• Copy databases from your computer: KeeForge’s Documents folder now appears in Finder and Windows File Sharing. Drop in a KDBX file to add it, replace it with a newer copy, or restore a deleted file. • Choose an entry’s icon from the standard KeePass set or the custom icons already stored in your database. Icon changes travel with the database and appear in other KeePass apps. • Download website icons directly from the icon chooser. KeeForge optimizes and deduplicates downloaded images before storing them in your database. • Create credentials without leaving a signup page. The AutoFill picker can start a new entry pre-filled with the site’s name, address, and a generated password, then fill it immediately after saving. • Locking a database now uses a smoother transition back to the database list or unlock screen. Fixes: • AutoFill no longer dismisses without filling on passkey-capable sites or after Face ID completes during a presentation transition. • AutoFill now offers “Show All Credentials” when no matching password or verification-code entries are found. • Website-icon downloads now work on networks that block QUIC and fail faster when a server cannot be reached. • Edits made while a cloud save is uploading are no longer lost; the newer changes are included in the save. • Databases with high Argon2 iteration counts but reasonable memory requirements now open correctly, including Argon2 v1.0 databases. Oversized settings produce clearer guidance. • AutoFill now explains when a database’s Argon2 memory requirement exceeds the extension’s available memory.

• Edit groups: long-press a group to rename it, add tags, pick an icon, write notes, or hide it from Search & AutoFill. Tags on a group carry down to the entries inside it. • Save new passkeys: when an app or website offers "Add Passkey", KeeForge now stores it in your database in a KeePassXC-compatible format. • Search results and the tag browser now show which folder each entry lives in. • KeeForge is now available in French and Spanish. • Fixes: Face ID / Touch ID auto-unlock no longer fails on the first attempt, OneDrive saves no longer show false conflict alerts, protected custom fields are now masked, plus many AutoFill and reliability improvements.

New • Entry history: tap "History" on an entry to browse its earlier versions and restore one. Restoring keeps the current contents as a new version, so it can be undone. • Tag browser: browse and search entries by tag, including tags inherited from groups, with tag suggestions while editing. • Group icons: touch and hold a group, choose "Change Icon", and pick from the standard KeePass icon set. • AutoFill now separates exact matches from possible sibling-subdomain matches. Possible matches are never filled automatically. • New optional setting, "Copy Verification Code on AutoFill", for sites whose one-time code field iOS doesn't recognize. Off by default; the copy clears itself and never leaves your device. Fixed • Important: editing an entry in a database created by KeePass or KeePassXC could silently discard its most recent stored versions. KeeForge now decides what to keep by date. Databases created in KeeForge were never affected. • Permanently deleting an entry left the app stuck on the editor screen until you force-quit it. • Many cloud reliability fixes for Dropbox and OneDrive, including rare cases where a save made through AutoFill could overwrite newer changes. Those now surface as a conflict you can resolve, and unsynced changes are always backed up first. • Cloud errors now explain themselves accurately — being offline, out of space, or rate-limited are no longer all reported as "reconnect this account".

• Choose which databases appear in AutoFill and get suggestions from multiple databases at once. • Switch databases directly inside the AutoFill panel. • Hide individual groups from AutoFill while keeping them visible in KeeForge, with compatibility across KeePass and KeePassXC. • Improved OneDrive reliability for paths containing spaces or special characters and for database saves. • Fixed copied values clearing when switching apps and an AutoFill provider empty-screen issue. • Strengthened KDBX saves by regenerating cryptographic header randomness on every save. • Tightened network security for KeeForge’s built-in cloud and support endpoints.

• View detailed KDBX file metadata without unlocking. • Safer AutoFill matching prevents substring-based credentials from filling automatically. • Passkey private keys are now encrypted in memory until signing. • Fixed crashes involving encoded WebDAV paths and malformed TOTP settings. • Search now ignores diacritics. • All KeePass standard icons and embedded custom icons now display correctly. • KeeForge now requires iOS 18 or later.

• Send feedback with an optional reply email and one privacy-safe photo attachment. • Use KeeForge in German throughout the app and AutoFill. • Use verification codes saved by the KeeOTP and KeeOtp2 plugins. • See a concise What's New sheet after feature-bearing updates. • Fixed AutoFill on one-time-code fields, including direct fill for a single match and a picker for multiple matches. • Fixed stale local database copies after files are deleted or replaced in the Files app. • Fixed initial connections to trusted local HTTP WebDAV vaults. • Password reveal and copy now always require device-owner authentication.

• Added support for Twofish-encrypted KDBX 4 databases and legacy KDBX 3.1 vaults. • Added an opt-in setting for trusted local WebDAV servers that use HTTP. • Added clearer guidance for enabling KeeForge as your AutoFill provider. • Expired credentials are now highlighted and excluded from automatic AutoFill suggestions. • Fixed freezes when offline SMB or other file-provider locations stop responding. • Password reveals now refresh immediately after editing.

## New Features - Sync databases over WebDAV (Nextcloud, Synology, and other WebDAV servers) - Show a read-only "Attachments" section on the entry detail screen, with QuickLook preview and share for each attachment - Add a "Buy Me a Coffee" link to the Tip Jar section in Settings for supporting development outside the App Store

## Fixes - Preserve the KDBX 4 minor version when saving existing databases instead of rewriting all KDBX 4 files as 4.0. - Preserve unknown KDBX outer header fields when saving existing databases.

## Features - Add a reveal toggle to the unlock master-password field. - Add a Display setting for choosing System Default, Light, or Dark app appearance. - Add group deletion from open databases, including recycle-bin moves and permanent deletion from inside the recycle bin. - Show a thank-you tip jar state for returning supporters and move repeat tips into a compact menu. ## Fixes - Improve database unlock failure reports with visible safe diagnostics. - Move entries to the recycle bin from the long-press context menu instead of permanently deleting them. - Write KDBX ChaCha20 databases with the raw ChaCha20 stream cipher expected by KeePass-compatible apps.

- Fixed a bug where the OneDrive account could not be connected

- Add OneDrive support for signing in, browsing KDBX files, opening databases, and saving cloud-backed edits. - Add a Dropbox sign-in note explaining that the low-user-count OAuth warning is expected for an indie app.

New Features - Added support for creating new KDBX 4.x databases from KeeForge locally and on Dropbox. Changes - Use shared monospaced password styling across entry detail, password generation, editing, unlock, and AutoFill credential creation screens.

## New Features - Create new groups directly from the unlocked database add menu. - New Settings organization with dedicated Security, AutoFill, Display, and About pages. - Added a privacy option to hide last-opened usage stats from the locked database list. ## What’s Changed - Moved Send Feedback to the main Settings page and refined Settings copy. - Reduced feedback submissions to only the typed message and visible error details. - Improved unlock error visibility during lockout backoff. - Entry notes can be selected.

## New Features - Add adaptive iPad layout support with a persistent sidebar, regular-width vault workspace - Add an in-app feedback form that can be opened from Settings and database-open failure screens without requiring GitHub or email ## Fixes - Improve database-open failure handling by separating expected password/key-file errors from unexpected file, format, cloud, and biometric failures - Add copyable sanitized error details and safer feedback payloads for database-open issues without including vault contents, passwords, key files, or raw database files - Respect the configured auto-lock timeout across app switching by making immediate background locking optional and applying elapsed timeout checks when returning from the background

## New Features - Add KDBX 3.1 read/open compatibility for password-only databases, including legacy AES-KDF headers, hashed block streams, and Salsa20 protected fields ## Fixes - Toggling read-only in Database Settings now updates the current view immediately - Fix read-only ribbon and unsaved-changes banner accessibility identifiers for UI test visibility - Fix settings navigation from the unlocked database view (gear button → Database Settings → App Settings) - Prevent adding the same local database file twice; opening an already-added file via Files/AirDrop now reliably opens the existing entry ## Changes - Replace the yellow read-only banner with a lock icon in the navigation toolbar so the indicator stays visible across groups and entry details - Unify Quick Launch and Read Only badge styling in the database list - Use a check mark toggle for Quick Launch in the database context menu to match the Read-only toggle

# Entry editing - create, edit, and delete entries directly in the app with built-in password generation, autosave, save-conflict resolution, and read-only mode - save new credentials and generate strong passwords directly from the AutoFill extension, with offline-safe queueing for Dropbox-backed databases ## Editing Details - Changes autosave immediately — no manual save button; a progress overlay shows while the database is being written - Full entry history is preserved on every edit, so previous passwords and fields can be reviewed - Passwords are visible by default in the editor with a toggle to hide them - No data loss: unknown XML elements and third-party KeePass fields are preserved when saving - Automatic timestamped backups before each save, with detection of external changes to prevent overwrites - Dropbox-backed databases can be saved back to Dropbox with conflict detection ## Fixes - Dropbox icon renders correctly in dark mode

Dropbox Cloud Sync Link your Dropbox account and open databases directly — no manual file downloads. Cached copies keep AutoFill working even when you're offline. Also in this update: • Cleaner database list with source icons at a glance • UI polish and bug fixes

- Add a multi-database home screen that replaces the single-file launch screen with a database list, per-database unlock flow, add/remove/reorder actions, quick launch, nicknames, and key file association management - Add migration from the legacy single-database bookmark/cache/keychain model to persisted per-database references with UUID-keyed shared cache files and lazy biometric key migration - Support opening .kdbx files from other apps (Files, Mail, AirDrop, etc.) with UTType support for KeePassium, Strongbox, MiniKeePass, and more - Add open source acknowledgments screen in Settings showing Argon2Swift and Argon2 license texts

- Add TOTP one-time code AutoFill support (iOS 18+) — verification codes from TOTP entries now appear in the QuickType bar alongside passwords and passkeys - Fixed AutoFill credential lookup falling back to slow matching every time by parsing stable UUIDs from KDBX entry XML instead of generating random UUIDs on each parse - Fixed AutoFill key icon flow showing all entries instead of filtering to the current site; replaced non-scrollable alert picker with scrollable search view and pre-filled domain search - Fixed "KDF parameter out of range" error when opening databases created with KeePassXC 2.7.12+ that use high Argon2 iterations or parallelism values

- Passkey AutoFill: passkeys stored in KDBX (KeePassXC format) now appear in the iOS QuickType bar and AutoFill sheet. Tap to authenticate with Face ID, just like passwords. Works with any website that supports WebAuthn/FIDO2 passkey sign-in. - Fixed AutoFill for cloud-hosted databases by caching the selected `.kdbx` in the App Group shared container and refreshing it from the main app - Fixed tip jar not available

Key File Support Unlock databases with password + key file (composite key). Supports all KeePass formats: binary, hex, XML v1/v2, and arbitrary files. Tip Jar Love KeeForge? Leave a tip to support development. Security Improvements • Exponential lockout after failed password attempts • Screen recording detection — blurs vault when screen is being recorded • QuickType AutoFill enabled by default Cloud Drive Support Open .kdbx files directly from Google Drive, OneDrive, Dropbox, and other cloud providers via the document picker. Quality of Life • Sort ascending/descending toggle in the toolbar • Entry timestamps (created & modified dates) • Feedback button in Settings • Fixed file picker issues

New Features - QuickType AutoFill: credential suggestions appear in the keyboard bar in Safari. Tap to autofill with Face ID, no full AutoFill popup needed. Toggle in Settings → Quick AutoFill. Fixes - Fixed QuickType domain extraction — www-stripping, subdomain collapsing, multi-part TLD support (e.g. `login.facebook.com` → `facebook.com`, `bbc.co.uk` handled correctly) - Increased tap targets for view/copy/open URL buttons in entry detail (44pt minimum per Apple HIG) Security - Hardened KDBX parser: `DataReader` now throws on truncated data instead of silently truncating - Bounded Argon2 KDF parameters (iterations, memory, parallelism) to prevent resource exhaustion from malicious files - Validated variant-map value lengths before decoding - Passwords and TOTP secrets stored as AES-GCM `EncryptedValue` in memory (lazy decrypt on demand) Other Changes - Renamed from KeeVault to KeeForge - Switched favicon provider from Google to DuckDuckGo (privacy) - Private/internal domains filtered from favicon fetching

Security Hardening • Clipboard now stays on-device — passwords no longer sync to nearby Apple devices • Constant-time cryptographic verification New Features • Website favicons (opt-in in Settings) • Auto Face ID unlock when opening the app • Auto-lock inactivity timer • Sort entries by title, date created, or date modified • Multiple URLs per entry support • Recycle Bin entries hidden from search and AutoFill

• Fixed passwords not displaying for most entries • Fixed TOTP code parsing • Face ID required to reveal or copy passwords • Improved search — works on all pages, no longer dismisses while typing • Fixed duplicate entries appearing in search results • Updated launch screen icon