Skip to content

PocketVault v2.5.0

Choose a tag to compare

View all tags
@greyfreedom greyfreedom released this 06 Aug 07:06
v2.5.0
This tag was signed with the committer’s verified signature.
greyfreedom Turisla
SSH Key Fingerprint: il2UvRCIGNpfGMb+s3+97coe/KrtKsmpcfcq2FY6L7w
Verified
Learn about vigilant mode.
a99faf5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

PocketVault v2.5.0

This is the official Play App Signing build generated from the same Android App Bundle published on Google Play.

  • Version name: 2.5.0
  • Version code: 10
  • Package name: com.turisla.hellopocket
  • Source tag: v2.5.0
  • Source commit: a99faf54eea4cdf11b3ab1fa5f47400fa1ef4990
  • Distribution artifact: Play-generated signed Universal APK
  • Play App Signing certificate SHA-256: 80:D6:DE:92:50:30:84:33:55:BE:73:7D:49:F8:F6:A4:16:85:5A:B6:CD:59:44:5A:AC:93:F2:7C:64:10:E7:F1
  • Uploaded AAB SHA-256: 4f8d4d76d4869174745306ed94f6cf3c3bd6b3bcaf26d895b48e914b392355a7
  • Universal APK SHA-256: 44df09bb5c23a08226396facb9c651eb848e83318da7f5872ec90c68618f948b

Changes

Added

  • A dedicated local search screen with ranked results across titles, accounts, password notes, and secure-note content. Password values and TOTP secrets are never indexed.
  • A continuous HSV color palette for creating and editing categories.
  • A release verifier and GitHub publisher that checks package metadata, source tags, signatures, offline manifests, and artifact hashes before publication.

Changed

  • Refreshed the app-wide Material 3 design with clearer typography, spacing, surfaces, icons, dialogs, navigation, list items, and circular add actions.
  • Moved password/note type selection and category selection into compact menus so filters no longer require horizontal scrolling.
  • Reduced the enforced master-password minimum from 12 to 6 characters. A longer unique passphrase remains strongly recommended because six characters are not sufficient evidence of password strength.
  • Upgraded the build stack to Android Gradle Plugin 9.3.1, Gradle 9.5.1, and Kotlin 2.3.21, and standardized Gradle, Android Lint, and compilation on JDK 21 while retaining the Java 11 bytecode target.
  • Modernized Google Tink keyset serialization and primitive access, and enabled both code minification and resource shrinking for release builds.

Removed

  • Automatic migration for V1 vaults and early V2 vaults that lack the current authenticated metadata, associated-data binding, or minimum KDF work factor. Migrate and export a fresh backup with 2.4.0 before installing 2.5.0.
  • The unused legacy AES-GCM crypto manager and deprecated Tink API paths.

Fixed

  • Search-field text clipping, height changes while typing, and inconsistent result subtitle alignment.
  • TOTP reveal animations replaying after switching tabs instead of only after an explicit reveal action.
  • Missing show/hide-password control in the backup-import password dialog.
  • Oversized or misplaced attachment remove controls and inconsistent icon treatments in list items and dialogs.

Verification

The attached APK was downloaded from Google Play Console, carries a verified Source Stamp, and is signed with the official Play App Signing certificate.
The Google Play and GitHub distributions use the same package name and signing identity.

Only the Play-generated Universal APK is attached to this release. The AAB is retained locally for traceability and is not distributed as an installable GitHub asset.

Assets 3
Loading