- Fixed a bug where the OneDrive account could not be connected

- Add OneDrive support for signing in, browsing KDBX files, opening databases, and saving cloud-backed edits. - Add a Dropbox sign-in note explaining that the low-user-count OAuth warning is expected for an indie app.

New Features - Added support for creating new KDBX 4.x databases from KeeForge locally and on Dropbox. Changes - Use shared monospaced password styling across entry detail, password generation, editing, unlock, and AutoFill credential creation screens.

## New Features - Create new groups directly from the unlocked database add menu. - New Settings organization with dedicated Security, AutoFill, Display, and About pages. - Added a privacy option to hide last-opened usage stats from the locked database list. ## What’s Changed - Moved Send Feedback to the main Settings page and refined Settings copy. - Reduced feedback submissions to only the typed message and visible error details. - Improved unlock error visibility during lockout backoff. - Entry notes can be selected.

## New Features - Add adaptive iPad layout support with a persistent sidebar, regular-width vault workspace - Add an in-app feedback form that can be opened from Settings and database-open failure screens without requiring GitHub or email ## Fixes - Improve database-open failure handling by separating expected password/key-file errors from unexpected file, format, cloud, and biometric failures - Add copyable sanitized error details and safer feedback payloads for database-open issues without including vault contents, passwords, key files, or raw database files - Respect the configured auto-lock timeout across app switching by making immediate background locking optional and applying elapsed timeout checks when returning from the background

## New Features - Add KDBX 3.1 read/open compatibility for password-only databases, including legacy AES-KDF headers, hashed block streams, and Salsa20 protected fields ## Fixes - Toggling read-only in Database Settings now updates the current view immediately - Fix read-only ribbon and unsaved-changes banner accessibility identifiers for UI test visibility - Fix settings navigation from the unlocked database view (gear button → Database Settings → App Settings) - Prevent adding the same local database file twice; opening an already-added file via Files/AirDrop now reliably opens the existing entry ## Changes - Replace the yellow read-only banner with a lock icon in the navigation toolbar so the indicator stays visible across groups and entry details - Unify Quick Launch and Read Only badge styling in the database list - Use a check mark toggle for Quick Launch in the database context menu to match the Read-only toggle

# Entry editing - create, edit, and delete entries directly in the app with built-in password generation, autosave, save-conflict resolution, and read-only mode - save new credentials and generate strong passwords directly from the AutoFill extension, with offline-safe queueing for Dropbox-backed databases ## Editing Details - Changes autosave immediately — no manual save button; a progress overlay shows while the database is being written - Full entry history is preserved on every edit, so previous passwords and fields can be reviewed - Passwords are visible by default in the editor with a toggle to hide them - No data loss: unknown XML elements and third-party KeePass fields are preserved when saving - Automatic timestamped backups before each save, with detection of external changes to prevent overwrites - Dropbox-backed databases can be saved back to Dropbox with conflict detection ## Fixes - Dropbox icon renders correctly in dark mode

Dropbox Cloud Sync Link your Dropbox account and open databases directly — no manual file downloads. Cached copies keep AutoFill working even when you're offline. Also in this update: • Cleaner database list with source icons at a glance • UI polish and bug fixes

- Add a multi-database home screen that replaces the single-file launch screen with a database list, per-database unlock flow, add/remove/reorder actions, quick launch, nicknames, and key file association management - Add migration from the legacy single-database bookmark/cache/keychain model to persisted per-database references with UUID-keyed shared cache files and lazy biometric key migration - Support opening .kdbx files from other apps (Files, Mail, AirDrop, etc.) with UTType support for KeePassium, Strongbox, MiniKeePass, and more - Add open source acknowledgments screen in Settings showing Argon2Swift and Argon2 license texts

- Add TOTP one-time code AutoFill support (iOS 18+) — verification codes from TOTP entries now appear in the QuickType bar alongside passwords and passkeys - Fixed AutoFill credential lookup falling back to slow matching every time by parsing stable UUIDs from KDBX entry XML instead of generating random UUIDs on each parse - Fixed AutoFill key icon flow showing all entries instead of filtering to the current site; replaced non-scrollable alert picker with scrollable search view and pre-filled domain search - Fixed "KDF parameter out of range" error when opening databases created with KeePassXC 2.7.12+ that use high Argon2 iterations or parallelism values

- Passkey AutoFill: passkeys stored in KDBX (KeePassXC format) now appear in the iOS QuickType bar and AutoFill sheet. Tap to authenticate with Face ID, just like passwords. Works with any website that supports WebAuthn/FIDO2 passkey sign-in. - Fixed AutoFill for cloud-hosted databases by caching the selected `.kdbx` in the App Group shared container and refreshing it from the main app - Fixed tip jar not available

Key File Support Unlock databases with password + key file (composite key). Supports all KeePass formats: binary, hex, XML v1/v2, and arbitrary files. Tip Jar Love KeeForge? Leave a tip to support development. Security Improvements • Exponential lockout after failed password attempts • Screen recording detection — blurs vault when screen is being recorded • QuickType AutoFill enabled by default Cloud Drive Support Open .kdbx files directly from Google Drive, OneDrive, Dropbox, and other cloud providers via the document picker. Quality of Life • Sort ascending/descending toggle in the toolbar • Entry timestamps (created & modified dates) • Feedback button in Settings • Fixed file picker issues

New Features - QuickType AutoFill: credential suggestions appear in the keyboard bar in Safari. Tap to autofill with Face ID, no full AutoFill popup needed. Toggle in Settings → Quick AutoFill. Fixes - Fixed QuickType domain extraction — www-stripping, subdomain collapsing, multi-part TLD support (e.g. `login.facebook.com` → `facebook.com`, `bbc.co.uk` handled correctly) - Increased tap targets for view/copy/open URL buttons in entry detail (44pt minimum per Apple HIG) Security - Hardened KDBX parser: `DataReader` now throws on truncated data instead of silently truncating - Bounded Argon2 KDF parameters (iterations, memory, parallelism) to prevent resource exhaustion from malicious files - Validated variant-map value lengths before decoding - Passwords and TOTP secrets stored as AES-GCM `EncryptedValue` in memory (lazy decrypt on demand) Other Changes - Renamed from KeeVault to KeeForge - Switched favicon provider from Google to DuckDuckGo (privacy) - Private/internal domains filtered from favicon fetching

Security Hardening • Clipboard now stays on-device — passwords no longer sync to nearby Apple devices • Constant-time cryptographic verification New Features • Website favicons (opt-in in Settings) • Auto Face ID unlock when opening the app • Auto-lock inactivity timer • Sort entries by title, date created, or date modified • Multiple URLs per entry support • Recycle Bin entries hidden from search and AutoFill

• Fixed passwords not displaying for most entries • Fixed TOTP code parsing • Face ID required to reveal or copy passwords • Improved search — works on all pages, no longer dismisses while typing • Fixed duplicate entries appearing in search results • Updated launch screen icon