Password Manager 2025.12.0 (21003)

Overview

• Improved autofill compatibility with Samsung Internet, Opera, and Edge browsers
• Fixed app crashes when unlocking during sync errors
• Fixed passkey creation for AliExpress
• General under-the-hood improvements for usability and performance

What's Changed

• [PM-14880] ci: Add automated PR labelling based on file paths and title patterns by @vvolkgang in #6157
• PM-28053: Ensure any exception thrown during re-auth is an IO exception by @david-livefront in #6175
• Update logic for handling the pin protected user key by @david-livefront in #6169
• [PM-27150] React to device changes on device screen unlock method by @andrebispo5 in #6103
• [PM-27869] fix/[PM-26241] : draw out keyboard on talkback click by @dev-sharma3624 in #6129
• PM-28408: Update CameraPreview composable to address flakey test by @david-livefront in #6178
• [deps]: Update actions/checkout action to v5 by @renovate[bot] in #6144
• [PM-24148] add credential manager provider for create passwords by @Nailik in #5579
• PM-28492: Replace Authenticator Toasts with Snackbars by @david-livefront in #6180
• [PM-28157] Add string extension to prefix URIs with www by @SaintPatrck in #6183
• [PM-21391] Remove debug credential provider configuration by @SaintPatrck in #6182
• [PM-27816] Not clearing the fingerprint on requests that don't return fingerprint on LoginWithDevice by @aj-rosado in #6185
• PM-28525: Update the LoginApprovalScreen ui by @david-livefront in #6187
• PM-28545: Remove the compatibility mode toggle from the Autofill screen by @david-livefront in #6188
• Crowdin Pull by @bw-ghapp[bot] in #6189
• [PM-28086] Add testharness for Credential Manager and Autofill testing by @SaintPatrck in #6159
• Update SDK to 1.0.0-3674-c60a5d79 by @bw-ghapp[bot] in #6064
• Update SDK to 1.0.0-3896-f75a58cd by @bw-ghapp[bot] in #6198
• Update SDK to 1.0.0-3908-4b0d1280 by @bw-ghapp[bot] in #6201
• Enhance code review skill documentation with TOCs and missing severity categories by @SaintPatrck in #6186
• [PM-28157] Revert "Add string extension to prefix URIs with www" by @SaintPatrck in #6192
• Crowdin Pull by @bw-ghapp[bot] in #6206
• Update SDK to 1.0.0-3928-2cca3d46 by @bw-ghapp[bot] in #6205

Full Changelog: v2025.11.1-bwpm...v2025.12.0-bwpm
Builds Source: https://github.com/bitwarden/android/actions/runs/19830126705

Password Manager 2025.11.1 (20994)

Overview

• Improved Autofill functionality in Samsung Internet, Opera, and Edge browsers.
• General under-the-hood improvements and bug fixes.

What's Changed

• PM-27705: Enable filterTouchesWhenObscured in Authenticator for security by @david-livefront in #6105
• Remove unused xml colors from Authenticator by @david-livefront in #6108
• Optimize reviewing-changes skill by @SaintPatrck in #6099
• [deps]: Update org.sonarqube to v7 by @renovate[bot] in #6082
• PM-27703: Update Authenticator navigation by @david-livefront in #6109
• [PM-24971] Sanitize passkey attestation options from AliExpress by @SaintPatrck in #6106
• [PM-27657] KDF silent update with MasterPasswordUnlock data by @andrebispo5 in #6113
• PM-27755: Create a common LocalQrCodeAnalyzer for both apps by @david-livefront in #6115
• [PM-26736] Fix push notification logout reason serialization by @andrebispo5 in #6116
• PM-27756: Create common ExitManager by @david-livefront in #6117
• PM-27770: Update error parsing when creating or updating a cipher by @david-livefront in #6118
• PM-24277: Add language selector to Authenticator by @david-livefront in #6120
• PM-27771: Improve TOTP parsing by @david-livefront in #6119
• PM-27817: Consolidate totp parsing with TotpUriUtils by @david-livefront in #6122
• PM-27597: Update Yubikey illustration to match the rest of the app by @david-livefront in #6087
• Reduce verbosity in reviewing-changes skill for clean PRs by @SaintPatrck in #6121
• [PM-27834] Use Authenticator Bridge as a project reference by @vvolkgang in #5793
• PM-27846: Move DispatcherManager to core module by @david-livefront in #6124
• Refine reviewing-changes skill to eliminate verbosity and praise by @SaintPatrck in #6128
• [PM-27752] Add certificate signature verification to AuthenticatorBridge by @SaintPatrck in #6126
• [PM-27806] Reverted changes to order of StorePolicies after sync by @aj-rosado in #6130
• PM-27845: Move SnackbarRelayManager to ui module by @david-livefront in #6127
• Enforce strict brevity in reviewing-changes skill output by @SaintPatrck in #6131
• PM-27902: Logout user after successful master password reset by @SaintPatrck in #6133
• Crowdin Pull by @bw-ghapp[bot] in #6135
• Clarify package id parsing and AutofillView creation by @david-livefront in #6138
• Fix a test that was not running by @david-livefront in #6140
• [deps]: Lock file maintenance by @renovate[bot] in #6146
• Exclude Bitwarden Android SDK from Renovate auto-updates by @SaintPatrck in #6147
• Update Firebase BoM to 34.5.0 by @SaintPatrck in #6150
• Update OkHttp to version 5.3.0 by @SaintPatrck in #6148
• Bump JUnit from 6.0.0 to 6.0.1 by @SaintPatrck in #6149
• [PM-27901] Add f-droid fastlane metadata by @vvolkgang in #6134
• [PM-28041] Remove SDK Update PR changelog list size limit by @vvolkgang in #6152
• All tests should assert if a value is displayed by @david-livefront in #6153
• [PM-28029] Address Sonar Cloud and Linter errors by @vvolkgang in #6151
• [deps]: Update gradle minor by @renovate[bot] in #6143
• [PM-27119] Prevent import card data when ITEM_RESTRICT_TYPES policy is active by @aj-rosado in #6123
• PM-28056: Consolidate IntentManager extensions by @david-livefront in #6156
• Replace blank account name with null by @david-livefront in #6158
• [deps]: Update actions/upload-artifact action to v5 by @renovate[bot] in #6145
• Update App version name to '2025.11.1' by @david-livefront in #6162
• Update Autofill to detect url bar webDomain for certain browsers by @david-livefront in #6141
• [PM-28029] ci: add missing permission to fdroid job to fix f-droid build failures by @vvolkgang in #6163
• [PM-27181] - Grant additional permissions for review code by @theMickster in #6165
• Update RTL transitions to go the correct direction by @david-livefront in #6166
• Crowdin Pull by @bw-ghapp[bot] in #6167
• 🍒 PM-28545: Remove the compatibility mode toggle from the Autofill screen by @SaintPatrck in #6191

Full Changelog: v2025.11.0-bwpm...v2025.11.1-bwpm
Builds Source: https://github.com/bitwarden/android/actions/runs/19583271293

Authenticator 2025.11.1 (1083)

Overview

• General under-the-hood improvements and bug fixes.

What's Changed

• PM-27705: Enable filterTouchesWhenObscured in Authenticator for security by @david-livefront in #6105
• Remove unused xml colors from Authenticator by @david-livefront in #6108
• Optimize reviewing-changes skill by @SaintPatrck in #6099
• [deps]: Update org.sonarqube to v7 by @renovate[bot] in #6082
• PM-27703: Update Authenticator navigation by @david-livefront in #6109
• [PM-24971] Sanitize passkey attestation options from AliExpress by @SaintPatrck in #6106
• [PM-27657] KDF silent update with MasterPasswordUnlock data by @andrebispo5 in #6113
• PM-27755: Create a common LocalQrCodeAnalyzer for both apps by @david-livefront in #6115
• [PM-26736] Fix push notification logout reason serialization by @andrebispo5 in #6116
• PM-27756: Create common ExitManager by @david-livefront in #6117
• PM-27770: Update error parsing when creating or updating a cipher by @david-livefront in #6118
• PM-24277: Add language selector to Authenticator by @david-livefront in #6120
• PM-27771: Improve TOTP parsing by @david-livefront in #6119
• PM-27817: Consolidate totp parsing with TotpUriUtils by @david-livefront in #6122
• PM-27597: Update Yubikey illustration to match the rest of the app by @david-livefront in #6087
• Reduce verbosity in reviewing-changes skill for clean PRs by @SaintPatrck in #6121
• [PM-27834] Use Authenticator Bridge as a project reference by @vvolkgang in #5793
• PM-27846: Move DispatcherManager to core module by @david-livefront in #6124
• Refine reviewing-changes skill to eliminate verbosity and praise by @SaintPatrck in #6128
• [PM-27752] Add certificate signature verification to AuthenticatorBridge by @SaintPatrck in #6126
• [PM-27806] Reverted changes to order of StorePolicies after sync by @aj-rosado in #6130
• PM-27845: Move SnackbarRelayManager to ui module by @david-livefront in #6127
• Enforce strict brevity in reviewing-changes skill output by @SaintPatrck in #6131
• PM-27902: Logout user after successful master password reset by @SaintPatrck in #6133
• Crowdin Pull by @bw-ghapp[bot] in #6135
• Clarify package id parsing and AutofillView creation by @david-livefront in #6138
• Fix a test that was not running by @david-livefront in #6140
• [deps]: Lock file maintenance by @renovate[bot] in #6146
• Exclude Bitwarden Android SDK from Renovate auto-updates by @SaintPatrck in #6147
• Update Firebase BoM to 34.5.0 by @SaintPatrck in #6150
• Update OkHttp to version 5.3.0 by @SaintPatrck in #6148
• Bump JUnit from 6.0.0 to 6.0.1 by @SaintPatrck in #6149
• [PM-27901] Add f-droid fastlane metadata by @vvolkgang in #6134
• [PM-28041] Remove SDK Update PR changelog list size limit by @vvolkgang in #6152
• All tests should assert if a value is displayed by @david-livefront in #6153
• [PM-28029] Address Sonar Cloud and Linter errors by @vvolkgang in #6151
• [deps]: Update gradle minor by @renovate[bot] in #6143
• [PM-27119] Prevent import card data when ITEM_RESTRICT_TYPES policy is active by @aj-rosado in #6123
• PM-28056: Consolidate IntentManager extensions by @david-livefront in #6156
• Replace blank account name with null by @david-livefront in #6158
• [deps]: Update actions/upload-artifact action to v5 by @renovate[bot] in #6145
• Update App version name to '2025.11.1' by @david-livefront in #6162
• Update Autofill to detect url bar webDomain for certain browsers by @david-livefront in #6141
• [PM-28029] ci: add missing permission to fdroid job to fix f-droid build failures by @vvolkgang in #6163
• [PM-27181] - Grant additional permissions for review code by @theMickster in #6165
• Update RTL transitions to go the correct direction by @david-livefront in #6166
• Crowdin Pull by @bw-ghapp[bot] in #6167
• 🍒 PM-28545: Remove the compatibility mode toggle from the Autofill screen by @SaintPatrck in #6191

Full Changelog: v2025.11.0-bwa...v2025.11.1-bwa
Builds Source: https://github.com/bitwarden/android/actions/runs/19868965773

Password Manager 2025.11.0 (20967)

Overview

• Fixed an issue that could cause unexpected app crashes.
• General stability improvements and bug fixes.

What's Changed

• Update OkHttp to latest version by @david-livefront in #6054
• Update SDK to 1.0.0-3436-2a00b727 by @bw-ghapp[bot] in #6042
• [PM-26986] Hide select other account button if user has no other account by @aj-rosado in #6041
• [PM-23290] Migrate PIN unlock keys to PinProtectedUserKeyEnvelope by @andrebispo5 in #6024
• [PM-27130] Update alert (Snackbar) color to inverseSurface in dynamic color scheme by @SaintPatrck in #6057
• PM-27136: Replace FirstTimeSyncSnackbarHost with BitwardenSnackbarHost by @david-livefront in #6058
• PM-27149: Update empty vault illustration by @david-livefront in #6059
• [PM-26420] Add flight recorder logs for vault unlock method and PIN migration by @andrebispo5 in #6052
• Update drawable names with consistent prefixes by @david-livefront in #6060
• PM-27153: Update copy in Authenticator app by @david-livefront in #6061
• [PM-27001] Skip account selection only one exists on cxp flow by @aj-rosado in #6055
• PM-27210: Add dynamic color support to Authenticator by @david-livefront in #6063
• PM-27202: Update ItemListingScreen layout for improved spacing by @david-livefront in #6065
• PM-27263: Add enum for Vault Timeout Policy actions by @david-livefront in #6067
• Remove night-mode icon variants where possible by @david-livefront in #6066
• [PM-27088] fix unit test execution by @Nailik in #6048
• [PM-26810] Remove loading dialog flicker on vault data updates by @SaintPatrck in #6068
• Fix TopAppBar height for multiline titles by @david-livefront in #6069
• [PM-26810] Clear password input after successful OTP verification by @SaintPatrck in #6070
• PM-27271: Update selection button disabled state by @david-livefront in #6071
• Create reusable supporting content composable by @david-livefront in #6075
• [PM-27092] Changing screen capture flow from event based to state based on Authenticator by @aj-rosado in #6062
• Crowdin Pull by @bw-ghapp[bot] in #6077
• [PM-27176] Switch to using SDK's init crypto with MasterPasswordUnlock by @andrebispo5 in #6073
• Minor clean up for the Account Security Screen by @david-livefront in #6076
• Implement reusable Claude code review workflow by @theMickster in #6072
• PM-19302: Add support for a typed vault timeout policy by @david-livefront in #6078
• [PM-22157] independent version names in build workflows by @mpbw2 in #6074
• [PM-26420] FlightRecorder vault unlock method by @andrebispo5 in #6084
• PM-27497: Update Snackbar font when there is no header by @david-livefront in #6086
• PM-27494: Update custom vault timeout UI by @david-livefront in #6085
• [deps]: Lock file maintenance by @renovate[bot] in #6083
• [PM-27516] [PM 27157] Custom text field edit multiline fix by @dev-sharma3624 in #6088
• [PM-27589] [PM-27158] fix : Sub folders always show 0 items by @dev-sharma3624 in #6092
• Update Androidx dependencies by @david-livefront in #6093
• Update Kotlin, ksp, and kover to the latest versions by @david-livefront in #6094
• Update the Google Protobuf library by @david-livefront in #6095
• Fix deprecation within the app by @david-livefront in #6096
• [deps]: Update com.google.devtools.ksp to v2.3.0 by @renovate[bot] in #6080
• Update androidx.credentials to 1.6.0-beta03 by @SaintPatrck in #6097
• Fix topAppBar flicker when text is long by @david-livefront in #6098
• Update Readme compatibility docs by @david-livefront in #6100
• [PM-27120] cxp hide user account when remove individual export is enabled by @aj-rosado in #6089
• Crowdin Pull by @bw-ghapp[bot] in #6101
• Add Push chevron to Block autofill button by @david-livefront in #6102
• 🍒 [PM-27806] Reverted changes to order of StorePolicies after sync by @aj-rosado in #6132
• 🍒 [PM-27902] Logout user after successful master password reset by @aj-rosado in #6137
• 🍒 Update Autofill to detect url bar webDomain for certain browsers by @david-livefront in #6155

Full Changelog: v2025.10.1-bwa...v2025.11.0-bwpm
Builds Source: https://github.com/bitwarden/android/actions/runs/19309927902

Authenticator 2025.11.0 (1030)

Overview

• Various under-the-hood and performance improvements.

What's Changed

• Update OkHttp to latest version by @david-livefront in #6054
• Update SDK to 1.0.0-3436-2a00b727 by @bw-ghapp[bot] in #6042
• [PM-26986] Hide select other account button if user has no other account by @aj-rosado in #6041
• [PM-23290] Migrate PIN unlock keys to PinProtectedUserKeyEnvelope by @andrebispo5 in #6024
• [PM-27130] Update alert (Snackbar) color to inverseSurface in dynamic color scheme by @SaintPatrck in #6057
• PM-27136: Replace FirstTimeSyncSnackbarHost with BitwardenSnackbarHost by @david-livefront in #6058
• PM-27149: Update empty vault illustration by @david-livefront in #6059
• [PM-26420] Add flight recorder logs for vault unlock method and PIN migration by @andrebispo5 in #6052
• Update drawable names with consistent prefixes by @david-livefront in #6060
• PM-27153: Update copy in Authenticator app by @david-livefront in #6061
• [PM-27001] Skip account selection only one exists on cxp flow by @aj-rosado in #6055
• PM-27210: Add dynamic color support to Authenticator by @david-livefront in #6063
• PM-27202: Update ItemListingScreen layout for improved spacing by @david-livefront in #6065
• PM-27263: Add enum for Vault Timeout Policy actions by @david-livefront in #6067
• Remove night-mode icon variants where possible by @david-livefront in #6066
• [PM-27088] fix unit test execution by @Nailik in #6048
• [PM-26810] Remove loading dialog flicker on vault data updates by @SaintPatrck in #6068
• Fix TopAppBar height for multiline titles by @david-livefront in #6069
• [PM-26810] Clear password input after successful OTP verification by @SaintPatrck in #6070
• PM-27271: Update selection button disabled state by @david-livefront in #6071
• Create reusable supporting content composable by @david-livefront in #6075
• [PM-27092] Changing screen capture flow from event based to state based on Authenticator by @aj-rosado in #6062
• Crowdin Pull by @bw-ghapp[bot] in #6077
• [PM-27176] Switch to using SDK's init crypto with MasterPasswordUnlock by @andrebispo5 in #6073
• Minor clean up for the Account Security Screen by @david-livefront in #6076
• Implement reusable Claude code review workflow by @theMickster in #6072
• PM-19302: Add support for a typed vault timeout policy by @david-livefront in #6078
• [PM-22157] independent version names in build workflows by @mpbw2 in #6074
• [PM-26420] FlightRecorder vault unlock method by @andrebispo5 in #6084
• PM-27497: Update Snackbar font when there is no header by @david-livefront in #6086
• PM-27494: Update custom vault timeout UI by @david-livefront in #6085
• [deps]: Lock file maintenance by @renovate[bot] in #6083
• [PM-27516] [PM 27157] Custom text field edit multiline fix by @dev-sharma3624 in #6088
• [PM-27589] [PM-27158] fix : Sub folders always show 0 items by @dev-sharma3624 in #6092
• Update Androidx dependencies by @david-livefront in #6093
• Update Kotlin, ksp, and kover to the latest versions by @david-livefront in #6094
• Update the Google Protobuf library by @david-livefront in #6095
• Fix deprecation within the app by @david-livefront in #6096
• [deps]: Update com.google.devtools.ksp to v2.3.0 by @renovate[bot] in #6080
• Update androidx.credentials to 1.6.0-beta03 by @SaintPatrck in #6097
• Fix topAppBar flicker when text is long by @david-livefront in #6098
• Update Readme compatibility docs by @david-livefront in #6100
• [PM-27120] cxp hide user account when remove individual export is enabled by @aj-rosado in #6089
• Crowdin Pull by @bw-ghapp[bot] in #6101
• Add Push chevron to Block autofill button by @david-livefront in #6102
• 🍒 [PM-27806] Reverted changes to order of StorePolicies after sync by @aj-rosado in #6132
• 🍒 [PM-27902] Logout user after successful master password reset by @aj-rosado in #6137

New Contributors

• @theMickster made their first contribution in #6072
• @dev-sharma3624 made their first contribution in #6088

Full Changelog: v2025.10.1-bwa...v2025.11.0-bwa
Builds Source: https://github.com/bitwarden/android/actions/runs/19175768927

Password Manager 2025.10.1 (20867)

Overview

• Improved Autofill Service security, now requires Chrome version 134 or later.
• General under-the-hood performance improvements

What's Changed

• Update SDK to 1.0.0-3293-ae9b8b52 by @bw-ghapp[bot] in #5975
• Update Authenticator UI to match Password Manager style by @david-livefront in #5969
• Update SDK to 1.0.0-3309-9574bd00 by @bw-ghapp[bot] in #5979
• PM-26358: Integrate the token auth logic with the SDK by @david-livefront in #5967
• PM-26579: Remove duplicated BitwardenScaffold from ItemListingScreen by @david-livefront in #5978
• PM-26594: Move the QrCodeAnalyzer to the UI module by @david-livefront in #5980
• Improve CXF message handling by @SaintPatrck in #5982
• The QrCodeScanScreen should always be in dark mode by @david-livefront in #5983
• PM-25908: Do not use network error message from 401 by @david-livefront in #5984
• PM-26689: Separate share logic from IntentManager by @david-livefront in #5987
• PM-20593: sync-org-keys notification should allow token to be refreshed on next request by @david-livefront in #5988
• [PM-26315] Register/unregister for CXP export based on feature flag by @SaintPatrck in #5948
• Simplify the BitwardenExpandableFloatingActionButton by @david-livefront in #5989
• Add tests for ShareManager by @david-livefront in #5990
• [deps]: Update com.google.devtools.ksp to v2.2.20-2.0.4 by @david-livefront in #5992
• [deps]: Update androidx.room to v2.8.2 by @david-livefront in #5993
• Update Crowdin plurals by @david-livefront in #5991
• [PM-26718] Move Credential Exchange intent filter to main manifest by @SaintPatrck in #5995
• [PM-26716] Validate credential exchange request by @SaintPatrck in #5994
• Ensure the fab is dismissed when clicking on the lower portion of the content by @david-livefront in #5996
• [PM-23278] Upgrade user KDF settings to minimums by @andrebispo5 in #5955
• Remove logging in CredentialExchangeCompletionManager by @SaintPatrck in #5998
• [deps]: Update androidx.camera to v1.5.1 by @david-livefront in #5999
• Implement Zizmor workflow scanner by @mandreko-bitwarden in #5857
• [PM-26750] Allow underscores in Block Autofill URI patterns by @SaintPatrck in #6000
• [PM-24258] Building a specific Fido2AttestationResponse to work with Binance by @aj-rosado in #5986
• Update Firebase BOM and Google Services by @david-livefront in #6004
• Remove quotes in fastlane bundle commands by @mandreko-bitwarden in #6003
• Update JUnit and Mockk test dependencies by @david-livefront in #6005
• Update Compose BOM to v2025.10.00 by @david-livefront in #6007
• Update SDK to 1.0.0-3367-cc36132b by @bw-ghapp[bot] in #5981
• PM-26560: Fix cross-origin autofill issues by @david-livefront in #5977
• PM-26575: Add AuthTab support for WebAuthN, Duo, and SSO by @david-livefront in #6002
• [deps]: Lock file maintenance by @renovate[bot] in #6011
• Fix statusbar color when display is turned off by @david-livefront in #6006
• Correct environment variable names in build workflow by @SaintPatrck in #6008
• Add logging to UI module for Auth Tabs by @david-livefront in #6015
• Fix plurals issue for Crowdin by @david-livefront in #6016
• Crowdin Pull by @bw-ghapp[bot] in #6001
• [PM-26804] Clear password input after verification in VerifyPasswordViewModel by @SaintPatrck in #6017
• [deps]: Update gradle/actions action to v5 by @renovate[bot] in #6010
• Update SDK to 1.0.0-3390-a0531e84 by @bw-ghapp[bot] in #6013
• [PM-26802] Update button text for Import items by @SaintPatrck in #6019
• Add navigation chevron for Import Items button by @david-livefront in #6020
• Add optional buttons to BitwardenEmptyContent by @SaintPatrck in #6022
• Common camera UI by @david-livefront in #6027
• PM-26910: Minor UI updates for the Authenticator by @david-livefront in #6028
• [PM-26803] Show empty state when no items are available for export by @SaintPatrck in #6023
• [BRE-1194] temporarily enable hourly checks for github release by @AmyLGalles in #5895
• Crowdin Pull by @bw-ghapp[bot] in #6031
• [PM-26395] Hide "my items" collection when item is assigned to other collection by @aj-rosado in #6018
• Update SDK to 1.0.0-3404-8b95ae6e by @bw-ghapp[bot] in #6021
• Expand supported credential types for import by @SaintPatrck in #6030
• [PM-23280] Use masterPasswordUnlock KDF settings on vault unlock by @andrebispo5 in #6026
• Consolidate the VaultVerificationCodeItems by @david-livefront in #6035
• Update SDK to 1.0.0-3430-fc75b903 by @bw-ghapp[bot] in #6036
• Update Item listing and search screens to user immutable lists by @david-livefront in #6037
• [PM-26909] Implement screen capture toggle authenticator by @aj-rosado in #6033
• Fix workflow name and permissions by @AmyLGalles in #6040
• PM-27046: Add overflow to Authenticator by @david-livefront in #6039
• [PM-26736] Prevent logout notification on KDF change by @andrebispo5 in #6038
• Fix flaky test by @david-livefront in #6043
• [PM-26810] Add OTP support to VerifyPasswordScreen by @SaintPatrck in #6034
• PM-27071: Add overflow menu to authenticator search by @david-livefront in #6044
• Crowdin Pull by @bw-ghapp[bot] in #6047
• PM-26912: Update copy for authenticator security by @david-livefront in #6045
• [PM-27076] Add support for IronFox Nightly by @celenityy in #6046

Full Changelog: v2025.10.0-bwpm...v2025.10.1-bwpm
Builds Source: https://github.com/bitwarden/android/actions/runs/18598736732

Authenticator 2025.10.1 (954)

Overview

General under-the-hood performance improvements

What's Changed

• Update SDK to 1.0.0-3293-ae9b8b52 by @bw-ghapp[bot] in #5975
• Update Authenticator UI to match Password Manager style by @david-livefront in #5969
• Update SDK to 1.0.0-3309-9574bd00 by @bw-ghapp[bot] in #5979
• PM-26358: Integrate the token auth logic with the SDK by @david-livefront in #5967
• PM-26579: Remove duplicated BitwardenScaffold from ItemListingScreen by @david-livefront in #5978
• PM-26594: Move the QrCodeAnalyzer to the UI module by @david-livefront in #5980
• Improve CXF message handling by @SaintPatrck in #5982
• The QrCodeScanScreen should always be in dark mode by @david-livefront in #5983
• PM-25908: Do not use network error message from 401 by @david-livefront in #5984
• PM-26689: Separate share logic from IntentManager by @david-livefront in #5987
• PM-20593: sync-org-keys notification should allow token to be refreshed on next request by @david-livefront in #5988
• [PM-26315] Register/unregister for CXP export based on feature flag by @SaintPatrck in #5948
• Simplify the BitwardenExpandableFloatingActionButton by @david-livefront in #5989
• Add tests for ShareManager by @david-livefront in #5990
• [deps]: Update com.google.devtools.ksp to v2.2.20-2.0.4 by @david-livefront in #5992
• [deps]: Update androidx.room to v2.8.2 by @david-livefront in #5993
• Update Crowdin plurals by @david-livefront in #5991
• [PM-26718] Move Credential Exchange intent filter to main manifest by @SaintPatrck in #5995
• [PM-26716] Validate credential exchange request by @SaintPatrck in #5994
• Ensure the fab is dismissed when clicking on the lower portion of the content by @david-livefront in #5996
• [PM-23278] Upgrade user KDF settings to minimums by @andrebispo5 in #5955
• Remove logging in CredentialExchangeCompletionManager by @SaintPatrck in #5998
• [deps]: Update androidx.camera to v1.5.1 by @david-livefront in #5999
• Implement Zizmor workflow scanner by @mandreko-bitwarden in #5857
• [PM-26750] Allow underscores in Block Autofill URI patterns by @SaintPatrck in #6000
• [PM-24258] Building a specific Fido2AttestationResponse to work with Binance by @aj-rosado in #5986
• Update Firebase BOM and Google Services by @david-livefront in #6004
• Remove quotes in fastlane bundle commands by @mandreko-bitwarden in #6003
• Update JUnit and Mockk test dependencies by @david-livefront in #6005
• Update Compose BOM to v2025.10.00 by @david-livefront in #6007
• Update SDK to 1.0.0-3367-cc36132b by @bw-ghapp[bot] in #5981
• PM-26560: Fix cross-origin autofill issues by @david-livefront in #5977
• PM-26575: Add AuthTab support for WebAuthN, Duo, and SSO by @david-livefront in #6002
• [deps]: Lock file maintenance by @renovate[bot] in #6011
• Fix statusbar color when display is turned off by @david-livefront in #6006
• Correct environment variable names in build workflow by @SaintPatrck in #6008
• Add logging to UI module for Auth Tabs by @david-livefront in #6015
• Fix plurals issue for Crowdin by @david-livefront in #6016
• Crowdin Pull by @bw-ghapp[bot] in #6001
• [PM-26804] Clear password input after verification in VerifyPasswordViewModel by @SaintPatrck in #6017
• [deps]: Update gradle/actions action to v5 by @renovate[bot] in #6010
• Update SDK to 1.0.0-3390-a0531e84 by @bw-ghapp[bot] in #6013
• [PM-26802] Update button text for Import items by @SaintPatrck in #6019
• Add navigation chevron for Import Items button by @david-livefront in #6020
• Add optional buttons to BitwardenEmptyContent by @SaintPatrck in #6022
• Common camera UI by @david-livefront in #6027
• PM-26910: Minor UI updates for the Authenticator by @david-livefront in #6028
• [PM-26803] Show empty state when no items are available for export by @SaintPatrck in #6023
• [BRE-1194] temporarily enable hourly checks for github release by @AmyLGalles in #5895
• Crowdin Pull by @bw-ghapp[bot] in #6031
• [PM-26395] Hide "my items" collection when item is assigned to other collection by @aj-rosado in #6018
• Update SDK to 1.0.0-3404-8b95ae6e by @bw-ghapp[bot] in #6021
• Expand supported credential types for import by @SaintPatrck in #6030
• [PM-23280] Use masterPasswordUnlock KDF settings on vault unlock by @andrebispo5 in #6026
• Consolidate the VaultVerificationCodeItems by @david-livefront in #6035
• Update SDK to 1.0.0-3430-fc75b903 by @bw-ghapp[bot] in #6036
• Update Item listing and search screens to user immutable lists by @david-livefront in #6037
• [PM-26909] Implement screen capture toggle authenticator by @aj-rosado in #6033
• Fix workflow name and permissions by @AmyLGalles in #6040
• PM-27046: Add overflow to Authenticator by @david-livefront in #6039
• [PM-26736] Prevent logout notification on KDF change by @andrebispo5 in #6038
• Fix flaky test by @david-livefront in #6043
• [PM-26810] Add OTP support to VerifyPasswordScreen by @SaintPatrck in #6034
• PM-27071: Add overflow menu to authenticator search by @david-livefront in #6044
• Crowdin Pull by @bw-ghapp[bot] in #6047
• PM-26912: Update copy for authenticator security by @david-livefront in #6045
• [PM-27076] Add support for IronFox Nightly by @celenityy in #6046

Full Changelog: v2025.10.0-bwa...v2025.10.1-bwa
Builds Source: https://github.com/bitwarden/android/actions/runs/18598736810

Password Manager 2025.10.0 (20794)

Overview

• Enhanced biometric unlock experience.
• Improved app stability with bug fixes.
• Various performance and stability improvements

What's Changed

• PM-26026: save layout state through config change by @david-livefront in #5913
• PM-26027: Remove the UserManagedPrivilegedApps feature flag by @david-livefront in #5914
• Update SDK to 1.0.0-3157-1ca5a589 by @bw-ghapp[bot] in #5917
• Add empty state for debug menu without feature flags by @david-livefront in #5918
• Update SDK to 1.0.0-3165-92bb5c30 by @bw-ghapp[bot] in #5920
• [PM-25825] Add ImportItems navigation by @SaintPatrck in #5915
• [PM-25933] Replace SDK call updatePassword by @andrebispo5 in #5916
• Display the CipherKeyEncryption flag in debug menu by @david-livefront in #5923
• PM-26106: Update quotes accross all strings by @david-livefront in #5924
• Update Credential Provider Events APIs by @SaintPatrck in #5926
• Remove unnecessary quotes by @david-livefront in #5929
• [PM-26112] Handle Credential Exchange export requests by @SaintPatrck in #5928
• PM-26151: Disable continue button for Autofill onboarding flow when autofill is disabled by @david-livefront in #5933
• Minor design tweaks for action cards by @david-livefront in #5934
• Update SDK to 1.0.0-3175-c9758478 by @bw-ghapp[bot] in #5922
• Update onboarding secondary buttons to match designs by @david-livefront in #5936
• PM-26025: Add browser autofill screen for onboarding flow by @david-livefront in #5931
• [PM-26095] Add account selection screen for Credential Exchange by @SaintPatrck in #5932
• PM-26161: Add badging for browser autofill by @david-livefront in #5939
• [PM-20977] Handle new sdk exception type. by @andrebispo5 in #5937
• [PM-26110] Add verify password screen for item export by @SaintPatrck in #5935
• PM-23292: Migrate toasts to snackbars by @david-livefront in #5940
• PM-26181: Minor clean up and adjustments for browser autofill integration by @david-livefront in #5941
• PM-26187: Add autofill help call-to-action by @david-livefront in #5942
• Commonize minor UI utility functions by @david-livefront in #5945
• [deps]: Lock file maintenance by @renovate[bot] in #5954
• Fully extract more sync logic into the VaultSyncManager by @david-livefront in #5912
• PM-26303: Remoe the 'Exit' button from the VaultScreen overflow menu by @david-livefront in #5956
• [PM-26094] Update Credential Manager library and remove stubs by @SaintPatrck in #5947
• Update the Compose BOM by @david-livefront in #5957
• BRE-1158 Dockerfiles shared ownership by @fntyler in #5902
• PM-25642: Force sync or clear last sync time on sync notification by @david-livefront in #5958
• [PM-25452] Dont show move to organization when user has no orgs by @aj-rosado in #5862
• [PM-26111] Implement Review Export Screen and Navigation by @SaintPatrck in #5946
• Update AndroidX libraries by @david-livefront in #5959
• Firebase BOM update by @david-livefront in #5960
• Update hilt to v2.57.2 by @david-livefront in #5961
• Update Guava to v33.5.0 by @david-livefront in #5962
• PM-26312: Add browser integration help link by @david-livefront in #5963
• [PM-17870] Always include clientExtensionResults in Fido2AttestationResponse by @aj-rosado in #5964
• Update Androidx Camera to v1.5.0 by @david-livefront in #5896
• Update Kover to v0.9.2 by @david-livefront in #5966
• Update SDK to 1.0.0-3194-9947387b by @bw-ghapp[bot] in #5938
• [PM-23280] Save MasterPasswordUnlockData to local state by @andrebispo5 in #5944
• [PM-26330] Correct owner data when individual vault is disabled by @SaintPatrck in #5968
• PM-26445: Common Debug menu components by @david-livefront in #5970
• Update UI elements for common use in Authenticator by @david-livefront in #5971
• Update renovate.json to exclude com.github.bumptech.glide from gradle-minor group by @vvolkgang in #5974
• [deps]: Update org.sonarqube to v6.3.1.5724 by @david-livefront in #5973
• [PM-26355] Improve SelectAccountScreen state handling by @SaintPatrck in #5965

New Contributors

• @fntyler made their first contribution in #5902

Full Changelog: v2025.9.1-bwpm...v2025.10.0-bwpm
Builds Source: https://github.com/bitwarden/android/actions/runs/18227627683

Authenticator 2025.10.0 (890)

Overview

• Various under-the-hood improvements.

What's Changed

• PM-26026: save layout state through config change by @david-livefront in #5913
• PM-26027: Remove the UserManagedPrivilegedApps feature flag by @david-livefront in #5914
• Update SDK to 1.0.0-3157-1ca5a589 by @bw-ghapp[bot] in #5917
• Add empty state for debug menu without feature flags by @david-livefront in #5918
• Update SDK to 1.0.0-3165-92bb5c30 by @bw-ghapp[bot] in #5920
• [PM-25825] Add ImportItems navigation by @SaintPatrck in #5915
• [PM-25933] Replace SDK call updatePassword by @andrebispo5 in #5916
• Display the CipherKeyEncryption flag in debug menu by @david-livefront in #5923
• PM-26106: Update quotes accross all strings by @david-livefront in #5924
• Update Credential Provider Events APIs by @SaintPatrck in #5926
• Remove unnecessary quotes by @david-livefront in #5929
• [PM-26112] Handle Credential Exchange export requests by @SaintPatrck in #5928
• PM-26151: Disable continue button for Autofill onboarding flow when autofill is disabled by @david-livefront in #5933
• Minor design tweaks for action cards by @david-livefront in #5934
• Update SDK to 1.0.0-3175-c9758478 by @bw-ghapp[bot] in #5922
• Update onboarding secondary buttons to match designs by @david-livefront in #5936
• PM-26025: Add browser autofill screen for onboarding flow by @david-livefront in #5931
• [PM-26095] Add account selection screen for Credential Exchange by @SaintPatrck in #5932
• PM-26161: Add badging for browser autofill by @david-livefront in #5939
• [PM-20977] Handle new sdk exception type. by @andrebispo5 in #5937
• [PM-26110] Add verify password screen for item export by @SaintPatrck in #5935
• PM-23292: Migrate toasts to snackbars by @david-livefront in #5940
• PM-26181: Minor clean up and adjustments for browser autofill integration by @david-livefront in #5941
• PM-26187: Add autofill help call-to-action by @david-livefront in #5942
• Commonize minor UI utility functions by @david-livefront in #5945
• [deps]: Lock file maintenance by @renovate[bot] in #5954
• Fully extract more sync logic into the VaultSyncManager by @david-livefront in #5912
• PM-26303: Remoe the 'Exit' button from the VaultScreen overflow menu by @david-livefront in #5956
• [PM-26094] Update Credential Manager library and remove stubs by @SaintPatrck in #5947
• Update the Compose BOM by @david-livefront in #5957
• BRE-1158 Dockerfiles shared ownership by @fntyler in #5902
• PM-25642: Force sync or clear last sync time on sync notification by @david-livefront in #5958
• [PM-25452] Dont show move to organization when user has no orgs by @aj-rosado in #5862
• [PM-26111] Implement Review Export Screen and Navigation by @SaintPatrck in #5946
• Update AndroidX libraries by @david-livefront in #5959
• Firebase BOM update by @david-livefront in #5960
• Update hilt to v2.57.2 by @david-livefront in #5961
• Update Guava to v33.5.0 by @david-livefront in #5962
• PM-26312: Add browser integration help link by @david-livefront in #5963
• [PM-17870] Always include clientExtensionResults in Fido2AttestationResponse by @aj-rosado in #5964
• Update Androidx Camera to v1.5.0 by @david-livefront in #5896
• Update Kover to v0.9.2 by @david-livefront in #5966
• Update SDK to 1.0.0-3194-9947387b by @bw-ghapp[bot] in #5938
• [PM-23280] Save MasterPasswordUnlockData to local state by @andrebispo5 in #5944
• [PM-26330] Correct owner data when individual vault is disabled by @SaintPatrck in #5968
• PM-26445: Common Debug menu components by @david-livefront in #5970
• Update UI elements for common use in Authenticator by @david-livefront in #5971
• Update renovate.json to exclude com.github.bumptech.glide from gradle-minor group by @vvolkgang in #5974
• [deps]: Update org.sonarqube to v6.3.1.5724 by @david-livefront in #5973
• [PM-26355] Improve SelectAccountScreen state handling by @SaintPatrck in #5965

New Contributors

• @fntyler made their first contribution in #5902

Full Changelog: v2025.9.1-bwa...v2025.10.0-bwa
Builds Source: https://github.com/bitwarden/android/actions/runs/18227627968

Password Manager 2025.9.1 (20742)

Overview

• Fixed an issue with navigation in settings sub-menu.
• Various under the hood improvements. (edited)

What's Changed

• [PM-15055] Add SDK support for exporting vault data to CXF by @SaintPatrck in #5840
• PM-25162: Fix a navigation bug in bottom navigation by @david-livefront in #5842
• [PM-25522] Add importCxf function to VaultSdkSource by @SaintPatrck in #5841
• Update protobuff library to v4.32.0 by @david-livefront in #5845
• Cleanup minor lint warnings in string resources by @david-livefront in #5843
• [PM-25523] Add importCxfPayload to VaultRepository by @SaintPatrck in #5846
• Update appVersionName to 2025.9.1 by @david-livefront in #5848
• Crowdin Pull by @bw-ghapp[bot] in #5853
• Update SDK to 1.0.0-2944-8447df0c by @bw-ghapp[bot] in #5830
• Update to Java 21 by @david-livefront in #5835
• Update untranslatable strings by @mKoonrad in #5854
• [PM-15056] Add exportVaultDataToCxf function to VaultRepository by @SaintPatrck in #5847
• Fix sdk-update Test by using Java 21 in setup-android action by @vvolkgang in #5861
• [PM-25637] Add CXF module for Credential Exchange support by @SaintPatrck in #5858
• [PM-25624] Hide decryption errors from autofill list view by @andrebispo5 in #5855
• [PM-25640] Dialog flickers when switching accounts by @andrebispo5 in #5865
• [PM-25661] Add placeholder ProviderEvents API for credential import/export by @SaintPatrck in #5866
• [PM-25665] Add BitwardenImportCredentialsRequest and helper by @SaintPatrck in #5870
• [PM-22320] Default to SHA1 on 2fas importer if algorithm is missing by @aj-rosado in #5875
• Crowdin Pull by @bw-ghapp[bot] in #5874
• Update Robolectric to v4.16 by @david-livefront in #5833
• [deps]: Update gh minor by @renovate[bot] in #5877
• [deps]: Lock file maintenance by @renovate[bot] in #5881
• [PM-25662] Add CredentialExchangeCompletionManager by @SaintPatrck in #5867
• PM-24234: Add missing plurals by @david-livefront in #5886
• [PM-25663] Introduce CredentialExchangeImporter by @SaintPatrck in #5868
• Update to AGP v8.13.0 by @david-livefront in #5887
• Update to Kotlin v2.2.20 by @david-livefront in #5888
• [PM-15051] Add CredentialExchangeRegistry by @SaintPatrck in #5869
• Update navigation libs to latest version by @david-livefront in #5889
• [deps]: Update actions/checkout action to v5 by @renovate[bot] in #5879
• [deps]: Update actions/setup-java action to v5 by @renovate[bot] in #5880
• Update the Protobuf library by @david-livefront in #5891
• Refactor Vault Sync Logic into VaultSyncManager by @SaintPatrck in #5871
• Update SDK to 1.0.0-3005-5a722fd2 by @bw-ghapp[bot] in #5860
• Update Androidx libraries to latest versions by @david-livefront in #5890
• Update resources to use LocalResources by @david-livefront in #5894
• [PM-25664] Add CredentialExchangeImportManager for CXF payload import by @SaintPatrck in #5872
• Refactor Send logic into SendManager by @david-livefront in #5892
• [PM-25822] Add ImportItemsViewModel and related strings by @SaintPatrck in #5882
• Move NativeLibraryManager to data module by @SaintPatrck in #5899
• Refactor cipher logic into CipherManager by @david-livefront in #5898
• [PM-25912] Remove ImportCredentialsRequest by @SaintPatrck in #5901
• [PM-25826] Update folderRelationships type for cipher import by @SaintPatrck in #5885
• Update registerExport to return RegisterExportResponse by @SaintPatrck in #5903
• Crowdin Pull by @bw-ghapp[bot] in #5908
• [PM-25824] Add "Import items" screen by @SaintPatrck in #5906
• PM-25908: Process 400 responses from verification code APIs by @david-livefront in #5900
• Refactor Folder logic into FolderManager by @david-livefront in #5904
• Update SDK to 1.0.0-3101-0eba924a by @bw-ghapp[bot] in #5893
• Pm 25258 browser autofill dialog by @david-livefront in #5907

Full Changelog: v2025.9.0-bwpm...v2025.9.1-bwpm
Builds Source: https://github.com/bitwarden/android/actions/runs/17865058734