The phone apps ask before they show a secret

The native iPhone, iPad and Android apps now follow the rule the extension and web vault already had: revealing a password, copying it, showing your Secret Key and exporting your vault always ask. Your device’s lock where it’s on, your master password otherwise.

Settings → Device auth adds Use device auth when Octa Pass opens. Off, opening asks for your master password instead. It’s kept on each device and never synced.

The same work closed the gaps found when the native apps were checked against the web vault, feature by feature: more dates on items, the HTTP realm, a grantor’s files in emergency access, the Wi-Fi save offer on iPhone, adding a one-time code from the item on Android, the iPhone editor’s masked secret fields and recovery contact links, and fixes to fingerprint verification and the security log’s wording.