Note di rilascio | Devolutions Cloud

2026.2.400.0

·September 9, 2026

Miglioramenti12 Correzioni16

Miglioramenti

12

Administration - Added a system setting to disable the AI Assistant
Administration - Added the ability to create a new entry template directly from the Entry templates page
Administration - New admins no longer access all vaults by default; current admins retain access as Vault Owners
Entries - Added support for importing Password Safe (PwdSafe) files in Devolutions Cloud
Entries - Added the ability to duplicate elements within a Password List entry
Gateway - Improved gateway configuration saving so changes aren't blocked when the connection can't be tested
PAM - Added mandatory ticket number and reviewer assignment options for PAM checkout requests
PAM - Renamed the "Disable account on check-in" PAM option to "Enable account on checkout"
PAM - Shared vaults can now hold PAM entries
Security - Added new password generator modes (LessPass, Stanford policy, XKCD) along with UI improvements
Security - Redesigned the recovery key validation flow
Vaults - Added support for allowing linked vault credentials in user vaults from the web interface

Correzioni

16

Administration - Fixed administration logs so "Recovery key generated" and "Recovery key email sent to hub owner" appear as separate, distinct filter options
Entries - Fixed the entry-lock notification not showing the name of the user holding the lock
PAM - Fixed checkout comments and log metadata not being recorded when checking out a Cloud-vault entry with "Prompt for comment" enabled
PAM - Fixed PAM license being bypassed when copying or moving entries across vaults
PowerShell - Fixed PowerShell entry retrieval to include the full folder path
PowerShell - Fixed PowerShell export incorrectly including PAM vaults, which should be excluded like in the manual export dialog
PowerShell - Fixed the PowerShell export obfuscation option behaving opposite to what its label and tooltip described
Security - Fixed the default password policy dropdown staying empty instead of showing "None" after deleting the only custom policy
Sessions - Fixed session recording fields being editable when they no longer applied due to inherited recording settings
Sessions - Fixed web gateway sessions incorrectly showing as active after they were actually closed
Users - Fixed mass-invite success/failure counters not counting users with inactive accounts as failures
Users - Fixed the authentication mode field becoming stuck after selecting Contractor when editing a user
Users - Fixed the invitations sent dialog missing a scroll bar when more than 20 recipients were listed
Users - Fixed user icon incorrectly switching to the contractor icon when an expiration date was added
Vaults - Fixed missing checkout button for entries in the System Vault
Vaults - Fixed the vault access user/group search not matching by email address

2026.2.302.0

·August 26, 2026

Miglioramenti1 Correzioni1

2026.2.301.0

·August 19, 2026

Correzioni1

2026.2.300.0

·August 18, 2026

Miglioramenti10 Correzioni9

2026.2.202.0

·July 22, 2026

Correzioni1

2026.2.201.0

·July 22, 2026

Correzioni1

2026.2.200.0

·July 20, 2026

Miglioramenti8 Correzioni19

Miglioramenti

8

Licenses - Added a warning when refreshing a license that reduces the allowed number of users
PAM - Added notifications when a PAM service becomes unavailable, via in-app message and email
PAM - Updated the "Enable PAM" empty-state screen with a new illustration
Performance - Improved the performance of the vault entry count for large environments
Security - Added support for allowing multiple IPv4 addresses on an Application Identity
Security - Added validation requiring an HTTPS URL when configuring the Encryption Service
SSO - Added support for configuring multiple Hub SSO providers
Vaults - Added a "Try using other keys" button in the Vault Health report to recover corrupted entries

Correzioni

19

Entries - Fixed RDP port changes not being saved
Entries - Fixed the "No Tag" filter incorrectly including entries with inherited tags
Export - Fixed broken PowerShell help links in the export
Gateway - Fixed "Open in Web" remaining available when "If Not Connected" is not selected
Gateway - Fixed the ability to open or edit sessions on a deactivated gateway
Gateway - Fixed unassigned gateways appearing in vaults and being selected by default, causing save errors
PAM - Fixed a check-in lock that could not be removed after a failed check-in
PAM - Fixed an error during privilege elevation with a Just-In-Time account
PAM - Fixed irregular success and failure logging in the scheduled heartbeat check
PAM - Fixed the checkout policy MFA option displaying "Default (Default)"
PAM - Fixed the PAM service dropping its connection to the server without reconnecting
PAM - Fixed the PAM service staying active after being stopped when using a subdomain-less URL
PAM - Fixed the PAM service taking up to 30 minutes to stop from the web client
Recordings - Fixed an occasional error when retrieving recordings
Recordings - Fixed deleted recordings reappearing after a refresh
Recordings - Fixed gateway recording not working when the recording setting is inherited from a parent folder
SSO - Fixed access to the Provisioning tab once an SSO provider is configured
SSO - Fixed organization synchronization failing for large organizations
Various bug fixes and improvements

2026.2.103.0

·July 14, 2026

Miglioramenti1

2026.2.102.0

·July 9, 2026

Correzioni2

2026.2.101.0

·June 18, 2026

Correzioni1

2026.2.100.0

·June 17, 2026

Miglioramenti16 Correzioni24

Miglioramenti

16

Dashboard - Added a button to reset the dashboard layout to its default arrangement
Entries - Added a button to remove a custom image from an entry
Entries - Added a new entry type for domain name registrar information
Entries - Added an expand and collapse all option for folders
Entries - Added the possibility to convert legacy Website entries to the new Website entry type
Entries - Improved the contrast of fetched brand symbols
Entries - Removed the Privileged Account option from the User Specific Settings of Credential entries
PAM - Disabled heartbeat and password reset on PAM accounts set to Unmanaged
PAM - Excluded a user's linked accounts from the approver list when self-approval is not allowed
PAM - Improved the gateway test connection to also verify connectivity from the PAM service
Security - Added the ability to require multi-factor authentication before opening sensitive entries
Sessions - Added the ability to prompt on connection for linked VPN, SSH, and gateway session modes
Sessions - Disabled the Open in Web action when If Not Connected is not selected in gateway settings
Temporary Access - Added the ability to request temporary access for a group or multiple users at once
Temporary Access - Allowed a Temporary Access Authorizer to select themselves as the target when granting access
Vaults - Made the vault description field support multiple lines

Correzioni

24

Administration - Fixed being unable to add a password policy due to a disabled Add button
Administration - Fixed bulk action buttons not appearing on the Devolutions Gateway bulk update page
Administration - Fixed Provisioning Logs failing to load
Administration - Fixed the Azure Log Analytics sync frequency resetting to 60 minutes
Administration - Fixed the Send invite button being disabled on the License step of the invite users wizard
Entries - Fixed custom fields not showing on bank account entries
Entries - Fixed linked (shared) entries not working in the user vault
Entries - Fixed needing to edit an entry's message in order to change its status
Entries - Fixed password policy settings not being saved in the password management section
Entries - Fixed passwords being hidden from authorized users when an entry status is Pending Approval
Entries - Fixed the Override private key option re-enabling itself after being unchecked
Entries - Fixed the Reveal License button not appearing on License entries
PAM - Fixed checkout information being shared incorrectly across different entries
PAM - Fixed credentials being viewable without a checkout prompt when automatic checkout mode and checkout prompt were enabled
PAM - Fixed raw HTML tags appearing in the Force Check-in confirmation dialog
PAM - Fixed scheduled heartbeat checks intermittently logging failures
PAM - Fixed the default JIT group dropdown not appearing when creating a session
PAM - Fixed the heartbeat check not running after resetting a Windows local account password and a duplicated username in the account overview
PAM - Fixed the Update button not enabling when selecting default JIT groups on a session
Security - Fixed broken access control during offline mode synchronization
Sessions - Fixed an error that sometimes occurred when retrieving recordings
Sessions - Fixed gateway sessions remaining marked as active after a connection ends
Sessions - Fixed sessions staying marked as open when the browser tab was closed instead of the session
Temporary Access - Fixed the interface not updating after accepting or denying a temporary access request

2026.2.4.0

·June 8, 2026

Correzioni1

2026.2.3.0

·June 4, 2026

Correzioni1

2026.2.2.0

·June 3, 2026

Correzioni1

2026.2.1.0

·June 2, 2026

Miglioramenti7 Correzioni21

Miglioramenti

7

[Entry] - Added a new entry type for storing Public Domain Name Registrar information
[PAM] - Added a pending checkout icon in the tree view to make pending accounts easier to identify
[PAM] - Added optional multi-factor authentication (MFA) on checkout
[PAM] - Changed the Enable Password Field control on PAM accounts from plain text to a proper button
[PAM] - Restored the loading indicator that displays while a heartbeat is running
[PowerShell] - Updated the Hub client package in the PowerShell module so users can now disable and configure Force SSO through scripting
[Session] - Added the ability to prompt for a VPN/SSH/Gateway connection at session launch

Correzioni

21

[Dashboard] - Fixed long custom widget names overflowing their container in the web client
[Dashboard] - Fixed missing outline around movable widgets when editing the dashboard in light theme so frames now appear consistently across all themes
[Entry] - Fixed an Invalid data error when editing an existing attachment on an entry
[Entry] - Fixed an issue preventing website entries from being updated when their name contained characters that are actually valid
[Entry] - Fixed inconsistent logo sizing in the Brandfetch image selection so logos display at a uniform size
[PAM] - Fixed a regression causing password reset and heartbeat checks to time out when the server and PAM Service used mismatched subdomain configurations
[PAM] - Fixed a regression where automatic check-in was no longer performed by the PAM Service at the end of a checkout
[PAM] - Fixed an invalid data error when saving a custom heartbeat or password rotation schedule with a frequency exceeding 60 minutes or 24 hours
[PAM] - Fixed the global Password policy mode setting not being saved
[PAM] - Fixed the JIT default group field showing a perpetual loading state in production where the feature is not supported
[Password Management] - Fixed the Update button remaining greyed out when modifying a password policy
[Reports] - Fixed the Provisioning Logs page failing to load with an Invalid data error and returning no results
[Security] - Fixed an issue in the IP Allowlist where a single IP could not be added alongside the user's own IP
[UI] - Fixed color and visual inconsistencies
[User Management] - Fixed an infinite loading spinner that prevented non-admin users with delegated permissions from managing users and invitations
[User Management] - Fixed non-admin users intermittently receiving an Access Denied prompt when accessing the Administration tab
[User Management] - Fixed the Delete and Reinvite buttons not appearing for certain users
[User Management] - Fixed the disabled Send invite button on the License step of the Invite Users wizard so invitations can be completed
[Vault] - Fixed an issue where the Default Vault setting would not stick when toggled
[Web Sessions] - Fixed several session close lifecycle issues for RDP, VNC, and ARD desktop web sessions
[Web Sessions] - Fixed VNC and ARD web sessions becoming stuck on a frozen frame when a gateway or server connection was abruptly terminated

2026.1.106.0

·May 19, 2026

Correzioni3

2026.1.105.0

·May 13, 2026

Miglioramenti1

2026.1.104.0

·May 11, 2026

Miglioramenti1 Correzioni1

2026.1.103.0

·May 7, 2026

Miglioramenti1 Correzioni3

2026.1.102.0

·May 4, 2026

Miglioramenti1

2026.1.101.0

·May 4, 2026

Funzionalità2 Miglioramenti37 Correzioni43

Funzionalità

2

Rebranding - New Look, to reflect "Devolution Cloud" name change
Rebranding - Rebranding, from Hub to Devolutions Cloud

Miglioramenti

37

Administration - Added an "Enforce clear clipboard after copy" setting in System Settings for Workspace clients, with a configurable timeout period
Administration - Improved the Administration and Reports navigation and a cleaner overall UI layout
Administration - Moved high-risk destructive actions (including "Delete Hub") to a dedicated "Danger Zone" tab under System Settings to reduce the risk of accidental execution
Authentication - Added social login support for Hub accounts
Authentication - Added support for configuring multiple Single Sign-On (SSO) providers for a single Hub
Dashboard - Updated the dashboard UI to use consistent and clear terminology for custom widgets and default dashboards
Entries - Added the "Allow password in variable" security option for Username and Password credential
Entries - Improved the entry view so that the simplified view toggle remembers the user's last-used setting between sessions
Entries - Removed the inapplicable "Use Linked Host Credential" credential type option from host-type entries
Hub - Added support for reserved names in Hub Personal, allowing hubs to be accessed via a named URL path
Hub - Added the ability to reserve a unique hub name and subdomain across regions
Import/Export - Added the ability to export entries to an encrypted JSON file with a master password, including a deobfuscate option
Logs - Added the platform and product version as a field in Hub log entries, improving diagnostic capability
Logs - Added the platform and product version to the audit information displayed in the entry overview, making it easier to trace version-specific issues
PAM - Added an option on SSH PAM providers to use the provider account credentials for heartbeat connections, supporting environments where privileged accounts have SSH access disabled
PAM - Added checkout duration and requested JIT groups to the PAM checkout request email sent to approvers
PAM - Added multi-factor authentication (MFA) verification when launching sensitive entries
PAM - Added PAM support for the contractor user type
PAM - Added support for Devolutions Gateway rule sets on PAM providers
PAM - Added the ability for PAM operators to select group assignments from discovered accounts in scan results and automatically populate the JIT Elevation configuration
PAM - Added the JIT Authorization tab to Active Directory and Azure PAM entries to display the configured JIT groups for each entry
PAM - Improved the PAM checkout request message for approvers to display full checkout details with inline Approve and Deny actions
PAM - Improved the performance of EntraID account discovery when searching large groups
PAM - Restored a missing toggle switch in the PAM JIT account configuration
Password - Updated the Password Analyzer to remove the password strength bar and show only the occurrence count
Reports - Added a Contractor Users report page in the Reports section
Sessions - Added session recording support for PowerShell sessions
UI - Applied various minor UI improvements and polish across the application
UI - Restricted the file types allowed for insertion in documentation attachments to supported formats (PDF, GIF, images)
Users - Added an Authentication Type column to contractor reports
Users - Added automated email notifications sent to administrators when user or contractor accounts expire
Users - Added sorting and filtering by the "Last Used Device" field in the Users administration table, and improved the CSV export to include this field
Users - Improved the contractor user type with a user type column in the user list
Users - Improved the user table layout and responsiveness for small screen sizes
Various bug fixes and improvements
Vaults - Added an administrator-controlled setting to disable the export functionality for user vaults
Vaults - Added the ability to select and delete multiple vaults simultaneously, with a confirmation prompt before the action is executed

Correzioni

43

Administration - Fixed a delay where binding an IP address to an Application Identity
Administration - Fixed issue where specific permissions assigned to admin users were not displayed in the permissions UI
Administration - Fixed the administration section tabs to be visible and accessible on small screens and mobile viewports
Authentication - Fixed an issue where removing the Force SSO setting via SRM could break hub access
Dashboard - Fixed an issue where creating a system dashboard widget with the correct permissions incorrectly returned an Access Denied error
Dashboard - Fixed multiple dashboard widget inconsistencies between RDM and Hub Web
Dashboard - Fixed multiple dashboard widget issues including synchronization between RDM and Web
Entries - Added support for configuring entries with single, multiple (fixed count), or unlimited simultaneous checkouts
Entries - Fixed an issue where the Logs tab showed no entries for users with the Contributor role when viewing a Username and Password credential entry
Entries - Fixed credentials to display correctly in the entry overview
Entries - Fixed OTP entries to support the colon (":") character in application and account name fields
Entries - Fixed the Security Settings tab to be visible for Contributor-role users in the credential entry edit dialog
Import/Export - Fixed a regression where the scrollbar and action button were missing on the final step of the import wizard, preventing completion
Import/Export - Fixed the "Create Folder" dialog in the Import window to consistently render icons and accept spaces in folder name input
Import/Export - Fixed the -DeobfuscateSensitives parameter in the PowerShell CSV export to correctly return passwords in clear text
Licenses - Fixed an incorrect assigned license count
Licenses - Fixed expired licenses in the Users Dashboard to be clearly visually distinguished from active licenses using a badge or color indicator
Licenses - Fixed the license assignment list to display both accounts when users are linked
PAM - Fixed an "Access Denied" error that occurred for users who received checkout or access request notifications for vaults they do not have access to
PAM - Fixed issue where PAM propagation PowerShell scripts were no longer visible in the configuration view
PAM - Fixed PAM accounts imported from RDM with "Inherited" account lifecycle policy to correctly display as "Inherited" instead of "Custom"
PAM - Fixed the Approve and Deny buttons to be correctly grayed out for the requesting user when the "Yes, Unless JIT" option is selected for own checkout approval
PAM - Fixed the Entry dropdown in the Checkout Requests report to display only PAM account names
PAM - Fixed the items-per-page display filter in the PAM account import window
PAM - Fixed the JIT provisioner username length limit to match Active Directory's 64-character limit instead of the previous 20-character cap
Password - Fixed sorting by occurrence count (descending)
Password - Fixed the "At Least" field for custom characters in the password generator to act as a minimum threshold, allowing the generator to include more than the specified minimum
Reports - Fixed the User Reports CSV export to include user tags
Sessions - Fixed a false "Unable to find the VPN session" error that appeared when selecting a Devolutions Gateway in VPN settings before saving an RDP entry
Sessions - Fixed an infinite loading state that occurred when entering incorrect credentials when opening a session in the web client
Sessions - Fixed an issue where deleting an SSH certificate would reappear after saving; deletions now persist correctly
Sessions - Fixed an issue where opening a session with no password in Hub web incorrectly prompted for a password before connecting
Sessions - Fixed an issue where SSH sessions failed to launch when credentials were set to "Inherited."
Sessions - Fixed clipboard redirection restrictions in web-based RDP sessions to properly enforce the disabled clipboard setting
Sessions - Fixed error that prevented launching a session when the Devolutions Gateway was set to "Inherited" from a parent folder
Sessions - Fixed session recording to work consistently in the user vault across both Hub Web and Remote Desktop Manager
Sessions - Fixed the VNC session view to remove the obsolete empty sidebar
Sessions - Fixed various UI issues in the Open in Web feature
UI - Fixed severoal translation issues
Users - Fixed a SCIM group assignment issue
Users - Fixed a UI bug where an invited user's email appeared twice in the list after sending an invitation
Users - Fixed connection status icons in the Users administration list to display at a consistent and correct size
Users - Fixed the Save button remaining grayed out when changing the offline mode field in the user administration edit dialog

2026.1.11.0

·April 29, 2026

Miglioramenti1

2026.1.10.0

·April 29, 2026

Miglioramenti1

2026.1.9.0

·April 16, 2026

Correzioni1

2026.1.8.0

·April 9, 2026

Correzioni1

2026.1.7.0

·April 9, 2026

Miglioramenti1

2026.1.6.0

·April 9, 2026

Miglioramenti1

2026.1.5.0

·April 9, 2026

Miglioramenti1

2026.1.4.0

·March 31, 2026

Miglioramenti1 Correzioni1

2026.1.3.0

·March 12, 2026

Correzioni1

2026.1.2.0

·March 5, 2026

Correzioni2

2026.1.1.0

·March 3, 2026

Funzionalità3 Miglioramenti15 Correzioni18

Funzionalità

3

Core - Added custom vault dashboard widgets with reordering
Core - Added new Contractors account type with expiration date support
Licenses - Simplified license assignment

Miglioramenti

15

Core - Added a credential selection prompt when launching a web session configured with "Prompt on connection" for linked vault credentials
Core - Added support for importing entries from .rdm files and exporting entries to .rdm format
Core - Added tag inheritance to automatically propagate to all contained entries
Core - Added the ability to restore soft-deleted hubs directly through Portal
Core - Added the ability to set a display sort priority on vaults
Core - Removed the user interface profiles feature
Core - Update some semantics and translation
Entries - Added support for SSH key certificates
Entries - Added support for SSH terminal and SSH port forward connections using credentials stored in linked external vaults
Entries - Added support for using Linked (External Vault) credentials as an OTP
Entries - Fixed an issue preventing entries from being opened when credentials were configured through User Specific Settings
PAM - Added a "Skip TLS validation" option in PowerShell Settings
PAM - Added an administrator setting to configure the default behavior for automatically checking in a PAM account when an entry is closed
PAM - Improved PAM checkout failure error messages
Password Generator - Added an "Exclude ambiguous characters" option to the Password Generator

Correzioni

18

Core - Fixed - Administration - Logging option visibility
PAM - Fixed a validation issue allowing PAM approvers to set a checkout duration below the enforced minimum of 10 minutes
PAM - Fixed administrators to configure risk levels for Active Directory / roles and groups
PAM - Fixed an issue preventing additional groups from being added to the JIT list in an OU when a group was already selected
PAM - Fixed an issue where service failed to start automatically after a machine reboot
PAM - Fixed an issue where the "Test Connection" button on a PAM provider was disabled
PAM - Fixed an issue where the JIT group name appeared duplicated in the PAM checkout
PAM - Fixed an issue where the PAM service token was not being properly enforced when launching sessions via the Gateway using "Open in Web."
PAM - Fixed an issue where the password stored in a PAM Propagation Configuration could not be viewed after the configuration was saved
PAM - Fixed JIT group selection to include groups located in the Active Directory Built-in organizational unit
PAM - Fixed Linux privilege sets section not appearing for local user SSH providers
PAM - Fixed PAM task endpoint permissions (infinite loading or access denied errors)
PAM - Fixed service updates on Docker to use a simple container restart instead of requiring the Devolutions Agent service
PAM - Fixed the default checkout policy indicator not appearing in the PAM accounts list column
PAM - Fixed the default checkout policy not being automatically pre-selected in checkout policy
PAM - JIT Provisioner account improvements
Various bug fixes and improvements
Various bug fixes and improvements

2025.3.504.0

·February 19, 2026

Miglioramenti1

2025.3.502.0

·February 12, 2026

Correzioni3

2025.3.501.0

·February 4, 2026

Correzioni1

2025.3.500.0

·February 4, 2026

Miglioramenti6 Correzioni3

2025.3.401.0

·January 20, 2026

Correzioni1

2025.3.400.0

·January 13, 2026

Modifiche sostanziali1 Funzionalità2 Miglioramenti6 Correzioni13

Modifiche sostanziali

1

Unlicensed Hubs now start a 30-day trial automatically and will downgrade to Free (single user) if a license is not added before the trial ends

Funzionalità

2

Core - Added ability to export vault data to encrypted JSON format protected by master password
Licenses - Added license purchase functionality within Hub

Miglioramenti

6

Core - Removed automatic creation of application services to provide more manual control
Entries - Added documentation link in webhook creation dialog for easier access to help
Entries - Added hierarchical tag inheritance system from system settings through root to entries
Entries - Removed unnecessary certificate password field from X.509 certificate configuration
Gateway - Removed unnecessary Vaults/Groups/Users tabs from virtual gateway interface
Various bug fixes and improvements

Correzioni

13

Core - Fixed "select all" button not saving selected users when assigning permissions
Core - Fixed checkout prompt errors and functionality when prompt is enabled
Core - Fixed error occurring when editing root-level permissions
Core - Fixed privileged account information not being saved in user-specific settings
Core - Fixed session recorders not terminating correctly after sessions are closed
Entries - Fixed incorrect LDAPS default port changed from 389 to correct port 636
Gateway - Fixed gateway token generation to check if force virtual gateway setting is enabled first
Gateway - Fixed SSH credentials not auto-filling when opening sessions through gateway with linked SSH keys
Gateway - Fixed virtual gateway not linking to physical gateway in Remote Desktop Manager when added through Hub web interface
PAM - Fixed PAM providers incorrectly appearing in account selection for credentials
PAM - Fixed PAM vault count not displaying correctly in the dashboard vault widget on web client
PAM - Fixed users with "Manage PAM providers" system permission unable to access PAM section
Password Generator - Fixed missing space in passphrase generator when appending character to last word