7
• Universal APK SHA-256: 44df09bb5c23a08226396facb9c651eb848e83318da7f5872ec90c68618f948b

Changes

Added

• A dedicated local search screen with ranked results across titles, accounts, password notes, and secure-note content. Password values and TOTP secrets are never indexed.
• A continuous HSV color palette for creating and editing categories.
• A release verifier and GitHub publisher that checks package metadata, source tags, signatures, offline manifests, and artifact hashes before publication.

Changed

• Refreshed the app-wide Material 3 design with clearer typography, spacing, surfaces, icons, dialogs, navigation, list items, and circular add actions.
• Moved password/note type selection and category selection into compact menus so filters no longer require horizontal scrolling.
• Reduced the enforced master-password minimum from 12 to 6 characters. A longer unique passphrase remains strongly recommended because six characters are not sufficient evidence of password strength.
• Upgraded the build stack to Android Gradle Plugin 9.3.1, Gradle 9.5.1, and Kotlin 2.3.21, and standardized Gradle, Android Lint, and compilation on JDK 21 while retaining the Java 11 bytecode target.
• Modernized Google Tink keyset serialization and primitive access, and enabled both code minification and resource shrinking for release builds.

Removed

• Automatic migration for V1 vaults and early V2 vaults that lack the current authenticated metadata, associated-data binding, or minimum KDF work factor. Migrate and export a fresh backup with 2.4.0 before installing 2.5.0.
• The unused legacy AES-GCM crypto manager and deprecated Tink API paths.

Fixed

• Search-field text clipping, height changes while typing, and inconsistent result subtitle alignment.
• TOTP reveal animations replaying after switching tabs instead of only after an explicit reveal action.
• Missing show/hide-password control in the backup-import password dialog.
• Oversized or misplaced attachment remove controls and inconsistent icon treatments in list items and dialogs.

Verification

The attached APK was downloaded from Google Play Console, carries a verified Source Stamp, and is signed with the official Play App Signing certificate.
The Google Play and GitHub distributions use the same package name and signing identity.

Only the Play-generated Universal APK is attached to this release. The AAB is retained locally for traceability and is not distributed as an installable GitHub asset.

PocketVault v2.4.0

PocketVault v2.4.0

This is the official Play App Signing build generated from the same Android App Bundle published on Google Play.

• Version name: 2.4.0
• Version code: 9
• Package name: com.turisla.hellopocket
• Source tag: v2.4.0
• Source commit: f18efacabbc7be7bd93a31197a0d5b5738112f26
• Distribution artifact: Play-generated signed Universal APK
• Play App Signing certificate SHA-256: 80:D6:DE:92:50:30:84:33:55:BE:73:7D:49:F8:F6:A4:16:85:5A:B6:CD:59:44:5A:AC:93:F2:7C:64:10:E7:F1
• Uploaded AAB SHA-256: 7fcc0aeb66edc1e3c5adaacaae3216afcb0f48edbb72e9c1f34a6ecf7f7c461d
• Universal APK SHA-256: b094dc1c9a9c80e9e82d58fbcaaca890d4c7da2866896c6f9b8b76e62e7b8ccf

Changes

Added

• Apache-2.0 open-source release materials, security policy, contribution guidance, and bilingual documentation.
• Public privacy-policy deployment files and an in-app open-source licenses screen.
• CI checks for compilation, unit tests, lint, privacy-policy synchronization, and the absence of network/Firebase declarations.
• Bounded automatic backup retention, safer repository error handling, and hardened vault import validation.

Changed

• New and re-keyed vaults use 600,000 PBKDF2-HMAC-SHA256 iterations; lower historical parameters remain only for legacy compatibility.
• Google Play and GitHub distribute the same Play App Signing identity; GitHub receives the Play-generated Universal APK from the same uploaded AAB.
• Debug builds use a distinct .debug application identifier and cannot overwrite the official release.
• Video thumbnail decoding and Compose side effects were hardened to reduce resource and lifecycle risks.

Removed

• Android Internet permission.
• Firebase, Crashlytics, analytics, telemetry, and remote log reporting.

Fixed

• Automatic backup growth is capped at five files and 1 GiB total.
• Repository failures are converted to explicit UI states.
• Several localization and backup-warning inconsistencies.

Verification

The attached APK was downloaded from Google Play Console, carries a verified Source Stamp, and is signed with the official Play App Signing certificate.
The Google Play and GitHub distributions use the same package name and signing identity.

Only the Play-generated Universal APK is attached to this release. The AAB is retained locally for traceability and is not distributed as an installable GitHub asset.