<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Vallkey changelog</title><link>https://vallkey.com/changelog/</link><description>What's new in Vallkey</description><language>en</language><item><title>The command line, an SSH agent, and logins for AI agents</title><link>https://vallkey.com/changelog/#the-command-line-an-ssh-agent-and-logins-for-ai-agents</link><guid>https://vallkey.com/changelog/#the-command-line-an-ssh-agent-and-logins-for-ai-agents</guid><pubDate>Sun, 04 Oct 2026 12:00:00 GMT</pubDate><description>&lt;ul&gt;&lt;li&gt;The vallkey command: secrets for scripts and CI by reference, with run and inject, on the same core as every app.&lt;/li&gt;&lt;li&gt;An SSH agent that signs with the Ed25519 and ECDSA keys in your vault, on macOS and Linux.&lt;/li&gt;&lt;li&gt;Service accounts: a token for a build that opens only the vaults you share with it.&lt;/li&gt;&lt;li&gt;AI-agent logins: an agent asks through Vallkey's MCP server, you approve in the browser extension, and the extension fills the page. The agent never sees the password.&lt;/li&gt;&lt;li&gt;The password fixer reads change pages its rules can't, with Chrome's on-device model, which is given what the fields say and never what they hold.&lt;/li&gt;&lt;/ul&gt;</description></item><item><title>For teams: organizations, single sign-on, SCIM and audit logs</title><link>https://vallkey.com/changelog/#for-teams-organizations-single-sign-on-scim-and-audit-logs</link><guid>https://vallkey.com/changelog/#for-teams-organizations-single-sign-on-scim-and-audit-logs</guid><pubDate>Sun, 04 Oct 2026 12:00:00 GMT</pubDate><description>&lt;ul&gt;&lt;li&gt;Organizations, with a console in the web vault: people, groups, and vaults granted to edit, to view or only to fill, on a roster only the organization's own key can sign.&lt;/li&gt;&lt;li&gt;Policies for master password strength, locking, exports and Travel Mode.&lt;/li&gt;&lt;li&gt;Single sign-on with any OpenID Connect or SAML 2.0 identity provider, which never holds a key.&lt;/li&gt;&lt;li&gt;SCIM 2.0: an identity provider adds and removes people and groups, and someone deactivated loses the organization's vaults at once.&lt;/li&gt;&lt;li&gt;An audit log for each organization, read in the console or sent on to a webhook, Splunk, Datadog, Microsoft Sentinel or S3.&lt;/li&gt;&lt;li&gt;Offboarding: what someone who left could open, which items still hold what they saw, and a report.&lt;/li&gt;&lt;li&gt;A device that's logged in can let a new one in with nothing typed but a code, and an organization can let its admins do the same for a member who lost every device.&lt;/li&gt;&lt;li&gt;A key connector a company runs on its own servers, so its people have no master password.&lt;/li&gt;&lt;li&gt;Trusted contacts: a recovery code split between three people, any two of whom can help you back in.&lt;/li&gt;&lt;li&gt;A vault kept only on your devices can sync through a folder you share between them, such as iCloud Drive or Dropbox.&lt;/li&gt;&lt;/ul&gt;</description></item><item><title>Plans, email aliases, the password fixer and local-only vaults</title><link>https://vallkey.com/changelog/#plans-email-aliases-the-password-fixer-and-local-only-vaults</link><guid>https://vallkey.com/changelog/#plans-email-aliases-the-password-fixer-and-local-only-vaults</guid><pubDate>Sun, 04 Oct 2026 12:00:00 GMT</pubDate><description>&lt;ul&gt;&lt;li&gt;Email aliases: a different address for every site, forwarding to your inbox, in the web vault, the desktop app and the browser extension.&lt;/li&gt;&lt;li&gt;The password fixer changes a password on the site for you, in the browser extension: it fills the old one and a new one, and saves the new one before any page sees it.&lt;/li&gt;&lt;li&gt;Local-only vaults: no account and no server, with a pay-once license, in the browser extension and the desktop, iPhone, Mac and Android apps.&lt;/li&gt;&lt;li&gt;Self-hosting: the server on your own machines, serving the web vault, sending email over SMTP and backing itself up.&lt;/li&gt;&lt;li&gt;Plans, through Stripe, with the price lock and the offer for people switching.&lt;/li&gt;&lt;/ul&gt;</description></item><item><title>Travel Mode and item history</title><link>https://vallkey.com/changelog/#travel-mode-and-item-history</link><guid>https://vallkey.com/changelog/#travel-mode-and-item-history</guid><pubDate>Sun, 04 Oct 2026 12:00:00 GMT</pubDate><description>&lt;ul&gt;&lt;li&gt;Travel Mode: mark vaults Safe for travel and turn it on, and every other vault leaves all your devices until you turn it off in the web vault.&lt;/li&gt;&lt;li&gt;Item history: History on an item lists what it held before each change, and brings an earlier version back.&lt;/li&gt;&lt;li&gt;After an import, the browser extension can turn off your browser's own password saving, and says how many passwords are weak or reused.&lt;/li&gt;&lt;li&gt;Warnings about lookalike sites on iPhone, iPad and Android too.&lt;/li&gt;&lt;/ul&gt;</description></item><item><title>Vallkey for Safari, and every kind of item</title><link>https://vallkey.com/changelog/#vallkey-for-safari-and-every-kind-of-item</link><guid>https://vallkey.com/changelog/#vallkey-for-safari-and-every-kind-of-item</guid><pubDate>Sat, 03 Oct 2026 12:00:00 GMT</pubDate><description>&lt;ul&gt;&lt;li&gt;Vallkey for Safari on the Mac, iPhone and iPad: the extension Chrome, Edge and Firefox run, carried by the apps.&lt;/li&gt;&lt;li&gt;Eleven more kinds of item, so Vallkey has every kind 1Password has: documents, Wi-Fi networks, servers, databases, software licenses, crypto wallets, email accounts, medical records, outdoor licenses, reward programs and Social Security numbers.&lt;/li&gt;&lt;li&gt;Importing from 1Password and KeePass brings documents and attached files along.&lt;/li&gt;&lt;li&gt;KeePass 1 databases and KeePass XML exports import too, and databases encrypted with Twofish.&lt;/li&gt;&lt;li&gt;Several accounts in the browser extension and in every app, such as one for work, with one unlocked at a time.&lt;/li&gt;&lt;li&gt;A passkey can be made from a sign-in box another site embeds, where the page allows it.&lt;/li&gt;&lt;li&gt;The extension's and the web vault's core is 40% smaller to download.&lt;/li&gt;&lt;/ul&gt;</description></item><item><title>The desktop app unlocks your browser</title><link>https://vallkey.com/changelog/#the-desktop-app-unlocks-your-browser</link><guid>https://vallkey.com/changelog/#the-desktop-app-unlocks-your-browser</guid><pubDate>Sat, 03 Oct 2026 12:00:00 GMT</pubDate><description>&lt;ul&gt;&lt;li&gt;Pair the browser extension with the Windows or Linux app: it unlocks whenever the app is unlocked, and locks with it.&lt;/li&gt;&lt;li&gt;Unlock the desktop app with Windows Hello, where it's set up.&lt;/li&gt;&lt;li&gt;The desktop app locks when the computer sleeps or, on Linux, when the screen locks, and has a tray icon.&lt;/li&gt;&lt;li&gt;Security shows a Change password link for each weak, reused or breached password, straight to the site's change page.&lt;/li&gt;&lt;li&gt;Export your vault as a Credential Exchange file, passkeys included, to move it to any app that reads the format.&lt;/li&gt;&lt;/ul&gt;</description></item><item><title>Vallkey for Windows and Linux</title><link>https://vallkey.com/changelog/#vallkey-for-windows-and-linux</link><guid>https://vallkey.com/changelog/#vallkey-for-windows-and-linux</guid><pubDate>Sat, 03 Oct 2026 12:00:00 GMT</pubDate><description>&lt;ul&gt;&lt;li&gt;A desktop app with every view of the web vault, which works offline and keeps the vault encrypted on the computer.&lt;/li&gt;&lt;li&gt;It saves exports and files through the system's Save dialog, and clears copied passwords from the clipboard.&lt;/li&gt;&lt;/ul&gt;</description></item><item><title>Vallkey for iPhone, iPad, Mac and Android</title><link>https://vallkey.com/changelog/#vallkey-for-iphone-ipad-mac-and-android</link><guid>https://vallkey.com/changelog/#vallkey-for-iphone-ipad-mac-and-android</guid><pubDate>Fri, 02 Oct 2026 12:00:00 GMT</pubDate><description>&lt;ul&gt;&lt;li&gt;Apps for iPhone and iPad, with AutoFill for passwords, one-time codes and passkeys, and Face ID.&lt;/li&gt;&lt;li&gt;A Mac app that unlocks with Touch ID.&lt;/li&gt;&lt;li&gt;An Android app with autofill, passkeys in browsers and apps, and fingerprint or face unlock.&lt;/li&gt;&lt;li&gt;Every kind of item, sharing, families, legacy contacts, files and share links, on every one of them.&lt;/li&gt;&lt;/ul&gt;</description></item><item><title>Sharing, families and legacy contacts</title><link>https://vallkey.com/changelog/#sharing-families-and-legacy-contacts</link><guid>https://vallkey.com/changelog/#sharing-families-and-legacy-contacts</guid><pubDate>Thu, 01 Oct 2026 12:00:00 GMT</pubDate><description>&lt;ul&gt;&lt;li&gt;Share a vault with editors or viewers; removing someone gives the vault a new key.&lt;/li&gt;&lt;li&gt;Families of up to six people, with a shared Family vault and family recovery.&lt;/li&gt;&lt;li&gt;Legacy contacts, who can ask for the vaults you leave them after a wait you choose.&lt;/li&gt;&lt;li&gt;Share links show an item to someone without Vallkey, for up to 30 days, and can work only once.&lt;/li&gt;&lt;/ul&gt;</description></item><item><title>Signed vaults and key transparency</title><link>https://vallkey.com/changelog/#signed-vaults-and-key-transparency</link><guid>https://vallkey.com/changelog/#signed-vaults-and-key-transparency</guid><pubDate>Thu, 01 Oct 2026 12:00:00 GMT</pubDate><description>&lt;ul&gt;&lt;li&gt;Every vault write is signed, and every download is checked against its signed manifest, so devices catch a server that drops, rolls back or changes items.&lt;/li&gt;&lt;li&gt;Every key you share to is checked against a public key transparency log first.&lt;/li&gt;&lt;li&gt;Recovery codes and a printable Emergency Kit.&lt;/li&gt;&lt;/ul&gt;</description></item><item><title>The browser extension and web vault</title><link>https://vallkey.com/changelog/#the-browser-extension-and-web-vault</link><guid>https://vallkey.com/changelog/#the-browser-extension-and-web-vault</guid><pubDate>Thu, 01 Oct 2026 12:00:00 GMT</pubDate><description>&lt;ul&gt;&lt;li&gt;Chrome, Edge and Firefox: fill logins, one-time codes, cards and identities, save new logins, and make passkeys.&lt;/li&gt;&lt;li&gt;A web vault for every item, import, export and account settings.&lt;/li&gt;&lt;li&gt;Import from 1Password, LastPass, Bitwarden, Dashlane, Keeper, Proton Pass, NordPass, KeePass, browsers and Credential Exchange files.&lt;/li&gt;&lt;li&gt;Passports, driver's licenses, memberships, final instructions, and files kept with items.&lt;/li&gt;&lt;/ul&gt;</description></item></channel></rss>