Version v10.1.2

With KeePass Client v10.1.1

Release Date

November 10, 2026

These Release Notes detail the differences between this release and the previous release.

Download Here

Upgrade Instructions

New Feature

Passkeys

• A passkey is a WebAuthn credential that signs you in to a site without a password.

• Pleasant Password Server can now store and use passkeys for websites.

• Pleasant Password Server is now a recognised authenticator:

  • Passkeys saved in Pleasant appear on sites and identity providers as "Pleasant Password Server".
  • Pleasant's authenticator ID (AAGUID) is `16a5a15d-7244-4563-856d-a5167d8b9783`.

Passkeys Features

• Supported client apps:

  • Browser Plugin
  • Web app (store & display)

• Storage: Passkeys are stored in a vault entry like a password or a TOTP secret.

• Secure: The private key of the Passkey stays on the server and is not shared.

  • The server signs each sign-in.
  • The browser extension only carries requests and results.
  • The website asks for a passkey challenge, which the server meets with a response.

• Sharing:

  • Passkeys can be shared, and become available to everyone that the entry is shared with and is subject to the permissions of the entry.

• Synced/Work Across Devices:

  • Passkeys will work on any computer with the browser extension.

• One passkey per entry:

  • An entry can hold both a password and a passkey.

Passkeys are on by default after upgrading

• After you upgrade, passkeys are enabled. Administrators can turn them off with Admin > Settings > Passkeys > Allow passkeys. Turning the setting off keeps existing passkeys and doesn't delete them.

• New access-level permissions:

  • Use Passkey and Modify Passkey

• Existing access levels (and comment and notification triggers) receive the new passkey permissions from their current rights:

  • Use Passkey is granted where the level already has View Entry Password or Use Via Proxy
  • Modify Passkey is granted where the level already has Modify Entries

Web app changes

• New Summary column (entry list): indicates entry has a password, TOTP, or passkey.
  
• Passkey details: on each entry

Browser Extension changes (v2.3.0)

• Support: browser extension v2.3.0 (coming)

• Actions: The extension can save passkeys, sign in with them, offer them in auto-fill, and display them in the popup.

  • Save a passkey: When a site offers to create a passkey, the Pleasant prompt opens. You can save to a new entry or an existing one.
  • Sign in with a passkey: A site's "sign in with a passkey" opens the Pleasant prompt listing your passkeys for that site.
  • Autofill sign-in: On sites whose username field offers passkeys, the Pleasant dropdown lists your passkeys first.
  • Display Popup: Entries with a passkey for the current site show a Passkey badge.

• Supported browsers:

  • Chrome, Edge, Firefox (version 147 or later), and other Chromium browsers (such as Brave, Opera and Vivaldi).

Security

• Removed admin option to support legacy OAuth password_grant authentication workflows:
  • While version 9.x maintained an admin option to support the legacy OAuth password_grant authentication workflow, this has been removed in version 10.x. Only PKCE is supported in version 10 versions.

Improvements

• Significant user interface improvements across the application
• New Passkey feature support
• New Entry List Column: summarizes passkeys, TOTP values, or passwords
• New Menu Sidebar (default option): can be set by admins or users
• New Installer & Service Configuration application
• New Languages in the web app: Portuguese, Swedish, Polish, Hungarian
• Improvement to language localization strings and in app coverage
• Improved site startup with certificate error handling
• Improved specific messaging for AD/LDAP user imports
• Improved date formatting, timezone handling, and time scheduling
• Improved handling of SSH algorithms
• Various Performance improvements
• Allow hiding of the TOTP Code field
• API: new endpoint to handle Require Password Change: SUser.RequiresPasswordChange
• MFA Authenticator user configuration provides reset and removing configuration clarifications
• Syslogs will display X-Forwarded-For in Event Logs for reverse proxy compatibility

Bug Fixes

• Fix: OpenLDAP role sync issue with configured member attribute
• Fix: resolved an error filtering audit events for large datasets
• Fix: Specific case where IP address is not specified in event detail
• Fix: Entry history better indicates user who edited entry
• Fix: resolved a specific error saving user profile language

Known Issues

• Upgrade Support:

  • Versions 9.x can be upgraded directly. Previous versions will need to upgrade to version 9, then to version 10.

• KeePass:

  • Microsoft Entra ID App proxy is temporarily incompatible with this release.
    • Expect this to be resolved in another release. Please connect with us for progress updates on this item.

• Standalone Reset Server:

  • Is not yet available with version 10. Please contact us for support timelines.

Compatibility Notes

• KeePass:

  • KeePass for Pleasant users should upgrade to 10.1.1 or higher

• Server Prerequisite: Server Install file includes the required .NET 4.8 files for a one-time installation

  • Microsoft .NET Framework 4.8 Setup