Skip to content

v0.2.0 - Secure credential storage

Choose a tag to compare

View all tags
@stepandel stepandel released this 17 Jan 01:22
· 123 commits to master since this release
v0.2.0
2a2e524

Security Improvements

This release introduces secure credential storage using the OS keychain:

  • Keychain-backed encryption: Connection credentials and API keys are now encrypted using macOS Keychain (via Electron's safeStorage API)
  • Per-machine encryption keys: A unique 256-bit encryption key is generated for each machine and stored securely in the OS keychain
  • Automatic migration: Existing credentials from previous versions are automatically migrated to the new secure storage

Technical Details

  • Credentials are stored in chroma-connections-v2.json and chroma-settings-v2.json
  • Encryption key is protected by the OS and tied to your app's code signing identity
  • No user prompts required on signed/notarized builds

Notes

  • This build is for Apple Silicon (arm64) Macs
  • First launch after update will migrate your existing connections automatically
Assets 7
Loading