Passbolt 5.2 is now available (release notes). This release adds multiple URI support and custom icons, both made possible by the encrypted‑metadata groundwork we introduced earlier this year (blog post). Although encrypted metadata has already passed a Cure53 security audit (public report coming soon), these new capabilities are kept in beta until at least v5.3. Early adopters are reporting excellent results, but we want to smooth out any remaining rough edges before enabling them for everyone by default.
Multiple URIs
A single password can sometimes be valid on more than one URL - think of the same directory‑based account used on your wiki, issue tracker, and intranet, or a web application that serves its sign‑in form from different sub-domains. In earlier versions you had to create duplicate entries so autofill would pick up each address.
Passbolt 5.2 lets you attach several URIs to the same resource (see Fig. “Multiple URIs” in the edit dialog). Autofill now recognises any listed URI, saving you the manual search and paste routine and reducing the chance of entering credentials on the wrong page.
This is the first step toward a more flexible autofill system, future releases will add finer‑grained controls and additional matching options. For now, try linking your multi‑page or multi‑app credentials and tell us where the workflow still feels rough; your feedback will steer the next improvements.
Custom Icons & Colours
Scrolling through long lists of text-only credentials can quickly become overwhelming. Passbolt 5.2 solves this by letting you add simple visual cues, icons and colours, to each resource. The initial collection of icons is borrowed directly from the KeePass set, ensuring that imports and exports maintain their familiar appearance.
You could, for example, assign the SQL icon to your database credentials, differentiating them clearly by colour: red for production, blue for staging. This makes critical distinctions instantly visible, reducing errors and speeding up your workflow.
If you prefer a text-only view, you can hide the icons column without affecting any other functionality.
Accessibility
Comfortable grid
For those managing extensive lists, grid density matters. A new "comfortable grid" setting introduces adjustable spacing, making credentials more readable and reducing strain during extended use.
New languages
Welcome Slovenian and Ukrainian speakers! Passbolt now fully supports these languages, expanding usability and accessibility within the community.
Expiry notifications
Resource owners now receive automatic notifications on the exact day credentials expire. This ensures credentials remain updated regularly, enhancing security and compliance.
Cure53 Security Audit
Recently, Cure53 completed a security audit of Passbolt's encrypted metadata feature, uncovering no critical vulnerabilities but identifying areas for incremental improvements, particularly regarding metadata signature verification. The detailed public report by Cure53 will be available soon, offering transparency and insight into Passbolt's ongoing security enhancements.
What’s next?
Passbolt 5.3 (July 9, 2025)
Passbolt 5.3 will introduce custom fields (key/value pairs), enhancing the flexibility and customisability of credentials for diverse organisational needs.
Passbolt 5.4 (August 13, 2025)
Building on the momentum, Passbolt 5.4 will introduce secure management for SSH keys and potentially standalone secure notes, broadening the scope of sensitive data types handled by the platform.
Stay up to date
To remain informed about all Passbolt updates and community activities:
- Subscribe to our newsletter.
- Follow us on LinkedIn, Mastodon, and BlueSky.
- Join discussions and get the latest announcements on the community forum.
Keep an eye on the GitHub repository: hit the "Watch" button, select "Custom", and choose "Releases" for immediate notifications.
