1# v2.14.7723## Highlights4- PIN unlock is rebuilt on device hardware. The vault key is sealed by the Android5 Keystore instead of by the PIN, and every attempt spends a hardware-limited gate,6 so a copied copy of app storage can no longer be used to guess your PIN offline.7- Autofill no longer generates or copies a two-factor code before you choose an entry.8- Site icons now ask before they are switched on, and say what enabling them shares.910## Fixes11- Autofill no longer trusts a claimed website unless the app making the request is a12 verified browser.13- The encrypted sync spool is excluded from cloud backup and device-to-device transfer.14- Biometric escrow keys must now report a hardware-backed security level.15- Bouncy Castle is upgraded to 1.84.16- Debug builds no longer log two-factor codes or entry titles.17- Sync handshakes reject small-order Diffie-Hellman keys.18- Unfolding or rotating the device no longer signs you out of the vault.19- Onboarding offers create-a-vault as an explicit choice on the final card, and labels20 the pair-with-another-device option with a Pro badge.2122## Notes for PIN users23- You may be asked to set your PIN up again after this update. Your old PIN material is24 removed on upgrade because it was not protected by hardware.25- Your master password is unaffected and always works.26- If your device's hardware cannot enforce limited PIN attempts, PIN unlock is switched27 off on that device and you continue with your master password.