PassGen Secrets Vault 1.0.15

Highlights

• Fixed data restoration from cloud

PassGen Secrets Vault 1.0.14

Highlights

• Google Drive Account added
• Fix cloud buggs

PassGen Secrets Vault 1.0.13

Highlights

• Cloud storage options refreshed with clearer provider status.
• OneDrive (BYO Azure) support for power users.
• Cloud import UI improvements and safer checks.

Release in Process Microsoft Center

PassGen Secrets Vault 1.0.12

Highlights

• Added Local Vault Location in Settings (safe move when changing folder).
• Updated Store background color to match branding.
• Storage UI polish and fixes.

PassGen Secrets Vault 1.0.11

Updated footer to show cloud provider icons (Drive, S3, Supabase, OneDrive) with clean styling and drop-shadow. Replaced S3/OneDrive/Supabase assets with official transparent logos. Version bump to 1.0.11.

PassGen Secrets Vault 1.0.9

Added proper AppX tile assets generated from the real app icon. Added an AppX manifest post-hook to reference custom tile assets (Store compliance). Store packaging improvements for Microsoft certification.

Download App

"v1.0.7"

PassGen v1.0.7

Highlights

• Supabase Storage (BYOS) provider with encrypted snapshots, test connection, and versioned restores.
• Developer Secret Generator tab for 32-byte secrets with presets and multiple output formats.
• Plan-based gating for developer tools (free daily cap, Pro/Cloud/BYOS unlimited).
• Premium flow moved to web checkout + license key redeem (no in-app payment UI).
• Minimize-to-tray support with a Settings toggle.
• About PassGen window redesigned with build/system info and quick actions.

What's Changed

• Added Supabase provider IPC, config UI, and provider registry wiring.
• Added Developer tab and plan capability helper (outputs + .env injection gating).
• Added local daily usage tracking for free-tier secret generation.
• Added settings sync for minimize-to-tray behavior and improved settings layout.
• Refined storage setup and premium gating flows (icons, inline feedback, polish).
• Added build-info stamping for About dialog (commit/date/system versions).
• Updated tab styling and purple button theme for premium flows.
• Added Node 20+ guidance for Supabase SDK compatibility.

Fixes

• Reduced confusion in the premium upgrade path by removing embedded payment steps.
• Improved provider unlock behavior from remote license state.
• Minor RTL and UI layout adjustments in settings and storage screens.

Notes

• Cloud storage remains zero-knowledge: only encrypted vault blobs are uploaded.
• Google Drive and Supabase auth run in the main process; no secrets in the renderer.
• Existing vault files remain compatible.

This is latest release of local build electron, the version 1.0.9 or later available in Microsoft Store

v1.0.6

Highlights

• New app account login with Google and premium license sync (app account + /api/me).
• Google Drive OAuth flow fixes and cloud storage setup improvements.
• Discord-based activation workflow with dashboard + email notifications.
• Settings/storage UX upgrades with Arabic localization and RTL tweaks.
• Payment flow refinements and updated footer payment icons.
• Added Passkey and implemented it

Fixes

• Vercel/Auth.js routing and cookie handling improvements.
• Better startup reliability and localStorage persistence.

PassGen v1.0.5

PassGen v1.0.5 — Release Notes

Highlights

• Vault Export/Import (Premium): Backup and restore encrypted vault to move passwords between devices.
• Premium Gating: Export, Import, and CSV export reserved for Premium subscribers.
• Improved Auth UX: Clear distinction between first-time setup and returning logins.
• Clickable Premium Link: Footer link now opens upgrade modal directly.

Changes

New Features

• Passkey Registration (Optional):

  • In vault → Actions → "Setup Passkey"
  • Register your device's biometric authenticator
  • Stored securely in local storage (encrypted credential ID)

• Passkey Unlock:

  • Auth screen shows "Unlock with Passkey" button if one is registered
  • Uses WebAuthn API (W3C standard)
  • Falls back to master password if passkey fails or device unsupported

• Vault Export/Import (Premium):

  • Actions dropdown: "Export Vault Backup" and "Import Vault Backup"
  • Export saves encrypted vault as JSON for backup/migration
  • Import restores vault from a backup file
  • Requires master password to decrypt after import

UI/UX Improvements

• Footer: "Upgrade to Premium" is now clickable (opens modal)
• Auth screen: Dynamic text ("Set Master Password" on first setup, "Enter Master Password" on return)
• Vault Actions: New "Setup Passkey" option for easy biometric registration

Vault Gating

• Free users: Can see Export/Import buttons but upgrading removes the gate
• Premium users: Full access to backup/restore and CSV export

Platform Support

• Windows: Windows Hello (PIN, Face, Fingerprint)
• macOS: Touch ID
• Linux: Available if system supports WebAuthn (e.g., via FIDO2 devices)

How to Use

Setup Passkey

1. Unlock your vault with master password
2. Actions → "Setup Passkey"
3. Authenticate with biometric when prompted
4. Next login: use "Unlock with Passkey" button

Export Vault (Premium)

1. Unlock vault
2. Actions → "Export Vault Backup"
3. Choose save location (e.g., passgen-vault-20251209.json)
4. Backup is encrypted; master password required to import

Import Vault (Premium)

1. On new device or after reset: Actions → "Import Vault Backup"
2. Select the backup JSON file
3. Enter your master password to decrypt and unlock

Security Notes

• Passkey credential ID is stored locally; public key never leaves your device
• Master password is still required for encryption/decryption
• Vault exports are encrypted with your master password
• Passkey is optional; master password always works as fallback
• All data stays on-device unless you configure cloud storage

Version

• App version: 1.0.5
• Passkey standard: WebAuthn (W3C)
• Minimum Electron: 28.3.3

What's Fixed from v1.0.4

• Update checker now correctly fetches from main PassGen repo (no false 1.0.2 prompts)
• Footer links are functional (Check for Updates, Upgrade to Premium)
• Auth screen clarity: "Set" vs "Enter" master password based on context
• Master password gating: vault locked if wrong password with existing data

Known Limitations

• Passkey registration per-device (not synced to cloud)
• Browser extension (beta) still in development; per-site allowlist coming soon
• Cloud sync (Google Drive, S3) coming in future release

Upgrade from v1.0.4

• Non-destructive: All existing passwords and settings preserved
• Passkey optional: Skip setup if not needed
• Master password unchanged: No re-authentication required

Add Bridge and Improve UI

PassGen v1.0.4 — Release Notes

Highlights

• Browser extension bridge (beta): Local loopback server enables autofill from the desktop app.
• Session token UI: Vault footer shows a copyable token to pair the extension.
• Master password gating: App now verifies the stored hash and rejects incorrect passwords.

Changes

• Electron main
  • Added loopback bridge on 127.0.0.1:17865 with endpoints:
    • GET /health → { ok: true }
    • GET /credentials?domain=example.com → returns candidate entry names (no secrets)
    • POST /fill { id } → returns { username, password } when unlocked
  • Session token generation on vault unlock; cleared on lock/reset.
  • Update checker current version set to 1.0.4.
• Preload
  • Exposed electronAPI.getSessionToken(), vaultUnlocked(), vaultLocked() to the renderer.
• Renderer
  • Vault footer shows the current session token with a copy button.
  • Exposed helpers for bridge queries: window.__passgen_listEntries() and window.__passgen_getEntryById(id).
  • Master password verification stores a hash on first setup; requires a matching hash on subsequent logins.
• Extension scaffold (Chrome/Edge MV3)
  • extension/manifest.json, background.js, content.js, options.html, README.md.
  • Detects login forms, lists candidates by domain, and fills the first match.

How to Use the Extension (Beta)

1. Unlock the vault in PassGen and copy the session token from the footer.
2. In Chrome/Edge, go to chrome://extensions → Enable Developer Mode → Load unpacked → select extension/.
3. Open the extension’s options and paste the token. Save.
4. Visit a login page. The extension will attempt to fill the first matching credential.

Notes

• Security: Bridge listens only on 127.0.0.1 and requires a session token. Secrets are returned only upon explicit request.
• Known limitations: No pop-up picker yet; fills the first match. Per-site allowlist and multi-entry selection are planned.

Fixes

• Clipboard reliability improvements retained.
• Vault repair tool remains available under the vault actions.

Version

• App version: 1.0.4