New Features
- Add remote database synchronization and import using external tools [#7222, #10896, #11271]
- Allow configuring keyboard shortcuts [#9643]
- SSH Agent: Add support for generating RSA, ECDSA, and Ed25519 keys [#7215]
- Linux: Add Wayland Auto-Type support using XDG Desktop Portals [#13359, #13449, #13579, #13770, #13810]
- Linux: Add Quick Unlock using Polkit (adds a UUID to public metadata, marking database as modified on first launch) [#8983]
- Linux Add AArch64 AppImage [#13816]
- macOS: Allow Quick Unlock using the device password when Touch ID is unavailable [#11410]
- Windows: Allow administrators to enforce certain user settings via global Group Policy overrides [#11223]
- Windows: Add native Arm64 builds [#13678, #13727]

Major Changes
- Migrate to Qt 6 [#11651, #7783, #13456, #13473, #13684, #13784]
- Linux: Store application state in XDG_STATE_HOME instead of XDG_CACHE_HOME [#9755]
- Build: Bundle build features under a single KPXC_MINIMAL CMake option [#11003]

Security Fixes
- Fix use-after-free when importing crafted KDB files (CVE-2026-69150; Credits: A. Ramos (@aramosf)) [#13500]
- Browser: Prevent entry reference injection when creating or updating entries via browser extension (CVE-PENDING; Credits: Davonte (@BadPingHere)) [#13580, #13670, #13688]
- Browser: Fix out-of-bounds writes when encrypting and decrypting native messaging messages (CVE-PENDING; Credits: @sigure21) [#13679]
- Windows: Randomize shared memor…

Full release notes on GitHub →