grub-basket_SP/release-notes/0.194.0.md

1.1 KiB

0.194.0

Encryption warnings

Prompted by a real loss: a server/profile reset wiped a machine's OS keychain and took the only copy of a folder password with it.

  • The keychain is called out as a convenience, not a backup. "Remember on this device (keychain)" now says so at the moment you tick it: an OS or keychain reset, a wiped or restored profile, a reinstall, a new machine, or an IT event can erase it at any time, without warning — and if that was the only copy of your password, everything encrypted under it is permanently unreadable.
  • "Save it in a password manager first" leads the warning, in larger, bolder type, ahead of everything else — along with a nudge to set a Recovery password as a second way in. Both live outside the keychain, so they survive the events above.
  • The encryption warning callout is larger and more prominent overall, and the same warning now appears in the README and in the password-setup dialog.
  • Added plainly: Stashpad cannot recover keys or passwords, and is not liable for the loss of keys, passwords, or any data encrypted with them.