Web v2026.4.1

• Updated exit survey options
• Fix an issue with how avatar color selections are stored to fix a crash with some Android devices.

Web v2026.4.0

Overview

• Flagged code - users belonging to auto-confirmation orgs cannot issue or accept emergency access invitations
• Organized policies into categories
• Consolidated Send policies
• Added support for deeplink redirect with https schema
• Various under-the-hood improvements and minor bug fixes

What's Changed

💙 Community Highlight

• [PM-33210] fix(login): clear validation errors on region change by @OnSuorce in #19407

Feature Development

• feat(redirect): [PM-26578] Https Redirection for Cloud Users by @Patrick-Pimentel-Bitwarden in #17873
• [CL-958] Update avatar component to new styles by @vleague2 in #18975
• [CL-1023][CL-1031] Design system refresh: Milestone 1 by @willmartian in #19061
• PM-31767 resend feature by @bmbitwarden in #19136
• [PM-31426] add categories to policy page by @JaredScar in #19151
• Auth/PM-33261 - Multi-client Password Management (new for desktop & extension) by @JaredSnider-Bitwarden in #19289
• [PM-31885] Consolidate all Send policies to a single policy by @harr1424 in #19314
• [PM-33173] Use unlock service for password login strategy by @quexten in #19371
• [PM-33372] hide prompt if org does not use my items by @JaredScar in #19475
• Auth/PM-33353 - Password Login - refine prefetching of password prelogin data by @JaredSnider-Bitwarden in #19510
• PM-31418 implemented password generator inside drawer by @bmbitwarden in #19521
• [PM-24476] At Risk Password setting by @nick-livefront in #19557
• [PM-32783] Cached electron storage by @dani-garcia in #19590
• [PM-30101] subscription discounts in web checkout by @kdenney in #19599
• [PM-32057] Wire up Trend Widget in Access Intelligence Activity by @Banrion in #19664
• [PM-28419] Remove feature flagged logic by @BTreston in #19718
• [PM-34012] - Replace image in welcome dialog with extension prompt by @jaasen-livefront in #19720
• [CL-1012] Removed hyphenation from Simple Dialog Component by @lxiong-livefront in #19732
• [CL-941] Remove router focus flag from client by @vleague2 in #19812
• [PM-19168] Remove Archive Feature Flag by @nick-livefront in #19829
• [PM-31897] Remove m2 flagged logic by @cturnbull-bitwarden in #19867
• [PM-31899] Remove m2 flag definition by @cturnbull-bitwarden in #19869
• [PM-31885] Bump SendControls Policy Enum Value by @harr1424 in #19903
• Update primitive colors by @BryanCunningham in #19910

🐛 Bug fixes

• [PM-33067] Fix false success toast when mark/unmark critical apps API fails by @AlexRubik in #19344
• [PM-22890] Automatically open Extension in FireFox by @nick-livefront in #19456
• [PM-33380] Fix Access Intelligence drawer not opening on row click by @AlexRubik in #19496
• [PM-32761] Lock causes log out on TDE account with PIN by @mzieniukbw in #19594
• [PM-33765] - Fix viewPassword not preserved during legacy cipher encryption by @jaasen-livefront in #19601
• [CL-1105] Ensure hover and focus states match spec by @vleague2 in #19638
• [PM-32747] Empty TOTP secrets are being saved to ciphers in web based clients by @jengstrom-bw in #19645
• [PM-30614] - Fix double event log in browser ext popup by @jrmccannon in #19657
• [PM-33952] Fix cipher key encryption logic when editing ciphers by @nikwithak in #19695
• PM-33577 added email validation by @bmbitwarden in #19707
• [PM-34047] Change column header in at-risk member drawers to "At-risk applications" by @lastbestdev in #19741
• [PM-34054] Fix text overruns by @voommen-livefront in #19781
• [PM-34131] Editing ciphers with change at risk password banner fails on web by @jengstrom-bw in #19785
• Auth/PM-34198 - Device Management - fix device icons not rendering by @JaredSnider-Bitwarden in #19786
• [PM-34192] My Items Collection is not marked as default when creating an item by @jengstrom-bw in #19793
• [PM-34199] [Extension] Change Password Routing Fix by @rr-bw in #19794
• [PM-32096] Collection name style fix by @BTreston in #19809
• [PM-34223] discounts rounding bug fix by @kdenney in #19811
• [PM-30190] Add validator for revoked emails when inviting users by @BTreston in #19815
• BRE-1746 fix(build-web-target): add packages write by @fntyler in #19816
• [CL-1140] BUG FIX: desktop nav group anchor link color and cipher name styles by @lxiong-livefront in #19820
• Auth/PM-34242 - Device Management Comp - Fix upsert losing isTrusted state and show trust status on pending auth request devices by @JaredSnider-Bitwarden in #19822
• [PM-30311] focus management creation in effect to account for async menu item changes by @BryanCunningham in #19871
• [PM-33928] Fix: Can view MyItems Passwords in Org Vault Health Reports by @Banrion in #19874
• [PM-34225] generate keypair even if there is no current one on password login by @jlf0dev in #19896
• [CL-1130] Fix storybook a11y and console errors for admin console files by @vleague2 in #19917
• [PM-34530] Display cart-level discount on personal subscription page by @amorask-bitwarden in #19925
• [PM-34556, PM-34558, PM-34557] Access Intelligence trend chart design tweaks by @lastbestdev in #19977
• Revert "[PM-33210] fix(login): clear validation errors on region change" by @enmande in #19979
• [PM-34685][Defect] Subscription status for organizations not updating with feature flag enabled by @sbrown-livefront in #20018
• Cherry-Pick #20018 Fix Subscription Status Logic by @sbrown-livefront in #20034
• [PM-34781] exclude "no folder" from key rotation by @mzieniukbw in #20068
• [PM-34781] exclude "no folder" from key rotation - cherry pick by @mzieniukbw in #20143
• Revert "[PM-34781] exclude "no folder" from key rotation - cherry pick" by @mzieniukbw in #20152

⚙️ Maintenance

• [deps]: Update chromaui/action action to v13.3.5 by @renovate in #17886
• [PM-25686] - migrate cipher export and sub-models by @jaasen-livefront in #19050
• [deps]: Update docker/build-push-action action to v7 by @renovate in #19582
• [BRE-1004] Publish web images to GHCR on release by @vgrassia in #19679
• [PM-33797] AIV2: Standardize Models and Services: Web Services by @Banrion in #19717
• [PM-33797] AIV2: Standardize Models and Services: Shared Components by @Banrion in #19730
• chore: update sm code ownership for sm owned files in bw license by @vincentsalucci in #19765
• refactor(scheduling): extract @bitwarden/scheduling Nx leaf library by @addisonbeck in #19771
• [CL-1137] Remove unecessary toggle-width componet by @Hinton in #19782
• [BRE-1004] Remove web-sh image tag by @vgrassia in [#19788](https://github....

Web v2026.3.1

• Admins can now enable automatic confirmation of new members
• Updated welcome experience for new users
• Users subject to the organization data ownership policy will now be prompted to transfer their My Vault items to My Items
• Sends can now use generated passwords
• Various under-the-hood improvements and minor bug fixes

Desktop v2026.3.1

• Users subject to the organization data ownership policy will now be prompted to transfer their My Vault items to My Items
• Sends can now use generated passwords
• Various under-the-hood improvements and minor bug fixes

CLI v2026.3.0

• Removed password reset flows from CLI. Accounts required to set or reset a password will now see an error message when logging in
• Various under-the-hood improvements and minor bug fixes

Browser v2026.3.0

• Popout windows will now respect vault timeout settings
• Users subject to the organization data ownership policy will now be prompted to transfer their My Vault items to My Items
• Sends can now use generated passwords
• Various under-the-hood improvements and minor bug fixes

Web v2026.3.0

• UX improvements for bulk re-invite flow in Admin Console
• UX improvements for Access Intelligence
• Send tab now hidden for members subject to the Remove Send policy
• Various under-the-hood improvements and minor bug fixes

Web v2026.2.1

• Added email protected Sends
• Added background upgrade of KDF settings for accounts below allowed minimums
• Added prompt to upgrade KDF settings for accounts below allowed minimums
• Updated loading state UI for access intelligence
• Updated UI for individual subscription page
• Improved individual subscription page handling of edge cases
• Core cryptography improvements to master password salt
• Various under-the-hood improvements and minor bug fixes

Desktop v2026.2.1

• Added email protected Sends
• Added background upgrade of KDF settings for accounts below allowed minimums
• Added prompt to upgrade KDF settings for accounts below allowed minimums
• Updated Send UI
• Core cryptography improvements to master password salt
• Various under-the-hood improvements and minor bug fixes

Thank you! 💙 A big shout-out to the following community members for their contributions!

lzl0304 - Fix lock vault from system tray not working

CLI v2026.2.0

• Added email protected Sends
• Bug-fix for confirm user command
• Various under-the-hood improvements and minor bug fixes

Thank you! 💙 A big shout-out to the following community members for their contributions!