Reduced extension privileges without weakening automatic password-manager behaviour.
Removed the sensitive tabs permission; current-tab access now uses activeTab.
Restricted background and popup network access to the apps network location.
Retained all-sites page access for automatic login detection, save/update prompts and inline vault controls.
Removed duplicate host declarations and store-only assets from generated packages.

Admin SSO is now available only for accounts with a valid SSO configuration.
WebPresence-managed credentials are read-only; only personal logins can be edited or deleted.
Added clear confirmation messages after copying or filling credentials.
Improved password-save detection on new websites and multi-step login pages.
Prevented unnecessary save prompts when signing in with a matching autofilled credential.
Authorised Devices now displays active extension sessions only, removing expired and revoked session history.

Version 0.1.23

Fixed an issue where the inline password tray could open and immediately close when using the field-level vault button.

The extension now keeps the password tray stable while it is open, preventing background lookup refreshes from re-rendering the inline controls before a saved login can be selected.

Also retains the previous 0.1.22 request reduction changes for inactive/background tabs.

Version 0.1.22

Reduced unnecessary browser-extension network activity.

The extension now avoids automatic website lookups from inactive or background tabs. It will only perform a site lookup when the extension is opened for the active page, or when the active page appears to contain login/password or address fields.

This improves performance and reduces unnecessary requests while keeping password and address detection available where it is actually needed.

Fixed email MFA sign-in flow for the browser extension.

When users authenticate with an email MFA code, the extension now remembers the pending MFA challenge while they switch away to check their email. Reopening the extension returns directly to the MFA code entry screen instead of restarting the login flow.

Also added clearer MFA method labeling and a “Start again” option if the challenge expires or the user needs to restart sign-in.

0.1.20 - Chrome, Edge, and Firefox

• Added Edit and Delete actions to saved login cards in the extension popup.
• Added the matching browser-extension API support for updating and deleting extension-accessible logins.
• Editing a login can update the website, username, notes, and password. Leaving the password field blank keeps the existing saved password.
• Deleting a login now soft-deletes it from the vault after user confirmation.
• Fixed duplicate password-update prompts after a successful login by comparing the submitted password against all plausible matched credentials before asking to update a saved password.
• Preserved shared/WebPresence credential labels during automatic password updates, so a website page title does not overwrite the operational account name.

This release improves credential privacy and vault usability. Favourite usernames now prioritise matching credentials across the extension and web app, making commonly used accounts appear first. Personal vault entries are now scoped more strictly so users do not see other users’ private/customer credentials unless explicitly authorised.

Calculus Password Vault 0.1.18

Added secure password comparison before showing changed-password update prompts.
The extension now only asks to update a saved password when the submitted password differs from the vault password.
Stored vault passwords are not returned to the browser for comparison.
Backend compares the submitted password server-side and returns only a match/no-match result.
If the submitted password already matches the vault, no prompt is shown.
Kept update prompts for genuinely changed passwords, with Update, Save new, and Not now options.
Calculus Password Vault 0.1.17

Fixed inline vault icons drifting away from username/password fields after page layout changes.
Icons now track their associated input fields while visible.
Improved support for login pages with late font loads, animations, validation messages, and dynamic form movement.
Hidden or removed fields now cause stale icons to be hidden and refreshed cleanly.
Updated Chrome/Edge and Firefox extension manifests to version 0.1.17.

Calculus Password Vault 0.1.16

Fixed save prompts not appearing after logging into sites with an already-known username.
Added changed-password detection flow: matching saved usernames now prompt to update the stored password.
Added Update, Save new, and Not now choices for existing-login save prompts.
Added backend support for browser-extension credential password updates.
Improved login detection across sibling subdomains, such as login pages that redirect back to the main site.
Improved support for single-page login flows where the page does not fully reload.
Kept site pause behavior intact so paused sites still suppress save prompts and autofill.

Calculus Password Vault 0.1.15

• Added save prompts for new website logins when the username/password is not already recognised by the vault.
• Added Save, Not now, and site pause options after login detection.
• Added per-site pause controls to temporarily disable save prompts and autofill on noisy or unwanted websites.
• Paused sites now suppress inline vault buttons and block autofill until resumed or the pause expires.
• Improved unknown-site support for third-party credentials stored directly in the extension vault.
• Kept pending login data short-lived and transient before the user chooses to save it.
• Updated Chrome/Edge and Firefox extension manifests to version 0.1.15.

Calculus Password Vault Extension v0.1.14

This release expands the browser extension from a matched-domain password helper into a broader personal vault experience.

New

• Added a setting to show the vault on unknown websites, even when the current domain does not match an existing saved credential.
• Added support for saving third-party website logins directly from the extension.
• Added a dedicated Browser Extension Vault group for user-saved website credentials and form-fill profiles.
• Added address profile support, including saving, searching, copying, and filling address details into forms.
• Updated popup search to include accounts, credentials, usernames, domains, and addresses.
• Added inline vault support for unknown login pages when the setting is enabled.
• Added backend APIs for extension-created logins and address profiles.

Changed

• Chrome, Edge, and Firefox extension updates are now treated as store-managed.
• The extension no longer sends store-installed users to the webapp package download as the normal update path.
• Browser extension packages in App Releases are now intended for store submission, review, and internal testing.

Security

• Password and address fill actions still require an explicit user action.
• Revealed passwords are not stored in extension local storage.
• Existing extension authentication and MFA/session controls remain in place.