DeprecatedRemoved the obsolete "Open embedded" option from the Quick Connect user interface settings
Added a high contrast sub-theme
Added a keep password in memory option and a configurable multi-factor authentication delay for CyberArk credentials
Added a loading indicator on the entry tree when switching workspace or vault, naming what is loading instead of showing an empty tree
Added a loading indicator when switching vaults so the delay is no longer silent
Added accent dots in the user and local specific entry settings so active overrides are easy to spot
Added an experimental embedded terminal you can use instead of launching Windows Terminal, enabled from the Windows Terminal entry type options
Added automatic clearing of completed transfers in the file explorer, along with an option to control it
Added clickable links for URL hosts shown in the password list entry overview
Added error handling to the Submit ticket flow so failures now report a message instead of failing silently
Added multi-selection in the attachments list so several files can be sent at once with the Devolutions Send feature
Added PAM permission sets to the batch grant permission dialog
Added per-column search in the application's data grids
Added support for moving PAM entries, including by drag and drop in the entry tree and through the PowerShell module
Added the ability to reset a contractor user's password from the Users management view when connected to a Devolutions Server that supports it
Added the ability to use the Move action on a sub-entry to detach it from its parent
Added the Attachments tab to the dashboard of synchronizer entries
Added the configuration state of each YubiKey slot, so you can see which slot is already programmed before overwriting it
Added the user vault to the tray icon menu
Added ticket number and reviewer selection to privileged account (PAM) check-out and extension requests on Devolutions Cloud, with a required-field indicator when a reason or ticket number is mandatory
Improved entry loading speed by no longer re-requesting attachment and documentation counts that were already retrieved
Improved the dark theme to use the Devolutions dark blue palette
Improved the Devolutions Cloud sign-in during onboarding by collapsing the two separate logins into a single step
Improved the existing log file prompt in SSH entries with an explicit "Proceed without logs choice", while Cancel now aborts the connection
Moved the security settings into the entry properties simplified view
Fixes
15
Fixed changing the application password re-encrypting shared key (.shk) files of workspaces that do not use it, which left those key files unusable
Fixed clicking the taskbar button not restoring the application when it was minimized and set to stay hidden from the taskbar
Fixed encrypted XML workspaces saved by older versions failing to open
Fixed encryption issue when changing the application PIN code
Fixed FreeRDP sessions reconnecting endlessly when smart reconnect is enabled
Fixed issue where vault assignments report was available to users without the vault assignments view permission
Fixed loading speed for Devolutions Cloud users without access to any shared vault
Fixed managed account actions and heartbeat status not working on the PAM providers dashboard
Fixed offline access to vaults that do not allow to be cached in Devolutions Cloud workspace
Fixed offline data becoming unreachable for the whole workspace after switching to a vault that has offline access disabled
Fixed Secret Server entries that connect through a proxy showing the proxy address instead of the original host in the session tab information
Fixed temporary access ending at the time originally requested instead of the time the approver granted
Fixed the destination vault list in PAM account discovery offering vaults that cannot receive the imported accounts
Fixed the thumbnails view not showing previews for RDP sessions that use the new ActiveX client
Fixed vaults missing from the target vault list when configuring privileged account (PAM) account discovery
Removed support for RDM Jump — Use Devolutions Agent instead
New features
18
Added a "Deprecated entries" report to identify and convert deprecated entries
Added a "Shrink tabs to fit" option for the session tab bar, with scroll arrows that now appear only when tabs actually overflow
Added a customizable toolbar interface mode, with a customization view for choosing which buttons appear and how they are labelled
Added a local workspace to a Devolutions Cloud workspace migrator
Added a new DNS Manager tool for browsing and managing DNS records on remote systems
Added a new Raw Terminal entry type
Added a search-everywhere box in the main window header
Added a Webcam asset type to IT Asset entries
Added a Windows DNS dashboard entry type
Added custom user tags to the user management screen for Devolutions Cloud and DVLS workspaces, with a tag color rules configuration in the system setting
Added Devolutions XServer to the tools, with X11 forwarding options in SSH terminal entry settings
Added Jira ticketing dashboard as a new connection type, allowing users to view and manage Jira tickets directly within RDM
Added license administration support for Devolutions Cloud workspaces
Added possibility to edit Devolutions Cloud system settings directly in RDM
Added the ability to create, update, and delete Devolutions Cloud user groups directly from RDM
Added the possibility to add and edit users in Devolutions Cloud workspace
Added vault template support to Devolutions Cloud workspaces, so templates can be created and applied from vault management
Migrated DVLS vault assignments to a role-based permission system
Improvements
122
DeprecatedRemoved Dropbox and OneDrive data source support
DeprecatedRemoved RDM Jump as a log-off method for RDP entries
DeprecatedRemoved the deprecated PAM dashboard
DeprecatedRemoved the legacy RDM Jump from RDP sessions
Added a "My roles" view to role assignments so users can see the roles assigned to them
Added a "Show hidden files" option for FTP entries
Added a "Windows authentication (custom user)" login option to Microsoft SQL Server workspaces, allowing sign-in as a different Windows user
Added a clear button and a loading indicator to the quick search bar
Added a configurable maximum number of backups to keep
Added a confirmation before raising a Devolutions Cloud vault to the High security level, which revokes offline access, and excluded privileged account (PAM) entries from the offline cache
Added a confirmation of the current password when changing the application password in the security options
Added a destination folder picker to the Move to Vault feature
Added a group policy to enforce the Enhanced security option of the offline mode
Added a Help menu tool that captures a performance dump and sends it to support
Added a new Hybrid mode for CyberArk credentials that uses a PSM proxy connection for supported session types (RDP and web) and falls back to credential injection for others
Added a one-time password (OTP) field to the quick search result detail panel
Added a per-entry Ignore certificate errors option toVMWare synchronizer, VMRC and VMware Console entries, and enforced proper certificate validation
Added a startup logs tab to the Profiler view to help diagnose startup issues
Added a status bar widget showing active VPN connections
Added a warning in the recording player when a recording segment is still being processed, explaining that playback continues but seeking inside that segment is unavailable
Added Agent Tunnel management to the devolutions gateway administration panel
Added an automatic migration to a linked credential for entries still using the deprecated embedded credential mode
Added an expired/expiring badge to password list entries
Added an option to enable or disable just-in-time mode on Azure AD and domain user accounts in the privileged account (PAM) account settings
Added an option to include the mouse cursor in RDP session recordings
Added an option, also enforceable by policy, to reposition or hide the Domain field in the RDP credential prompt
Added automatic hiding of sensitive actions (reveal password, copy, open URL) in an entry's overview and menus when the entry still requires a check-out
Added automatic migration of legacy website entries to the current website session type
Added certificate trust management for Active Directory privileged account (PAM) providers, so domain controller certificates can be reviewed and trusted from the provider settings and the PAM onboarding wizard
Added chart editing to the spreadsheet editor for document entries
Added Chat and Remote Log modes for ControlR entries
Added CPU and memory usage display for Hyper-V virtual machines
Added CPU and memory usage display to the status bar
Added date and random character tokens to the password generator's pattern mode, making it possible to create patterns that automatically embed the current date or a block of random characters each time a password is generated
Added Delete and Preserve recording options in the Recordings tab
Added Description and Username columns to the Passwordstate account selection list, making it easier to pick the right account
Added Devolutions Cloud maintenance and outage details to connection error notifications, pointing you to the status page during a service disruption
Added Devolutions Gateway routing for PowerShell and SSH script tools, so scripts can now reach hosts that are only accessible through a gateway
Added display of PSU license information in the license details
Added drag multi-selection to the file explorer entries (selection square)
Added granular privileged access management (PAM) usage policies for add-on entry types, so administrators can enable PAM for a specific add-on such as SQL Server Management Studio instead of all add-ons at once
Added HaloPSA as a ticketing vendor
Added license, user and user group management for Devolutions Cloud workspaces through RDM
Added local AI voice dictation support
Added local caching and cache cleanup for contact entry avatar (Gravatar) images
Added main menu items, shortcuts, and reports to the quick search (Ctrl+K)
Added OTP support for Hudu entries
Added PAM checkout extension support for Devolutions Cloud workspaces, letting users request an extension on an active checkout and approvers review, approve, deny, or assign a reviewer
Added PAM default settings for DVLS workspaces
Added Password Depot REST API v2 support
Added password rotation for privileged account (PAM) providers, with a new provider credential setup screen
Added possibility to encrypt local files with Windows Hello
Added possibility to manage cached authentication for Secret Server and CyberArk credentials
Added PowerShell Remoting over SSH support, using RDM's own SSH and gateway flow with native host-key prompts
Added privileged access management (PAM) provider self-rotation for Devolutions Cloud workspaces, so a provider's own account can be created, viewed, checked out and edited from the PAM management view
Added security key support to the Keeper sign-in flow
Added separate keyboard shortcuts for quick search and search everywhere in the header
Added session recording log support, including a new recording log viewer tab and activity logging in the Active Directory console
Added Simple and Advanced modes to the SSH VPN (tunnel) type for easier configuration
Added SSH key support to the Bitwarden synchronizer
Added support for configuring a custom AI proxy provider (with custom headers) in the AI assistant settings
Added support for multiple active ticketing systems
Added support for requesting, approving, and tracking time extensions on privileged account (PAM) checkouts, with approval workflow and expiration warnings
Added support for tags in the Proxmox dashboard
Added support for the just-in-time account mode option on privileged account (PAM) entries in Devolutions Cloud workspaces
Added support for upgrading PostgreSQL workspaces
Added symbolic link icons for linked folders and files, plus broken link indicators in SCP entries
Added system settings for Devolutions Cloud workspace
Added the ability to configure the position of the AI chats panel
Added the ability to create entries directly from the CyberArk dashboard
Added the ability to extend your trial period
Added the ability to import and export vaults that contain privileged account (PAM) entries; PAM accounts and providers are excluded automatically, with a caution banner when any are left out of an export
Added the ability to inject secrets into AI agents through the Devolutions CLI
Added the ability to print or save your Devolutions Cloud recovery key as a PDF, and redesigned the recovery key validation screen
Added the ability to select several PAM providers at once when assigning an administrative role
Added the ability to set a custom message before an entry's status expires in the entry properties
Added the account expiration date to user management
Added the auto-assign group limit for Devolutions Cloud licenses (previously available only for DVLS)
Added the Devolutions Desktop Extension, letting Windows applications and browsers use passkeys stored in RDM
Added ticketing operations (list pending tickets, look one up, add comments, log work, and change status) to the AI assistant
Added transfer type, text file extension list, and local and remote line ending settings to SFTP and SFTP-in-SSH connections
Added trial status screens shown when your trial is active or has expired
Added user and user group import and synchronization, with scheduling and cleanup, to DVLS user management
Added vault selection to the credential reference report
Added voice dictation to the AI assistant chat input and the contextual AI prompt
Changed privileged account (PAM) vault creation and listing to follow the general vault permissions instead of separate PAM-specific rights (on DVLS 2026.3 and newer)
Further improved the trial workflow, refining the messaging and available actions on the license and trial screens
Improved Apple Remote Desktop connection settings with a tabbed layout (General, Advanced, and Settings tabs)
Improved application startup performance
Improved compatibility when the embedded terminal launches a Windows Terminal profile, including Store-installed profiles and profiles that run elevated
Improved favicon, Gravatar, and contact image caching while offline
Improved forbidden passwords to be able to create and configure multiple password lists
Improved link handling when opening a browser, now restricting URLs to HTTP/HTTPS and defaulting to HTTPS when no scheme is provided
Improved Linked External Vault credential entries to support list-based selection
Improved move to vault, keeping credentials that stay in the previous vault linked as cross-vault links so they still resolve
Improved performance when opening entry properties by loading time zone data only when needed
Improved session recording performance
Improved startup time by no longer running the application signature check unless analytics are actually being sent
Improved startup time by no longer waiting on the Devolutions Account check at launch, so an unreachable account service no longer delays the application
Improved the "Clear all" action for server notifications so it clears everything in a single operation while keeping pinned notifications intact
Improved the automation experience by splitting the combined Macro, Script & Tools area into separate Tools and Automation sections
Improved the check-out selection prompt to expand all folders when it opens
Improved the Devolutions Send integration
Improved the layout of the application logs view
Improved the main window search and changed the default Quick Connect shortcut to Ctrl+K
Improved the quick search results experience
Improved the session comment dialog to load ticketing-system tickets in the background, so it no longer stalls while opening
Improved the startup experience so the toolbar and search bar stay hidden until the app finishes loading, showing a "Loading…" title in the meantime
Improved the template entry-name options when creating an entry from a template, replacing the "keep template name" checkbox with a clearer selector (unchanged, template name, or custom name)
Improved the workspace selector with favorites, grouping, and local branding
Improved ticketing system settings for Jira, ServiceNow and HaloPSA to be able to reference a credential entry
Improved VNC server key trust so a key you approve for a host is now recognized by every VNC engine instead of only the one you approved it with
Made the status-bar license indicator clickable to open license details
Merged PAM vaults with regular vaults for Devolutions Cloud workspaces
Moved the account view into the main window title bar
Multiple startup performance improvements
Prevent the application from stealing focus when launching
Removed obsolete local and user-specific settings for information type entries
Removed privileged account entry types from user vaults and from vaults that are not marked high security
Removed the JIT account mode section from privileged account (PAM) entries for a provider's own managed account, where it never applies
Removed the Jump Approach selector so all jumps now use the Devolutions Agent, and existing entries keep working automatically
Renamed the "Linked (external vault)" label to "cross vault"
Fixes
4
Added automatic recovery from a corrupt offline cache file, so a damaged file no longer causes errors on every refresh
Fixed keyboard input lag in other applications while the application was starting up
Fixed the title-bar quick action buttons (Edit, Quick Connect) staying interactive while RDM is locked; they are now hidden on the lock screen
Fixed web autofill field discovery to honor the connection's Ignore certificate errors setting, so fields can now be detected on sites using self-signed certificates
CVE-2026-78417 Added a prompt to review and trust unknown or changed VNC server RSA-AES keys before connecting
Improvements
8
Added a cancellable progress window while authenticating to Keeper, so RDM no longer becomes unresponsive during Keeper login, two-factor, and device approval prompts
Added a creation time, CPU usage and assigned memory columns to the Hyper-V virtual machine list
Added a smart card Kerberos certificate logon option for RDP entries, along with the group policy that turns it off
Added an "Apply theme to WebViews" option so web entries follow the current RDM theme
Added handling for OpenSSH certificate signed for an sk-ed25519 and sk-ecdsa key
Added informational tooltips to Passwordstate fields
Improved the SSH shell logging prompt so you can proceed without logging instead of having to cancel the connection
Redirected user, vault, user group management to the web interface when on a DVLS workspace and RDM is a 2026.2 version while the server is 2026.3
Fixes
37
Fixed a crash when revealing an attachment's password in Devolutions Cloud workspace
Fixed an insufficient rights error when working offline, where every administrative permission was denied
Fixed an issue exporting entries while offline in a Devolutions Cloud vault
Fixed an unhandled error when pasting into the AI Assistant chat input
Fixed changes to a PAM provider's checkout policy not being applied correctly
Fixed Devolutions Cloud activity log entries showing raw internal names instead of readable, translated messages
Fixed DVLS embedded login not loading entries after using the "Have trouble logging in" link
Fixed focus issues when opening entries as undocked windows
Fixed folder names not resolving their variables in the suggested file name when exporting entries
Fixed FreeVNC file transfer issues with drive listing, remote paths, and the overwrite prompt
Fixed Intel AMT entries connecting to localhost instead of the target host
Fixed intermittent flickering when using multiple SSH Shell entries together
Fixed license assignments being lost when you cleared the user search in license management before saving
Fixed MAC address discovery failing on Host entries
Fixed nmon renderering incorrectly in SSH terminal entries
Fixed Quick Connect remaining usable even when the "Disable quick connect" policy was enabled
Fixed RDM freezing on startup when connecting to a Devolutions Server workspace
Fixed RDP entry type option controls being cut off when the options window is at its minimum size
Fixed RDP NTLM authentication failing when the account's UPN suffix differed from the Active Directory domain name
Fixed SFTP not preserving timestamps in certain cases
Fixed SSH Shell multi-line copy of ANSI-colored terminal output drops spaces around colored tokens
Fixed terminal rendering to apply anti-aliasing settings which are without effect right now
Fixed terminal sessions using both a gateway and session recording failing when interactive authentication took longer than the gateway's recording timeout
Fixed the 1Password results window opening behind the main application window
Fixed the 1Password window prompt opening behind the RDM main window
Fixed the copy host button doing nothing for ControlR entries in the entry overview
Fixed the country being cleared when editing a user in SQL Server workspaces
Fixed the credentials section staying visible in folder properties for folder types that do not support credentials
Fixed the Devolutions login window not accepting keyboard or mouse input when RDM is used through a remote session
Fixed the KeePass (Direct mode) key file browser opening as "Save as…" instead of "Open"
Fixed the KeePass entry properties database file picker in Direct mode opening as "Save as..." instead of "Open"
Fixed the most recently used entries list being empty in a Devolutions Cloud workspace
Fixed the most recently used list overriding the dashboard in a shared vault
Fixed the Password Depot credential picker so folders can be expanded and entries inside them selected
Fixed the To Do list letting users add items to entries they don't have permission to edit
Fixed the x64 and ARM64 app launchers being built against the wrong .NET runtime
Fixed unsupported (out-of-date) RDM versions still being able to load vaults when blocked by minimum-version requirements
Added validation of URLs before they are opened in a browser, hardening against malformed or unsafe links
Make NetBox token a sensitive property
Improvements
4
Added an "All virtual machines" folder to the VMware dashboard and improved its performance
Added GitHub Enterprise Copilot authentication for the AI assistant
Added the ability to transfer entries from one vault to another, letting you choose the destination folder and preserving links to credentials left behind as cross-vault links
Improved the AI assistant to gracefully recover from malformed JSON returned by tools
Fixes
17
Fixed drag-and-drop not moving shortcut entries on DVLS workspaces
Fixed duplicate Action Center notifications appearing for entries that have shortcuts
Fixed inherited credentials failing to resolve for entries that use an SSH private key
Fixed manual logging in the SSH Shell creating empty log files
Fixed PasswordState "My account settings" so that enabling Windows integration now counts as a valid configuration
Fixed privileged account (PAM) entries not appearing when browsing them from an entry's user-specific override credentials on Devolutions Cloud, for users with entry-level (non-admin) access
Fixed Quick Connect offering to save an entry into a locked vault
Fixed search results in the user vault not focusing the correct entry to launch when the navigation pane is hidden
Fixed the DVLS login prompt reappearing when switching workspaces after cancelling login
Fixed the one-time password (OTP) missing from the View Password screen
Fixed the password list search not matching with certain fields such as the description
Fixed the Terminal style override not loading correctly in the application options
Fixed the terminal style/font override not loading correctly in the terminal options
Fixed the title header size and selection being lost on automatic refresh in the Opened connections (State) tab
Fixed variables in an entry's Log filename property not resolving when the log path uses a hidden network share
Fixed variables not working in custom fields
Fixed variables that could stop resolving when multiple variable resolutions in a row were required for the same entry
Added Keeper importers (CSV and JSON) for importing entries from Keeper
Fixes
16
Fixed a tile disappearing from a custom tile layout after it was closed
Fixed being unable to choose a destination file when exporting an X.509 certificate
Fixed browsing for accounts failing in 1Password when using 'My account settings'
Fixed certain policies not being consistently applied to the browser extension and Tools menu
Fixed connecting to a 1Password account protected by Duo, where a loading indicator could stay stuck after the Duo prompt completed
Fixed Copy to YubiKey failing for privileged account (PAM) credentials
Fixed custom Windows authentication for Microsoft SQL Server workspaces
Fixed Devolutions Cloud workspaces set to always prompt for login (Force login) re-prompting repeatedly while resolving privileged account (PAM) credentials
Fixed DVLS workspaces immediately prompting to reconnect right after clicking Log Off
Fixed empty folders not being exported, and fixed folders being duplicated on import
Fixed Export Vault to HTML saving with a .htm extension instead of .html
Fixed session recording not starting for Devolutions Cloud entries that connect through the Devolutions Gateway
Fixed the Devolutions Cloud dashboard switching on its own to a different vault while left idle
Fixed the File Explorer local pane opening as a separate window on another monitor
Fixed the one-time password (OTP) timer for sessions linked to privileged account (PAM) credentials
Fixed the Privileged Account credential mode missing from user-specific settings for users without a PAM license
Added a Remote Command option to SSH Tunnel entries in the Advanced tab
Added an Undocked Windows mode to choose how undocked sessions open (Tabbed, Grouped, or Standalone)
Added back the Caps Lock indicator on the application login prompt
Added back the Parallels 2X Client add-on
Added Proxmox credential type support in the free version
Added support for both pageant and openssh modes at the same time in SSH key agent
Added the missing option to import RDP files
Excluded PAM vaults from SSH key linked vault selection
Improved ControlR add-on authentication by replacing privileged access token login with Username, Password, and Bearer Token options
Improved performance on Devolutions cloud workspace
Removed the no longer functional "Show Application Tools Tab" option from the UI layout settings
Removed the SFTP panel splitter when the section is hidden
Fixes
35
Fixed a crash that could occur when a window was closed during initialization
Fixed a crash when the DisableToolsMenu group policy was enabled
Fixed a data refresh issue with Devolutions cloud workspaces
Fixed a possible crash caused by invalid color conversion
Fixed an issue where only one Windows Terminal process could be opened at a time
Fixed an issue with the Enter key and multiple selections in the favorites view
Fixed and restored the editable context menu
Fixed attachments not being sent via shareable link on SQL Server workspaces
Fixed copy to YubiKey not appearing for PAM domain users
Fixed creation date sorting in the task list
Fixed embedded credentials not being displayed in user-specific settings
Fixed embedded RDP sessions not filling the screen in full screen mode when using Smart Sizing
Fixed file selection when exporting certificates
Fixed GPT 5.5 model availability in the AI Assistant
Fixed Hub workspace entries becoming inaccessible
Fixed incorrect connection status shown in the favorite view for opened connections
Fixed integrated security not filling the username automatically
Fixed layout issues in the play list macro script selection dialog and added double-click support to confirm selections
Fixed missing due date color indicators in the task list
Fixed PowerShell sessions launched with Run As credentials to display a proper error message when the launch fails instead of silently failing
Fixed several UI issues in the prompt for pasting multi lines in terminals
Fixed single-line break pasting triggering a multi-line warning in terminals
Fixed SQL Server workspace being incorrectly forced into in-memory caching mode after an edit
Fixed SSH Shell issue where selecting the tab did not properly focus the terminal
Fixed task list column layout not saving and drag-and-drop not working
Fixed the calendar date picker watermark to use the current culture instead of the operating system culture
Fixed the default mode for the account life cycle policy
Fixed the default paths for the SCCM add-on
Fixed the file browser so the All Files filter now shows files with no extension
Fixed the linked picture not being saved when adding a new contact entry
Fixed the tab list not auto-hiding when closing entries from its context menu
Fixed undocked sessions pulling the main window to the front
Fixed View Password showing an encrypted value on checked-out entries
Fixed YubiKey fields not receiving automatic focus when the window opens
In Software license entry type, fixed some issues ("Assigned to" dynamic text not accurate when creating entry). Also fixed not being to manual input licenses in contacts
Removed integrations and import actions of multiple discontinued products
Removed policies 'ForceUpdatingOnceAMonth', 'ForceUpdatingMajorUpdate', 'ForceUpdatingAllUpdate', 'ForceUpdatingAllUpdateAndBeta' and 'DisableAutoUpdate' to be replaced with the new multi choice policies 'EnforceAutoUpdateReleaseChannel' and 'EnforceAutoUpdateFrequency'
Removed Spiceworks synchronizer
Removed the crypto wallet entry
Removed the XenServer dashboard entry type
Removed TrueKey integration
Removed unused add-ons and add-ons related to discontinued products
Removed VBScript, ControlUp, Spiceworks, WASP, Jitbit and RD Commander tools
New features
7
Added ControlR dashboard
Added expired certificates report
Added LockSelf password manager integration
Added Proxmox synchronizer
Added Social Login as a new credential type
Added SPICE protocol connections
Allow user group, user, license and vault management directly inside of RDM instead of redirecting to external web link for DVLS workspaces
Improvements
109
DeprecatedDeprecated FortiClient SSL VPN mode
DeprecatedDeprecated Jitbit macro recorder
DeprecatedMarked Dropbox and OneDrive entries as deprecated (they will be removed in 2026.3)
DeprecatedRemoved legacy PAM team folder navigation
DeprecatedRemoved the legacy Text add-on; existing entries are now prompted for conversion
DeprecatedRemoved the option to enable legacy embedded credential mode
DeprecatedRemoved the Skype integration option as Skype is no longer available
More information Support for RDM Jump will be removed in 2026.3 — Use Devolutions Agent instead
Active Directory entry now supports customizing grid columns
Added "Windows authentication (Custom user)" login mode to Microsoft SQL Server connection settings, allowing connections using a specific Windows domain account instead of the currently logged-in user
Added a "Duplicate with template" quick action for entries
Added a copy button to the Password List entry dashboard
Added a global option to configure the maximum number of scrollback lines for terminal connections
Added a personal SSH key option for Docker connection entries
Added a safeguard to prevent automatic updates to an RDM version incompatible with the connected DVLS server
Added AI Assistant context injection and cost badges
Added AI context menu to multi-line text fields
Added AI skills support and improved the approval experience in the AI Assistant
Added an option to disable bracketed paste mode in terminal sessions
Added an option to ignore certificate errors in Proxmox sessions
Added archive support and sort/filter options to the AI chat list
Added contact photo support for contact entries
Added Copy to YubiKey option when a YubiKey device is connected
Added default elevation group pre-selection for privileged access management (PAM) accounts
Added default just-in-time (JIT) privileges selection to PAM entries
Added enhanced support for PAM password rotation schedules
Added FQDN and host template options to the VMware synchronizer host source settings
Added health and performance monitoring to the System Diagnostic tool
Added hybrid credential resolving mode for Delinea Secret Server
Added idle session timeout enforcement for CyberArk cloud sessions
Added in-process MCP server support to the AI assistant for improved data source integration
Added inline session rename functionality in the AI Assistant
Added interactive shell to the Docker management panel
Added LessPass, Stanford policy, and XKCD password modes to the password generator
Added MAC address vendor identification in the network scanner
Added MCP tool to delete entries
Added MFA method filters (TOTP, email, and SMS) to the PAM checkout approval workflow
Added missing actions to OneIdentity Safeguard credential properties
Added missing Gateway section in DVLS vault management
Added multi-factor authentication support for credential checkout in DVLS data sources
Added multiple checkout options for Hub data sources
Added option to transfer user vault when deleting a user in DVLS
Added option to verify SSH PAM account heartbeat via the configured provider
Added OTP secret field support to CSV export and import
Added padding options for terminal sessions
Added PAM group management capabilities, including account group discovery and removal
Added per-dialog window settings (transparency, open mode, always on top)
Added persistent token support for Secret Server connections, allowing tokens to be remembered between sessions
Added quick action toolbar support in menu bar mode
Added reports to quick search results
Added search filter to the alarm data entry settings list
Added search functionality in menus when in menu bar mode
Added setting to configure MFA requirement on checkout for Hub Business data sources
Added SSO login and multi-tenant support for the AWS dashboard
Added support for custom ports in embedded SMB connections
Added support for customizing grid columns in Active Directory synchronization
Added support for extended maintenance updates
Added support for forced checkout comments when checking out entries in Hub data sources
Added support for Linked External vault in Batch edit of User/Local specific settings override
Added support for Linked External vault in quick connect
Added support for Linked External vault to User/Local Specific Settings
Added support for NetBox virtual machine synchronization
Added support for opening multiple user detail instances simultaneously
Added support for organization-wide forbidden passwords in the Password Generator and Password Analyzer
Added support for using multiple Windows authentication (SSPI) libraries simultaneously in SQL Server Management Console
Added support for variables from team/department folders with the TEAM prefix
Added tab navigation for embedded windows
Added Terminal and File System views for ControlR connections
Added the ability to log in, create an account, and switch accounts directly from the onboarding screen
Added the ability to perform checkout actions directly from the entry overview panel
Added the ability to pin notifications in the notifications panel
Added the Next and Forward navigation buttons in the ribbon
Added validation to prevent creating documentation pages with duplicate names
Added variable resolving in linked host in Hub data source
Changed the default user to the database user for SQL data sources
If your entry permissions are set to disallowed and you do a batch grant access it will keep the other permissions set to disallowed instead of automatically switching to inherited
Improved AI assistant model access and availability
Improved AI Assistant user interface including updated chat layout, session design, and function call permission controls
Improved AI settings to load all available models for each provider in the model selection dropdown
Improved AWS Console with SSO login and multi-tenant selection
Improved Devolutions Cloud browsing to use the configured email address when browsing
Improved error handling when 1Password authentication fails due to a missing dependency
Improved File menu item ordering
Improved home directory behavior in file explorers
Improved KeePass XML import to include OTP (one-time password) information
Improved log view panels and enhanced quick access toolbar functionality
Improved most recently used list storage reliability for SQL Server, DVLS, and Hub data sources by storing it in the user instead of the active computer
Improved notification search performance for DVLS data sources
Improved password analyzer performance
Improved the 'More tools' section with a redesigned interface and expanded tool options
Improved the auto-update settings with more versatile options
Improved the custom image selection dialog
Improved the Extract credential special action to require the View password right in addition to the Edit right
Improved the fallback behavior of the AI text context menu
Improved the layout and design of the Password Analyzer and Entry Security Analyzer views
Improved URL filter and advanced search criteria to include equivalent URLs
Improved VPN browsing by adding 'Add' and 'Extract' actions
Made connection properties windows non-modal, allowing other work while properties are open
Moved custom installer to Tools -> More tools
Moved the 'Existing' option to the top of the VPN selection list in entry properties
Moved the Templates menu item from the File menu to the Administration ribbon tab
Multiple improvements to Docker integration
Prevented editing the host field on existing Hub data sources
Removed the "Always show go offline button" option from file-> settings -> advanced section
Removed the web bookmark import, Boztech import, SmartFTP add-on, RealVNC import contact and the v1 RoyalTS import
Renamed "Data Source" to "Workspace" throughout the application interface
Support direct injection of keyboard macros in VNC and derivatives
Updated the onboarding experience following the Hub rebranding
When configuring a new PAM provider, operators can now view discovered accounts, select relevant groups, and click "JIT Setup" to automatically add them to the provider's JIT Elevation configuration
Fixes
49
Added a Fit mode for fixed terminal size options
Fixed "Import at root" still importing into the currently selected folder
Fixed 403 error during Devolutions Cloud workspace login
Fixed a "no license found" error when losing connection to the data source
Fixed a freeze when cancelling the login prompt during Azure virtual machines synchronization
Fixed a freezing issue when browsing 1Password accounts
Fixed a possible crash when loading the root dashboard
Fixed a possible crash when opening RDM in offline mode
Fixed a WebView2 cache issue that could prevent the login screen from loading
Fixed Advanced Options being cleared unexpectedly
Fixed AI Assistant sign-in issue when the AI provider is set to None
Fixed all entries failing to save in offline mode of an Hub workspace when at least one entry is checked out
Fixed an application freeze that occurred when encountering errors with Safeguard credentials
Fixed an error that could occur when opening sessions by double-clicking
Fixed an issue when moving or duplicating a folder that contains a virtual folder
Fixed an issue where Devolutions Cloud configuration could be reset
Fixed an issue where signing in with a different user in the AI Assistant did not complete properly
Fixed authentication sessions being lost due to temporary network errors
Fixed buffer size error in PowerShell Terminal (Remote) when the window size exceeded 1920x1080
Fixed checkout policy not loading correctly and hid the option for providers in DVLS
Fixed Cloud workspace entry's cached permissions being all disabled after saving an entry
Fixed Copilot stability issues and improved authentication security
Fixed crash when synchronizing from Active Directory
Fixed cropped login window issue at startup
Fixed Devolutions Cloud privileged entry no longer working
Fixed Duo automatic action setting not being respected when 'None' was selected
Fixed DUO errors and redirect failures during 1Password authentication
Fixed Entry security analyzer report not being visible in Hub workspace
Fixed error when deleting the last AI Assistant chat session
Fixed error when the Hub data source connection dropped where the tray notification would not prompt in some cases
Fixed handbook images not being imported when importing from Devolutions Server into Devolutions Cloud
Fixed issue in SSH entry where entering your 2FA would disconnect the session
Fixed issue when importing from Lansweeper
Fixed issue where terminal command script configured in the "Before open" section of the entry events was not executed before closing an SSH session
Fixed issue where the first command of post-login commands would display twice for SSH sessions
Fixed loading of Docker SSH key linked external vaults
Fixed MCP OAuth issues including blank page, crash, and silent DCR failures
Fixed offline issue when saving the most recently used list
Fixed opening RDM in offline mode with Hub data sources
Fixed PAM Just-in-Time replication time being triggered even when Just-in-Time was disabled
Fixed PasswordState v10 deprecated endpoints and added My Account settings support
Fixed possible empty vault in offline mode
Fixed RDM failing to connect when DVLS requires MFA
Fixed regression where PAM providers could not be added in Hub Business
Fixed repeated reprompts during offline sync
Fixed synchronizer failure when an entry in the current vault uses the CURRENT_CLIPBOARD variable
Fixed tag management issues where tags aren't added in the correct vault
Fixed tenant selection issue for the Entra ID dashboard
Fixed user settings (most recently used list and user-specific settings) not working when user vault is disabled
Fixed inconsistent password field masking behavior in several Avalonia properties windows so the reveal toggle behaves the same as in the legacy editors
Improvements
4
Added automatic recovery from corrupt offline files
Added SSMS 21 and SSMS 22 default paths for SQL Server Management Studio entries
Improved error message details when a PowerShell session fails to launch
Removed non-user fields from X.509 credential settings
Fixes
18
Fixed and improved Active Directory user attribute editing behavior
Fixed Applications assignment opening in a different UI window
Fixed context menu duplication issue in the filter dialog
Fixed dialogs to respect the topmost state of the owner window
Fixed display issue at non-default scaling on the background services page
Fixed extracting embedded credentials not working on folder entries
Fixed Forbidden Passwords from shared sources not being taken into account in the password generator
Fixed infinite loading indicator when running synchronizers
Fixed issue where Hub Personal data sources allowed switching to linked (external) credential mode
Fixed LastPass single sign-on error caused by mismatching username in JWT
Fixed LastPass single sign-on issue for non-PKCE modes
Fixed OpenVPN entries incorrectly using the UDP protocol
Fixed OpenVPN export incorrectly selecting the file path
Fixed optional check-out mode not requiring check-out when editing the properties of an entry that is checked-out by someone else (when multi check-out is enabled)
Fixed possible duplicate entries in user/global vault
Fixed possible issue where user overrides were not saved
Fixed potential error when changing the application theme while an RDP session is open
Fixed RDM freezing after clipboard operations in the terminal
Fixed refresh button sometimes disappearing
Fixed removing a folder from favorites not properly removing the folder itself
Fixed root's name not being saved correctly in Hub data sources after an edit in RDM
Fixed SonicWall NetExtender compatibility issues with version 10.3.4 and later
Fixed SQL Server data source actions being enabled when no database name has been set
Fixed SSH connections failing due to an unsupported MAC algorithm
Fixed system permissions given to a regular user not being taken into account on Hub data source
Fixed the permissions report displaying credentials in the session section
Fixed the required permissions to convert certificate entries to X.509 credentials
Fixed unlock not working in a locked vault
Fixed user management window automatically re-opening when launching RDM if it was opened before closing
Fixed vault selection dropdown not responding to enter and arrow keys
Fixed viewing custom fields through the overview panel not working on an empty folder
Extended "hide entries" options in the user preferences and "File -> Settings" to affect folders and removed the "hide expired groups" option from "File -> Settings"
Removed 1Password local mode - no longer supported since 1Password 8
Removed authentication mode from "My Account Settings" for the OneIdentity entry - This information will need to be entered directly in the entry
Removed Box explorer entry
Removed Chrome embedded - Use Edge instead
Removed GoToAssist entry
Removed legacy Bitwarden synchronizer settings
Removed Spiceworks entries (synchronizer and session)
Removed support for Dropbox datasource - Use XML datasource instead
Removed support for Google Drive datasource - Use XML datasource instead
The "Parameters" section of newly added/edited "Report (custom)" entries will not be saved the same way as it was in older versions of RDM. Going back to RDM 2025.3.X.X or an earlier version of RDM and editing a "Report (custom) entry that was added/edited in 2026.1 or newer will result in the loss of the saved "Parameters"
New features
14
Added a "Last focused tab" option to the tab selection behavior when closing an active tab
Added a way for an administrator to create a preset dashboard for their users
Added ControlR web version implementation
Added Docker management console entry
Added domain registrar as a new information entry type
Added GetScreen entry type
Added JWT credential entry type
Added JWT decoder tool
Added local backup to Hub Personal datasources
Added local recording support for all free data sources
Added PGP credential entry type
Added PowerShell Universal web version implementation
Added the possibility to create custom widgets for the vault dashboard, with a reordering feature
Added UniGetUI as an available application tool
Improvements
153
DeprecatedCryptocurrency cold storage entry type is deprecated
DeprecatedDeprecated Spiceworks import - Use the generic CSV importer instead
DeprecatedDeprecated spiceworks tool
DeprecatedDeprecated TrueKey entry
DeprecatedReplaced Winget dashboard with UniGetUI
Added 'show advanced columns' to VMWare dashboard in SOAP API mode
Added "Copy to clipboard" credential events for "After open" actions
Added "Hide toolstrip" option to Apple Remote Desktop entry settings
Added "Linked (External vault)" mode to OTP selection in entry properties
Added "Open in background" option in the advanced section of entries
Added "Prompt on connection" option to linked VPN
Added "Search all" option in Advanced Search custom fields to search across all custom field values at once
Added /ConfigPath command-line switch to specify a custom configuration directory for RDM
Added a clock and time zone information to the overview
Added a conversion from Certificate (document) to X.509
Added a favorite icon indicator to entries in the add connection list
Added a Group Policy setting to control automatic logoff when disconnecting an RDP session
Added a link for external login in the embdded Devolutions login
Added a new Markdown editor with preview mode and syntax highlighting that adapts to light and dark themes
Added a PAM feature discovery screen when PAM is not yet configured
Added a prompt to edit the message in entry properties events tab
Added a recording gateway setting to connection entries
Added a sanitized settings export to help diagnose issues with support
Added a setting to group synchronized Azure VMs by their resource group
Added a setting to the VMWare synchronizer to exclude hosts by name
Added a username length limit for domain just-in-time provisioning accounts
Added a visual security indicator on embedded sessions when credential injection is active
Added ability to customize tag colors
Added ability to edit risk levels for Active Directory and Entra ID security groups and roles in PAM providers
Added AD authentication mode for OneIdentity
Added additional Active Directory user edit fields
Added AI telemetry tracking
Added API key support to credential selection for AI assistant entry
Added better messaging support when DVLS is in maintenance mode
Added certificate file support to SSH key credentials and improved support in SSH terminal entries
Added compact mode to display macros in SSH Terminal toolbar
Added confirmation message when closing navigation pane
Added Copilot SDK as an AI provider option with OAuth authentication support
Added Copy OTP action in the after connection events
Added CVE (Common Vulnerabilities and Exposures) warnings to the security dashboard
Added disconnect action inheritance for terminal entries
Added disconnect button availability for additional connection types
Added documentation search button to the main filter menu
Added DPI awareness support for RDP external connections (mstsc)
Added escape key support to close the vault selector dialog
Added Export Special options "Export Contacts" to export more information for Contact type entries with CSV/XSLX format
Added fields for prefix and suffix to Lansweeper host name field
Added file size column to file explorer entries
Added filtering and role support to NetBox synchronization
Added first implementation of Devolutions Agent DVC to RDM
Added fuzzy search to the filter with improved filter settings menu behavior
Added gateway session termination when the PAM account is checked in
Added group membership support to Azure PIM entry
Added group policy option to enforce 'Show folder details as selected' setting
Added host field source setting to the VMware synchronizer
Added HP iLO (Native) support for Devolutions Gateway
Added Internet Protocol to SCP properties
Added license management reports showing detailed package assignments and user license information
Added linked credential selection for the API key in the AI assistant
Added live chat support button to the ribbon for quick access to customer support
Added markdown document entry type
Added max length to passphrase for Password Generator
Added MCP client support in AI Assistant with OAuth authentication, file attachments, and drag-and-drop functionality
Added MCP tools for creating, reading, updating, and deleting entry documentation
Added Mongo DB provider in PAM
Added multi-instance RDM mode for Now Agent Jump
Added multi-vault support for temporary access approvals in DVLS
Added offline information to the Hub data source information view
Added OIDC authentication support for CyberArk
Added option to automatically switch to dashboard when closing a session
Added option to have a confirmation message before closing any opened connection
Added PAM onboarding "Get started" experience
Added Passwordstate integration to include MFA handling for APIs
Added possibility to append character to a passphrase in the Password generator
Added possibility to configure the default behavior for "Automatically check in PAM account when closing entry"
Added Proxmox as a new synchronizer option
Added read-only and destructive operation indicators to AI assistant tools
Added remote time zone support in entry logs for displaying activity in the remote machine's local time
Added required fields for Microsoft Entra ID entries
Added reset scrollback on keypress setting in terminal sessions
Added reveal button for more fields in devo send
Added security groups risk analysis for Hub Business data sources
Added service principal authentication support to the Azure VM synchronizer
Added single sign-on support to 1Password entries
Added SSH Key viewer tool
Added SSH support to OneIdentity entries
Added support for custom OpenAI endpoints
Added support for including the password as a variable in synchronizer configurations
Added support for linked owner custom field variables (e.g., $LINKED_OWNER_CUSTOM_FIELD1$)
Added support for multiple Yubikeys for application lock
Added support for privileged accounts in Active Directory dashboard connections
Added support for SSO in LastPass integration
Added support for tag inheritance as a setting in the vault and system settings
Added support for using CyberArk Connect with shared playlists
Added tab group multi select by holding the Ctrl key
Added tab title and tab color override to User/Local specific settings
Added temporary access feature to PAM accounts
Added time zone information and clock in the overview
Added users empty state to request trial in Hub and Server
Added variable resolution support in PAM service for network, VPN, and host-based configurations
Added view password in the dashboard of the host entry
Added web autofill security and navigation controls
Changed default value of entry security settings to use inherited values
Changed the default data source login behavior to use the embedded browser instead of external
Changed the vault dropdown to remember the last selected tab instead of defaulting to "All Vaults"
Disabled password-related features when password saving is turned off
Double-clicking entries in "all vaults" view or "advanced search" results now navigates to the entry and launches it by default
Fixed keep in memory option for Delinea Secret Server "My account settings"
Implemented GitHub Copilot SDK integration to AI Assistant
Improved "view password" behavior on attachments to look at the attachment permissions instead of the main entry permissions
Improved AI assistant interface with additional text formatting options
Improved AI Assistant layout with better model name display, text wrapping, and screenshot button availability
Improved clipboard behavior for more reliable password clearing
Improved double-click behavior to navigate and launch entries by default in multi vault and advanced search results
Improved error handling for gateway permission failures
Improved error handling for Microsoft SQL Server connections
Improved error handling when CSV file cannot be read
Improved error messaging when creating a Hub with an invalid or already-taken name
Improved export security with secure master password support for scripts
Improved filter to expand only root items when filtering
Improved handling when converting entries to website
Improved inherited field visibility in security settings by adding labels
Improved IP list filtering functionality
Improved license management interface and updated legacy key icon
Improved Login (account) entries to automatically convert to credential entries when no URL is present
Improved most recently used connections and cleanup results
Improved offline mode reliability and error handling
Improved OTP generation to automatically trim spaces from the secret key, preventing incorrect codes from being generated
Improved performance when loading global and user vaults by loading them asynchronously
Improved performance when switching between vaults
Improved Proxmox to support adding new virtual machines
Improved quick search user experience with better keyboard navigation
Improved tag search functionality in quick search
Improved the Exit full screen with a new menu
Improved the first launch experience: new installations now display quick connect buttons for RDP, SSH, VNC, ARD, and web connections when no entries exist
Improved the onboarding experience with UI enhancements and added the ability to configure multiple Hub Business instances at once
Improved the Quick Connect widget appearance and layout
Improved the Remote Desktop Manager command line parameters, including a better help (/?)
Improved the visual design of the AI Assistant
Improved user experience for sealed entries in quick search
Improved vault management to open in embedded mode within the main window
Launching RDP as Undocked and Full Screen will now hide the taskbar and display the undocked menu
Linked External vault now supported in SSH Terminal and SSH Port forward for SSH Key
Merged advanced search and multi-vault search into one
Removed gateway selection from Quick Connect for Hub Personal data sources
Removed restriction on exporting entries when user is in Read-only mode
Removed the user interface profiles feature
Renamed 2xclient connection type to Parallels Client
Renamed Teradici PCoIP client add-on to HP Anyware PCoIP client
Reworked the event disabling configuration to be more comprehensive and added a new GPO
Unified the terminology for "Keep tab opened on disconnect" for sessions and "Disconnect action" for SSH
Updated application splash screen
Updated Markdown viewer with syntax highlighting
Fixes
100
Added support for 25+ password manager import actions through the MCP server
Fixed $MACRO_PASSWORD$ variable not working correctly in high security vaults on Devolutions Server
Fixed 1Password SSO username not being saved
Fixed a crash that occurred when closing an empty system information report
Fixed a crash when disconnecting an AI Assistant session using the session menu
Fixed a display glitch in the AI Assistant chat when using screenshots
Fixed a LastPass DUO login failure when a linked device had no available two-factor authentication methods
Fixed a refresh issue in the script dashboard
Fixed a text highlighting issue in SSH sessions when scrolling
Fixed About view layout issue
Fixed account discovery to exclude deleted PAM groups in the path field
Fixed advanced search's 'Select in Navigation Pane' button not working for entries from other vaults
Fixed an issue in the password generator where enabling special characters also incorrectly enabled lowercase letters
Fixed an issue where connections that do not support PAM credentials could be opened with a PAM credential
Fixed an issue where credentials were not saved correctly in FortiClient connections
Fixed an issue where Devolutions gateways were incorrectly fetched for Hub Personal data sources
Fixed an issue where keys pressed while disconnected from an SSH entry were sent to the session after reconnecting
Fixed an issue where PAM connections could be incorrectly checked in or marked as closed while still running
Fixed an issue where PAM entry edit and delete buttons remained enabled during active checkouts
Fixed an issue where SSH tunnels using the parent host would fail when in a folder containing variables
Fixed an issue where the UPN username format was not applied correctly when using a PAM credential entry with a Hub data source
Fixed an issue with exporting licenses from the license management
Fixed an issue with Hyper-V entry filtering that broke virtual machine selection
Fixed an issue with SOCKS5 connections when using an existing gateway tunnel
Fixed an issue with SSH key agent information not showing in the status bar and background services tab
Fixed an issue with the code editor showing incorrect modified state
Fixed automatic check in not working when using SSH Key Privileged account
Fixed automatic synchronizers logging a close event even when they weren't opened
Fixed backup restoration for Hub Personal data sources
Fixed certificate expiration date not properly removing time component when auto-populating from certificate
Fixed check in issue when opening connections from PAM vault
Fixed connection serialization issues with missing default values
Fixed crash that occurred during LAPS password decryption
Fixed custom report export errors with duplicate columns
Fixed default dashboard layout identifier
Fixed default SSH template selection in PAM checkout settings
Fixed dropdown selectors losing their selected value when switching tabs
Fixed editing sealed entries in OTP list
Fixed enter key behavior and translation issues in TLS Diagnostics window
Fixed entries opening on search result action when the "Do not open connection" option was enabled
CVE-2026-0747 Fixed an issue with Team Viewer password visibility
Improvements
2
Added checkout section to entries in Hub data sources
Updated the CA pinning bundle used for Duo API communication to prevent API connectivity issues [More information] ( https://redirection.devolutions.com/rdm-update-duo-troubleshoot)
Fixes
16
Fixed alternate host prompt appearing twice for host entries
Fixed an SSH terminal rendering issue where background colors were not correctly cleared during scrolling (BCE support), causing display artifacts in applications such as Vim
Fixed clipboard encoding for VNC connections
Fixed error 403 in Hub when trying to get Gateway health information
Fixed error when exporting a custom report with duplicate columns
Fixed gateway list to show only virtual gateways when force virtual mode is enabled
Fixed interaction between disabling all macro/script/tools in availability and remote tools display
Fixed issue with CTRL key getting stuck in SSH entry
Fixed issue with escape function and keyboard mapping not working in SSH
Fixed issue with SSH connections not working when using a password variable in post-login commands
Fixed possible error when closing application during windows theme change
Fixed possible issue when moving a documentation page in Hub
Fixed potential FAIL_PROTOCOL_ERROR in SSH entries
Fixed SSH interactive authentication prompts to remove confusing popup behavior
Fixed SSH terminal issue with keyboard shortcuts
Potential fix for out of memory error when theme changes
CVE-2025-13683 Fixed issue where the API key in the AI Assistant entry wasn't encrypted - Existing entries should be re-saved to apply the fix, and an automatic migration step will be available in 2026.1
Improvements
8
Accomodate connection delays in MsRdpEx remote recording
Added additional triggers and dispatched events on certain webpages to ensure they correctly detect when WebView2 autofill has filled the login fields
Added attachments tab to VPN entries
Added Delinea secret's MFA challenge support
Added fallback for UltraVnc installation path
Added handling for Smart Folder to navigate to folder on double click if no special actions are detected
Added support for multiple SANs in certificate generator
Added unified take_screenshot MCP action
Fixes
21
Fixed "Keep template host on quick connect" no longer working when launching quick connect with a typed-in host
Fixed a crash with the Psono dynamic credentials
Fixed an issue where local powershell setup commands were sent to the remote host
Fixed an issue where the Pleasant password account settings couldn't be saved
Fixed an issue where the Psono entry selection was not available
Fixed an unwanted prompt for command line parameters
Fixed autofill issue with Microsoft Internet Explorer (deprecated) web login
Fixed canceling session with recording not closing the tab correctly
Fixed duplicate nodes when viewing Hyper-V cluster
Fixed focus session not working with Host type entries
Fixed incorrect launching interaction with X509 certificate credential
Fixed issue in X.509 entry where certain certificates couldn't be read
Fixed issue saving SSH entries with no gateways in custom mode
Fixed issue using variables in TeamViewer ID field in templates
Fixed issue with Dameware not sending password between quotes
Fixed issue with virtual gateway creation in Hub
Fixed PasswordAgent import support
Fixed Pleasant password SSO not resolving to the configured host/port
Fixed Show password option in the AI settings is not working
Fixed the Powershell RDM Cmdlet tool
Potential fix for out of memory exception when leaving application running with active sessions
Removed the legacy Netwrix password safe import option - Use the generic CSV importer instead since it's more flexible
Reworked the TeamPass integration to support the password and to work with the latest version - To keep using older versions of TeamPass, stay on a previous release of Remote Desktop Manager
Improvements
4
Added a vault selector to the PAM account connect prompt
Added default installation path to TeamViewer when path can't be found through registry
Added Password generator option to certain features (SSH Key and Certificate generator, Create a shareable link)
Added support for sending a password through the runas command via GSudo in command line and local Powershell sessions
Fixes
11
Fixed a potential Native Messaging issue causing the process to remain alive when an IPC call failed to return
Fixed an issue where opening the release notes or product news would start the session recording
Fixed an issue where the Windows terminal session would always prompt for custom parameters
Fixed issue where WinForm Avalonia view leaked the return key capture
Fixed issue with privileged session view dropdowns filtering out the content while typing
Fixed issue with the reorder playlist causing an error prompt
Fixed lost focus on navigation pane when navigating with keyboard
Fixed norwegian language breaking markdown editor
Fixed Pam checkout approval from messages issues
Fixed the Pleasant password account selection not getting enabled when selecting SSO
Add left click only to Auto-focus tab on item select and move auto focus options to Tree View options - The default value will be set to left-click only, which can break previous configurations
Changed default of password policy and password validation to be handled as inherited instead of going to the system settings directly - Make sure your inheritance structure is appropriate
Changed the "force default template" system setting for "lock password policy", which will now lock the configuration for non-administrators rather than only doing so when in "default" mode
Improved token storage for Dashlane, Truekey and 1Password - This may require re-authenticating with your MFA
Internal rework of the opened sessions - we no longer list external processes not opened by RDM
Removed alternative view modes for the navigation pane
Removed Chrome Remote Desktop entry
Removed Dropbox Passwords entry
Removed embedded UltraVNC support
Removed Kaspersky credential integration
New features
10
Added an option to allow login to DVLS and Hub through an embedded browser
Added MCP server feature (experimental)
Added support for creating Hub through application
Added support for entries in vault templates
Added support to Bitwarden for fetching SSH keys and using them
Added synchronizer for Azure VMs
Added synchronizer for JAMF
Added synchronizer for NetBox
Added WinGet dashboard tool
PAM vaults now appear alongside standard vaults in a single selector, eliminating the need to switch between views
Improvements
109
DeprecatedChrome in embedded mode is deprecated and will be removed in 2026.1 - Use Edge embedded instead
DeprecatedMarked Powershell 2.0 as deprecated - We recommend using Powershell 5 or higher
DeprecatedMarked RDP/SSH over Delinea Secret Server proxy as deprecated - Use a normal RDP/SSH entry linked to a Secret Server credential entry with mode "Connection through proxy"
DeprecatedMarked the certificate document entry as deprecated - Use the more feature-rich Certificate (X.509) credential instead
Add an option to show or hide the domain field in prompt credentials
Add JIT elevation to EntraID providers in Hub data source
Added "description" field in password policies
Added "pre-filter search" field and other improvements for Bitwarden
Added "Use my account settings" support to Azure PIM
Added a Connect All and a Close All buttons to the smart folder dashboard
Added a feature to password policies for the expiration
Added a local starting directory setting to SSH shell's SFTP panel
Added a new "Custom" option in the "autofill login (native application)" entry for the sequence
Added a new "IP" field in the IP address list entry, separating the "host/IP" field into two
Added a ribbon menu to show access requests
Added account lifestyle policy management with DVLS
Added actions and overview for linked credential with OTP configured
Added auto type actions in the tab context menu
Added bookmarks to file explorers
Added Cleanup and Replace with to Image Management
Added Close Tab Group context menu
Added Copy email to default credential entry overview
Added DisableOAuthContextSharing option to prevent the powershell module to obtain the OAuth context of the current data source
Added drag and drop support in Tab group view
Added dynamic mode to IP address list entry
Added Elevate Shell button to toolbar
Added empty state views for system vault, templates, password policies and script dashboard
Added feature to convert OTP entries to Website entries
Added feature to customize the navigation pane's context menu by hiding and reordering the menu buttons
Added filter option to also show entries referencing the entry found through the filter search
Added folder structure merge when moving to a different vault with the same structure
Added full refresh feature in Azure PIM
Added GitHub scripts support in the script dashboard
Added GPO to hide Devolutions Send in Main Ribbon Tools
Added high performance RDP session recording
Added import and export buttons to all custom variables features
Added import by CSV to IP address list items
Added Import/Export to Image management
Added Linked (user vault) choice to the linked host feature
Added linked external credentials to SSH gateway
Added linked external vault support for private key linking (SFTP, SCP, FTP, etc)
Added linked gateway support in SFTP and SCP
Added macro/script/tools to sessions' embedded menu
Added more information through dashboard ribbon to deprecated entries
Added more information to export modes under certain conditions
Added multiple files handling for the "already exist" prompt in file explorers
Added new "Rack" asset type
Added new dashboard widgets for expiring/expired user vaults entries
Added Open (Enhanced session mode) in Hyper-V action panel
Added option "Merge entry properties save buttons"
Added option to ignore system proxy for websites
Added option to lock main application window size
Added option to separate paste by line groups in SSH terminal
Added paste delay to Serial and Telnet
Added quick connect Gateway selection retention
Added regex search mode in smart folders
Added seal entry button in context menu and ribbon
Added setting to enforce passphrase in Devolutions Send
Added SSH recording type configuration in local settings for simple datasources
Added support chat bot integration (Salesforce)
Added support for AES192 and AES256 for SNMP
Added support for Bitwarden EU region
Added support for custom dictionaries to generate passphrases
Added support for Devolutions Gateway with Host-type entries
Added support for editing PAM accounts in Devolutions Server
Added support for entries and root-level expiration notification settings (DVLS)
Added support for file attachments in Devolutions Send
Added support for host field in custom sequence of Native Application Login entry
Added support for Hub Solo creation from within the application
Added support for shared password policies in SQLite
Added symbols to the default 'Password Generator' policy for improved default security
Added task view to Proxmox entry
Added terminal command macros to After Open and Before Close events
Added the data-ciphers property to OpenVPN
Added the possibility to send attachments through Devolutions Send
Added time-based color coding when viewing OTPs
Added user vault search string to jump description
Added Website Tab header location and orientation to local settings
Allow editing entries directly from favorites
Allow Jump host session to start as undocked
Allow to reuse the same cache between Web sessions when connecting via Gateway
Changed port knock feature to be saved as milliseconds
Changed the default Auto focus dashboard to Left click only
Changed the default search to be quick search
Changed vault dashboard title to use the "root" name rather than vault name when modified
Ensure top-listed rule takes precedence in syntax highlighting UI
Improved "Move to display" action in taskbar to also move modal windows
Improved "One Identity Safeguard for Privileged Passwords" entry to support Privileged Passwords and Privileged Sessions - The entry was also renamed to "One Identity Safeguard" to reflect this
Improved automatic checkout feature to trigger on Edit
Improved Azure PIM login without token
Improved custom credential so when it has a linked powershell script, the configured VPN of the script is now opened during resolution
Improved duplicate connections to open next to their initial connection rather than at the end
Improved folders in favorites to now show entries in dashboard
Improved IP List populate to allow filter by Tags or Folder
Improved performance of 1Password, Bitwarden, Zoho Vault and ProtonPass credentials by adding support for fetching specific credential without getting the entire vault
Improved performance of session recording in Edge with asynchronous recording
Improved SonicWall NetExtender entry to support latest version
Improved SSH Key agent UX
Improved temporary access for folders to be dynamic - new entries added to the folder will be affected by the temporary access
Improved the modal disconnect error message for a toast notification instead of modal window
Improved WinSCP so it will now hold temporary files with private key information until the session ends to avoid issues
Improvements to Duplicate entry report to allow easily removing duplicate entries
Minor improvements to onboarding wizard with new flow
Optimized autofill element detection in WebView2 when only name or placeholder attributes are present
Password Generator window will now remember last selection
Refactor MCP actions to remove async warnings and update parameter handling
Remade multiple views in Avalonia
Renamed "Password templates" to "Password policies" and moved the feature to the "Administration" section of the ribbon
Renamed the AnyIdentity PAM provider to "Custom PAM provider" for clarity
Fixes
24
Fixed actions not working in TN3270 and TN5250 terminals
Fixed Activity logs not saving column layouts
Fixed an issue where some entry actions weren't working from the group dashboard
Fixed an issue where the AD synchronizer was duplicating folders
Fixed and issue where inherited credentials resolving could result in a crash
Fixed data source options not always saving correctly after changing password
Fixed events macros causing RDM hangs when macros would be set to launch session
Fixed Hub emergency kit prompt
Fixed icon coloring issue in Spreadsheet editor while using dark theme
Fixed Import/Export of Certificate X.509 entry
Fixed issue allowing multiple opening of static windows
Fixed issue when saving multiple documents in a template group
Fixed issue where favorites would show User Vault favorites even when User Vault wasn't allowed
Fixed issue where multi-vault search window wouldn't move to front on ARM64 machine
Fixed issue with "use new configuration" for the exported configuration files
Fixed issue with Dashlane email MFA
Fixed issue with save as in SSH Key generator
Fixed issue with template filtering in "Add from template" session menu
Fixed issue with variable in data source username and log off data source
Fixed possible application crash when double clicking a .rdx file
Fixed possible issue closing entries over VPN
Fixed prompt for credentials issue when the user vault credential is not found
Fixed scroll bar issue in global opened connections on refresh
Fixed unresolved password issue with temporary access
Added a fallback on user@domain when the username format is UPN but the UPN is empty
Improved "elevate shell" feature to not replace the locale
Improved password generator "copy to clipboard" to separate passwords with newline instead of comma when in "legacy" copy mode
Fixes
16
Fixed a possible duplicate issue when executing the same synchronizer multiple times simultaneously
Fixed an issue where a failed SFTP upload would delete the local file
Fixed an issue where you could edit an entry that was already checked out
Fixed CyberArk account custom domain field not resolving
Fixed focus issues with WinSCP and PuTTY
Fixed issue where prompt for parameter on open option didnt prompt when opening a PowerShell terminal entry
Fixed issue where requesting a check out through a Hub Privileged Account credential entry would check out the entry for the requested approver instead of yourself
Fixed issue where the data source could be readonly when it shouldn't
Fixed issue where the mismatch version warning showed while in offline mode
Fixed issue with non-printable characters in ProxyLocal command for terminal
Fixed password list duplicating its content if move to itself
Fixed possible error when deleting favorite folder
Fixed System Vault contact not showing referenced by entries in contacts
Fixed the checkout action when editing entries
Fixed timing issue with Sonicwall NetExtender
Fixed windows hello facial recognition sometimes failing during authentication and closing Application
Improved "prompt for connection" choice with linked (vault) mode to use the ID to fix issues with renaming folders — entries saved with this setting in 2025.2 will not be compatible with older versions and the configuration will need to be made again
Our EULA and TOS are now combined into a single master agreement and include our new solution packages
Removed Devolutions Online Drive datasource — Use Devolutions Hub Personal instead
Removed Online Backup feature — Use file backup instead
RequiresDatabase upgrade requiredDVLS 2025.1.NET9 is required for this version
Security
2
CVE-2025-1635 Fixed issue where Hub didn't serialize LucidEncryptionContextJson in options sensitive
CVE-2025-1636 Removed visibility for password history in My Personal Credentials modes
Breaking
1
Changed license validation URL from https://api.devolutions.com/license/generate to https://quoting.devolutions.com/license/generate. Make sure your network allows access to this URL
New features
18
Added a "local admin report" feature
Added a view vault history functionality
Added a way to configure the application as a git commit signing utility
Added AI assistant to improve the text memo including description and comments
Added an AI assistant entry to store the information and run a chat in the application
Added Custom PowerShell VPN
Added CyberArk SIA entry as a VPN-type entry for RDP
Added CyberArk SIA entry as a VPN-type entry for SSH
Added documentation support for SQLite
Added Google Workspace console
Added IBM5250 terminal
Added import from Microsoft Remote Desktop (.rdb) file format
Added new "Open with alternate credentials" feature
Added Passbolt credential integration
Added portable license feature
Added Service Now ticketing when using DVLS
Added SSH support to CyberArk SIA Launcher
Added support for Delinea Secret Server session recording
Improvements
150
DeprecatedMarked Box explorer entry as deprecated
DeprecatedMarked Spiceworks entry as deprecated
DeprecatedMarked Spiceworks synchronizer entry as deprecated
Add Azure Resources support to Azure PIM
Added "Created by" and "Last update by" in Advanced search
Added "Import key to vault" from Local SSH Key Manager
Added "open as" quick menu to quickly select credentials
Added "OTP list" button in the ribbon
Added "Post access request delay" to One Identity Safeguard for Privileged Passwords credential entry
Added "send via message" in DVLS datasources to harmonize behavior with Hub datasources
Added a backup step to the DOD migrator
Added a menu to load an ssh key in SSH Key Agent from entry in vault
Added a menu to load an ssh key in SSH Key Agent from the local SSH key manager
Added a root dashboard warning about DOD and Online backup being removed in the next version
Added account dynamic column to CyberArk dashboard
Added AD user synchronization for SQL Server data source
Added additional default path for Sonicwall NetExtender
Added alternate gateway selections to Devolutions Gateways
Added an option in the code editor to show or hide the line numbers and the minimap
Added asset type "SAN" to selection
Added automatic checkin for credentials used with the "Prompt on connection" setting
Added Azure AI Inference provider in AI Assistant
Added connection source in the dialog when using Prompt for credentials or Prompt for Host
Added copy URL button in the website entry overview
Added custom browser extension in WebView2 to fill websites that need special events that can be only triggered with an extension content-script
Added default template to Host type
Added Devolutions Gateway support to dynamic connections (quick connect, host entries)
Added disabled user recognition in secure messages
Added DisableFileTransferForSSH GPO
Added duplicate checks when importing from Computer Wizard
Added dynamic selection for SSH key
Added Extract OTP refactoring
Added feature to elevate SSH shell with sudo/su & elevated credentials
Added feature to override terminal colors according to theme in use
Added feedback to status bar when synchronizers are running
Added folder path to Keeper credential list grid
Added GPO for disabling password savings similar to system settings
Added group support to AzurePIM
Added hidden mode field to Wifi information entry
Added in Multi-vault search the possibility to specify one or many vaults
Added launch multiple sessions with Host entry
Added license validation to Delinea PAM Server (Centrify) entry
Added linked proxy credentials
Added Linux to VPN links
Added login to IBM i Access addon
Added Logs in root dashboard
Added message when the AI assistant is not configured
Added more fields to the Driver License entry
Added more OTP information in the overview
Added new "Send empty password" configuration for SSH terminal, SFTP, SCP
Added new "update history" feature
Added new fields to API Key credential
Added new fields to Assets -> Network
Added new fields to IP list entry
Added new option in Cisco AnyConnect for the second password mode
Added new option to allow resolving 'external' credentials in automatic sync
Added new resolving mode to CyberArk PVWA
Added new settings for generating RDI (custom installer) files
Added on-prem support for Splashtop
Added option to check HTTP code in VPN connection settings
Added option to improve RDM Jump flow
Added option to Load Automatically an advanced search setting
Added option to show recordings from all vaults from the root dashboard
Added option to use currently active DVLS connection in DVLS PAM credential to simplify flow
Added options to send application logs in message to support team and error report
Added OTP action in the overview for RDP, website and OTP
Added password template compliance check in Entry security analyzer report
Added PATH environment variable support for 3rd party install path
Added PIM indirect resource eligibility support
Added possibility to activate Windows key on remote computer with a shortcut
Added possibility to edit an IP list item with double click from the dashboard view
Added possibility to export OTP QR Code as image
Added possibility to point to a specific MSI in the custom installer
Added possibility to use Copy Username/Copy Password on an entry using a Privileged Account setup
Added Recently Used to the cyberark dashboard safe selection
Added Screen Capture protection option
Added session Id field for winbox
Added support for BeyondTrust admin session
Added support for credentials and link in Barracuda Network Access Client
Added support for CTRL-ALT-DEL in typing macros sent to VMRC viewer
Added support for CyberArk PSM HTML5 RDP sessions
Added support for documentation type in documentation templates
Added support for EntraID mode in LAPS entry
Added support for environment variables in custom parameters for Cmd and PowerShell
Added support for fetching SSH keys in 1Password
Added support for Gateway health check in seconds for DVLS
Added support for GSudo in command line and local powershell entries
Added support for IronVNC as an ARD backend
Added support for MFA Caching when using CyberArk PSM proxy
Added support for non-sensitive note as description in Advanced search
Added support for temporary access on folders
Added support for Windows accent color
Added support to import Windows Terminal color schemes and Royal TS color schemes for terminal colors
Added synchronization of Description (Notes field) for Bitwarden synchronizer
Added tags in multi vaults search
Added the "Load from inventory" action in folders and IT assets
Added the connection source/owner in the dialog when using Prompt for credentials or Prompt for Host
Added the possibility to add a terminal command entry through the SSH palette
Added the possibility to checkout an entry multiple times
Added the possibility to open a new tab but keep the current focused tab
Added the possibility to store "My personal credentials" and "My privileged account" information in the database instead of the current computer
Added udp4/udp6 to the protocol selection of OpenVPN/SophosVPN
Added user selection to SSH key dashboard
Added User vault search, Linked (user vault) and privileged account in Tools credentials
Added variables for custom fields of linked credentials
Added VPN mode to Host type
Added widget for expiring entries of user vault
Added Windows Terminal in Tools
Added Windows theme change detection when in automatic theme
Allow use of PAM SSH keys with SSH entries
Avalonia UI rewrite of Active Directory console
Changed $USER_PRINCIPAL_NAME$ variable not to resolve in names to improve performance
Changed Devolutions Updater target framework to .net 4.8
Changed multiple website-based entries to use WebView2
Changed Wireguard DNS field as required
Converted Citrix implementation from IE to WebView2
Converted HP iLO integration from IE to WebView2
Hid password history menu for credential types that do not support it
Improved "batch grant access" by adding the permission and action dropdowns
Improved "move to another vault" feature in Hub
Improved Certificate Provider error messages
Improved check-out to prevent modifying attachments and documentation
Improved checkout widget
Improved default paths for VMWare, SSMS and Chocolatey
Improved Devolutions Send feature to be non-modal
Improved duplicate action to remove requirement of View Password/Sensitive rights
Improved Edit right check for Attachments/Documentation when they are included as part of an ongoing entry export
Improved error handling when LAPS fails to fetch the password
Improved export feature to no longer require Edit right
Improved history and log clean up process
Improved in-app recording feature to use our own recording implementation instead of FFMPEG
Improved Local SSH Key Manager to detect private keys without a file extension
Improved offline sync workflow
Improved Quick Search to include the tools
Improved remote recording to support showing live session
Improved SSH interactive authentication window to better display input text when it's lengthy
Improved the clear clipboard timer
Improved the code editor with more actions
Improved the error message when failing to start ssh-agent
Improved the help ribbon
Improved the logs to be grouped per date by default
Improved the offline cache expiration to clear offline cache and disconnect on expiration
Improved the script dashboard to support local folder and GitHub Script Library
Improved the script dashboard with multiple minor UI changes
Improved the select vault popup to separate All vaults and Favorites
Improved view connection dialog (Contact, credentials, synchronizers...) to no longer be modal
Merged Add-on manager and extension manager in one window
Multiple small improvements to the IP list UI
Removed legacy settings for saving user and local specific settings
Updated onboarding labels and links to fit the new license types
Fixes
51
Fixed 'Properties' is still enabled in ribbon if nothing is selected in treeview
Fixed "Assigned to me" filter in ServiceNow
Fixed "Send by email" option not being available in the user vault in DVLS
Fixed a "Not connected" issue when first loading the user vault
Fixed a login issue when duplicating a DVLS data source
Fixed a permission issue preventing the auto check-in of PAM accounts
Fixed a possible issue where offline edits of 'My Account Settings' were not saved correctly when synced back online
Fixed a session recording issue on data sources that don't have recording server support
Fixed an inheritance issue when copying OTP
Fixed an issue where a credential wouldn't be automatically checked in if you were using it with another user
Fixed an issue where autofill did not work in ‘Host' mode with LogMeIn integration
Fixed an issue with the parameters in Powershell entries containing quote or double quotes
Fixed an SFTP hierarchy issue when the starting location is higher than the shown home directory
Fixed autofill and autosubmit issues for Microsoft three login forms and iDRAC login with WebView2
Fixed Barracuda Network Access Client VPN integration not working with linked credentials
Fixed credential prompting issue with BeyondTrust Password Safe Console
Fixed CyberArk radius not showing two factor instructions
Fixed delay issue when closing entry that uses Gateway recording
Fixed error message handling when PAM account credentials cannot be copied
Fixed error prompt when powering off a machine in the VMWare Dashboard
Fixed error when browsing the variables form on a single user data source
Fixed HDPI issues in AnyIdentity windows
Fixed issue converting OTP information with "convert to website"
Fixed issue in Hub data source when importing broken entries
Fixed issue when trying to fetch your OTP from a linked external credential
Fixed issue where local recording with long path destination or filename was failing
Fixed issue where offline cache might not be available
Fixed issue where some special actions were shown when none of your entries supported them
Fixed issue with favorites not showing sub-entries properly
Fixed issue with Save As in webview2
Fixed local script dashboard settings affecting the script dashboard entry
Fixed missing folders and attachment issues with .rdx export
Fixed missing folders issue in .xls export
Fixed missing null check in save file dialog webview2
Fixed parent/unparent feature not working
Fixed password history logging username/modified by incorrectly
Fixed performance issue with multi-vault search
Fixed possible crash in Active Directory dashboard when there's invalid OUs or very large OUs
Fixed possible issue where the data source configurations were deleted
Fixed potential issue in DVLS data source where the PAM vault would not appear even with a PAM license
Fixed potential issue when creating a new HTML Editor entry
Fixed potential issue where your window prompt would go out of the bounds of your screen
Fixed recording not saving in the specified path
Fixed shortcuts created in RDM causing a migration in Hub when using it through the web
Fixed some issues in IP List dashboard UI
Fixed tab groups not showing up when entries without tab groups were displayed
Fixed temporary access on folder entries in Hub data source
Fixed the DVLS Privileged Account entry license error
Fixed theme issues with RDP full screen mode
Fixed UI issue in secure messages window
Fixed UI issue with vault popup when not sizeable and you have fewer than 4 vaults
CVE-2024-6055 Fixed an issue in DVLS credential entry causing password protected vaults (vault master password feature) to be accessible without password
Updated TinyMCE component to fix XSS vulnerabilities
Breaking
2
Removed deprecated Google Cloud implementation
Removed legacy settings concerning password policies in credentials and folders, as well as legacy setting to add entries in folders
New features
6
Added Azure Privileged Identity Management entry
Added Entra ID dashboard entry
Added FortiClient IPsec entry
Added Shell Script entry
Added Splashtop Dashboard entry
Added vault content type feature
Improvements
62
Added "Enable DPAPI cryptography on local files" option by GPO
Added "Learn more" link to KB on first configuration of CyberArk data source in initial setup confirmation
Added a checkbox to display only the recent online backups
Added a new $CREDENTIAL_LINKED_NAME$ variable
Added a New Script action to the script dashboard
Added all session tools to script dashboard
Added an icon when top panel is hidden to allow the right click menu
Added auto type action for Username, domain, password and OTP
Added Base station username to Wifi data entry
Added clipboard buttons in the overview
Added cursor blink rate setting to SSH Shell
Added double click for quick copying in Password List View (Dashboard)
Added editing AD object MemberOf groups in AD dashboard
Added global RDP option for credential injection mode
Added ID matching synchronization to VMWare, HyperV, Lansweeper, Bitwarden, EC2, KeePass and Spiceworks synchronizers
Added inherited credential mode on management tools
Added initial virtual smartcard support in MSTSC (RDP)
Added look up search support in linked hosts and credentials
Added Name field for Password list item
Added option to choose whether to close the remote jump session or not
Added OTP and URL synchronization to Bitwarden synchronizer
Added possibility to include favorites when importing/exporting entries in RDM format
Added profiles for syntax highlighting
Added prompt for version mismatch to clarify behavior for users
Added Quick search in trayicon menu
Added refresh button for licenses in license management
Added script target to connection logs
Added selectable expiration time in Devolutions Send
Added setting to prevent deletion of files in temporary folders
Added support for "allow OTP retrieval" in Bitwarden credential entry
Added support for "file://" in documentation markdown
Added support for changing host to inherited in batch edit
Added support for CyberArk cloud keep alive through identity API
Added support for cyberark dual control request
Added support for IsAnonymous parameter on connection to telnet terminal
Added support of "Let Windows Decide" option for terminal (Powershell, Command Line)
Added syntax highlighting configuration in SSH Shell and in system settings
Added the data source list in Quick Search
Added the IP address from Network adapter in the inventory report
Added the possibilty to move or create a new tab group
Added Web-based reports for DVLS
Allow closing non-connected entry from the Group tab pane
Allowed editing the status in entries directly
Disable revert and delete from attachments history options when only View permission is assigned
Improved clipboard diagnostic
Improved CyberArk dashboard and data source to default to CyberArk's favorites
Improved datasource MFA settings requiring additional confirmation when set to "None"
Improved datasource VPN to support types SSH Tunnel and Port Forward
Improved Execute Macro/Script to no longer be modal and usable from an external application with a global shortcut
Improved favorites, vault list, data source list, recents and opened entries to be dockable and available in the Window ribbon
Improved flow when checking in multiple entries
Improved handling of certificate validation in Netwrix feature
Improved multiple checkouts scenario workflow
Improved navigation pane behavior to auto hide panel when clicking anywhere in the bar
Improved recovery code to require "View Password" permission to view the recovery code
Improved SFTP settings in SSH Shell to be allowed modification even when SFTP not shown by default
Improved support for editors and documents in "stored in database" mode to be allowed in templates for SQL Server and SQLite
Improved synchronization support for shortcuts
Improved temporary script folder to create a subfolder to store the scripts in
Improved the message for users without a licence to make it clearer
Modernize the password strength UI
Simplified the Secret Server credential selection UI
Fixes
31
Fixed "remember my choice" for protocol handler in chrome web entries
Fixed an issue causing the what's new page to be opened multiple times
Fixed an issue to avoid prompt new version available if download on application closed is selected
Fixed an issue with unsupported characters with variables in shortcut macros
Fixed comment issue in SSH Key Dashboard
Fixed discrepancies between the AD sync and the preview
Fixed errors with certificate document type
Fixed file explorers overwriting their tab titles
Fixed Hub issue with attachment password decryption
Fixed issue resolving local variables (settings) in certain scenarios
Fixed issue where download recording was not working properly in root dashboard
Fixed issue where reconnect all was not re-doing the gateway process
Fixed issue where Slack would bring the application to front
Fixed issue where temporary access wasn't respected in PAM dashboard
Fixed issue where Website and Host were showing the same information for overview
Fixed issue with append and prepend OTP to password in hub
Fixed issue with application not opening in the correct window state at startup
Fixed issue with double prompt when copying OTP
Fixed issue with the upgrade prompt choices
Fixed load from System Information Report from the context menu not working
Fixed possible crash with secure desktop
Fixed possible HttpListener errors when closing application
Fixed possible issue where database upgrade prompt was not displayed
Fixed PowerShell Script linked with "before close" event keeps looping
Fixed proxy settings options requesting credentials when set to "No proxy"
Fixed RDM Cmdlet tool to always use PowerShell 7
Fixed secure note not displaying properly on overview
Fixed SSH Key Credential not canceling when closing prompted window
Fixed temporary access request not visible when sent to a user group on DVLS
Fixed the "All vaults" search setting not working via the main menu
Added Active and Duration Raw value to Activity Logs Export
Improved error messages of DUO when set to "Disabled"
Improved send via message shareable link UI
Prevent opening embedded code editor if webview2 runtime is not installed
Removed duplicate View OTP button in ribbon (data entries)
Fixes
16
Fixed AD sync LDAP filters to support old formats
Fixed an error when closing a Sophos VPN
Fixed an issue with missing Prompt for Connection
Fixed copy/pasting file in and out of a CyberArk dashboard entry with a component configured with AllowMappingLocalDrives to "No" but the option still visible to the user not working
Fixed deleted Vaults IDs remaining in Favorites Vaults List in the database
Fixed error code appearing in File Explorers while sorting with date
Fixed issue showing license count in dashboard on DVLS datasource
Fixed issue with SQLite shared templates not loading
Fixed LDAP with current user credentials in AD dashboard
Fixed minor issue when converting Username/Password entry to Website
Fixed PAM Usage Policies can be bypassed on Remote Tools if credentials are inherited from folder
Fixed PAM Usage Policies can be bypassed using 'Open(Use Parent folder credentials)'
Fixed port assignment in DRAC connection
Fixed RDP - WinLogon not properly focused on connection
Fixed vault ordering in dropdown
Fixed wrong version in Devolutions.dll which could sometimes cause crashes
CVE-2023-5765 Fixed Password Analyzer being accessible in any data source when already opened in a prior data source in which you were an administrator
CVE-2023-5765 Fixed Password Analyzer being accessible in any data source when already opened in a prior data source in which you were an administrator
Fixed issue where users could modify permissions without corresponding rights
Fixed router entries reveal button visible for users without permission
Breaking
3
Added encryption to local and user overrides
Register product is now located in Administration ribbon
Website entry (previously "Web Browser (HTTP/HTTPS)") now has Workspace browser extension enabled by default. This default value can be configured in File > Options > Types > Website
New features
14
Added a new "View sensitive information" permission
Added a new tag management feature
Added an administration dashboard
Added ARD over Devolutions Gateway
Added Hub Business message support
Added Hub Business temporary access feature
Added Hub Personal credential entry
Added IT Portal credential entry
Added Jira integration to log comment prompt
Added PowerShell Remoting over Devolutions Gateway
Added PowerShell Remoting over SSH
Added SFTP and SCP support over Devolutions Gateway
Added user specific settings logs
Added Website over Devolutions Gateway
Improvements
54
Add "Prompt refresh all vaults on startup" setting for Hub Business
Add "use over secure gateway" in vault settings for inheritance
Added "append to the username" and "prepend to the username" modes for OTP usage
Added a batch action to change the entries color
Added a GPO "Disables the launching of entries at startup"
Added a GPO "Forces the main tree view to load with all nodes collapsed at launch"
Added a new Bitwarden Synchronizer entry
Added a split data entry refactoring
Added a template setting to configure a length based expiration date
Added Add Password to password list from the dashboard
Added an option to save the Keeper vault in memory
Added an option to show all the entries in the root dashboad Entries tab
Added automatically bring Data Source back to Online
Added Checkout mode with "automatic when available"
Added copy buttons for custom fields
Added credentials handling option to Chrome basic authentication
Added default action handling for contact, document session, macro
Added default software list in information
Added default vault to user template
Added deleted history to documentation and delete documentation permissions
Added Lock on application close
Added manufacturer and model information to "Load from inventory"
Added more options to refresh before some actions
Added multi-lines to typing macro
Added new feature to connect to a session entry using an active CyberArk dashboard
Added open action to quick search by holding Ctrl
Added OTP in Batch Edit
Added possibility to export documentation
Added possibility to export Documentation as markdown
Added private vault credential support to synchronizers
Added public key field to private key entry
Added reconnect and work area to undocked container buttons
Added region support in Keeper
Added support for Bitwarden's "hidden password" feature
Added the possibility to create PSM connections in VMWare synchronizers
Added View Script on macros
Added VPC Route Tables and DNS records to the AWS dashboard
Added Windows Server 2022 in the OS choices
Added WinRM PowerShell with Devolutions Gateway
Extended .dsm plugin support to freevnc sessions
Improved and fixed issues in Password Complexity report
Improved application 2FA handling
Improved Batch Edit for RDP
Improved Batch Edit for SSH Shell
Improved Batch Edit for VNC
Improved Batch Edit for Web Browser
Improved ForceApplicationMFA policy to take into account Duo
Improved license grid export
Improved Playlist dashboard for Private vault
Improved the Amazon S3 explorer permission handling when forcing a specific bucket
Improved the shared passphrase security provider
Improved tray icon load times
Improved UI for status message window
Possible fix for redirect issue in Zoho Vault
Fixes
28
Fixed a failed import from Royal TS when not using an encryption password
Fixed a freeze when closing proxy tunnels
Fixed a possible LastPass "bad credentials" error
Fixed a small UI issue for Hudu credential
Fixed an issue with Keeper SSO On-Premise causing the login to fail
Fixed an issue with the Text editor entry when including the file extension in the entry name
Fixed an issue with the token refresh on Secret Server credentials
Fixed CyberArk PSM connections unable to receive focus
Fixed dashboard refresh issue in user vault
Fixed FreeRDP reconnection via embedded pinned toolbar
Fixed issue on move to display
Fixed issue saving FTP template without host or username
Fixed issue when deleting OTP recovery codes
Fixed issue where right clicking a node after a multi select would deselect all other nodes
Fixed issue where we reversed "user" and "logged user" in documentation logs
Fixed issue with "Mask Password" not saving properly when viewing password
Fixed issue with freeze in SCP when host is not found
Fixed issue with linked host resolving if entry contained a previous host
Fixed issue with variable resolving when the result would be too big
Fixed OTP resolving not working in embedded session when using current session's credentials
Fixed slow filtering in Hub Business user vaults
Fixed small issue with the "minimize on open (external)" setting
Fixed some issues with FreeRDP
Fixed TeamPass My Account Settings
Fixed typing macros not working in VMWare web consoles
Fixed UI to be able to copy folder path in folder dialog
Added custom user password expiration for SQL Server
Breaking
5
Devolutions Online Database is now deprecated
External add-ons will no longer be supported
MySQL and MariaDB are now deprecated data source types. Devolutions Hub Business , Microsoft SQL Server or with Microsoft SQL Server Express are now recommended
Removed support Internet Explorer 32-bit
Updated the rdm export format to v2 (Compatible with RDM 2021.2 and later)
New features
16
Added "My Privileged Account" feature
Added a move permission on entries
Added a setting to disable the user vault for specific users
Added attachment and documentation support in the vault root entry
Added DVLS PAM dashboard
Added Hudu credential entry type
Added inherited VPN/SSH/Gateway
Added Load OTP from image
Added Local SSH Key manager
Added multi vault Import/Emport
Added per user variables saved in My User Vault
Added per vault variables
Added Psono credential entry type
Added support for the new Windows Remote Desktop Client (msrdc)
Added support for vault templates
Added system permission for Entry Security Analyzer
Improvements
71
Added a "Disconnected tab behavior" option
Added a Favorites section to the CyberArk Dashboard
Added a new Extract Host Edit (Special Actions)
Added a new layer of default permissions in the system settings
Added a warning when a vault contains more than 5000 entries
Added an action Open When Available
Added an indication of the configured tabs in entry properties
Added an option to configure th default SSH key path
Added an option to filter by field slug in Secret Server entries
Added auto fill delay in OpenVPN
Added automatic certificate expiration date extraction
Added custom Call, Chat and Email protocol handler option for Contact entries
Added disable saved password support to more session types
Added Disable SmartScreen support to Edge embedded
Added Duo 2FA support at application level
Added embedded Edge support Confluence documentation tab
Added folder double click action "None"
Added Ignore certificate error support to Edge embedded
Added inherited and linked host support with DWL
Added Keep Entry Name on refactoring with template
Added keywords to Active Directory synchronizer for ease of searching
Added login over SSH with a signed public key / private key like
Added master key prompt when restoring backup and the current master key is invalid
Added more information to the password list "View password" logs
Added more ribbon options (classic or simplified)
Added multi-select support for attachments
Added new authentication method to Bitwarden credential entry
Added new option "Disable Nagle's algorithm" for SSH Shell, SSH Tunnel and SSH Portforward
Added on-the-fly font and color changes to SSH-Shell and Telnet
Added parent names option for Tab Groups
Added permissions at the System settings level, which you will then be able to inherit from the root
Added PgAdmin 4 support
Added Private session (incognito) support to Edge embedded
Added profile usage for Google Chrome external
Added root properties support for My User Vault
Added Software to Advanced Search
Added software to filter searches
Added SQL Server custom user expiration to security dashboard
Added support for folders in Secret Server credential search
Added support for KDC proxy settings in RDP entries
Added support for One time passwords in Passwordstate
Added support for record types in Keeper
Added support to both default paths Chrome
Added the option to save 1Password Account settings locally and in memory
Added the possibility to specify the status bar text color when you customize the backcolor
Added the view and copy OTP actions to folders
Added vault entry to Entry Information
Added Vault templates which will be applied when creating a new vault
Added WaitProgress in some areas
Added warning for RDM/DVLS version mismatch
Allow "auto assign license to new users" feature for more types of licenses
Allow shared entry templates in any data source type
Changed default value of "Change IDs" box in import window to avoid possible issues
Export now allows for documents and attachments to be exported at the same time
Improved documentation (markdown) performance
Improved sending keystrokes to Cisco Anyconnect when sending special characters
Improved SSH interactive prompt
Improved the application lock screen
Improved the security report
Improved the tag view (sorted)
Improved UI for 1Password My Account Settings window
Improved user management grid performance when caching is disabled
Made the typing macro shortcuts use the "Copy Credentials" permissions
Modified OTP generation requirements to need "Connect (execute)" or "View Password" to generate, instead of only "View Password"
Moved Type Clipboard to Home ribbon
Open new update version available embedded as a tab instead of a dialog
Removed the for Large Image/Details view in the navigation panel
Removed the support for legacy favorite view
Resolved Hub sensitives data before creating template group
Simplified repository loading and fixed when no vaults available in Hub Business
Updated embedded UltraVNC integration to the latest version (no longer deprecated)
Fixes
51
Fixed a bug in FreeRDP with the Clipboard not working
Fixed a data loss on sub-connections when adding a new connection based on a template with mandatory fields
Fixed a possible SFTP crash
Fixed a possible UI freeze when the data source is unavailable
Fixed add in root since system wide vault permissions were not correctly handled in RDM with Hub
Fixed an error when copying files between folders in Azure Blob storage file explorer
Fixed an image issue with the trayicon
Fixed an issue causing a loss of connections when switching between security providers
Fixed an issue causing an invalid device token with Keeper credentials
Fixed an issue causing the application to freeze when login into Keeper
Fixed an issue causing the search bar to be unresponsive after a failed last opened credential prompt
Fixed an issue that could cause a group connection to be added twice to the tree
Fixed an issue where Macro entries didn't save custom fields and tags
Fixed an issue with FreeRDP - Set with as a Jump Host won't connect half the time
Fixed an issue with webcam redirection in embedded RDP sessions
Fixed can't enable num lock with FreeRDP
Fixed crash in Password Manager Pro account selection when filtering
Fixed crash when canceling Passportal credential selection
Fixed empty header overwriting auto generated headers in generic csv importer
Fixed error in Amazon S3 explorer when fetching info using an incorrect region
Fixed for issue with FTP drag&drop not working on certain servers
Fixed inconsistency in the OTP entry section when linking PasswordState entries
Fixed invalid license after being prompted for custom credentials on SQL server datasource
Fixed issue in OTP generation where you could generate an OTP from a linked OTP without the right permissions
Fixed issue in SSH smartcard login when PKCS path is empty
Fixed issue where "prompt for comment on view credentials" feature didn't apply to certain dashboard buttons
Fixed issue where using a Synchronizer in DVLS would prompt "Entry already exists" because we try to create folders twice
Fixed issue with $PROMPT_VARIABLE$ not working in certain contexts
Fixed issue with Cisco AnyConnect second password prompt not showing above the AnyConnect window
Fixed issue with CSV synchronizer and root folder configuration
Fixed issue with DVLS credential's vault not being taken into account with dynamic linking
Fixed issue with linked host
Fixed issue with multiple SSH gateways not working
Fixed issue with PARENT variable resolving
Fixed issue with setting Enhanced Offline Security
Fixed issue with template variables in synchronizers
Fixed issue with Web Browser entry configured with a linked host still checking for a valid URL
Fixed missing copy OTP button in PasswordState credentials
Fixed multiple issues with OTPs in "current session's credential" mode
Fixed not being able to open external connection with "Prompt for credential" from the trayicon when RDM is minimized
Fixed possible crash when creating a new SQL Server database
Fixed possible crash with Chocolatey feature
Fixed possible issue with the opening of sessions via the protocol handler
Fixed possible issues in File Explorers when we try to close them while an action is underway
Fixed possible null reference when connecting to a host
Fixed possible null references when executing shortcuts
Fixed RDP - 'Enable Logging' in File > Options not working
Fixed Sonicwall Netextender issue where spaces and double quotes in passwords were not handle properly
Added multi export and multi import proper support for templates
Improved error handling for wrong paths in Terminal logs
Fixes
16
Fixed a bug in security dashboard were the default value failed the zxvcbn check
Fixed a Secret Server migration issue for certain URL formats
Fixed an issue in Hub data source preventing credentials linked to add-on entries from being resolved correctly
Fixed an issue resulting in an empty template selection prompt when no template is specified in a host entry
Fixed application access names not showing in system settings
Fixed broken lock when using Windows Logon or Application Password Without encryption
Fixed issue saving "add in root" and "Vault Settings" permissions on root
Fixed issue where "Edit (special actions)" could be used to edit entries on which you had no edit permissions
Fixed issue where domain accounts passwords couldn't be fetched in our Centrify integration
Fixed issue where performing an "Edit (special actions)" on a user vault entry from the favorites view would save it in the shared vault
Fixed issue where the jump folders in an entry's contextual menu -> Open with parameters -> Open Via Jump would not show their available jump entries.\
Fixed issue where the the "List sessions" tool in the macro script tools didn't appear
Fixed issue with Alt+Backspace not working in SSH
Fixed issue with Custom Powershell batch action allowing editing certain fields when it shouldn't be available
Fixed missing "ping" tool from dashboard and context menu
Fixed possible crash when selecting documentation pages
A feature license is now required to enable the CyberArk integration
Improved Secret Server integration with th REST API
New PowerShell module (multi platform) now available for download in PSGallery
RDM 32-bit is no longer supported
This version contains an improved local cryptography for the data sources, offline mode and the configuration. Export your configuration file (File - Options - Export) prior to upgrade to this version
New features
5
Added CyberArk Dashboard connection
Added new entry RD Gateway console
Added offline document support
Added Typing Macro toolbar to SSH Shell
Improved local cryptography for the data sources, offline mode and the configuration
Improvements
69
Added "Close with no logoff" to contextual menu for embedded RDP session with Automatic logoff
Added "Force current configuration loading" GPO
Added "import in specific folder" option to Import Dialog
Added "reset scroll on display" option for Serial Port entry
Added a "remember me" option to the DVLS login window
Added a new option "Keep template host in quick connect" in the template settings
Added a system setting allowing the use of the database user for the created/modified by info
Added administration logs to failed entry resurrections
Added algorithm support for SSH Shell Batch Edit
Added an option to auto hide the navigation panel on mouse leave
Added an option to upload the session recording file in a background thread to improve performance
Added better support for favorited folders
Added browse button for RDP multiple monitor selection
Added Copy Host to Password List
Added create missing entry option to Credentials "Find by name (User Vault)"
Added Ctrl+Alt+End shortcut for Ctrl+Alt+Del in VNC
Added custom fields 4 and 5 to the column chooser
Added delete profile automatically on close option to SonicWall NetExtender
Added disable saving password to SecureCRT
Added Domain column to Password List
Added double-click on tab action
Added Duo (organizations) support for Bitwarden credential
Added Edit Special Action extract credential for Password List
Added error handling for Passportal when your Duo setup is wrong
Added fixed terminal size options to SSH Shell and Telnet
Added GPO for LastPass trust setting
Added GPO for multiple session open confirmation
Added GPO options for hiding dashboard panels
Added Host as sorting possibility for Password Lists
Added Json Import/Export to RDM
Added license management cmdlets in the RDM PowerShell module
Added name filtering for Dvls credential entries
Added new expiration warnings for offline database (Warning banner and notification list)
Added open connection notification when opening a session for Hub Business
Added OpenVPN Connect add-on
Added option for default RDP NLA value
Added option to have a panel collapsed (minimized) on launch in SSH when launched with SFTP
Added possibility to use all illegal Windows file characters except "" and "/" while in the file explorers SCP, SFTP, FTP, WebDav, Google Drive and Amazon S3
Added private key support to Keeper credentials
Added prompt to configure version management after database upgrade
Added resolution quality option to ARD connections
Added risky events restriction and warning
Added Search options to filter out disabled and expired entries
Added smart resize to VNC connections
Added SSH Shell support to batch edit session specific settings
Added support for "Suggested remote machines" in the CyberArk console
Added support for "use dynamic port" with secure gateways
Added support for using PPK3 private keys
Added switch vault and focus dashboard from tab header contextual menus
Added Synchronization mode "Folder" and move/delete files option after synchronization to RDM Synchronizer
Added the inherited option to OTP settings
Added the Keep template name on use option to Local Default Settings
Added User Vault String to overview for connections and website data entry
Added zoom options to VNC connections
Deprecated "Import Session CSV Wizard" and "Import Login CSV Wizard" buttons as they are covered by the "Import Generic CSV Wizard" feature
Ignore certificate revocation status unknown
Improved BeyondTrust Password Safe implementation to support the new API
Improved certificate diagnostic window
Improved certificate handling in file explorers (WebDAV, SFTP, etc)
Improved CSV synchronizer to follow the CSV importer more closely
Improved Dashlane integration performance
Improved Devolutions Hub Business caching
Improved filter performance when "Include Username" is selected
Improved Hub Business performance with Intelligent Cache system
Improved initial cache loading for Hub Business
Improved OTP generation to support URL-encoded keys
Improved passphrase check for private keys to check within the same window if the passphrase is valid
Improved the Security Report
Removed unsupported entries from VPN/SSH/Gateway existing entry selection
Fixes
46
Fixed a connection issue to UltraVnc 1.3.x
Fixed a possible quick access toolbar customization lost issue
Fixed an issue causing a double prompt in the Keeper login procedure
Fixed an issue causing the "Open in pane" window to close unexpectedly
Fixed an issue preventing status editing on sub-connections
Fixed Batch Edit not opening in user vault
Fixed incompatibility between "Use my account settings" and "Always ask password" in Secret Server
Fixed issue in FreeRDP where sound options weren't working properly
Fixed issue in Information type entries not being able to View Password when the permission is enabled
Fixed issue where ":" characters were not working in folders for Amazon S3 Explorer
Fixed issue where "Find by name" for Private Key was only searching for exact matches
Fixed issue where "Search based on selection" selection was not cleared properly when changing vault or data source
Fixed issue where all credentials were accessible in the private vault when using "Open Select Parent Folder Credentials" instead of simply the parent folder's credentials
Fixed issue where deleting in FTP file explorer would not refresh the UI
Fixed issue where documentation tab was not available for user vault entries
Fixed issue where edit was enable even if no connection was selected in password analyzer
Fixed issue where file explorers could not delete
Fixed issue where Google Drive file explorer would double it's display in the treeview when starting the entry
Fixed issue where integrated security administrators could not accept temporary access requests on SQL Server
Fixed issue where multiple actions could share the same shortcut
Fixed issue where Open (Select Parent Folder Credentials) doesn't work in user vault
Fixed issue where parent variables were resolved incorrectly
Fixed issue where shared template would not be handle properly when using data source that does not support them
Fixed issue where User vault entry would not be display in an User vault entry "Referenced by" tab
Fixed issue where View Only would not display its current state properly for Ultra VNC
Fixed issue with "^" character in the terminal
Fixed issue with Activity Logs Report, Entry Information and Entry List not working properly on large data sources
Fixed issue with automatic update check showing an error message when the automatic update is disabled
Fixed issue with embedded RDP file ignoring External display selection whether or not "winposstr" was specified
Fixed issue with illegal characters in Azure Blob Storage
Fixed issue with move to existing password list not saving properly
Fixed issue with Telnet terminal type option not working properly
Fixed issue with template groups in offline mode not working properly
Fixed issue with view only button not working properly when launching UltraVNC in view only mode
Fixed issues where appropriate permissions weren't taken into account when trying to move an entry
Fixed issues with search filter for SSH Shell and Telnet
Fixed multiple error prompt for VMWare when loosing connection
Fixed multiple issues happening with the Recent connections view
Fixed multiple issues in the confirmation message while deleting entries
Fixed possible issue in User Management when trying to delete a non-contained user with a contained user
Fixed possible issue with keyboard navigation in terminal
Fixed select in nav pane from other vault from recently viewed
Fixed session tools not working with Hosts when using templates
Fixed session tools not working with Hosts when using templates
Fixed UI and possible crash in SSH Shell when pressing refresh button
Fixed variables in username getting saved in their resolved state in DVLS data source
Added "Vault" option to column chooser for "Referenced by" tab
Added CyberArk debug logs for PVWA type
Added Smartcard ecdsa support
Added the KeePass database name to the password prompt
Added warning when configuring a default Password Template in the System Settings, when the selected template is not of type "default" or "advanced settings"
Improved the Wayk integration
Optimized temporary access workflow to improve overall performance
Removed the "Delete" and "Move" menus from the favorites
Fixes
17
Fixed a possible error handling issue in DVLS
Fixed alternate host issues with Remote Tools events
Fixed an issue causing the ticket_number variable to not be resolved in the session recording filename
Fixed CreationDate always min-date (01/01/0001) in PSUserInfo/PSRoleInfo
Fixed issue where "Referenced by" of contact entries where not listing reference to sub-connections
Fixed issue where "Save as template" was saving as Database template for local data sources
Fixed issue where Advanced search "Exclude" option on "Tag" was not resolving properly
Fixed issue where Disabling RDM Auto update was removing "Check for updates" from the help menu
Fixed issue with Amazon S3 Explorer throwing an Out of range exception when starting the session
Fixed issue with binary transmission for Telnet where some server needed CRLF
Fixed issues in File Explorer where the combination of Host and Folder was not handled correctly
Fixed OTP variable not resolving in session name
Fixed possible crash when importing from ISL Online
Fixed possible crash when starting SSMS entry using "Run as different user"
Fixed possible issue when using 1Password
Fixed RoyalTS importer not prompting for file password properly
Fixed Set-RDMCurrentRepository that was working but was throwing an UI error
Fixed issue with "prompt for credential" ignoring "View password" permissions
Improvements
2
Added user agent to DVLS Server calls
Reduced the amount of cases where we put connections in the temporary "AD Failed Sync" folder when using AD Synchronizer
Fixes
7
Fixed crash in RoboForm and added logging to help diagnose certain issues
Fixed issue with "prompt for credential" ignoring check out requirement
Fixed issue with default value of Remote Monitoring not being saved properly
Fixed issue with specific settings and SSH VPN not working as expected
Fixed new entry error when no template when entry mode is template list only
Fixed RDM that was returning access denied when saving a new entry in the user vault with DWL when the data source is specifically DVLS and the shared vault didn't have the permission
Removed third party PDF viewer like Acrobat Reader
Removed Visio embedded viewer
Improvements
10
Added "Open from URL" option to KeePass credentials
Added import logins from both Microsoft Edge and Mozilla Firefox
Added last ticket # button to the comment prompt when connecting to a session
Added main application minimum size to options and reduced minimum width to fit Navigation Pane
Added more exception handling and "isOffline" cases in Hub Personal
Added starting location for SFTP with SSH shell entries
Added support for mRemoteNG import to SSH Shell entries
Blocked the password validation section for non-admin users when a password template is forced
Improved SQL Server/MySQL triggers to save/backup/restore UserSettings and PersonalConnections in case of a bad migration or users using on old version
Non-admin users cannot assign roles they aren't a part of when editing permissions or temporary access in DVLS
Fixes
13
Fixed an issue causing data sources using a DUO setup with variables to stay "not connected"
Fixed an issue causing the data source auto refresh to return to it's default value
Fixed an issue with web browsers using 2 different ports when connecting through a secure gateway
Fixed issue where terminal could be hidden while using "Interactive authentication in terminal"
Fixed issue where you could not load from inventory in the "Asset" tab when you had the option "Ping before load from inventory" activated
Fixed issue with add-on templates not working in synchronizers
Fixed issue with Secret Server as private key mode not working for linked entries
Fixed missing "Open VPN" and "Close VPN" buttons in ribbon when a folder is selected
Fixed password usage report crashing with empty password list
Fixed possible issue where after changing the security provider, dashboard was disabled
Fixed possible issue where sessions added via DWL were not displayed in RDM
Fixed possible issues with prefix and suffix feature of synchronizers
Fixed small UI issue in password prompt where "remember me" button showed when not supported
RequiresDatabase upgrade requiredNot compatible with DVLS 2020.X and older
Security
3
Added an expiration timeout to the credential auto fill feature of web browser and website entries
Added restrictions so that the credentials in the web browser entries couldn't be accessed if you aren't connected to the entry's vault
Added Secure Command mode to PowerShell and PowerShell remote console
Breaking
5
Added support for attachment in User Vault
Added support for entry history in User Vault
Introduced a distinction between sensitive properties and passwords in Data Entries. The view password permissions now only affect passwords specifically
Updated the Azure Key Vault entry to support the new API
We now encrypt the local license information in the configuration file
New features
13
Added ITGlue credential type
Added Kaspersky Password Manager credential
Added Secure Desktop for masterkey prompts
Added support for a plugin-less mode in KeePass
Added support for attachments, documentation, entry history, tasks & logs in User vault (SQL Server, MySQL & MariaDB)
Added support for embedded Microsoft Edge (Chromium)
Added support for Microsoft L2TP VPN
Added support for RSA SecurID in CyberArk PVWA
Added support for Smartcard authentication in SSH Shell, SSH Tunnel and SSH Port forward entries
Added the data source security report
Added the Door Codes information type entry
Added Wayk Bastion data source
Major security improvement with the Workspace browser extension integration
Improvements
88
DeprecatedDeprecated Citrix ICA/HDX
DeprecatedDeprecated embedded credential source
DeprecatedDeprecated GoToAssist
Added "custom" option to the unselected tab color setting, and moved the setting to the Tab Bar section of the options
Added "Open (Ignore specific settings)" button
Added "Open Using My Personal Credentials" button to RDM
Added "Select Vault" button to the favorites View
Added a "copy link to page" function to documentation pages
Added a copy/paste feature to custom permissions, as well as a feature to import permissions from another connection
Added a missing sort in the Keeper entry selection
Added a setting "Apply Default RDM options when launching external RDP files"
Added a zoom option to embedded/undocked RDP sessions
Added an option in View Password (Show password hints) to highlight numbers and special chars
Added an option to disable the close button in undocked mode
Added an option to filter by user/user group when assigning permissions
Added Azure Service Principal credential type
Added button "Copy Private Key Data" for private key entry
Added checked out and opened list when exiting RDM with warning
Added disable export vault menus system setting and a related GPO
Added FOLDER_??? variables
Added GPO and system setting option to disable a website's credential autofill after a delay of one minute
Added hiding actions panel to all dashboards currently with context menu
Added Hub Personal documentation support
Added increment number name format option when duplicating entries
Added Keeper Duo Push support
Added machine label in Bastion dashboard
Added multiple file transfers in Wayk sessions
Added multiselect to user/local specific settings
Added new keyword for web browser entry to be found more easily
Added old password count (more than a year) in password analyzer
Added option in SSH Shell to accept server resize requests in undocked mode
Added option to hide local license information in the UI
Added option to keep View Password window on top
Added override default executable to WatchGuardMobileVPN
Added possibility to get the domain from your privileged account on a DVLS datasource
Added possibility to override the monitor selection in the User/Local specific settings
Added Pre Connection Blob (PCB) support in RDP import
Added prefix and suffix fields to synchronizers settings
Added PSM types in New-RDMSession
Added recovery codes to OTPs
Added scaling mode options in Wayk
Added search options to the Pleasant Password Server credential entry in order to improve performance
Added setting for spellcheck languages and disabling spellcheck for Google Chrome embedded
Added sound quality in RDP
Added SSH Gateway to SCP and SFTP entries
Added sub connection count in the dashboard
Added support for deleted entries and restore in Hub Business
Added support for Devolutions Gateway in Devolutions Server
Added support for local web cam in RDP
Added support for local webcam redirect through RDP
Added support for multiple SSH gateways in the SSH Shell entry
Added support to edit shared password templates in Hub Business
Added syntax highlight in the markdown editor
Added System and Options settings to change default name of root
Added Tenant ID field to API Key
Added the possibility to view the root history
Added the resolving of environment variables to the data source DUO settings
Added the sound quality option to RDP entries
Added the view permission to templates
Added upcoming and overdue tasks information in the dashboard
Added User Specific setting support to Devolutions Hub Business
Added view OTP and copy OTP buttons in the dashboard, home menu and contextual menu
Added warning when pasting multiple lines in SSH and Telnet terminals
Applied corresponding permissions to session special actions that were previously only available to admins'
Changed external documents to only set read only mode if the read only option is set
Changed the "force default template" system setting so it applies to the password template selection as well, not just the password generator
Changed the default value to "Include folders" in search filter
Changed the max time limit for pam check outs in RDM
Changed the password font to Consolas to improve visibility
Changed update window to not block the application
Exposed Wayk native recording
Implemented offline mode in read-only for Hub Business
Improved data source disconnect with "Go into offline mode if available when disconnecting" and "Automatically reconnect on activity"
Improved export to RDM file
Improved OTP user interface
Improved the documentation editor
Improved the Keeper integration
Improved the Send Message to Support UI
Improved the user vault search work-flow
Improved the user vault search workflow
Improved UI for view password with new features
Increased maximal offline cache expiration configurable to 180 days
Made changes to the credit card entry to only apply the view password permission to Password and Pin properties
Moved the smart reconnect "Delay on login" trigger to happen after the login is fully completed
Removed mandatory template from CyberArk PSM server entry
Reworked OneDrive login with proper OAuth flow and added my account settings
Small UI improvement in SQL Server window
Trim starting/trailing whitespace characters when saving an entry
Fixes
72
Fixed $DYNAMIC_PORT$ port variable not resolved correctly for Web Browser entries
Fixed $USERNAME$ variable not working in session recording filename when not in custom mode
Fixed a crash with the Wayk Bastion data source
Fixed a Find issue with embedded Edge
Fixed a focus issue with embedded Edge
Fixed an initialization issue with embedded Edge
Fixed an issue causing an empty favorites list in Pleasant Password server
Fixed an issue causing Microsoft VPN entries to hang for 30 seconds when using rasphone
Fixed an issue causing some settings to be incorrectly displayed in the database template edit form
Fixed an issue causing some variables to not be resolved in the session recording filename
Fixed an issue causing the password in the Tools custom credentials to stay revealed after reloading the window
Fixed an issue causing variables in the session recording filename to resolve incorrectly
Fixed an issue causing VMWare sessions to not use the same group tab as the VMWare console
Fixed an issue causing Wayk recording session files to be wrongly named
Fixed an issue preventing the redirection of certain webcams in RDP sessions
Fixed an issue preventing the template's port to be used when using the template through a macro
Fixed an issue with editing a password prior to revealing it
Fixed an issue with SQLite and tasks
Fixed an issue with SQLite and the Confluence documentation
Fixed an issue with the expired Zip component license
Fixed an issue with the select Secret Server entry
Fixed an issue with the VMware Dashboard where the user/local specific credentials wouldn't apply correctly
Fixed an unnecessary credential selection prompt when saving an entry using user vault search in inherited mode
Fixed and improved the "Convert PuTTY to PuTTY embedded" action
Fixed bug where custom fields variables were not resolved properly for website entries
Fixed copy API key in Hub Business
Fixed expired report displaying incorrect data entries
Fixed folder name variables not resolved correctly in the dashboard overview
Fixed import of VNC, Web browser and VMWare subtype in CSV importer
Fixed issue creating entries when DODB has no user vault
Fixed issue exporting password list to .xsls
Fixed issue in MySQL when using "always ask password" setting where the prompt would happen multiple times
Fixed issue saving private key information in SSH gateway
Fixed issue seeing main vault when the user has no cache enabled
Fixed issue when inheriting Secret Server credentials set to private key mode
Fixed issue when sending $PASSWORD$ variable in macros, and improved clarity on system settings relating to sending the password variables
Fixed issue where closing a session in the keep tab opened on disconnect would not update the last opened playlist
Fixed issue where converting a web browser to website or website to web browser would lose the entry's OTP settings
Fixed issue where multiple gateways weren't taken into account
Fixed issue where the credentials wouldn't be resolved in the after open Typing Macro event
Fixed issue where the navigation tree view would not hide itself when clicking inside an embedded entry if the visibility is set to "Auto Hide"
Fixed issue where the password complexity report's "Custom" filter would show all the entries as having a custom complexity even if it isn't the case
Fixed issue where the typing macro of the "Events" tab of an entry wouldn't be usable if it was a "Linked" typing macro
Fixed issue with MySQL data reports not working properly
Fixed issue with Password Complexity report "Specific" mode not working
Fixed issue with password prompt in multi-gateway setup for SSH Tunnel and Port Forward entries
Fixed issue with secure gateway in SSH while using the SFTP view
Fixed issue with SSH Gateway not prompting for password when configured to prompt
Fixed issue with wait dialog not showing when exporting as .RDM format
Fixed issue with wait progress in "status bar" mode not working
Fixed multiple issues with CSV Import/Export. Also added multiple features and import possibilities to make the generic CSV import more useful
Fixed multiple issues with playlist management window
Fixed null reference when executing a macro without a linked connection
Fixed playlist name when duplicating
Fixed possible error when opening the VPN References report
Fixed possible issue with connection history compare displaying blank right pane
Fixed possible issue with True Key credential not working
Fixed possible loss of "My Account Settings" & user vault data if administrator modifies a user in User Management
Fixed possible null reference issue in EC2 synchronizer
Fixed possible security issue when doing a data source diagnostic
Fixed renewal dates notifications not showing for sub-connections
Fixed scaling and mismatching keyboard layouts issues in VMRC
Fixed SFTP not working on SSH sessions when connecting via a jump host
Fixed some HDPI issues
Fixed sorting in VMware dashboard
Fixed temporary access report not sorted by date
Fixed the Http browser linker that wouldn't get shared vault's websites when focusing the user vault
Fixed the interaction between the force login GPOs and the login procedures
Fixed unresolved variables issues with documentation
Fixed view-only in VNC not working
Fixed Wayk remote executions
Fixed: SQLServer/MySQL Data Source - Credential dialog appear multiple times when AlwaysAskPassword is enabled
