Bitwarden Clients Desktop 2026.7.0

What's Changed

Community Highlight

• [PM-32423] Add a less confusing argument and environment variable name to disable updates by @marcquark in #19045
• [PM-33285] Enhance privacy in password leak detection with response padding by @TheDcoder in #19439
• [PM-38123] [bug] Preserve 1Password archive state on 1pux import (closes #20694) by @999purple999 in #20867
• [PM-38362] fix(powermonitor): Improve connection handling and remove unwraps by @ChihweiLHBird in #20919
• [PM-38760] Recursively create directory when writing manifest by @pschlan in #21141
• [PM-39177] fix(libs): correct various typos in shared libraries and documentation by @luojiyin1987 in #21320
• [PM-39179] fix(desktop): correct various typos in desktop application by @luojiyin1987 in #21322

:shipit: Feature Development

• [PM-33198] Keeper direct importer by @detunized in #19395
• [PM-31884] implemented controls for send policy access dropdown by @bmbitwarden in #19777
• [CL-1138] Add stacked drawer support with back button by @willmartian in #19804
• [Shared Unlock] [PM-34508] Default enable native messaging permission on browser by @quexten in #19907
• IPC Desktop <-> Browser transport by @coroiu in #19908
• Pm 31929 new send policy for deletion days by @bmbitwarden in #20128
• PM-32187 implemented restrict send type by @bmbitwarden in #20129
• [PM-29785] Abstract Windows Passkey Plugin Authenticator COM implementation by @iinuwa in #20285
• [CL-1001] adding new toggle group styles by @BryanCunningham in #20403
• PM 35229 [Browser/Desktop] Stripe Checkout from upgrade dialog by @cyprain-okeke in #20592
• [PM-32696] Add data field to Cipher object to support blob encryption by @nikwithak in #20765
• [PM-37875] Automatic V2 Upgrade Migration by @quexten in #20831
• [BEEEP] [PM-38226] Add disable auto-start option for snap by @quexten in #20855
• Auth/PM-38298 - Org Invite Acceptance Refactor by @JaredSnider-Bitwarden in #21011
• [PM-38565] Replace tray settings with "Keep Bitwarden running in the background" by @quexten in #21044
• [PM-38387] Introduce KeePass KDBX importer by @harr1424 in #21052
• Auth/PM-38742 - SSO Invited Existing User Flow Improvement - Show SSO redirect error notification on LoginComponent by @JaredSnider-Bitwarden in #21134
• [PM-38787] Pin vault bulk-actions bar to the viewport on scroll by @nick-livefront in #21154
• [PM-33408] Add OrganizationUserNotification banner to vault by @jengstrom-bw in #21209
• feat: add Region.Gov to available environments by @addisonbeck in #21211
• [PM-39048] Feat: scaffold @bitwarden/pam library by @Hinton in #21259
• [PM-34779] Add accept method to OrganizationInviteLinkApiService by @r-tome in #21266
• [PM-34023] Remove 2FA account recovery flag by @eliykat in #21291
• [PM-37808] Bulk Selection + Batch Bar for Desktop by @nick-livefront in #21308
• [PM-33054] Remove feature flag cipher-key-encryption by @jengstrom-bw in #21309
• [PM-37807] Implement VaultBatchBarComponent on organization vault by @gbubemismith in #21345
• [PM-34053] Swap verify trust to new SDK method by @Thomas-Avery in #21347
• [PM-32402] Update copy from new to add/create web app by @jengstrom-bw in #21355
• feat(platform): introduce GovModeService for FedRAMP region gating by @addisonbeck in #21366
• [PM-34580] Rename "Note" to "Secure note" for SecureNote cipher type by @nick-livefront in #21423
• [PM-33740] Remove unlock service for password flagged logic by @mzieniukbw in #21427
• [PM-33410] Add organizationusernotification banners to vault desktop by @jengstrom-bw in #21462
• [PM-33362] Autotype Edit Cipher Initial Changes by @coltonhurst in #21500
• [PM-35106] Make AES-GCM the default algorithm in crypto.rs for secure memory by @mzieniukbw in #21553
• [PM-29785] CTAP2 CBOR Parser by @iinuwa in #21584
• [PM-20344] Disallow multiple attachments with the same name, handle existing in zip export format by @mcamirault in #21596
• [PM-39147] Batch bar copy fixes - singular/plural toasts and dialog title by @nick-livefront in #21602
• [PM-29785] Allow waiting for Autofill IPC connection in Windows authenticator by @iinuwa in #21615
• [PM-29790] Prepare for separate Windows Passkey Plugin Authenticator exe by @iinuwa in #21616
• [PM-29790] Add credential request processing for Windows passkey plugin by @iinuwa in #21618
• [PM-29790] Wire up authenticator IPC and COM server for Windows passkey plugin by @iinuwa in #21622
• [PM-29790] Windows passkey plugin: unify signature verification by @iinuwa in #21634
• windows-plugin: Add plugin entrypoint by @iinuwa in #21635
• [PM-36505] Finalize Send Controls policy design, adjust base policy component enabled display logic by @mcamirault in #21739
• [CL-1274] Add bit-page layout region for bit-layout main content by @willmartian in #21790

Bug fixes

• [PM-39731] Hotfix: Revert "[Shared Unlock] [PM-34508] Default enable native messaging permission on browser (#19907) by @mzieniukbw in #21559
• [PM-32445] Extension Scrollbar Fix by @rr-bw in #20478
• [PM-37752] - fix collections control when extension loses focus by @jaasen-livefront in #20812
• [PM-34926] Allow single-character CJK vault searches by @jaasen-livefront in #21013
• [PM-38643] Fix default broken on wayland only systems by @quexten in #21079
• [PM-38581] - disable drag for single custom fields by @jaasen-livefront in #21136
• [PM-38409] - update custom field value on reorder by @jaasen-livefront in #21137
• [PM-25277] SSH Key desktop translations by @nick-livefront in #21208
• Auth/PM-35783 - Fix Org Invite Policy State Pollution and State Clearing Issue by @JaredSnider-Bitwarden in #21218
• [PM-38608] [PM-38560] Fix diacritic normalization and multi-word query handling in searchCiphersBasic by @nick-livefront in #21232
• Fix SSH Agent v2 behavior before first unlock by @neuronull in #21273
• fix(platform): remove hardcoded vault.bitwarden.com checks in getSendUrl and getScimUrl by @addisonbeck in #21373
• [SM-1483] Fix self-hosted environment URLs in Secrets Manager config by @vincentsalucci in #21375
• [PM-39295] Fix SDK IPC messages being parsed by legacy IPC, resetting the connection by @quexten in #21387
• [PM-39204] Add extra spacing to vault items when batch bar is visible by @nick-livefront in #21390
• [SM-1993][CL-1227] Fix textarea height and fix SM button spacing by @vleague2 in #21417
• [PM-39392] Use readonly styles for fields intended to be readonly by @vleague2 in #21425
• [CL-1228] hide actions container if empty and always render button outside by @BryanCunningham in #21440
• [PM-39429] remeasure bulk actions bar width when actions change by @BryanCunningham in #21443
• [PM-39447] [Shared Unlock] Shared unlock stuck on lock component by @quexten in #21446
• [PM-39450] [Shared Unlock] Scan Secure Preferences when detecting installed Chrome extensions by @quexten in #21449
• [PM-38940] Close Firefox/Safari Permissions-Policy gaps via webRequest by @bensbits91 in #21466
• [PM-7036] Add support for latest LogMeOnce CSV import format, add folder mapping by @mcamirault in #21473
• manually recompile select css by @BryanCunningham in #21488
• [CL-1225] Berry should hide when count is 0 in toggle group by @vleague2 in #21491
• [PM-39349]] - make ssh key cipher fields readonly by @jaasen-livefront in #21505
• [PM-38771] - add missing i18n strings for button labels by @jaasen-livefront in #21509
• [PM-18344] Remove XDG_CURRENT_DESKTOP Unity override to fix clipboard on wayland by @quexten in #21513
• [PM-39610] Keyboard shortcuts only work once by @gbubemismith in #21520
• reduce select label font size by @BryanCunningham in #21525
• [PM-39695] Send fields are unexpectedly editable and changes cannot be saved by @harr1424 in #21542
• [PM-39746] Exclude search and select components from legacy global desktop css by @vleague2 in #21556
• Revert "[PM-38760] Recursively create directory when writing manifest (#21141)" by @addisonbeck in #21568
• [PM-39380] Bitwarden unencrypted JSON files containing cipher keys prevent import by @harr1424 in #21587
• [PM-39841] Fix unlocking crashing the desktop app by @quexten in #21610
• [PM-31138] Perform full sync on other clients after upgrade key rotation by @quexten in #21628
• [PM-39556] Fix access selector not saving changes when the dialog field is modified by @BTreston in #21640
• [PM-37196] Tooltip expand max-width by @JaredScar in #21646
• [PM-39974] Remove Biometric Integration Setting Fully by @quexten in #21684
• Revert "[Shared Unlock] [PM-34508] Default enable native messaging pe... by @quexten in #21687
• [PM-39977] Fix broken shared unlock for browser-desktop in non-dev mode by @quexten in #21688
• [PM-39570] use correct fill for bup logo by @BryanCunningham in #21694
• [PM-38392] Route password-protected Send saves through the SDK by @adudek-bw in #21725
• fix(vault): archive and unarchive missing from bulk bar for org items by @nick-livefront in #21741
• Render native form control UI in dark theme with color-scheme: dark by @maxkpower in #21771
• fix(desktop): fix crash generating DuckDuckGo native messaging manifests by @quexten in #21783