What’s New

This release improves passkey compatibility across more websites and browsers, and makes autofill smarter when you have multiple vaults.

Passkey requests go to the right authenticator
Enpass now reads website hints about which authenticator to use. No more intrusive Enpass popup when a website explicitly requests an external security key.

See credentials from all vaults when autofilling
The inline menu now shows matching items from all your vaults, grouped by vault name. No more switching vaults manually to find the right login.

This release adds PRF (Pseudo-Random Function) support for passkey creation and sign-in and improves overall passkey reliability across websites and browsers.

New features:
- PRF (Pseudo-Random Function) support
Support for PRF has been added as part of passkey creation and sign-in, enhancing passkey security during sign-in while working seamlessly with existing passkeys without changing current behavior.

Improvements & Bug fixes:
- Fixed passkey creation and sign-in issues on several websites, including Discord, Binance, Google services, Linear, Lululemon, and others
- Resolved issues where passkey options did not appear in certain browsers (Safari, Firefox) and where passkey sign-in did not trigger correctly
- Improved overall passkey reliability across Chrome, Safari, and Firefox

This update includes minor bug fixes and improvements for a more reliable experience.

Fixed an issue where passkey sign-in was failing for some Google accounts.

This update fixes a couple of issues with the inline menu in the browser extension:
- Fixed the issue where the inline menu disappeared after switching tabs or failed to appear on the login page after keeping the webpage open for an extended time, and only reappeared after a page refresh.
- Fixed the issue where the inline menu stopped appearing after multiple page reloads.
- Other minor bug fixes and improvements.

Hello, everyone!
Here’s what’s new in this update for business users:

• Autofill on unsecure (HTTP) sites works for those allowed by the admins.
• Passkey storage and sign-in are disabled if restricted by the admins.
• The Enpass autofill menu is hidden on websites blocked by the admins.

Hello, everyone! In this browser-extension update, we’ve squashed some annoying little bugs reported by users. Thanks for the help!
- Fixed an issue where webpages lagged while typing comments or
messages when the Enpass extension was enabled.
- Fixed a clickjacking vulnerability in the extension by preventing popover windows from overlaying the inline menu (Reported by Marek Tóth)

This release introduces new enhancements to improve autofill capabilities along with minor bug fixes to enhance your overall Enpass experience.

Improvements:
- The Enpass extension now supports autofilling standalone TOTP (one-time code) fields on supported websites.

Fixes:
- Fixed an issue where, after filling in the login details, Enpass was clicking the "Reveal" button instead of the "Sign In" button on the High Plains Power login page.

Hello, everyone!

This update includes several security fixes and resolves a few minor issues.

What’s New:

• Support for upto 250 concurrent user sessions on a single Windows server (Enpass version 6.11.11 required).

Fixes:

• Fixed a vulnerability where a malicious page or script could trick users into clickjacking by manipulating the transparency of input elements and Enpass’s inline menu.
• Fixed an issue where the Enpass inline menu was occasionally hidden behind login fields with higher stacking order on some websites. The menu now appears consistently, ensuring smooth autofill experience.

Note: With this update, additional permissions (to communicate with the Native Messaging Host) will be required by all users. As a result, the Enpass extension will be disabled by default, and users will need to manually re-enable it.