Geslar
What's new
Changes, improvements and fixes by version.
All changes
Consistent permissions and more reliable locking improved
- Family vault — moving, copying and deleting now work directly from the extension new
- Permissions are consistently enforced — the extension shows and enables only what you're entitled to improved
- Account deletion consolidated in one place; clearer account and device messages improved
- More reliable unlocking according to your lock setting fix
- Minor UI polish fix
Consistent subscription display improved
- Your own collection vaults now show up for organisation owners and members new
- Consistent subscription display — the plan chip, the card and the Pricing screen all read the same state improved
- Personal plan shown separately with a "covered by employer" note improved
- Faster syncing of large vaults (3000+) with progress improved
- Fixed false vault locking while the popup is open fix
- Favorite star aligned; removed the redundant "Shared" badge fix
Business and family vaults major upgrade
- Business and family vaults — shared vaults for your team or family, E2E encrypted, with roles and permissions new
- Context switching — switch between Personal, Family and Business views with search new
- Guided password change — step-by-step guide to changing passwords on popular sites new
- Health badges — security status (weak, reused, compromised) shown next to each entry with quick-change action new
- Multiple URLs per entry — link multiple domains to a single entry new
- Bulk actions — select multiple entries and delete, favourite, move or copy in one go new
- Site icons — automatic icon display for faster entry recognition new
- Folders available in all vaults (personal, family and business) improved
- Full password history with view and restore to an older version improved
- Search across all vaults at once improved
- Clearer subscription status and available plans display improved
- More reliable auto-lock on all platforms fix
- Theme and display refinements for a more consistent look fix
Ecosystem: Family, Škrinjar on the web and tags major upgrade
- Shared vault (Family) — share selected entries with your family, up to 5 members, per-member permissions new
- In-app purchase — upgrade to Premium or Family directly from the app new
- Tags on entries — tag entries and quickly find them by searching by tag new
- Škrinjar on the web (my.geslar.app) — access your vault and manage Family and billing in the browser new
- Clearer entry list and collapsible filters improved
- Vault restore from the cloud with progress improved
- Clearer, more consistent labels throughout the app improved
- Improved account isolation fix
- More reliable auto-lock fix
- More stable cloud connection fix
Škrinjar on the web — my.geslar.app new
- Access your vault in the browser — no extension, same E2E encryption new
- Manage Family — invites, per-member permissions, shared vault new
- Manage subscription and billing in one place new
Older versions (v2.x)
Security fixes security
- Preventing duplicate ceremony window fix
- Škrinjar Health — navigation fix and last check display fix
- HIBP — added User-Agent header fix
Geslar Škrinjar — password manager major upgrade
- Password vault — AES-256-GCM encryption, PBKDF2 (600,000 iterations), everything local on device new
- Autofill — automatic login and payment form filling, save prompt, multi-step login (Google, Microsoft) new
- TOTP 2FA — generate authentication codes, QR scanning, countdown timer new
- Credit cards — save and auto-fill card details new
- Passkey support — Geslar as WebAuthn credential provider new
- Import from 12 sources — Bitwarden, Chrome, Edge, Firefox, KeePass, LastPass, 1Password, Safari, Dashlane, NordPass, Proton Pass, Enpass new
- Export — Geslar encrypted JSON, Bitwarden JSON, CSV new
- Škrinjar Health — analysis of weak, reused, old and compromised passwords new
- Secure Send — encrypted links with PIN, expiry and view limit new
- Lucide icon system — 28 uniform SVG icons improved
- Performance optimizations — virtual scroll, search debounce, HIBP batch check improved
- Accessibility audit — WCAG AA, aria attributes, keyboard navigation, focus management improved
English language + multilingual website generator
- English website — complete EN version of all 15 pages with dedicated URLs (
/en/), multilingual engine implemented and EN version deployed new - English phrase dictionary — EFF 7,776 words + 329 English idioms for passphrase generation new
- Language picker — HR/EN toggle in the accessibility panel with automatic preference saving new
- Automatic language detection — system automatically detects browser language and redirects to the appropriate version new
Croatian letters in phrases and passwords generator
- New s→š option in Settings — replaces Croatian letters with ASCII equivalents in phrases (š→s, đ→d, č→c, ć→c, ž→z) and enables more dictionary words new
- Same šđčćž option for passwords — adds Croatian letters to the character set for password generation new
Metaphors + browser extension generator
- New Dictionaries → Metaphors option — generates passphrase from 1500+ Croatian idioms, phrases and poetic expressions new
- Metaphors are exclusive with dialect dictionaries — selecting them automatically unchecks others new
Secure message + contact + improvements
- Secure message — send encrypted text via one-time link, zero knowledge new
- New Contact page — LinkedIn profile and contact form for direct message to author new
- Word count shows direct number of words (2–6) instead of abstract level improved
- PWA shortcuts — quick access to Generator, Security and Contact from home screen new
Dialect dictionaries — Croatian dialects
- New Dictionaries section in settings — select active dictionaries new
- Added 8 dialect dictionaries: Chakavian, Dalmatian, Dubrovnik, Istrian, Kajkavian, Međimurje, Slavonian, Zagorje new
- Each dictionary can be independently enabled/disabled in Settings → Dictionaries new
- Standard and dialect dictionaries can be combined or used separately new
UI redesign + confirmation step for sharing
- New interface: minimalist "Clean & Spacious" style — Inter font, navy/white palette with more space, rounded shadows and cards new
- Inline navigation in header on desktop; hamburger menu on mobile devices new
- Modes (Phrases / Passwords / Check Password) shown as full-width pill tabs — "Check Password" visually highlighted as separate function improved
- Confirmation step: "Confirmation step" option in modal — recipient must click "Show password" button before content is revealed new
- Separate "What's new" page with complete changelog new
Publicly released version publicly released
- PIN protection: optional 4–8 digit PIN when sending — recipient must enter PIN to see password new
- Zero-knowledge PIN: PBKDF2 (200,000 iterations, SHA-256) + AES-GCM enveloping — PIN never leaves device, server never sees it new
- One-time link: toggle in modal — deletes link immediately on first view; "⚡ One-time" badge in result new
- Notification on receive page that link has been deleted (last allowed view) new
- Timeout (8–10s) on all network requests — specific error message on timeout new
- Security HTTP headers on API responses: X-Content-Type-Options, Cache-Control, CORS, Referrer-Policy new
- Modal dialogs got
role="dialog",aria-modal,aria-labelledby; SVG elementsaria-hiddenimproved - XSS protection in error messages on receive page fix
- File size limit for custom dictionary — maximum 2 MB new
- Rate limiting for secure link retrieval (120 requests/hour per IP) new
- QR code for secure link: ▦ QR button in share modal shows QR code for scanning — no need to type the link new
- Automatic link regeneration: changing expiry, view count, one-time link or PIN immediately generates new link without re-clicking new
Generator foundations July to December 2025
- Phrase generator — 1500+ Croatian words, word count stepper (2–6), separators, uppercase, numbers, special characters new
- Password generator — random passwords with guaranteed character sets, levels from 8 to 32 characters new
- Bulk generation — up to 20 passwords at once with individual copy and QR code new
- Secure Send — AES-256-GCM encryption, zero-knowledge server, short links with view limit and expiry new
- Breach check — HIBP k-anonymity password compromise check new
- Sharing — QR code, Web Share API, password description visible on receive new
- Keyboard shortcuts — C copy, L link, 1/2 mode, ? help new
- PWA — device installation, offline mode, service worker new
- Accessibility — panel with theme, font size, high contrast and reduced motion new
- Clipboard protection — 60s countdown with "Clear now" and "Keep" options new
- Security & Tips page — password guide, 2FA, recommended managers new
- Dark and light theme, generation animations, responsive design, logo and visual identity improved
- XSS protection, rate limiting, security HTTP headers, CORS protection fix
Take control of your passwords
AES-256-GCM encryption, local, free for basic use.