UI improvements.

- The password generator now shows a hint when no character type is selected, and no longer shows a red "Weak" bar when there is no password. - The request source on the sign-in authorization screen now shows labels on the left and values on the right. - Improved VoiceOver support in the password generator and the sign-in authorization screen.

- Stronger password generator: secure randomness, a hint when no character type is selected, and no copying of empty results. - Sign-in approval now shows the request's source, location, IP and time, and warns about requests from another country. - Hardened sign-in data against forged server responses. - Improved VoiceOver support.

• Sensitive clipboard content now clears after 120 seconds, preserving cross-device copying and anything copied afterward. • Unrecognized QR code content uses the same timed clipboard protection. • Fixed deleted items lingering after a full sync, while preserving local changes awaiting upload. • Improved automatic reconnection and status messages when the server is busy.

Fixed a crash caused by malformed messages. Unified request size limits at 4MiB

- Sign-in now applies the same standard email validation to every account. - Static Plugin cells now honor service-provided semantic colors in light and dark mode. - Temporary server failures now show a friendly retry message without signing you out or clearing local security data.

Plugin icons now refresh immediately when a service updates the shared icon set, without waiting for the screen to reload.

Improved plugin icons.

- Sending debug logs now asks for confirmation first, showing what the logs contain, what they never contain, and where they are sent, with a link to the Privacy Policy - Automatic unlock now covers App Data connections, not just Access Points, so an approved app can refresh its data without a separate approval each time - Plugin actions can now show service-provided icons and semantic colors, making it easier to tell apart actions such as ordering and canceling - Plugins that provide their own artwork now show it as their tab icon instead of the generic placeholder

- Search results now highlight matches in password, note, and 2FA list titles, with clear dark-mode contrast. - Note search clearly distinguishes the current match from other matches. - Password search finds usernames immediately, including one-character and fuzzy matches. - Plugin actions have improved VoiceOver support: visible titles remain accessible names, while icon-only actions use service-provided labels.

- Debug log results now appear beside the Send button, with clear error messages on failure. - Pinch-to-zoom on Plugin pages now reflows content, keeping text sharp. - Account reset, user deletion, and alias confirmation screens now scroll when the keyboard is open. - Plugin data rows now honor service-provided column widths, with unspecified text left-aligned.

- Debug log send results now appear beside the Send button, with visible error text when sending fails. - Pinch-zoom on Plugin pages now re-lays out the content, so text stays sharp at every zoom level.

Plugin page UI tuning

Plugin actions can now appear beside the page title, with long titles shortened cleanly so the action stays accessible.

- Authorization no longer shows a stalled return countdown when the result is handed directly back to the requesting app. - Spreadsheet formulas, formatting, and display calculations are more efficient, keeping large sheets responsive. - Approved App Data is returned directly to the requesting app without requiring a second unlock request.

- Device lists now prioritize device names, show app setting names and added times, and keep IDs in details - New pairings and app authorizations now refresh devices immediately, preventing stale “Device not found” errors - Debug logs can now be sent securely to support with a six-digit reference code and a 60-second cooldown - “Access Point” is now written out in full throughout the app and highlighted clearly during authorization - Authorization now lists each requested permission, and the full page scrolls when needed - SSO/Access Point authorization confirmation text now wraps to show the full message without truncation - App authorizations opened from another app now return to the source app after five seconds, while still allowing decryption requests to be reviewed before returning - Account Key Backup now uses an improved recovery screen; existing security answers open verification first, with a re-setup link when needed.

- KeyLockr and SSO links now open the Safe directly. - Links received before sign-in automatically continue after sign-in.

• Stronger encryption: every password and note update now uses a fresh random nonce • Existing items and revision history upgrade automatically in the background — no change to modification dates or list order • Data upgrade progress now shows at the top with total and remaining item counts • Fixed an issue that could prevent some revision histories from completing the background data upgrade

Stronger encryption with a fresh random nonce.

Improved plugin page description render style.

Improved reminder and plugin desc.

* Improved plugin loading speed. Refactored plugin workflow. * Added changelog to setting.

Fixed the tag migration stability in v4 light encryption. Ability to reveal and copy the original 2FA secret from the edit screen.

- Account Key encryption: your titles, website URLs, and 2FA labels are now end-to-end encrypted — zero-knowledge, the server can no longer read them. - Share Extension: send content into KeyLockr straight from other apps' share sheets, encrypted inside the extension before it's saved. - Smarter search: now matches note body text and password notes, with consistent fuzzy matching across every list. - Stays signed in: brief network drops no longer log you out. - Zero-knowledge pairing and encrypted device names. - Stability & recovery: fixed startup crashes (non-Latin spreadsheet formulas, corrupted metadata) and automatically recovers titles that briefly showed as locked after enabling encryption.

- Fixed a "Data encoding error" that could prevent notes/passwords from saving when tags or URL were empty. - Fixed the delete-account confirmation field rejecting letters, which blocked the server's alphanumeric codes.