What changed.

The terms now cover what happens if Cryptex Industries closes.

The password generator shows an error when copying fails, and a check mark on the copy button when it works.

Sync skips a device that was linked before devices had sync IDs instead of failing on it. That device syncs again once it is relinked.

Sync signs in to Online Services again only when the session has expired, not after every failed request.

Backup destinations in the Backup Center. After each change, the web app uploads an encrypted backup straight from the browser to the user's own S3-compatible buckets, such as AWS S3, Backblaze B2, Cloudflare R2, MinIO or Garage. The bucket keys sync with the vault to other linked devices, and the feature is free. Each device thins the backups in its own folder by age, like managed backups, or keeps them all.

The Restore tab can list the backups in a bucket and restore one as a new vault.

A new backup destinations guide covers bucket permissions, the CORS rule the web app needs, and restoring.

Test connection checks a STUN, TURN or signaling server from the browser before it is saved.

Vault signaling lists the configured servers, and each one is saved on its own. It used to be one long form with a single Save button.

Deleting a server that a linked device uses now shows a warning first.

Sync now works with a STUN server entered as a stun: URL, and with a TURN server whose host is named turn, such as turn:3478. Sync used to build an invalid address for both.

The captcha step no longer rejects managed-backup restores started in the Android app.

A managed backup taken while the vault's security settings are changed or the Recovery Kit is rotated can now always be restored. Before, such a backup could pair the new settings with the old key and fail to restore.

The Android app is on Google Play. Find it on the Android download page.

A new browser can be set up by linking it to a device already in use. The Use invitation tab, offered instead of creating a vault, receives the vault, and the browser then gets its own master password.

If the receiving vault has its own Online Services account, linking now offers to keep or delete that account first. Linking into such a vault used to fail with "Unauthorized".

SSH key items. Generate or import Ed25519, ECDSA and RSA keys, copy or save the public key, and share a key through a one-time link.

The web app approves SSH agent requests, and an agent can be paused or revoked from any linked device.

A 14-day free trial of Online Services for new subscribers. Adding a card starts it. The card is charged when the trial ends unless the subscription is cancelled before then.

The vault can be open in only one browser tab at a time, and leaving it for another page of the site locks it after saving.

The account dialog shows what the plan includes. On the free plan it shows what Online Services adds and what it costs, instead of an empty billing card. Subscribers see each service with its allowance and how many linked devices they use.

A new download page lists every way to get Cryptex Vault. The Android page explains how to install the app from our F-Droid repository.

Dialogs, menus and dropdowns in the web vault now use the dark theme, and Delete account and other destructive buttons are readable in it again.

Credential rules in the web app and extension now accept exact Android app associations such as androidapp://com.example.app. These associations stay separate from website matching.

A new billing return page leads back to the web vault or Android app. A return button stays available if the browser blocks automatic navigation.

A credential or any text can be shared through a link that opens once. The sender picks the fields, when the link expires and whether it needs a passphrase. The sending device encrypts it, and the key stays in the link, so the share server can't read the contents.

Shared links shows every sent link and whether it was opened. It can be searched and filtered, and a link nobody has opened yet can be revoked. It syncs between linked devices.

Self-hosters can run the open-source share server next to their web app and hand out creation tokens to the people who may send links.

For subscriptions made through Google Play or the App Store, the account dialog says so and points to where the subscription is managed.

The device linking dialog now says "Verification words" instead of "Mnemonic", the same term the extension, Android app and documentation use.

Device linking and synchronization now wait for delayed connection candidates instead of failing immediately. Pending failure timers are cleared when connections end or are replaced.

Failures while deriving the password key now return a handled vault unlock error.

Vault credentials can be sorted by name in either direction, recently updated, or newest created. The web app remembers the choice in this browser.

Linked devices can be managed from Account or the vault sidebar. A connection map and searchable list show each device and its links, including direct links that do not use Online Services.

Vault Security can change the master password and extra key protection, generate a new vault recovery code, or rotate this device's encryption key. Key rotation issues a new recovery code. In the web app, the recovery code can also be used to set a new password.

Self-hosting templates are available for the web app and its device-linking services, including secure TURN setup.

Device actions now make it clearer when a device is connecting, syncing, unlinking, or being removed. Sidebar quick actions also work with a long press on touch screens.

When managed backups are enabled, security changes start a fresh backup. Older account restore points, including linked-device copies, can optionally be deleted after the upload succeeds. Downloaded backups are never deleted automatically and still use the password and recovery information they had when downloaded.

Imports now show what will be added, skipped, or saved differently before the import is confirmed. More details from Bitwarden, 1Password, KeePass, LastPass, Chrome, and Firefox exports are carried over, and invalid files show clearer errors.

Boolean custom fields now have an on/off switch in the web credential editor.

Text in password and secret fields now stops before the show, copy, and generate icons instead of running underneath them.

Synchronization handles simultaneous connections and disconnects more reliably. A failed vault save no longer appears as a successful sync, and secure custom relay server addresses now work.

Backup Center now shows current coverage only after a backup has finished uploading.

Vault transfers now verify the sending device before accepting the encrypted vault. Update the sending device if a new link reports that its transfer could not be authenticated.

Credentials can store multiple website rules with exact-host, parent/sibling domain, or safe wildcard matching.

A new Backup Center provides encrypted downloads and optional Online Services managed restore points with backup status, history, and management controls. Local files can be restored, or a vault recovered on a fresh device, without replacing an existing vault, and the Recovery Kit can be rotated or replaced for future recovery.

Choose how long the web vault waits before automatically locking after inactivity.

Organize credentials into directories across the web app and extension, move multiple credentials at once, and preserve directories through imports, exports, and linked-device synchronization.

Payments now stay inside Cryptex Vault with embedded monthly and yearly checkout, billing management, and clearer account and recovery flows.

Vault protection now includes password-strength guidance, optional recovery phrases and additional protection keys, safer secret handling, and clearer setup and recovery controls.

Import passwords from Cryptex Vault, Bitwarden, 1Password, KeePass, LastPass, Chrome, and Firefox using a guided preview, including during new vault setup.

Linking and synchronization are now encrypted end-to-end with more reliable QR exchange, improved connectivity, and post-quantum message signing.

Online Services sessions now refresh and sign out more reliably, including when locking a vault or removing an account connection.

Vault, account, recovery, and connected-device screens have been refined for clearer feedback.

Older v2 vault backups can be restored and unlocked again without an invalid-version error.

Production Online Services error logs no longer include request inputs or response details that may contain sensitive information.

Removed the unused Online Services feature-voting integration and outdated subscription perk listing.

Introduced a Log Inspector dialog for enhanced debugging and log management.

Added an auto-confirm countdown to the Vault Lock dialog.

Added a showPasswordGenerator prop to FormInput for optional password generator buttons, and removed the default generator from the vault unlock secret input.

Started unifying vault UI components for a more consistent experience.

Added autofocus to the secret key input in the Unlock tab for faster entry.

The web package version has been bumped to v1.3.0.

Updated .gitignore to exclude extension build artifacts.

Correctly reference the credentials list in applyDiffs so vault synchronization works properly.

Added a short UI delay in the Unlock Vault dialog to improve responsiveness during unlock.

Unified HTML5 quote escape sequences in unlock.tsx to avoid parsing inconsistencies.

QR code data can be copied in the in-vault linking dialog.

Changelog dialog now highlights unseen releases.

Implemented a new vault metadata editor in the Vault Manager.

Implemented a credential generator dialog on every password input field.

Strip the linking configuration and devices from the generated backup.

The web package version has been bumped to v1.2.0.

Removed reliance on the nodejs Buffer class.

Added the CHANGELOG.md file (#5)

Changelog dialog inside the application

Replaced npm with pnpm (#5)

Changed the project structure to allow for browser extension collocation

Bumped the dependency versions

Stripe API integration now targets the latest version used by the account - not pinned to a specific version

The web package version has been bumped to v1.1.0

Show a notification when the TURN server configuration is saved (#4)

Remove console.error calls when the credential list is rendering (#4)

In-vault credential list item favicons now load lazily

Make sure that the Vault Manager UI is refreshed when the last vault is removed (#4)

In-vault dialog header title color has appropriate contrast

In-vault number input control text color has appropriate contrast

Signaling server configuration is now properly saved

In-vault STUN/TURN/Signaling server configuration dialog UI elements now use appropriate colors

Show all tier perks in the account dialog, along with an icon indicating whether or not it is available in the current tier (#3)

Redesigned the index page

Redesigned the Vault Manager page

Rewrote the synchronization logic

Project made public

Fix Stripe configuration so that it accepts promotional codes (#1)

Fix QR decoding when linking outside vault (#2)