Changelog

What's new in Keestash. Full release notes are on GitHub.

v1.x — Latest Current

Password Health & Breach Detection

Server · Web App · iOS App

  • Integrated Have I Been Pwned breach detection — only anonymised k-anonymity hashes leave the device
  • Password health dashboard with donut chart (breached / weak / healthy)
  • Entropy-based password strength scoring with visual bar
  • Toggle to enable/disable breach monitoring per account
iOS App — v1.0

Native iOS Client

iOS App

  • Face ID / Touch ID biometric unlock with iOS Keychain storage
  • AutoFill extension for Safari and third-party apps
  • Home screen and lock screen widgets (small and medium)
  • Auto-lock with configurable timeout, screenshot protection, clipboard auto-clear
  • Configurable self-hosted server URL
  • Public share link generation with expiry and optional password
File Attachments

Encrypted File Storage

Server · Web App · iOS App

  • Upload files to any credential — SSH keys, certificates, recovery codes
  • JWT-protected download links — time-limited, one-time access
  • Files stored encrypted alongside credentials in the vault
Organisations & Teams

Team Collaboration

Server · Web App

  • Create organisations and assign users with role-based permissions
  • Share credentials and folders with individual users or whole organisations
  • Revoke sharing instantly without changing the underlying credential
  • LDAP / Active Directory integration for enterprise SSO
Foundation

Core Platform

Server

  • PHP 8.4 + Mezzio (PSR-15) backend with modular app architecture
  • AES-256-GCM end-to-end encryption — zero-knowledge by design
  • Full OpenAPI 3.0 specification with ~60 documented endpoints
  • Prometheus metrics, Redis caching, rate limiting
  • AGPLv3 open source — published at github.com/keestash/server

Looking for detailed release notes?

View all server releases on GitHub