What's new in this release: - Cloud backups now work on iPhone. Point Bramble at storage you already have, an S3-compatible bucket such as Backblaze B2, Cloudflare R2 or Wasabi, or a WebDAV server such as Nextcloud, and it keeps a copy of your vault there, still sealed with your master password so the provider cannot read it. iOS does not let apps run on a schedule in the background, so a backup happens when you unlock Bramble or come back to it after the interval you chose has passed. Back up now does it straight away. - Two more email alias services: DuckDuckGo Email Protection and Firefox Relay. DuckDuckGo has no page for API keys, so Settings explains where to find the one it uses. - Switching to a different alias service now clears the API key box. Before, a key typed for one service stayed there, and checking it would send it to the service you had just switched to. - Searching and selecting in a large vault is smoother. The list no longer redraws every item on each keystroke. - In German, Spanish, French, Italian and Portuguese, a few instructions were cut off mid-sentence, including the ones for pairing with another device. They are complete now. No account, no cloud. Everything stays on your devices.

What's new in this release: - Pairing with another device no longer gives up while you are confirming it. The countdown on the pairing code kept running after the code had been entered, so reaching the confirmation with seconds left could end the pairing and tell the other device it had been refused, which nobody had done. The countdown now stops once the code is used, and confirming gets a full window of its own. - Settings, About has a new Rate Bramble link, if you would like to leave a review. No account, no cloud. Everything stays on your devices.

What's new in this release: - Bramble can now give every site its own email address. Connect the alias provider you already use, Addy.io or SimpleLogin, under Settings, Aliases, and a new button next to the username field creates a fresh forwarding address for that login. The site never learns your real address, and if one starts sending spam you can switch that alias off at your provider without touching anything else. Bramble only asks your provider for an address; your mail never passes through it. - Or use a domain you already own, with no provider and no account at all. If your domain already delivers everything to your inbox, which a catch-all or forwarding rule at hosts like Migadu, Cloudflare Email Routing or Fastmail gives you, pick Your own domain under Settings, Aliases and Bramble makes each address on your device, instantly, without contacting anyone. It is the one option that works with no network. Bramble cannot tell whether the mail really reaches you, so send one of the addresses a test message before you rely on it. - Your alias provider now travels with your vault. Set it up once and it reaches your other devices the next time they sync, so there is no pasting an API key into every phone and browser. It is stored inside your encrypted vault like everything else, which means it is only ever readable after you unlock. - Nothing is created behind your back. An alias is only ever made when you ask for one, and until you connect a provider Bramble never contacts one at all. - The password strength meter now estimates how many guesses a password would take, instead of counting capitals and symbols. It knows common passwords, keyboard runs, dates and the usual letter-for-number swaps, so a password like Password1! now reads as weak and a long passphrase reads as strong, which is the other way round from before. The same meter is used everywhere you choose a password: a new vault, your master password, a login entry and an export file. No account, no cloud. Everything stays on your devices.

What's new in this release: - Bramble can now give every site its own email address. Connect the alias provider you already use, Addy.io or SimpleLogin, under Settings, Aliases, and a new button next to the username field creates a fresh forwarding address for that login. The site never learns your real address, and if one starts sending spam you can switch that alias off at your provider without touching anything else. Bramble only asks your provider for an address; your mail never passes through it. - Your alias provider now travels with your vault. Set it up once and it reaches your other devices the next time they sync, so there is no pasting an API key into every phone and browser. It is stored inside your encrypted vault like everything else, which means it is only ever readable after you unlock. - Nothing is created behind your back. An alias is only ever made when you ask for one, and until you connect a provider Bramble never contacts one at all. No account, no cloud. Everything stays on your devices.

What's new in this release: - Face ID and Touch ID now mean exactly that. On iPhone they have always shared one lock with your device passcode, so anyone who knew that passcode could open your vault without your master password. Unlocking with your face or fingerprint is now separate from the passcode, and that is what you get by default. If you would rather keep the passcode as a backup, there is a new Allow passcode fallback switch under the Face ID row in Settings, under Security. - Adding or removing a face or fingerprint in iOS Settings now clears the saved key on this device, so a newly added face cannot be used to get in. Unlock once with your master password to set it up again. Both settings apply to AutoFill too, so filling a password in another app asks for exactly what the app does. - You can search your logins while filling. When you tap a password field in another app and Bramble does not recognise the site, the list used to be everything you have saved, in one long scroll. There is now a search box above it. - Bramble can accept a 2FA setup key handed over by another app. Pick Bramble under Settings, Apps, Passwords, Set Up Codes In, and a two-factor key sent from elsewhere on your phone arrives here, where you choose which login it belongs to. Scanning a QR code or pasting a key still work as before. - Syncing with a browser should now finish. A phone and a browser extension could spend a long time discovering each other and never quite settle, so changes made in one took far longer than they should to show up in the other. The connection is no longer torn down and rebuilt underneath itself. No account, no cloud. Everything stays on your devices.

What's new in this release: - Moving over from KeePass now brings your passkeys with you. Import a .kdbx file or a KeePass XML export and any passkeys inside arrive as real passkeys you can sign in with, instead of a handful of unreadable fields. They work with AutoFill straight away, and they sync to your other devices like everything else. - KeePass databases that refused to open should open now. Databases saved with stronger security settings were being turned away by a check that measured the wrong thing. If a database really is too heavy to open, the message now tells you which setting to lower rather than just saying it failed. - Passwords containing ampersands, angle brackets or quote marks now import correctly from a KeePass XML export. They were arriving with extra characters in them, so they quietly stopped working on the sites they belonged to. No account, no cloud. Everything stays on your devices.

What's new in this release: - Open the app and Face ID is already waiting: no button to press, no password to type. Turn on "Unlock on open" in Settings > Security, just under the Face ID switch, and the unlock screen asks the moment it appears. It stays off until you turn it on, and devices that use Touch ID or a passcode work the same way. - Locking the vault yourself still means locked. Tapping the lock button leaves you on the password screen rather than asking for your face the instant you glance at your phone. No account, no cloud. Everything stays on your devices.

What's new in this release: - Device sync now shows whether each of your paired devices has confirmed its identity to the others, and flags any that have not. A device confirms itself the next time you open Bramble on it, so the flag clears on its own. - Tighter spacing above the vault list on touch, leaving more of the screen for your entries. No account, no cloud. Everything stays on your devices.

What's new in this release: - Connecting another device now shows seven pictures to compare instead of twelve digits. A row of distinct pictures is quicker to check and much harder to wave through when it is nearly right, which is the whole point of that screen. Each picture has its name underneath, so you can read it out to whoever is holding the other device, or have it read to you. - The twelve digits are still there, quietly, under the pictures. Comparison happens between two devices, and the other one may not have updated yet, so there is always something both can show. No account, no cloud. Everything stays on your devices.

What's new in this release: - Work on several entries at once. Press and hold any item in the list to start selecting, tick as many as you like, then act on the whole set. Deleting asks first and tells you how many are going, including any the current search is hiding. - Export the entries you picked to a Bramble file, protected by a password you choose for that file rather than your master password. It carries everything an entry holds, passkeys and past passwords included, which a KeePass export cannot. - Open a Bramble export on another device and it merges into the vault you already have instead of replacing it. Anything already in your vault is recognised and skipped, so importing the same file twice adds nothing. - Fixed: the copy button on each row was unreachable on iPhone. It only appeared when a pointer hovered over the row, which a touchscreen has no way to do. It is now always there, and a long press no longer selects the text underneath. - Fixed: counts like "3 selected" showed in English whatever language the app was set to. No account, no cloud. Everything stays on your devices.

What's new in this release: - A login now keeps the last few passwords it was changed away from, each with the moment it stopped being current. Some sites take minutes to apply a password change everywhere, and until they do, the old one is what still works: this leaves you a way back in instead of locking you out of your own account. Old passwords are never filled or searched, and never leave your device in an export. - Every entry now shows when it was created and last changed. - Importing the same file twice no longer duplicates everything in it. Repeats are recognised before the preview, so the number you confirm is the number you get, and anything already in your vault is counted as skipped next to it. - When a passkey in a Bitwarden export cannot be brought in, the import now names the field that was wrong and what was wrong with it, instead of one message covering all three. - Fixed: adding a second device could leave the inviting device with no verification code on screen, so there was nothing to compare and nothing to approve. No account, no cloud. Everything stays on your devices.

What's new in this release: - Move your logins straight into Bramble from another password app on this device, or send them the other way. There is no export file to create, share or delete: the handover happens app to app, and your passkeys and one-time codes travel with your passwords. Needs iOS 26. - Bitwarden exports that hold passkeys now bring them in. Before, the logins arrived and the passkeys were left behind. - Fixed: 1Password (.1pux) and KeePass (.kdbx) files could not be picked from Files or Drive. They showed as greyed out, so there was no way to start the import. No account, no cloud. Everything stays on your devices.

What's new in this release: - Adding a device now shows a 12-digit number on both screens. Your vault does not transfer until you confirm the two numbers match, so a code someone else has seen can no longer be used to copy your vault onto their device. - Pairing codes now expire after three minutes and work only once. Treat a code like your master password: anyone who sees it while it is on screen could try to use it. - Please update Bramble on every device you sync. An updated device cannot pair with one still running an older version. No account, no cloud. Everything stays on your devices.

What's new in this release: - Fixed a bug that could stop a synced vault from unlocking, even with the correct master password. If Bramble finds a vault left in that state, it now restores it from the copy saved before the problem happened. - Import from Apple Passwords and Google Password Manager. Export a .csv from either one and open it in Bramble. - Import and backup options in Settings are now grouped by where the file comes from, so it's clearer which one you want. No account, no cloud. Everything stays on your devices.

What's new in this release: - Autofill your two-factor codes. When a site asks for its six-digit verification code, Bramble can fill it straight from the keyboard, just like your password. Needs iOS 18 and Keyboard suggestions switched on in Settings. - Support Bramble's development from the new options in the About tab. - Fixed AutoFill's unlock screen: it no longer shows a stray error code, and Face ID or your passcode now comes up on its own reliably. No account, no cloud. Everything stays on your devices.

What's new in this release: - Autofill your two-factor codes. When a site asks for its six-digit verification code, Bramble can fill it straight from the keyboard, just like your password. Needs iOS 18 and Keyboard suggestions switched on in Settings. - Support Bramble's development from the new options in the About tab. No account, no cloud. Everything stays on your devices.

What's new in this release: - Bramble now supports more than one vault. Keep separate vaults, for example one for personal logins and one for work, each with its own password, and switch between them whenever you like. - Sync a vault across your devices. Your phone, tablet, and computer stay up to date by connecting straight to each other, privately, with nothing ever kept on a server. Pair a new device by scanning a QR code. - Import an existing vault by opening an encrypted .bramble backup, right from the setup screen or Settings. - Settings is reorganized into tabs, so options are easier to find. - Show or hide your password as you type it, to catch a typo before you unlock, create, or change a vault. - Bramble no longer lets iOS autofill or save your master password. It stays yours alone to type. - Support Bramble's development from the new options in the About tab. No account, no cloud. Everything stays on your devices.

What's new in this release: - Import an existing vault by opening an encrypted .bramble backup, right from the setup screen or Settings. - Settings is reorganized into tabs, so options are easier to find. - Show or hide your password as you type it, to catch a typo before you unlock, create, or change a vault. - Bramble no longer lets iOS autofill or save your master password. It stays yours alone to type. - Support Bramble's development from the new options in the About tab. No account, no cloud. Everything stays on your devices.

Bug fixes and security improvements in this release: - Face ID and Touch ID unlock is now more reliable. - Peer-to-peer sync is hardened: devices verify one another before merging changes, and only approved devices can join your sync group. - Fixed syncing of large vaults between devices. No account, no cloud. Everything stays on your devices.