Bitwarden Clients Browser 2026.4.0

Overview

• Refactor unlock service to use Bitwarden SDK
• Compact mode no longer in beta
• Updated default clipboard clearing time to 5 minutes
• Various under-the-hood improvements and minor bug fixes

What's Changed

Community Highlight

• [PM-24289] fix popout windows on wayland (browser) by @krjan02 in #15825
• [PM-32584] fix: warn user about unsaved changes before applying desktop update by @bittoby in #19147
• [PM-33210] fix(login): clear validation errors on region change by @OnSuorce in #19407

:shipit: Feature Development

• [PM-8458] Change ClearClipboardDelay to strings and change default by @bensbits91 in #17756
• [CL-958] Update avatar component to new styles by @vleague2 in #18975
• [CL-1023][CL-1031] Design system refresh: Milestone 1 by @willmartian in #19061
• [CL-966] Updated Progress Component by @lxiong-livefront in #19072
• PM-31767 resend feature by @bmbitwarden in #19136
• Auth/PM-33261 - Multi-client Password Management (new for desktop & extension) by @JaredSnider-Bitwarden in #19289
• [PM-31885] Consolidate all Send policies to a single policy by @harr1424 in #19314
• [PM-28167] Desktop - migrate vault drawers UI to shared lib by @iivins-livefront in #19341
• [PM-30584] Add unlock for key connector with SDK by @quexten in #19367
• [PM-33173] Use unlock service for password login strategy by @quexten in #19371
• [PM-31438] Send unsaved edits dialog by @mcamirault in #19425
• [CL-1110] Migrate tools CTAs to new icon API by @BryanCunningham in #19485
• Auth/PM-33353 - Password Login - refine prefetching of password prelogin data by @JaredSnider-Bitwarden in #19510
• [PM-33134] Implement delta sync for phishing blocklist by @AlexRubik in #19515
• PM-31418 implemented password generator inside drawer by @bmbitwarden in #19521
• [PM-24476] At Risk Password setting by @nick-livefront in #19557
• [PM-32783] Cached electron storage by @dani-garcia in #19590
• [PM-30101] subscription discounts in web checkout by @kdenney in #19599
• [PM-26713] Refactor Attachment Uploads to use XMLHTTPRequest by @nick-livefront in #19634
• [PM-32057] Wire up Trend Widget in Access Intelligence Activity by @Banrion in #19664
• [PM-33139] Targeting Rules initial implementation by @jprusik in #19693
• [PM-28419] Remove feature flagged logic by @BTreston in #19718
• [PM-34012] - Replace image in welcome dialog with extension prompt by @jaasen-livefront in #19720
• [CL-1012] Removed hyphenation from Simple Dialog Component by @lxiong-livefront in #19732
• Auth/Innovation/PM-4659 - Device Management - Add Last Activity Date by @JaredSnider-Bitwarden in #19784
• [CL-941] Remove router focus flag from client by @vleague2 in #19812
• [PM-19168] Remove Archive Feature Flag by @nick-livefront in #19829
• [PM-31899] Remove m2 flag definition by @connerbw in #19869
• [PM-15489] 2fa account recovery by @kspearrin in #19894
• [PM-31885] Bump SendControls Policy Enum Value by @harr1424 in #19903
• Update primitive colors by @BryanCunningham in #19910
• [Shared Unlock] [PM-34073] Implement vault timeout supression by @quexten in #19934
• [PM-34119] Web New Item Dialog by @nick-livefront in #19953
• Add PM-34500-strict-cipher-decryption feature flag by @nikwithak in #19973
• [PM-31119] Run side-effects in sdk unlock service by @quexten in #20004
• [PM-32009] New Item page for Browser by @nick-livefront in #20014
• [PM-26383] Remove feature flag to enable autoconfirm by @JaredScar in #20015
• [PM-34690] - add quick actions feature flag by @jaasen-livefront in #20019
• [PM-31875] Client changes for async sdk client get/set by @Hinton in #20032
• [PM-34177] Add feature flag for Organization Invite Links by @r-tome in #20033
• [PM-34177] Fix feature flag key value for Organization Invite Links by @r-tome in #20039
• [PM-33391] Removes beta badge for compact mode by @jengstrom-bw in #20047
• [PM-34614] Item Action Updates by @nick-livefront in #20051
• [PM-24927] Add payment optional support to trial initiation flow and Remove payment-optional feature flag by @cyprain-okeke in #20053
• [PM-34037] New event log for 2fa recovery by @kspearrin in #20055
• [PM-31270] New default argon2id in change kdf component by @mzieniukbw in #20058
• [PM-22228] Phishing events by @voommen-livefront in #20065
• PM-33122: Rename feature flag pm-34500-strict-cipher-decryption by @nikwithak in #20151
• [PM-34816] add performance instrumentation by @audreyality in #20158
• [PM-26383] Remove AutoConfirm feature flag from the FeatureFlag enum by @JaredScar in #20179
• [PM-27887] Keeper json importer by @itsadrago in #20200
• Add percentage complete translation for progress bar by @nick-livefront in #20206

Bug fixes

• [PM-32085] - popup width migration by @jaasen-livefront in #19408
• [PM-22890] Automatically open Extension in FireFox by @nick-livefront in #19456
• [PM-32761] Lock causes log out on TDE account with PIN by @mzieniukbw in #19594
• [PM-33765] - Fix viewPassword not preserved during legacy cipher encryption by @jaasen-livefront in #19601
• [PM-27368] Injected Autofill experiences should respect the user's "show animations" setting by @jprusik in #19622
• [CL-1105] Ensure hover and focus states match spec by @vleague2 in #19638
• [PM-32747] Empty TOTP secrets are being saved to ciphers in web based clients by @jengstrom-bw in #19645
• [PM-30614] - Fix double event log in browser ext popup by @jrmccannon in #19657
• [PM-33877] - handle blank custom field values in cipher form by @jaasen-livefront in #19676
• [PM-33952] Fix cipher key encryption logic when editing ciphers by @nikwithak in #19695
• flatten type-specific data into openNotificationBar message by @audreyality in #19719
• [PM-33459] fix(autofill): exclude username-only scenario from new cipher save notification by @bensbits91 in #19733
• [PM-33431] Inline menu icon is showing up on the view item screen on vault.bitwarden.com by @dan-livefront in #19734
• [PM-33580] fix: skip change-password notification when no ciphers exist for URL by @bensbits91 in #19761
• [PM-34131] Editing ciphers with change at risk password banner fails on web by @jengstrom-bw in #19785
• Auth/PM-34198 - Device Management - fix device icons not rendering by @JaredSnider-Bitwarden in #19786
• [PM-34192] My Items Collection is not marked as default when creating an item by @jengstrom-bw in #19793
• [PM-34199] [Extension] Change Password Routing Fix by @rr-bw in #19794
• [PM-33524] Not able to set new Master Password in a previously TDE org by @enmande in #19810
• [PM-34223] discounts rounding bug fix by @kdenney in #19811
• BRE-1746 fix(build-web-target): add packages write by @fntyler in #19816
• [CL-1140] BUG FIX: desktop nav group anchor link color and cipher name styles by @lxiong-livefront in #19820
• Auth/PM-34242 - Device Management Comp - Fix upsert losing isTrusted state and show trust status on pending auth request devices by @JaredSnider-Bitwarden in #19822
• PM-33905 resolved plaholder text issue by @bmbitwarden in #19862
• [CL-1124] updated badge max width by @BryanCunningham in #19864
• [PM-30311] focus management creation in effect to account for async menu item changes by @BryanCunningham in #19871
• [PM-34225] generate keypair even if there is no current one on password login by @jlf0dev in #19896
• [PM-29455] safari unlock during autofill does not close by @audreyality in #19897
• [PM-29227]Fix incorrect credential autofill in password change form by @dan-livefront in #19912
• [CL-1130] Fix storybook a11y and console errors for billing files by @vleague2 in #19916
• [CL-1130] Fix storybook a11y and console errors for admin console files by @vleague2 in #19917
• [CL-1130] Fix storybook a11y and console errors for vault files by @vleague2 in #19920
• [PM-34530] Display cart-level discount on personal subscription page by @amorask-bitwarden in #19925
• Downloading an attachment, appends a file extension. Even if original file didn't have one by @jengstrom-bw in #19931
• [PM-33808] - automatically autofill in search results by @jaasen-livefront in #19951
• [PM-33554] Don't log out when trust denied for sdk key rotation by @quexten in #19961
• Revert "[PM-33210] fix(login): clear validation errors on region change" by @enmande in #19979
• Revert "Revert "[PM-33210] fix(login): clear validation errors on region change"" by @enmande in #20007
• Auth/pm-34506 - Login Strategy Session Cache Expiration Adjustment by @JaredSnider-Bitwarden in #20009
• [PM-34142] BUGFIX: Allow moving a newly created cipher to org by @nikwithak in #20025
• [PM-34781] exclude "no folder" from key rotation by @mzieniukbw in #20068
• [PM-14883] Strip non-numeric characters in credit card number display... by @shane-melton in #20070
• [PM-33554] Fix emergency access fingerprint by @quexten in #20072
• [PM-34902] - [Defect] "Do not autofill" button is not centered by @jaasen-livefront in #20105
• [PM-35258] Add archive confirmation to Desktop and fix right click menu by @shane-melton in #20208