v1.9

Important note: The Windows 10 October Update introduced a new Clipboard History feature. While this seems to be disabled by default, do be careful when enabling it, as it may cause your passwords to be preserved in the clipboard history.

If you only rely on pass-winmenu typing your passwords, you can set copy-to-clipboard to false in pass-winmenu.yaml to prevent it from copying your passwords to the clipboard.

---

In this release

The main improvement this time is a significant UI overhaul. The UI code has been reorganised and improved, to prepare for a future release where you'll be able to run more actions (push/pull, key import/export, etc) through the main interface. Because of this, most changes in this release are UI-related.

As always, if you want to use new configuration features, you can rename your old configuration file to have pass-winmenu generate a new one, and copy over your settings, or you can take a look at the default configuration file and copy the configuration settings you're interested in to your configuration file.

New features

• You can now reference the user-defined accent colour in Windows 8 and 10. To use it, in you configuration file, replace any colour string of your choice with [accent], or generate a new configuration file (new installations will use the accent colour by default).
• Define your own character groups for password generation. Do you want to exclude certain characters? Add exotic Unicode characters? Now you can! Take a look at the new character-groups subsection to get started.
• You can now add a hotkey to fetch the metadata from a password.
• If your password file contains additional metadata in the form of Example-Key: value, you can now add a decryption hotkey to fetch the value from those keys.
• Many configuration settings will now be reloaded automatically if the configuration file has been changed. Some settings (such as those for GPG and git) still require a restart.

Changes

• The UI code is now quite a bit faster. This will be especially noticeable if you have a large number of passwords (several hundred or more).
• The password search menu now uses case-insensitive matching, except for words in your search query that contain one or more uppercase characters. Previously, case-insensitive matching was used everywhere.
• You can now specify whether you want the update checker to notify you about pre-releases as well.
• The clipboard code has been improved. It should now be able to restore your clipboard even if you stored files, images, or other data types on it. Additionally, an option has been added allowing you to disable this feature if you don't want it, or if it interferes with a clipboard management tool.
• border-width can now also take an array specifying the widths of the top, right, bottom, and left border, respectively (for instance, [0, 0, 2, 0] to only set a 2-points bottom border).

Bugfixes

• Fixed a bug with the search text sometimes being offset to the right while typing.
• Fixed an issue causing the 'Download update' button to be displayed incorrectly.
• The search box now no longer occupies the whole window. If you experienced any issues trying to style it, it should now work correctly.
• Fixed an issue sometimes causing the old clipboard contents to not get restored properly after the password is cleared from the clipboard.
• Fixed an issue preventing Unicode characters from being encrypted/decrypted properly.

v1.8.1

Bugfixes

• Fixed pass-winmenu not quitting properly if the Quit button is clicked.

v1.8

New features

• Automatic update checking: If a new update is available, a menu entry will be added allowing you to download the update. A notification prompting you about the available update will also be displayed.

Bugfixes

• Updated YamlDotNet to mitigate a potential vulnerability in config file deserialisation (CVE-2018-1000210).

v1.7.1

Changes

• The included GPG installation has been changed to Gpg4win, which appears to work a bit better than the builds provided by the GPG project. In particular, if you were experiencing issues with decryption hanging for ~30 seconds, it will be worth updating.

Bugfixes

• Passwords from files containing no line endings at all will now be copied to the clipboard correctly.

v1.7

New features

• pass-winmenu can now manage configuration keys in your gpg-agent.conf file, allowing you to easily change the password caching TTL. To enable this feature, set gpg.gpg-agent.config-allow-config-management to true.
• The application will now attempt to detect if the GPG agent has become unresponsive, restarting it if necessary.
• Added the ability to configure hotkeys for the password menu. By default, Tab and Shift-Tab hotkeys are available, which can be used to select the next and previous entries, respectively.
• Added the ability to set GIT_SSH, allowing you to use a custom SSH program instead of the default.

Changes

• The format of pass-winmenu.yml has changed significantly. As pass-winmenu has grown, some reorganisation became necessary. On startup, if an old configuration file format is detected, it will be backed up, a new one will be generated, and you will be prompted to migrate your settings.

Bugfixes

• Fixed an issue causing pass-winmenu to commit ignored files to the repository.

v1.7-pre2

Bugfixes

• Fixed an issue preventing the GPG executable from being detected
• Removed redundant dot in backed-up configuration files (pass-winmenu-backup..yaml)

v1.7-pre

New features

• pass-winmenu can now manage configuration keys in your gpg-agent.conf file, allowing you to easily change the password caching TTL. To enable this feature, set gpg.gpg-agent.config-allow-config-management to true.
• The application will now attempt to detect if the GPG agent has become unresponsive, restarting it if necessary.
• Added the ability to configure hotkeys for the password menu. By default, Tab and Shift-Tab hotkeys are available, which can be used to select the next and previous entries, respectively.
• Added the ability to set GIT_SSH, allowing you to use a custom SSH program instead of the default.

Changes

• The format of pass-winmenu.yml has changed significantly. As pass-winmenu has grown, some reorganisation became necessary. On startup, if an old configuration file format is detected, it will be backed up, a new one will be generated, and you will be prompted to migrate your settings.

Bugfixes

• Fixed an issue causing pass-winmenu to commit ignored files to the repository.

v1.6.1

New features

• The password generator now uses a cryptographically secure random number generator to generate new passwords.

Bugfixes

• The password menu is now positioned correctly on high-DPI screens
• Fixed an issue causing pass-winmenu to crash if no hotkeys are defined
• Fixed an issue where GPG would sometimes use an incorrect home directory when called from a password shell

v1.6

New features

• Added a built-in password editor. As this editor doesn't generate a temporary plaintext file containing your password, it is more secure than using an external text editor. To revert to the old method of editing passwords, set the password-editor.use-builtin variable to false.
• Added native Git support. If you have a special Git configuration for your password store, you can set sync-mode to native-git in order to offload fetching/pushing to git.exe instead of using pass-winmenu's Git library.
• A GPG-less version is now built alongside the regular version. If you already have a working GPG installation, you can use this version instead, and edit the config file to point pass-winmenu to the correct GPG location.
• A notification is now shown whenever a password has been edited successfully.

Bugfixes

• Fixed an issue preventing users from being able to open a password shell
• pass-winmenu will no longer crash on startup if the password store directory could not be found
• Fixed an issue where pass-winmenu would crash if git is enabled but the password store is not a git repository
• A notification (as opposed to a cryptic error) is now shown when attempting to decrypt a password while the password store is empty
• Fixed an issue causing pass-winmenu to crash silently if the libgit2 DLL could not be found

v1.6-pre

New features

• Added a built-in password editor. As this editor doesn't generate a temporary plaintext file containing your password, it is more secure than using an external text editor. To revert to the old method of editing passwords, set the password-editor.use-builtin variable to false.
• Added native Git support. If you have a special Git configuration for your password store, you can set sync-mode to native-git in order to offload fetching/pushing to git.exe instead of using pass-winmenu's Git library.
• A GPG-less version is now built alongside the regular version. If you already have a working GPG installation, you can use this version instead, and edit the config file to point pass-winmenu to the correct GPG location.

Bugfixes

• Fixed an issue preventing users from being able to open a password shell
• pass-winmenu will no longer crash on startup if the password store directory could not be found
• Fixed an issue where pass-winmenu would crash if git is enabled but the password store is not a git repository
• A notification (as opposed to a cryptic error) is now shown when attempting to decrypt a password while the password store is empty