Skip to content

v2.1.0

Choose a tag to compare

View all tags
@krelltunez krelltunez released this 29 Jul 23:46
· 133 commits to main since this release
v2.1.0
1ca8e28
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security: credentials move to hardware-backed storage

Sync credentials and encryption keys are now stored in the Android Keystore
instead of app web storage. This covers WebDAV app passwords, the GLANCEvault
device token, and the sync encryption keys. Where the device supports it, the
wrapping key is hardware backed and cannot be extracted from the device.

  • Migration is automatic and one-time on first launch after updating. Nothing
    to do, and sync keeps working as before.
  • Because secrets are now device-bound, restoring a backup onto a different
    phone will ask you to re-enter your sync credentials and passphrase once.
    This is by design: credentials no longer travel in backups.

Play edition

  • The unlock screen now has a visible close button, and the back button or
    gesture dismisses it the same way.
  • The unlock screen states the purchase requirement plainly up front.
  • Updated to Google Play Billing Library 8, per Play requirements.

The GitHub sideload APK and self-hosted web builds have no unlock screen and
are unaffected by the Play edition changes.

Assets 3
Loading