← Back to all sparks
P

Passbolt

COLLAB
Velocity5.0

Open-source password manager for teams

Passbolt 5.18 puts secure notes and custom fields into Quick Access.

password-managerpasskeysautofillquick-accessoffline-mode
◆Current state
Passbolt 5.18 "Superstylin" adds two themes and brings Secure Notes and Custom Fields into Quick Access, where they can be searched, previewed and copied, suggested by URL and read in Offline Mode. It also improves autofill on high-resolution displays and speeds up sharing. The previous release, 5.17, added passkeys as a second factor and rebuilt autofill detection; 5.16 brought a read-only Offline Mode in beta.
◆Where it's heading
The last three releases have moved from security controls towards daily convenience: offline access, better autofill, and now every resource type in the browser extension's quick view. The passwordless login the 5.17 notes pointed to has not shipped yet.
◆Prediction
Expect more autofill and Quick Access work, and passkey sign-in without a password as the next major step the 5.17 notes promised.

◆Recent moves

  1. 1d ago

    5.18 adds themes and secure notes in Quick Access

    Secure Notes and Custom Fields join passwords in Quick Access, including offline and with URL-based suggestions, and two themes are added. A convenience release that follows the autofill rebuild in 5.17, not a change in direction.

    View source ↗
  2. 24d ago

    5.17 adds passkeys for MFA and a rebuilt autofill engine

    Passkeys for MFA answer the phishing-resistance requirement the notes cite from procurement, and open a stated path toward passwordless sign-in. The rebuilt autofill engine and permission review on moves advance two threads from earlier releases.

    View source ↗
  3. 1mo ago

    5.16 adds read-only Offline Mode in beta

    Offline Mode, in beta, gives permitted users read-only access to credentials when the server is down. It targets the awkward case where the credentials needed to restore a system are locked inside that system.

    View source ↗
  4. 2mo ago

    5.15 adds database sessions and closes shared-tag permission bypasses

    Continues the permission-transparency arc with add/modify/delete badges and rollback of deleted permissions before confirmation, and starts the autofill form-detection series. Underneath it moves sessions to database storage with pruning and healthcheck reporting, rejects JWTs for disabled users, and fixes three reported bypasses that let non-owners promote or unlink V5 tags and share personal folders.

    View source ↗
  5. 3mo ago

    5.14.3 limits the permission dialog to actual secret changes

    Corrects the 5.14 dialog firing on metadata-only edits such as renaming, and makes it read-only when a user creates a resource in a shared folder they do not own so inherited permissions cannot be overridden. A quick fix to a feature that had over-reached in its first form.

    View source ↗
  6. 3mo ago

    5.14 adds confirmation prompts before shared-resource edits

    Introduces the explicit confirmation dialog that the following two releases spend their time refining, and shows group members inline so the real reach of a share is visible. Also reranks browser-extension suggestions by URL relevance so exact matches surface first.

    View source ↗