Releases

Every release states its compatibility and has a BREAKING section, even when it is empty. Only the latest release is supported. Full notes: CHANGELOG.md.

1.5.0 2026-11-04, current

Sync between your devices through a self-hosted server, end-to-end encrypted
Team vaults with admin, editor and viewer roles; credentials stay personal
The sync server as a container image for amd64 and arm64
Trash and Shred now; plugins offered from your other devices
Search across terminals; typing into several terminals at once
Automatic reconnect; duplicating a connection; agent forwarding with vault keys
Built with Go 1.26.10, which fixes eleven standard-library vulnerabilities

Breaking: vault schema 4 → 5. The first unlock copies the vault aside as vault.age.v4.bak. Version 1.4 and older refuse a schema 5 vault; restore the backup to go back.

Axis	Version
`pluginApi`	1.0.0, unchanged
Manifest schema	Optional `sync.paths` added
`bundleFormat`	1.0.0, unchanged
Vault schema	5, was 4
Audit schema	1, unchanged
`syncProtocol`	1.0.0, new

Windows Portable Windows Portable + WebView2 Linux webkit 4.1 Linux webkit 4.0 Sync server Windows x86-64 Sync server Linux x86-64 Sync server Linux ARM64 Checksums SHA-256 Release on GitHub

1.4.1 2026-09-26

A passphrase-protected key asks for its passphrase on connect
Deleting the folder you are in moves up a level; an unreadable folder keeps you in place
Cancelling a transfer no longer reports an error

Windows Portable Windows Portable + WebView2 Linux webkit 4.1 Linux webkit 4.0 Checksums SHA-256 Release on GitHub

1.4.0 2026-09-19

Recovery key, with its own stricter attempt counter
The master password no longer stays in memory while the application runs
Releases and the update check moved back to GitHub
A plugin can no longer stay alive by being refused

Breaking: a vault opened by 1.4.0 cannot be opened by 1.3.x or earlier.

Windows Portable Windows Portable + WebView2 Linux webkit 4.1 Linux webkit 4.0 Checksums SHA-256 Release on GitHub

1.3.0 2026-08-28

Local terminal on your own machine
Translated interface; languages are files you can add; plugins are told the language
Plugins get a screen of their own; trust policy moved to Settings → Security
Embedded remote desktops no longer tear on fast screen changes

Windows Portable Windows Portable + WebView2 Linux webkit 4.1 Linux webkit 4.0 Checksums SHA-256 Release on GitHub

1.2.1 2026-08-18

Plugins installable from GitLab as well as GitHub
Plugin repository URLs validated against both hosts

Windows Portable Windows Portable + WebView2 Linux webkit 4.1 Linux webkit 4.0 Checksums SHA-256 Release on GitHub

1.2.0 2026-08-16

Trusted Peers: known_hosts for protocols other than SSH
Plugin interfaces may include WebAssembly
Fixed: a Linux plugin could start unconfined while reported as sandboxed

Windows Portable Windows Portable + WebView2 Linux webkit 4.1 Linux webkit 4.0 Checksums SHA-256 Release on GitHub

1.1.0 2026-08-12

Per-key passphrase policy: a forgotten key passphrase no longer costs the vault
Vault schema 3 → 4 with automatic migration

Windows Portable Windows Portable + WebView2 Linux webkit 4.1 Linux webkit 4.0 Checksums SHA-256 Release on GitHub

1.0.0 2026-08-10

First stable release. The plugin API, capabilities, manifest schema, bundle format and on-disk schemas are frozen from here on: additive changes only.

Windows Portable Windows Portable + WebView2 Linux webkit 4.1 Linux webkit 4.0 Checksums SHA-256 Release on GitHub

Pre-releases

1.0.0-rc.3 2026-08-07

Windows Portable Windows Portable + WebView2 Linux webkit 4.1 Linux webkit 4.0 Checksums SHA-256 Release on GitHub

1.0.0-rc.2 2026-08-04

Windows Portable Windows Portable + WebView2 Linux webkit 4.1 Linux webkit 4.0 Checksums SHA-256 Release on GitHub

Nightly

Rebuilt from main on every change and replaced in place. Not for anything you rely on. Nightly on GitHub