megachangelog
Feature2026.8.0

Web v2026.8.0

Bitwarden Web v2026.8.0 introduces major feature development including shared folder terminology migration, Windows native passkey support, vault health reports, and numerous bug fixes and security improvements across the platform.

What's Changed

💙 Community Highlight

  • [PM-27495] Do not show true length of password in password mask by @Mauritz8 in #17052
  • [PM-37656] Resolve SSH agent caller name via libproc on macOS by @lnky102 in #20680
  • [PM-39312] Fix Proton Pass importer dropping custom, alias, and SSH key items by @theagg-18 in #21402

:shipit: Feature Development

❗ Breaking Changes

🐛 Bug fixes

  • [PM-38639] Fix scrollbar color in desktop light mode by @vleague2 in #22039
  • [PM-40800] re-add removed nested collection permissions checkbox by @BTreston in #22000
  • [PM-40961] fix: don't show no master password warning for staged users by @sven-bitwarden in #22075
  • fix(sdk): revert sdk lifecycle changes by @quexten in #22090
  • [PM-2803] Order collections alphabetically in collections dropdown for nested collections by @JaredScar in #22077
  • PM-36838 update template to show deviceName instead of deviceType by @voommen-livefront in #21600
  • [PM-40462] Fix checkbox being unchecked when clicking edit autotype shortcut by @shane-melton in #22085
  • [PM-25560] Align Safe In Cloud import to match native behavior by @harr1424 in #20717
  • [PM-26503] Bugfix - Allow inline menu to escape aria model focus traps by @jprusik in #22017
  • PM-41236 Add additional esccaping to shortcode text element by @mandreko-bitwarden in #22156
  • [PM-16160] Fixes CLI issue where passwords are show via get item command in CLI by @JaredScar in #22083
  • [PM-41027] fix: label add-item tile as shared folder under VFO1 terminology by @gbubemismith in #22137
  • [PM-40766] Handle punycode-unicode domain matching for "Host" URI matching strategy by @jprusik in #21994
  • Auth/PM-41303 - Direct Org Invite Acceptance - fix url paste scenario eternal spinner bug when org has MP policy by @JaredSnider-Bitwarden in #22184
  • [PM-40693] Hide copy button on file Sends by @mcamirault in #22015
  • [PM-41288] Fix bug preventing edits of existing File Sends by @mcamirault in #22203
  • SSH Agent: fix all-or-nothing key parsing by @neuronull in #22200
  • [PM-41256] User Is Unable to Create a Passport Cipher by @jengstrom-bw in #22181
  • [PM-40218] fix: stop autofill and save from deleting the TOTP key by @gbubemismith in #22175
  • [PM-30289] Fix for loss of focus on extension search input by @shane-melton in #18581
  • [PM-41539] fix: recognize both Keeper SSO callback URL forms (#22265) by @itsadrago in #22331
  • [PM-41691] Fix issue where edit item, hidden passwords wipes password, TOTP by @JaredScar in #22329
  • [PM-41880] Hotfix for edit members dialog dependencies (cherry-pick to rc) by @Banrion in #22417

⚙️ Maintenance

  • [PM-40847] Add any missing inline menu renderings to storybook for QA by @dan-livefront in #22037
  • [PM-40590] Run chromatic workflow when the workflow file is updated, to enable dep testing by @vleague2 in #22076
  • [PM-40259] introduce AutofillOrchestrator by @audreyality in #21768
  • [PM-40680] chromium-importer: Replace deprecated LSFindApplicationForInfo function by @iinuwa in #21979
  • [PM-36403] Group view models ts strict by @BTreston in #21825
  • [PM-36405] collection dialog refactor by @BTreston in #21965
  • [PM-36405] Fix types in Storybook after adopting ts-strict by @eliykat in #22086
  • [CL-1292] update icon docs for filename-based build system by @BryanCunningham in #22108
  • Add t:deps label for SDK update PRs automatically by @trmartin4 in #22142
  • Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22018
  • Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22162
  • Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22166
  • Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22019
  • build: Fix Windows cross-compiled builds by @iinuwa in #22139
  • chore: remove checkmarx from repo by @sognefej in #22183
  • [PM-35791] Remove old Send access endpoints by @mcamirault in #22080
  • [BRE-2153] fix(ci): Stage bit-common for commercial browser builds by @fntyler in #22198
  • [PM-40846] Support Fido2 v4 server update by @ike-kottlowski in #22006
  • chore(kdf-change): port change kdf to sdk by @quexten in #22032
  • [PM-24097] - [Vault] Remove getOrgKey from the key service by @jaasen-livefront in #21480
  • Move browser Health tab files to commercial license by @lastbestdev in #22223
  • [PM-40107] Deprecate TS generator logic available in the SDK by @harr1424 in #22154
  • [BRE-2158] Add PR label to creation step for Crowdin Pull workflow by @vgrassia in #22228
  • mock missing observables to suppress console errors by @audreyality in #22174
  • [CL-1294] Add FormRecord stories for table-v2 by @willmartian in #22160
  • chore(crypto): port crypto sync handler to sdk by @quexten in #22217
  • SSH Agent: fix flaky integration test by @neuronull in #22238
  • Browser: Refactor client state definitions for Health feature by @lastbestdev in #22240
  • [BRE-2105] Updating build process for desktop and browser beta channels by @pixman20 in #22229
  • Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22274
  • Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22272
  • Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22273
  • Autosync Crowdin Translations for browser by @bw-ghapp[bot] in #22281
  • Autosync Crowdin Translations for desktop by @bw-ghapp[bot] in #22279
  • Autosync Crowdin Translations for web by @bw-ghapp[bot] in #22280
  • refactor(crypto): add legacy crypto module by @quexten in #22254
  • chore(native-messaging): rename native messaging plug to dot-native-messaging by @quexten in #22303
  • [BRE-2116] Bump actions/checkout to v7.0.1 in non-privileged workflows by @brandonbiete in #22157
  • Bump client version(s) by @github-actions[bot] in #22320

📦 Dependency Updates

  • [deps] UI Foundation: Update chromatic to v18 by @renovate[bot] in #21954
  • [deps]: Update chromaui/action action to v18 by @renovate[bot] in #21956
  • Auth/PM-40520 - Bump SDK versions in clients to get new registration open org invite crypto APIs by @JaredSnider-Bitwarden in #22134
  • Update sdk-internal to 0.2.0-main.928 by @bw-ghapp[bot] in #21870
  • [deps]: Update Rust crate rusqlite to v0.40.1 by @renovate[bot] in #21115
  • [deps] Tools: Update Rust crate aes-gcm to v0.11.0 by @renovate[bot] in #21675
  • [deps] Tools: Update @bufbuild/protobuf to v2.13.0 by @renovate[bot] in #21950
  • fix: update sdk and add support for kdf in state bridge by @quexten in #22197
  • [deps] Vault: Update @koa/router to v15.7.0 by @renovate[bot] in #21951
  • [deps] Platform: Update electron to v43 by @renovate[bot] in #20844
  • [deps]: Update Rust crate rkyv to v0.8.17 by @renovate[bot] in #22215

New Contributors

Full Changelog: web-v2026.7.1...web-v2026.8.0

webfeaturessecurityvaultautofill

Source: original entry ↗