Skip to content

Lockroot v1.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 May 20:59
· 8 commits to main since this release
v1.2.0
d79f8c3

Lockroot 1.1.1 Release Notes

Lockroot 1.1.1 is a hardening and desktop expansion release for Android, iOS, Windows, and Linux. It fixes audit findings around unlock throttling, password policy consistency, clipboard handling, capture protection, KDF validation, and release packaging.

Security Fixes

  • Android screenshot and screen-recording protection now applies in all build types with FLAG_SECURE.
  • Android vault session key cleanup now uses random overwrite, zeroing, and a volatile sink.
  • iOS unlock now throttles repeated failed password attempts with exponential backoff.
  • iOS validates Argon2id KDF parameters before accepting vault/export metadata.
  • iOS clipboard auto-clear no longer captures the copied secret in the delayed cleanup task.
  • Windows master and export passwords now require at least 12 characters.
  • Windows unlock now throttles repeated failed password attempts with exponential backoff.
  • Windows now auto-locks after inactivity and when minimized.
  • Windows asks the OS to exclude Lockroot windows from normal screen capture where supported.
  • Windows clipboard auto-clear no longer stores the copied secret for comparison.
  • Windows Argon2id parameters are now range-validated before key derivation.
  • Windows derived vault keys are allocated in pinned managed arrays and wiped after use.

App Fixes

  • iOS search now includes notes, matching Android behavior.
  • Windows password generator now enforces a 12 to 128 character range.
  • README now documents Android, iOS, and Windows security behavior more accurately.
  • Linux native desktop app added with setup, unlock, entry management, password generator options, encrypted export/import preview, settings, privacy, terms, and about screens.
  • Linux uses the same Argon2id + AES-256-GCM vault/export format as Windows.

Release Packaging

  • Android release is now versionCode 3 / versionName 1.1.1.
  • Windows installer is now labeled 1.1.1.
  • GitHub release workflow now publishes Android, Windows, and Linux artifacts.
  • Linux release artifacts include AppImage, .deb, .rpm, and tarball builds.
  • The old iOS simulator artifact workflow was removed because iOS is live on the App Store.

Downloads

Assets 12
Loading