Skip to content

CipherMoth v3.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Nov 17:06
· 6 commits to master since this release
v3.2.0
4ab953e

Unlock with a touch, and a vault table that fits your window.

Added

  • Unlock with Touch ID or another biometric, as an option in Settings, next to the master password. The desktop app on Macs with Touch ID uses a Secure Enclave key tied to the current fingerprints; browsers use a passkey with the PRF extension (HTTPS or localhost, on a device with a fingerprint, face or PIN unlock). Turning it on needs the master password and it works only on that device. The master password is asked for again every 7, 14 or 30 days (14 by default) so it is not forgotten, and changing the master password ends every biometric unlock. The vault format and schema are unchanged. The CLI keeps using the master password.

Changed

  • The vault table scrolls on its own: the app bar, search and page controls stay in place at every window size. The page only scrolls when a window is too short to fit the table (landscape phones). Page size choices now go up to 100 (default 25) and are remembered per browser. A new search or folder filter returns to the first page, and each page starts at its first row.
  • Smaller screens: the toolbar buttons become icons, unused or unfitting columns (folder, tags, 2FA) stay hidden until needed, row actions stay visible on touch screens, and the theme toggle no longer covers the page arrows.

Security

  • Update certifi to 2026.10.23, which no longer trusts the emSign root behind compromised eMudhra intermediates (PYSEC-2026-4320). This affects the ciphermoth CLI inside the Docker backend image when it connects to a remote HTTPS API; the desktop app does not include certifi.
  • Update the frontend image's file server dependency fast-uri and the frontend's follow-redirects, Vite, Vitest and zod to versions with published fixes.

Download the file for your OS and CPU below. macOS: open the DMG and drag CipherMoth to Applications. Windows: run the installer. Linux: use the AppImage or install the .deb. Create a master password on first launch.

These installers have no Apple notarization or Microsoft verified-publisher certificate. Tauri updater signatures are separate and mandatory. See installation and update instructions.

AppImage supports built-in updates; Debian uses package updates. SHA256SUMS and per-target source/build provenance are attached.

Assets 26
Loading