Changelog

Version 5.3.9 ›

• Apple Screen Sharing is simpler: every connection uses High Performance and the Mac says itself what it is — the “Mac type” field is gone from the connection editor.
• Someone else signed in at the Mac: the app offers to request their screen, and they click Allow on the Mac.
• A Mac gives High Performance to one connection at a time: when it is already taken, the app says so and does not connect, instead of quietly showing a slower picture.
• Intel Macs: a smooth, clean picture — the bottom of the screen no longer smears — and on every Mac the pointer takes the Mac’s own shapes (I-beam, resize arrows). Screen darkening works on Macs with Apple silicon; on an Intel Mac the app says once that its screen stays on.
• High-density screens: the Mac’s interface is drawn at this screen’s scale — sharp instead of enlarged.
• Apple Screen Sharing details: the Mac’s sound follows Windows’ default output device, F13–F24 reach the Mac, and a connection the Mac closes says so in your language.
• Settings is laid out as sections in a left column, with search; choosing another BURSUcloud database switches to it after one question. A Quick Connect tab can be saved as a connection.
• Libraries updated to their latest versions, with their security fixes: the RDP engine’s encryption library (now its long-term-support series) and the video decoders used by Apple Screen Sharing.

Version 5.3.8 ›

• Sidebar: drag folders, connections and credentials with the mouse — reorder them, move an item into or out of a folder, or nest one folder in another, in both the connections and the credentials tree. A move to another folder asks first and shows who gains or loses access; a move that is not allowed is refused at once.
• Password credentials have a Comment field, like SSH-key ones. Notes brought in by a KeePass, 1Password or Bitwarden import now show there — before, they were stored but nowhere on screen, and the first save of the record erased them.
• Renaming, deleting or moving a folder in a local database is instant again — before, the window froze for about 30 seconds and the folder layout was not saved.
• A renamed or moved folder keeps its layout: the manual order of its items, folded folders and the General folder stay as they were — before, the items fell back to alphabetical order and General moved to the end, unfolded.
• Sidebar: the up/down arrows shown on hover no longer cover the BURSUlink globe and the favourite star at the end of a connection row.
• Libraries updated to their latest versions, with their security fixes: the RDP engine and its encryption library, SQLite, the video and audio decoders used by Apple Screen Sharing, and the runtime.

Version 5.3.7 ›

• Import from KeePass: a KeePass 2.x or KeePassXC database (.kdbx), a KeePass 1.x database (.kdb) — opened with its master password and key file — or a KeePass XML or CSV export becomes connections and credentials in one step. Groups become folders, the one-time code (TOTP) and notes come along, and an entry’s URL, port or title tells whether it is SSH, RDP, Telnet or VNC.
• Import from 1Password and Bitwarden / Vaultwarden: a 1Password .1pux archive or CSV, and a Bitwarden JSON export — password-protected too — or CSV. Vaults and folders become folders, SSH keys become SSH-key credentials; cards, identities and secure notes are skipped and counted in the summary.
• A large import into a cloud database runs straight through, with a progress window counting connections and credentials. Before, it paused every minute and showed a “No connection” banner although nothing was wrong.
• Large catalogues: with thousands of connections and credentials, the sidebar, search, Expand all and the connection pickers respond at once — before, each of them took seconds at that size.
• Full Window and Full Screen no longer stay on top of everything: a program you switch to — a messenger, a browser — comes in front, as with Remote Desktop Connection. Before, it opened behind the session until you left the mode.
• Terminal: selecting text copies it only in the “Copy selection, paste on right-click” mode, as its name says. In the other modes, selecting a line to read it no longer replaces what you had just copied.
• Sidebar: row tooltips follow the interface language, the “Connections | Credentials” switch gives each label the room it needs, and the thin scrollbar is easy to catch on a long list.

Version 5.2.5 ›

• The web tab is now a full browser: an address bar with a lock, Back, Forward and Reload, zoom, Find, Print and developer tools. Links that open a new page open in a new tab, sign-in pop-ups work, and a site asks before it uses the camera, microphone or location — with “Remember for this site”.
• Downloads window: every file downloaded in a web tab, with its progress — pause, resume, cancel, open and show in folder. Opening a program, script, installer or disk image asks first.
• Device sign-in stays with the device: saved credentials answer a sign-in only while the tab shows that device itself — never for a site it links to or a window such a site opens. The browser no longer offers to save passwords; they belong in the vault.
• Limits for web pages: a page opens at most 10 tabs in 10 seconds and 5 pop-up windows, and pages open at most 20 tabs and 10 pop-ups in all. Before, a page could fill the screen with windows; now a notice says when tabs were not opened.
• “+” on the tab strip opens a connection picker with search — on the Full Screen panel too — so another server is one click away without leaving the session.
• Full Screen panel: it now spans the top of the screen with every session tab on it, comes down when the mouse rests at the middle of the top edge, and leaves the corners to the remote screen. It reacts to the mouse instead of checking it all the time, lands on the right monitor when monitors have different scales, and a pinned panel comes back after Minimize.
• RDP shows the server’s own cursor shapes — resize arrows, the hand over links, the text cursor — instead of one plain arrow.

Version 5.2.3 ›

• Sharp RDP on high-resolution screens: on a monitor scaled to 125–200%, remote sessions now ask Windows for the screen’s real pixels together with its scale, so text keeps its usual size and is sharp. Before, the picture was sharp but every font was a third smaller. Both engines — BURSUrdp and Microsoft RDP.
• New option “Sharp picture on Retina / HiDPI screens”: in a connection’s RDP options and in Settings → RDP, which Quick Connect follows; on by default. Turn it off for a server that ignores the scale and draws everything tiny.
• Two monitors with different scales: the whole app is now sharp on both — moving the window re-renders it instead of stretching a picture. RDP and VNC sessions follow the monitor they are on, and the window reopens where you closed it.
• RDP engine choice: picking a different engine in a connection’s RDP options now asks again on the next connect, with that engine already selected; the question always preselects the connection’s own engine, and its checkbox says what it does — “Remember for this connection”.
• Folder layout across devices: folds and folder order changed on two devices of one account are now merged — the “Folder layout” conflict card no longer appears, and old ones clear themselves. Windows takes the shared layout after a sync instead of writing its own older view back, and a change made just as the connection drops is kept and sent later.
• BURSUlink: when the tunnel closes while the server certificate is being checked, RDP and WinRM now say so instead of asking “connect anyway?”, and the connection library is updated.

Version 5.2.2 ›

• FTP and web rows through BURSUlink: with agent 1.0.0, FTP and FTPS panels and web tabs now go through the agent — before, these rows could not use one. Every FTP data channel takes the tunnel, and a web tab gets a browser profile of its own pointed at the agent, pop-ups included; when the agent is the way to everything, local addresses and WebRTC no longer slip past it.
• AppleRD High Performance through BURSUlink: a Mac row set to High Performance now gets it through agent 1.0.0, also when the agent runs on the Mac itself. When the agent refuses — busy, or High Performance over a relay switched off — the session takes the standard mode and says why once per agent instead of on every connect, and a session the agent ends no longer just freezes: the card says why and the automatic reconnect takes over.
• Agent on the target computer: a connection through an agent running on that same computer now shows the agent’s name where the stored host used to be — in the tree, on Home, in the details and on the tab — and the search finds rows by agent name.
• Waking from sleep: the red “offline” stripe no longer flashes for the few seconds Wi‑Fi takes to come back; a lost network is checked once more 15 seconds later before the banner turns red. Anything you save meanwhile is still queued as before.
• Get MAC address through an agent: when the editor’s agent is not the one the saved connection names — a new or copied connection, or another agent picked — the editor now says to save first instead of failing with “Not allowed.”
• Tabs through an agent: Reconnect and Duplicate keep a web, FTP, SFTP or AppleRD tab in its place, a double-click opens one tab, and a web tab reopened after its agent restarted no longer stays blank for ten seconds.
• Bundled libraries: the JPEG decoder VNC uses is updated to libjpeg-turbo 3.2.0 (it was 2.0.6), and every library in the program folder now shows its version and copyright under Properties → Details.

Version 5.2.1 ›

• AppleRD typing: Shift+letter used to reach the Mac as a small letter, and a dead key such as ´ or ^ typed its plain key instead of “é” or “ê”. The Mac now gets the character your keyboard layout produces — capitals, Caps Lock, symbols and accents — while shortcuts still go as the plain key, so a copy shortcut is the same on every layout.
• AppleRD and the Win key: Win+C, Win+V, Win+Tab and other Win combinations used to be taken by Windows and never reached the Mac; while the Mac’s picture has the keyboard they now arrive as Command combinations, and Win pressed alone no longer opens the Start menu. Win+L still locks this computer.
• AppleRD keyboard: letting go of both Shift keys at once no longer leaves one of them held down on the Mac.
• WinRM through BURSUlink: closing a tab now deletes the remote shell before the tunnel closes — before, the shell stayed open on the server until its idle timeout.
• BURSUlink after signing out or switching account: each account now gets its own tunnels, and the previous account’s tunnels and pending agent lookups are closed instead of staying open under the next one.
• RDP through a BURSUlink tunnel or an SSH port forward: when the server redirects the session elsewhere, it now stays on the tunnel — or stops with an explanation — instead of dialling the other address directly, and a chain of redirects ends after four hops.
• SSH options: a jump host that goes through a BURSUlink agent used to show as a bare “ID” number; it is now shown by name, and the window says why a connection through it is refused.

Version 5.2.0 ›

• BURSUlink — reach a computer behind NAT. A connection can now go “Through BURSUlink”: choose the agent in the connection window, under Host and Port, and SSH, SFTP, Telnet, RDP, VNC, WinRM and AppleRD open to a machine with no public address — no port forwarding, no VPN. Host keys and certificates are still checked against the real host name, and a relayed connection carries a mark in the tree.
• BURSUlink messages: an offline agent says so with its last contact time, a refused pass shows the portal’s own words, a removed agent is named as such, and when the portal asks for a two-factor code the app offers to sign in again from wherever the connection was started.
• Eight interface languages: German, Spanish, Portuguese (Brazil) and Portuguese (Portugal) join English, Russian, Ukrainian and Georgian — one list for Settings, the setup window and the AI assistant’s replies.
• RD Gateway with a port: “gateway:8443” is now dialled on that port instead of being looked up whole on 443 and refused, and with the Microsoft engine the gateway settings reach the session together with the connection’s credentials — before, they were silently dropped and the session dialled the target directly.
• Full screen: the toolbar rises only after the mouse rests on the top edge for a moment, and the remote screen’s tab strip, minimise and close buttons take clicks again — the window frame used to swallow them.
• RDP scrolling: a precision touchpad and a free-spinning wheel send tiny deltas, and each one became a whole-notch scroll on the server, so two-finger scrolling raced and jerked; the deltas are now summed into whole notches, as mstsc sends them, and sideways scrolling works too.

Version 5.1.5 ›

• Two-factor sign-in: when your BURSUcloud account has two-factor authentication on, the app asks for the 6-digit code from your authenticator app — or a recovery code — in its own window right after the password, with no trip to the browser. A wrong or expired code says so and lets you type the next one; after too many attempts the window asks you to wait a few minutes.
• Offline sign-in respects two-factor authentication: an account that has it on is no longer opened offline by its password alone. A password mistyped just before signing in with Google, Microsoft, Apple or GitHub is no longer remembered as your offline password, and signing in again in the first-run setup keeps offline sign-in working.
• Enter signs in: in the BURSUcloud email and password fields of the sign-in window and of the first-run setup, Enter now presses Sign in instead of waiting for a mouse click. These windows also no longer draw a dotted frame around a list or an option you clicked.
• First-run setup: pressing Exit after signing in to BURSUcloud now brings the setup back at the next start. Before, the next start opened a new local database and offered to sign in as admin/admin.
• Apple Screen Sharing on an Intel Mac: High Performance no longer drops a second after connecting, and the screen-mode choice (goes dark / stays on) is greyed, with the reason under it — an Intel Mac keeps its screen on.
• Trusted hosts in Settings: “Forget all trusted SSH host keys” no longer removes RD Gateway certificates, and “Forget all trusted RDP certificates” now removes them too.

Version 5.1.4 ›

• Deleting a folder in a BURSUcloud database no longer shows “Some changes conflict with the server”. The server already rearranges the folder list when a folder is deleted, and the app sent its own copy over it, which the server refused every time; now the app takes the server’s copy.
• A folder that still holds connections, credentials or subfolders is no longer deleted: the window says what is inside, so you can move or delete it first. Before, everything inside moved one level up, and deleting a top-level folder turned every folder inside it into a top-level one. The same rule now applies in every app and on bursucm.com.

Version 5.1.3 ›

• Remote Desktop to Ubuntu’s “Remote Login” (GNOME) now works. Ubuntu hands the session over twice — to its sign-in screen, then to your desktop — and the connection used to stop with an error at the first handover. A handover is followed only from a server whose certificate you already trusted; a new connection still refuses weaker security.
• An RDP session no longer opens on a white window for the first seconds: the same “Connecting...” card as Apple Screen Sharing stays until the server draws its first picture, and comes back while the server moves you from its sign-in screen to your session.
• Switching to another database now signs you out and opens that database’s sign-in window. Before, the account you were using stayed signed in to the new database. Changing only the PostgreSQL user counts as a switch too, and two users of one database keep separate offline copies.
• “Migrate to another database...” asks before it creates anything in the target. Before, even answering “No” left a sample catalogue and an admin account in the database you picked. An unreachable server is refused before the question, and switching to a PostgreSQL copy right away asks for its master password.
• Changes made offline now reach a database whose master password was turned off on another device: their passwords are sent the way that database stores them. Before, they arrived still encrypted and nobody could read them. A password this computer cannot open is left out, the rest of the change is sent, and a notice asks you to enter those passwords again.
• Working offline with PostgreSQL: a connection created online and edited within a couple of minutes after the server became unreachable no longer disappears from the list, and “Resolve conflicts” stays on screen beside any other sync notice.
• Smaller corrections: the Password field is the same height as Login beside it, the home page cards wrap their text and go two by two in a narrow window instead of cutting words, and “No tags” and “Manual / none” are translated.

Version 5.1.2 ›

• A lost connection no longer stays green with nothing behind it. The tab turns red, waits 30 seconds and reconnects on its own — up to three times; the “Connection lost” window with the countdown, “Reconnect now” and “Cancel” appears only for the tab you are looking at. Typing exit or logging off still closes the tab. This works for SSH, SFTP and FTP, Telnet, WinRM, serial ports, RDP, VNC and Apple Screen Sharing.
• A server that stops answering is noticed within seconds — including a frozen SSH server or one rebooting under an open session, which used to leave the terminal waiting forever. SFTP tabs check the same way, and a large transfer over a slow link is not mistaken for a dead server.
• Split view reconnects too: a second pane that loses its session counts down and reconnects in place, and a pane that still works is never closed by the other pane’s reconnect. “Reconnect” and “Close” name the pane that would go with the tab and ask first.
• A password you typed when connecting and did not save is never sent again by an automatic attempt: the tab waits for you, and its “Reconnect” uses what you typed. Host key and other questions raised by a background attempt wait for their tab instead of opening over the one you are working in.
• A reconnect in the background never takes the keyboard: what you type into another tab, a dialog or the second pane stays there, and Enter or Esc in a pane never acts on the lost tab beside it.
• Port forwards (-L, -D, -R) are released as soon as a session is lost, so the reconnected session can use the same ports again instead of failing with “address in use”.
• Smaller corrections: switching tabs no longer flashes a white background, the mouse pointer no longer disappears from the whole window after typing in a terminal, FTP sessions stay open on idle servers, and FTPS keeps working after a long folder listing.

Version 5.1.1 ›

• Connection cards show who used a connection last and when — “Last used by user2554, at 15.02.2025 21:22 GMT+4”, in your own time zone. In a shared BURSUcloud or PostgreSQL database you see which colleague it was. Only a session that really connected counts: a wrong password, an unreachable host or a cancelled prompt does not.
• Duplicated tabs, the second pane of a split view and web pages count as a use too — a web page once it has actually loaded.
• Switching to another database now closes the sessions that belong to the one you leave, after asking how many will close. Before, open tabs stayed and could reconnect with the other database’s saved passwords.
• A VNC server that offers Apple sign-in with unsafe encryption parameters is refused before your password leaves the computer, with a message that says why.
• While a shared PostgreSQL database is unreachable, cards still show who connected last, and a backup keeps the time of the last use exactly.

Version 5.1.0 ›

• Session tabs stay on one row, as in a browser. With many connections open the tabs used to run off the edge of the window with no way to reach them; now they narrow together, long names are shortened, the “+” for a new connection stays at the right end, and the mouse wheel scrolls the strip. The selected tab always keeps its close button; the others get theirs back as soon as there is room.
• The remote text editor has a right-click menu: Undo and Redo, Cut, Copy, Paste, Delete selection, Select all, Find, Replace, Find next and previous, and Go to line — the same commands as its menu bar. An edit made while a save is still on its way now stays marked as unsaved instead of being lost when the editor closes.
• Changes made on another device reach the tree without a restart — also after switching to another database in Settings — and a folder you have just collapsed or reordered no longer jumps back when a background refresh arrives.
• A faster connection tree. Opening a folder redraws only that folder instead of the whole tree, search waits until you stop typing, and the Home page refreshes only while it is on screen.
• Updates are checked once a day while the app stays open, not only at start-up. A notice found in the background waits until you are on the Home tab instead of opening over a terminal you are typing in, and “Don't show this version again” is respected.
• The routing check covers more of what weakens a connection: RDP “Connect anyway”, every VNC setting that sends the password unencrypted, and certificate errors on http and https rows. Checks recorded by earlier versions are still compared, so a setting weakened before your first connect on 5.1.0 is reported rather than accepted in silence.
• Connections stay what they are. An FTPS row with no TLS mode saved now connects with TLS instead of in plain text, and its tab says which one it uses; editing an FTPS, SFTP, HTTP or HTTPS row no longer turns it into SSH when you save.
• Smaller corrections: Get MAC checks that the answer really is a MAC address; a VNC connection that times out no longer files a problem report; a wrong master password no longer freezes the window while the vault is re-read; and a vault whose password was changed on another device opens with the new one on the first try.

Version 5.0.2 ›

• An SSH session now survives the server's key exchange. A “Connect once” answer to a new host key was forgotten the moment the login finished, and the server asks again at every key exchange — so the first re-key (OpenSSH after a few gigabytes, Dropbear after an hour) found nothing to trust and the terminal, transfer or jump tunnel simply died. The answer now lives for the whole session; “once” still asks again next time.
• A connection is dialled the way its own type says. Quick Connect with “sftp” was sent to the remote-desktop dialer on port 22; on Linux and macOS a request to open an SSH row as FTP would have sent its password as a plain-text FTP login. Every request is now checked against the row's type before anything is sent.
• The security switches are part of the routing check. “Ignore certificate errors” and plain HTTP for WinRM, no TLS for FTP, ignored certificates for a web tab, encryption off for VNC — any of these could be flipped on a shared row by anyone with edit rights, and the next connect obeyed in silence. They are now compared like the address is: a change asks the “routing changed” question, and rows you already use adopt their current state without one. WinRM's “ignore certificate errors” waives chain errors only where no certificate is remembered; a remembered one is binding, and under a strict policy a new one is refused.
• Get MAC finds the right adapter. The address is read from the interface the login arrived on, so a server with several network cards no longer answers with the wrong one; a login through a tunnel or VPN falls back to the default route as before. The first wake-up packet is sent off the window's thread, a declined host key is no longer reported as an SSH error, and Cancel closes the editor without a prompt appearing behind it.
• The seven buttons of the Files side panel drew nothing since 5.0.0 — they draw again, and the session tab shows its protocol's picture in front of the name.
• Smaller corrections. Closing a dialog with its X or Alt+F4 means Cancel, not the default button (the SFTP editor used to save on X); Escape cancels the host-key prompt; Reconnect asks only while the session is up; the Settings window no longer wraps its Georgian tab strip; a database from 3.7.0 opens again with its original key settings.
• Sign-in through the browser no longer files an error report after a timeout. An abandoned wait for the browser's answer surfaced later as “A Task's exception(s) were not observed” (a support report from Linux Mint). It is observed now.
• Apple Remote Desktop: a lost audio device says “audio unavailable” instead of reporting a live buffer.

Version 5.0.1 ›

• Each protocol is a drawing now, not a word. A connection row used to carry a text plate — SSH, RDP, APPLERD — as wide as the word inside it, so every name began at a different place and the list read as ragged. Every row now shows the protocol's own picture, in its own colour and all of one width. The machine's address has moved out of the row and into its tooltip, where it no longer competes with the name for the width of the sidebar, and a session tab shows the connection's name on its own.
• Reconnect asks first when there is something to lose. One click used to close the session and dial again — the scrollback, a half-typed command, a remote desktop's state — without a word, from any of the five places the button appears. It asks now. A session that has already dropped still reconnects on the first click, because there is nothing left there to keep.
• The port you type decides how the connection is protected. A WinRM connection saved on 5986 with the HTTPS box unticked dialled plain HTTP at a listener that expected TLS, and FTP on port 990 went out in the clear while the window implied otherwise. Both ports now mean what they mean everywhere else: 5986 is HTTPS, 990 is implicit FTPS. “Use HTTPS (5986) for new connections” in Settings had been a switch nothing read — it now applies to new connections, and the port field follows it.
• A WinRM server is remembered under the name it is really dialled by. Unusual spellings of an address — one carrying a user name, or a stray “#” or “/” — were stored under one name and connected to under another, so a certificate you had already approved could be passed over in silence. The name is now settled once, before either happens.
• “Trust & remember” is no longer the recommended answer where there is nothing to examine. When a server's certificate cannot be read at all, that button was the blue, obvious one — the single answer that grants a lasting exception on no evidence whatsoever. It is now marked as the risky choice, the cursor starts on Cancel, and the exception expires after thirty days instead of standing forever. “Forget all trusted WinRM certificates” takes these answers back as well.
• Quick Connect types where its hint begins. The grey example address and the text you typed were placed by two separate measurements, so the first character landed twelve pixels to the right of where the example started. Every text field in the application had been carrying that same doubled inset.
• Smaller corrections across the window. VNC no longer wears the remote-desktop picture inside its own options window; SSH and Telnet take their own colours on the connection card instead of a shared blue; the sidebar holds no empty strip down the folder headers and credential rows; switching a connection to WinRM moves its port with it instead of leaving 5985 behind; and a long web address on the Home card no longer grinds the connection's name down to a single letter.
• The installer ticks “Create a desktop shortcut” by default, on every install rather than only the first.

Version 5.0.0 ›

• Version 5.0 — the number jumped because the app did. The whole interface has been redrawn to one design: the window frame, the menus, every dialog, every icon, the trees and the file manager. So much had changed across the app at once that another 3.8.x would have undersold it.
• One frame at the top, one bar at the bottom. The menu, the window title and the window buttons now share a single strip, and a single status bar carries the database, the account, the session’s state, its clock, its tunnels and the vault — there used to be two. The bar no longer twitches either: the clock rebuilt the whole row once a second, so the cells after it shifted left and right in time with the seconds.
• Every dialog ends the same way. All thirty-one of them now close with the same footer strip and the same order of buttons — before, each window put them where it happened to, and “Cancel” could be a different width and a different shape from one dialog to the next.
• Icons the app draws itself. 136 glyphs borrowed from a Windows system font are gone, replaced by the application’s own drawings — one table, one grid, one stroke weight. That font does not exist on macOS or Linux, so the same button used to show a different picture depending on where you ran it; now every client shows the same one.
• One size for everything you click. Buttons, fields and checkboxes take one height and one padding; they had been overridden in ninety-eight places with fourteen different values, so the same “Cancel” was a different width in nearly every window. A neutral action is framed, a dismissal is filled, and the primary one is blue.
• Colour that follows the theme. Stars, folders, the transfer queue and its progress bar take their colour from the theme instead of fixed values that never changed in the dark — the file manager’s folders were even a different yellow from the tree’s. And switching the theme no longer fails halfway, leaving one half of the window in the old one.
• The file manager reads like a machine. Size, date, rights and owner stand in the monospaced face and against the right edge, so the columns line up and two sizes can be compared at a glance instead of read.
• A folder counts everything beneath it. A folder whose connections all live in subfolders used to show 0 while plainly holding them; the number beside it is now its own records plus every record below.

Version 3.8.3 ›

• AppleRD: the waiting card — the dark panel that says “Waking the Mac…” — is now part of its tab. On a touch-screen laptop it stood one whole width to the left, over the sidebar or outside the window altogether, and on any computer it lagged behind the window when that was dragged or resized.
• Session toolbar: the “ssh root@host” caption is always shown in full. In Georgian the long button labels used to cut it short; now the buttons the window has no room for move into a “⋯” menu, and Disconnect always stays on the bar.
• Settings: the twelve tabs stand in one row in every language. In Georgian they wrapped into two rows, and the rows changed places whenever a tab was clicked.
• Georgian: every label now reads the same in all the apps — 185 strings had two different translations — a native speaker corrected eleven words, and stray letters from other alphabets are gone from a few messages.
• Ukrainian: one apostrophe everywhere, “папка” instead of a mix of “папка” and “тека”, and a dozen case endings and Russisms corrected — “файлу”, “вісімковий”, “перенаправлення портів”.
• Russian and Ukrainian: labels that read differently from one app to another now have one wording, and dashes stand where hyphens did.

Version 3.8.1 ›

• A sleeping Mac is woken before the session starts. Until now an AppleRD connection to a sleeping Mac simply timed out and you had to walk to the machine; with its hardware address stored, the wake-up packet goes first and the session waits for the Mac to answer — 34 seconds on the Mac this was measured on. The tab says what it is waiting for instead of showing a minute of black, and if the Mac never answers the error says so rather than blaming the connection.
• A Mac asleep on Wi-Fi wakes too. The wake-up packet is now addressed to the machine itself as well as sent to the whole network: a sleeping wireless machine is never handed broadcast frames, which is why laptops stayed asleep while the same packet woke everything on a cable.
• Nobody types a hardware address by hand any more — “Get MAC” in the connection form reads it. On your own network the answer is instant; for a machine beyond a router it asks the machine itself over SSH, using that connection’s own user name, key, host-key policy and jump hosts. It confirms the host key exactly as a session does, and a machine that is slow to answer is reported as such instead of being described as switched off.
• A folder you collapse stays collapsed. Collapsing a folder that holds connections was never remembered — it was open again after a restart — while a folder made only of subfolders was remembered, which made the whole thing look random. Folders renamed or deleted long ago are now cleared from the saved state instead of piling up.
• Answering a security question no longer costs the connection its time. While the “unknown host key” window waited for you, the connection’s own timeout was running, so a few seconds of thought ended in an error that blamed the server. The question is now asked with nothing on the wire and the connection is made after you answer. This affected every SSH connection — terminals, file panels and jump hosts alike.
• Closing a tab that is still connecting now really ends it. The attempt underneath kept running, and when it finally failed it put an error window on your screen — up to a minute later, about something you had deliberately abandoned.
• The warning about a changed connection is more exact: only an RDP connection is checked for a Remote Desktop Gateway, so an SSH connection can no longer warn about a gateway it never had; the protocol is part of what is remembered, so the same address reused for another protocol is noticed; and both gateways are named in the question. The notice shown while a Mac wakes now keeps to its own window instead of being painted over other applications and over this application’s own host-key question.
• Smaller things: a split view checks that you may read the connection’s saved credential before it dials, instead of logging in with an empty password and showing the server’s “authentication failed”; a hardware address that macOS prints without leading zeros is read correctly; the note about private Wi-Fi addresses is no longer shown for virtual machines and containers; and every bundled library was brought up to date, closing seven published security advisories — one in the built-in database engine and six in the components the application ships with.

Version 3.8.0 ›

• Connect to Macs with the new AppleRD connection type — Apple Remote Desktop. On Apple silicon with macOS 14 or newer it uses the High Performance path: H.264 or HEVC video decoded on the GPU, the Mac’s system audio, and a sharp virtual display sized to your window (or a mirror of the Mac’s own screen). Intel Macs and older macOS connect over the conventional route.
• The Mac’s identity is confirmed before your password is sent — its host key is remembered on first contact and checked on every later connection, like SSH — and a Mac whose key has changed never gets the password. The key policy is set per client on the Security tab.
• Inside a Mac session: the clipboard travels both ways (each direction can be switched off per connection), the mouse wheel and keyboard work as expected including Option chords, and a Debug switch on the toolbar draws a live line over the picture — frame rate, bytes on the wire, geometry — so a slow session can be diagnosed instead of guessed at.
• Intel Macs are noticeably smoother: the conventional route now asks the Mac for compressed screen updates instead of raw pixels, so the desktop draws about twice as fast over Wi-Fi and video playback gained frames. The log records which route was chosen and what the Mac offered.
• Searching the sidebar shows only the folders that hold a match and the path down to them; every folder of the catalogue used to open, empty, which read as “all my connections are gone”. A search also no longer touches the saved folder order, which it could silently rewrite for everyone on a shared database.
• Direct PostgreSQL catalogues verify the server’s TLS certificate by default. A self-signed server, or one without TLS, now needs the matching option chosen in the connection form; “trust the server certificate” used to connect without checking anything.
• A vault that version 3.7.0 migrated with the wrong key-derivation count opens again with the correct master password and is repaired on the spot. On a shared PostgreSQL database, update every client to this version before anyone unlocks it with 3.7.0 again.
• Smaller things: a damaged connection-options record on BURSUcloud is read field by field instead of resetting every option, a port-forward list with one bad entry keeps the rest, the 32-bit build’s Mac audio loads on a clean Windows, a Mac wider than 8192 pixels needs the High Performance route, and the new sentences are translated into Russian, Ukrainian and Georgian.

Version 3.7.0 ›

• Folder navigation stays responsive on BURSUcloud: expanding, collapsing, selecting and reordering folders no longer waits for a network round trip, while saves remain ordered and reliable.
• Direct PostgreSQL setup now uses clear host, port, database, user, password and TLS fields, can test the saved connection, and can export or import a password-protected configuration file for a colleague.
• Shared PostgreSQL vaults now use one portable data key per database. Changing the master password no longer re-encrypts every secret, and concurrent changes cannot be silently overwritten.
• Legacy vaults migrate safely without losing access, including databases with older KDF metadata; remembered master passwords remain attached to the correct database and survive migration or temporary connection failures.
• A secret saved by the Universal edition is no longer mistaken for plain text and shown as ciphertext in the Windows client.
• Folder permissions are safer and clearer: moving or deleting folders preserves grants, partial rights are displayed correctly, root-level items have their own grant, and members can edit their own account and password.
• Deleting a folder through BURSUcloud is atomic, so a failed request cannot leave the catalogue half-modified; an outdated portal is refused before any destructive step.
• Smaller fixes across database and account screens: program users can test the saved connection, “Remember master password” now works during initial setup, portable backups contain a complete vault, TLS labels say what is actually verified, the user editor no longer freezes, and provider badges, translations and layouts display correctly.

Version 3.5.1 ›

• The AI assistant no longer freezes the app while a model streams its reply or its reasoning. Every fragment used to re-lay out the whole text on the interface thread, so a long “thinking” phase left the window marked “Not Responding”; the text is now appended in one go per idle pass, and the interface stays responsive through a 100 KB reasoning stream.
• The assistant panel stays where you scrolled it while the reply streams, following the stream only while you are at the end, and the end of a turn no longer pulls the keyboard focus from the terminal into the composer.
• AI chats from before 3.5.0 are visible again. The move to per-account profile folders looked only in the new folder and left the earlier archive behind; both are read now, and the old chats migrate the first time the assistant opens.
• Name lookups ask before running: nslookup, getent hosts, ping of a host name and openssl s_client wait for your click like curl and wget do, because every label of a queried name reaches whoever runs that zone. An address such as ping -c 3 8.8.8.8 still runs on its own. Secret Shield also hides values named DB_PASS, ROOT_PW or MYSQL_PWD and keys from xAI, Groq, GitLab and DigitalOcean.
• A command is no longer reported as finished before it was typed. A completion mark from the previous prompt that arrived while the assistant waited for the screen to settle counted as the new command's result, and the “> ” prompt of an open quote was taken for an idle shell, which typed the next command into the string.
• Provider failures are shown, not swallowed: a timed-out request looked like a pressed Stop, an error in the middle of a streamed reply ended it as if complete, and a rejected key was retried three times before you saw it. A reply that quotes a YAML block before its shell command no longer proposes the prose between them as the command.
• Smaller things: the provider, attachment and screenshot messages of the assistant panel are translated into Russian, Ukrainian and Georgian; the attach dialog offers every file type the assistant accepts; the panel's divider resizes when released instead of re-laying out the conversation on every pixel.

Version 3.5.0 ›

• The app now runs on .NET 10 and carries its own copy of the runtime in a “runtime” folder beside the program. Nothing has to be installed on the computer, a system-wide .NET does not affect it, and every file of that copy is signed by Microsoft.
• Launching from the Start menu is quick again right after a Windows Defender definitions update. The previous build was one 286 MB file that Defender scanned whole on the first start after every update — two to three seconds with the Start menu frozen open. The program is now a 31 MB file next to the runtime, Defender scans only what is actually loaded, and the installer shrank from 221 MB to 170 MB.
• A warmed-up start is about 100 ms faster: the rendering engine is prepared in the background while the settings are read, and the Windows Forms layer is loaded only when an RDP tab on the Microsoft engine or the import window’s folder picker needs it.
• Program Files holds only the program: BURSUcm.exe, five native libraries and the runtime folder. The translations and the terminal renderer are built into the program, so the “src” folder beside it is gone, and an upgrade removes everything a previous layout left behind.
• The desktop shortcut no longer turns into a blank document icon after an update — the installer asks Windows to refresh its icon cache when it finishes.
• Every file the installer places is checked when the release is built: the runtime keeps its Microsoft signatures, our own files are signed and time-stamped, and the build stops on anything else.

Version 3.3.2 ›

• Opening a folder in a user's permissions no longer closes the app. The three columns hold live checkboxes, so a click anywhere in a row put that row into edit — and the moment the folder's arrow was then clicked, the list refused to redraw and the app went down with it. A folder whose rights come from a group showed it every time, because its boxes are disabled and the click lands on the row itself. Switching between the connection and credential tables had the same fault one step earlier. Both are closed.
• A cloud account is no longer shown as holding every folder. An account created in the portal carries an explicit list of what it was granted, and an empty list means it was granted nothing of its own — which is exactly an account whose rights come from a group. The user's card read that as the old rule for accounts from before per-folder rights, “never restricted, so it sees everything”, and drew a ticked “All connection folders”: Read on every folder, for someone who had been given none. Saving the card would have written that as a real grant. Accounts on a local database from before per-folder rights keep the old meaning.

Version 3.3.1 ›

• User groups. A group is a named set of per-folder rights, and everyone in it inherits them — so a team's access is granted once instead of being re-entered for every account. Rights that come from a group show in the person's card as a green tick, locked and labelled “Inherited from group”, beside the ones granted to them personally. Groups work the same way in the local database, in your own PostgreSQL and in a BURSUcloud database; a group never makes anyone an administrator.
• One folder per account on this computer. Everything the app keeps outside the database that belongs to a person — trusted host keys and certificates, logs and session transcripts, the offline copy of the catalog, the assistant's chats, the browser tabs' profile, the remembered vault key and “remember me” — now lives in that account's own folder, and the app switches to it the moment someone signs in. Nothing is deleted when the next person signs in: come back and your own state is where you left it. An install updating from an earlier version hands its files to the first account that signs in, and an administrator can remove a person's folder from the users window.
• The Settings window is everyone's, and it matches the Universal edition tab for tab. Because those preferences are now a person's own on this computer, every user sees every tab and saves the SSH, RDP, VNC and WinRM policies, the session defaults and the logging — where before most of that was an administrator's alone. What stays the administrator's is what describes the shared database: switching it, import and export, the master password and the password policy. The same sections, labels and hints as the Linux and macOS edition, and the Security tab now carries an inline box for unlocking the vault.
• A folder is picked from the tree, not typed as a path. Everywhere a record's folder is chosen — the connection editor, the credential and SSH-key editors, the parent folder in Edit Folder, and “Move to folder” — the field is now a drop-down of the folders you already have, in the tree's own order and folded the way the tree is folded. Folders you may not save into are shown greyed rather than hidden, so the ones under them keep their place, and the root row reads “(root — top level)”.
• A right taken away stops working at once. Until now a demotion, a deletion or a withdrawn group membership held until the app was restarted — administrators included, since they were skipped entirely — and a session in which passwords are only read and copied never reloads a catalog, so the decision to reveal a password was made all day from the snapshot taken at sign-in. The signed-in person's rights are now re-read at every catalog reload and before every action that hands out a secret; revoking the assistant's right closes an assistant already open, and a group dialog left open cannot restore rights withdrawn meanwhile.
• A session through an RD Gateway now pins the gateway's certificate. The app checked that certificate before connecting and then told the engine nothing about it, so the engine accepted whatever the gateway presented during the real handshake; and when the certificate could not be obtained at all, the check was skipped and the session went ahead — a machine answering on the gateway's address would have received the username and the password. The approved fingerprint now travels to the engine, which refuses a gateway that presents anything else, and under the “trust on first use” and “strict” policies a gateway whose certificate cannot be read is refused with an explanation.

Version 3.3.0 ›

• Windows servers, over WinRM. A new connection type beside SSH: PowerShell runs over PowerShell Remoting and cmd.exe over WinRS, on plain HTTP or over HTTPS, where the server's certificate is trusted once and pinned the way an SSH host key is. Output streams while a command is still running, Ctrl+C stops the pipeline, errors arrive as errors with the line they happened on, and Read-Host, -Confirm and a missing mandatory parameter ask and wait — a password is answered under the session key, never as text on the screen.
• The WinRM terminal behaves like a terminal. “clear” and “cls” clear this window at once instead of answering with two paragraphs of red; Write-Host keeps its colours and “-NoNewline”, and what a script writes through $host.UI is drawn rather than dropped; a cmd.exe session can be set to a codepage such as 866, so Cyrillic typed into it comes back readable; a paste of several lines runs all of them; a “Password:” prompt from a cmd program hides what you type; and a WinRM tab splits into a second pane, as an SSH tab does.
• Keep an SSH session in tmux. A checkbox in the SSH options, with a session name beside it, makes the connection attach to that tmux session when the shell opens — created the first time, rejoined after that, so a dropped connection returns you to the same screen with the same programs still running. Detaching (Ctrl+B, D) returns to the plain shell rather than closing the tab; the tab reads “(tmux)” while you are inside, the wheel scrolls tmux's own history, the Files panel still follows “cd”, and the assistant still sees when a command ends. A server without tmux says so in the terminal, and the session goes on without it.
• A SOCKS5 proxy through the SSH connection (ssh -D). A third kind of tunnel beside local and remote forwards: the tunnels editor now offers “dynamic”, which opens a SOCKS5 proxy on 127.0.0.1 at the port you choose and carries every connection made to it through the session. A browser, curl or a database client pointed at the proxy reaches hosts only the SSH server can route to, and names are resolved on the server side as well (socks5h). The proxy listens on 127.0.0.1 only — it is never offered to the network the computer is on.
• The assistant's terminal is your terminal. While one of its commands ran, whatever you typed was held back until the command finished — a password typed at a sudo prompt never reached sudo, and once you pressed Ctrl+C it was typed into the shell in clear. Keystrokes now go to the terminal at once, always. A prompt meant for you — a password, a yes/no — is waited for, with “Waiting for your input in the terminal” on the card and no clock running, and the assistant then sees the whole result; a long upgrade that keeps printing is no longer cut off at a fixed minute, because the timeout counts silence. And your environment stays: a pager no longer stops at “Press RETURN”, and tools that keep their configuration in your home directory find it.
• The assistant asks before a PowerShell line can do harm. It now classifies by PowerShell's own rules: a method call anywhere in the line — “$_.Delete()”, “(Get-Service x).Stop()” — a static member and every script block are judged, so “Get-ChildItem | ForEach-Object { $_.Delete() }” asks for the click instead of passing as a reading command. Reading a file that may hold secrets (the SAM and SECURITY hives, web.config, appsettings, keys, .ssh), any UNC path and “-ComputerName” ask too, because what is read goes to the AI provider with the output.
• Findings of the pre-release audit. A single pasted line with a line break at its end ran on paste — the break is dropped now and you press Enter yourself, so a page with a hidden command cannot run it for you. A crash report waiting for the next start carried the raw error text, connection strings included, in a file that backup tools read; secrets are cut before it is written. A server that printed “tmux=on” in its banner could switch the tab into tmux mode; the marks are read only after this side has typed its own line. And the hints under plain HTTP and “proceed past certificate errors” now say what each actually gives up.
• Small things. A text box the app had switched off looked exactly like an empty one — white on white, and inviting to type into; it is grey now, and empty fields carry a hint inside them where one helps. The “Keep-alive” label in the SSH options read in English in every language while its translation sat unused.

Version 3.2.1 ›

• The AI assistant can now run interactive programs. “htop”, “top” and anything else that takes over the screen were refused outright — the assistant could only start a command and wait for it to finish, and htop never finishes, so the wait could end only in a timeout and a Ctrl+C nobody asked for. It now starts such a program, lets it draw its first screen and hands the terminal back to you.
• Answers appear as they are written. The assistant collected the whole reply and showed it in one piece at the end, with the “thinking” line already switched off — so the panel sat empty for as long as the answer took, which reads as a hang.
• A chat you had compacted could never be used again. Compacting stored its summary where the model interface refuses to accept it, and every later message failed; deleting the chat looked like a cure only because it threw the summary away. Chats saved before this update reopen unchanged.
• Code inside an answer reads as text again. Every backticked word became a full-width grey box with its own Copy button, so a file path named in the middle of a sentence cut that sentence into three stacked blocks. A command still gets its own block and its Copy button; a name inside a sentence stays inside the sentence — and the whole answer can be selected, which is how a path or a value is taken out of one.
• The assistant is no longer frozen out by “sudo su”, “mysql”, “psql” and the like. Inside those the terminal cannot report that a command has finished, so the assistant refused every request and told you to press Enter or Ctrl+C over a command line you had never typed. It recognises their prompts now, says which case it is when it does refuse, and no longer claims the terminal is busy from its own memory of an earlier answer.
• Problem reports, after two independent audits: identical faults group together whatever the privacy switches are set to — the grouping used to change with them; server names, logins and IPv6 addresses are masked more carefully while the stack itself stays readable; and declining one fault no longer silences a different one, so two alternating faults stop asking at every start.
• Problem reports: closing the window cancels the send instead of leaving it running, the fields freeze while a report is in flight so the preview cannot drift away from what is being sent, and a report that arrives after you close the window is no longer recorded as declined.

Version 3.2.0 ›

• Report a problem, without leaving the app. When something goes wrong the app offers to send a report about it, and Help → Report a problem is there at any other time. You get a report number back, and we get the error itself instead of a description of it.
• You see exactly what will be sent, before it is sent. “Show what will be sent” is not a summary of the report — it is the report, rebuilt as you type and as you tick the boxes. Nothing leaves the computer until you press Send: there is no background upload and no crash beacon.
• Passwords, keys and tokens are stripped on your computer, before the preview. Server addresses, account names and IP addresses are replaced with placeholders as well — in a connection manager those are as private as a password — and a checkbox puts them back when you decide they help.
• When the report already carries the error, writing anything is optional, and the fields say so. People who did not feel like writing used to press Cancel — and then nobody had the error either.
• A crash is offered at the next start. A fault that closes the app leaves a record beside its crash log, and the next launch asks whether to send it, with the error already inside. Failures that used to reach only a log that is off by default — a background operation that gave up, a fault inside a remote-desktop session — are offered the same way. Saying no is remembered for a day, so a fault that repeats does not ask at every start.
• A screenshot only when there is something to see. It is taken at the instant of the fault, before any of our own windows are drawn — an earlier attempt photographed the very dialog that was asking about the error — it is off by default, and it is shown to you before it is sent. Reports from the Help menu and offers after a crash carry none.
• A send that fails loses nothing. The dialog stays exactly as you left it, and “Save to file…” writes the whole report — the readable text and the raw data — ready to be mailed to support@bursucm.com.
• Settings → Other has a switch that turns the offers off. Off means the app stops asking: no dialog after an error, no question at the next start, no entry in the Help menu. It never meant “report silently” — nothing was ever sent without Send.

Version 3.1.1 ›

• Local database: signing in after updating from 2.8.3 or 2.8.4 failed with “no such column: ai_enabled”. Those versions had marked the database as fully migrated, so 3.0 and 3.1 skipped the step that adds the columns the AI assistant and SSH-key credentials need. The step now runs again on the first open, and the client checks the columns themselves instead of trusting the version stamp.
• PostgreSQL: editing or deleting a connection, credential or snippet failed with “could not determine data type of parameter”, and importing a backup was rolled back without a message. The statements now carry the type PostgreSQL needs.
• PostgreSQL: a new, empty database now opens with the same example folders, connections, credentials and snippets as a new local file.

Version 3.1.0 ›

• SSH keys are now a kind of credential. A key record keeps the private key and its passphrase sealed under your master password, with the public key and a comment beside them, and it follows the same folders, permissions, owners, backups and sync as a password. Load a key from a file and the matching .pub is picked up next to it.
• A connection can use a stored key instead of carrying its own. Pick it from the same folder tree the main window shows — a key glyph for keys, a padlock for passwords — and the authentication method follows the pick. The key is used for the target and for every bastion in the jump chain, and the editor names the credential it comes from.
• A stored key never leaks into a connection. Saving a linked connection leaves its own material untouched, switching back to manual entry restores it, and a key you may edit but not reveal is shown as a write-only placeholder rather than an empty box that a save would erase.
• Five security audit passes over the credential store. Private keys and passphrases survive a master-password change, the offline queue, backups and migration; “Copy As” never carries a secret sealed to another record and offers to unlock the vault first; “Keep my version” in sync conflicts requires the same edit right as the write itself; a replaced or deleted key forgets its old passphrase.
• AI assistant: commands written in backticks become copyable chips; connection names, notes and tags reach the model as untrusted data, not as part of its rules; a sed script runs automatically only when it plainly cannot execute or write anything — everything else asks first. Google Gemini is driven through its native SDK, and SSH usernames are validated before a connection is saved.
• Access permissions are a real tree: one table switched between connection and credential folders, indented with chevrons and folder glyphs, a search by full path, “Only granted”, Expand all / Collapse all and a counter, and “All folders” shows exactly what it grants. A checkbox now takes one click instead of two, and the user window has General and Access permissions tabs like Settings.
• The connection editor, the credential editor and the credential card are laid out in two columns with nothing to scroll: what the item is on the left, how it authenticates on the right. Fields a credential owns are dimmed, a key's card shows the key rows instead of an empty password, “+ Add credential” opens an in-app panel that explains both kinds, and subfolders sit under their own heading in the order you saved.
• Reassigning an owner works in every setup again: portal administrators are always offered, so the owner row no longer disappears when no program user may edit the folder, and an unchanged owner is left alone on save. The release pipeline now refuses to package anything that changed after publishing, accepts upstream signatures only from expected publishers, and has a second timestamp authority.

Version 3.0.0 ›

• Meet the new AI assistant for SSH and RDP. It understands the active session, explains output, investigates failures and can carry out complete administration tasks without making you copy commands between windows.
• Choose the intelligence that fits the job: OpenAI, Google Gemini, Anthropic Claude and DeepSeek are supported alongside local Ollama, LM Studio and llama.cpp models. API keys are encrypted with your master password, while model discovery, connection testing and provider switching are built into Settings.
• Automation is guarded by what a command actually does, not by a brittle list of command names. Read-only work can run automatically; anything that may change the system is clearly explained and waits for approval, with exit codes, timeouts and interactive commands handled explicitly.
• Secret Shield detects and redacts passwords, API keys, private keys, cookies, tokens, database connection strings and .env contents before text is sent to an AI provider. Chat history is encrypted locally, and provider-side storage controls are shown only where the provider supports them.
• AI chats are now a real workspace: create, rename, archive, restore and delete conversations; pin a chat to a connection; resize the panel and keep that size; see context usage; and compact a long conversation without losing its working summary.
• Give the assistant the evidence it needs. Paste a screenshot from the clipboard or attach logs, configuration files, text files and documents; text is extracted for analysis, while images are sent only to a vision-capable provider.
• When something fails, Find the cause of the error builds a focused diagnosis. Create report produces a copyable record of the problem, server and time, commands, results, changes and final checks, with detected secrets hidden.
• Risky configuration work gains a safety net: the assistant can preserve the original state, show the diff, apply a change, validate the result and offer a one-click rollback when the check fails.
• The RDP assistant combines a persistent PowerShell command channel with visual control for GUI-only work. Screenshot access is explicit, read-only actions can continue automatically, and dangerous visual actions still require confirmation and a checkpoint.
• The Windows installer and distributed application binaries are now signed with a valid Certum Authenticode code-signing certificate and trusted timestamp, so Windows can verify their publisher and integrity. The release also includes repeated security audits, more reliable cancellation and cleanup, corrected session restoration and live light/dark theme updates.

Version 2.8.3 ›

• Connecting through an RD Gateway now checks the gateway's own certificate as well as the server's. It is shown to you once and you are asked, and a gateway you did not approve means the session is not opened — that leg carries the same user name and password as the target, so it deserves the same care. Approved gateways are remembered apart from servers: saying yes to one is never read as saying yes to the other.
• The built-in remote desktop engine was rebuilt for all three architectures — 64-bit, 32-bit and ARM64 — and verifies more strictly. Where you have no fingerprint of your own for a server, the full certificate chain and the host name have to vouch for it; only a certificate you looked at and accepted yourself relaxes that.
• A remote desktop host that is not answering is now reported within seconds, and the reason is named in your own language — the connection was refused, there is no route to the host, the address does not resolve, or nothing answered in time. No tab opens to sit black while the engine waits out its own timeout, and how long the check may take is yours to set in Settings → RDP: from 3 to 30 seconds, 5 by default.
• Which engine a remote desktop connection uses is decided per connection now. “Remember my choice” stores the answer on that one connection and nowhere else; left unticked it holds for this session only, and the question comes back next time. The engine picked in Settings gives newly created connections their starting point and changes nothing that already exists, and the button that brings the question back takes effect the moment you press it — it asks again, it does not switch anything over.
• A connection created in BURSUcm for Linux or macOS now opens here on the engine it was saved with. Both clients write the built-in engine under one name, and the older spellings are still understood, so nothing has to be corrected by hand.
• The RDP, SSH and VNC pages in Settings are laid out in two columns instead of one long scrolling strip, grouped by subject — what you trust about the server on the left, what the session then does on the right. The FTPS button that forgets trusted certificates moved to Security, beside the policy it answers to, and two long SSH labels now wrap instead of being cut off.
• In the Georgian interface, the four “Continue with …” sign-in buttons are now built the same way.

Version 2.8.2 ›

• Signing in to your BURSU account now also works with Apple and GitHub, next to Google and Microsoft. The sign-in itself is unchanged — the same browser window as before — and Settings shows which service an account came in through.
• A saved password reaches a remote session only when the certificate the server presented in that very session is the one you approved. A fingerprint remembered for the address used to be enough, so a server that had since changed its certificate was still handed the secret — in RDP and in VNC alike.
• Copying files into an RDP session asks for permission at the moment the server reaches for them, the answer covers that one copy and nothing else, and the offer is withdrawn as soon as the clipboard moves on. Names carrying invisible Unicode characters — including the reversed-writing trick that makes an .exe look like a document — are refused.
• Writing through a shortcut on a server now asks first, and refuses by default. Editing through a link the administrator placed is ordinary work; a link somebody else left in a writable folder is a way to aim your write at ~/.ssh/authorized_keys, and only you can tell the two apart.
• A move onto a shortcut that fails halfway no longer takes the original with it — the file used to be gone from both ends while the error was still on screen. A file replaced on a server also keeps its own permissions instead of picking up the server's defaults, and the temporary file the write passes through is closed to everyone else before its first byte: a secret with mode 0600 stays 0600 the whole way.
• New VNC profiles ask for encrypted VeNCrypt by default, a classic-VNC password warns before it crosses an unencrypted link, and the editor now says plainly that such a password is cut to 8 characters. A profile whose port was left at 0 no longer loses the protection against a downgrade along with it.
• Private keys, jump hosts and cloud rows: a key kept on a network share or a removable device is refused before Windows can be made to authenticate to it, a jump host in a folder you are not allowed to see is no longer used to reach anything, and a cloud connection asks you before the secret follows a host, port, linked credential or jump host that was changed elsewhere.
• Local accounts and downloads: a damaged or planted password record no longer accepts any password at all, older accounts are re-hashed in place with stronger protection, and a downloaded file can no longer replace a folder on your computer without an explicit go-ahead for that path.

Version 2.8.1 ›

• A whole folder can now be moved over SFTP — with F6, with cut and paste, or by dragging with Shift held. The app asks before it starts, and the original folder is removed only after every single file has arrived: anything put into it during the transfer, and anything behind a shortcut, keeps it in place.
• Deleting a folder over SFTP no longer walks through a shortcut that points outside it. Such a link used to have its target's contents deleted — files you never selected — and the whole thing was reported as a success; the link itself is removed now.
• Find and replace in the built-in file editor: “Replace all” in a large file no longer freezes the app — 4 MB of Russian text took twelve seconds and is now instant — a search no longer matches text that was never there, and “Replace” changes exactly what was found.
• Edits waiting in the offline queue are protected: they are no longer overwritten when their encrypted file cannot be opened, a queue that fails to save now says so instead of quietly living in memory alone, and changing the master password can no longer leave them sealed under the key that no longer exists.
• File copy and paste in RDP sessions: closing a tab no longer leaves the window frozen for up to a minute, a large file is copied whole instead of arriving empty, and a paste on the server always delivers the files you copied last.
• Working with files on a server: a file edited in place keeps its permissions and its symlink, very long names no longer break a transfer, changing permissions over SFTP works for every mode, and replacing or merging a folder now says what it is about to do.
• Switching the interface language now relabels an open terminal tab as well, and the file editor, the delete confirmations and the sync-conflict window received their missing Russian, Ukrainian and Georgian translations.
• FTPS certificate pinning is verified properly instead of being skipped for a certificate the system already trusts, and a plain FTP session asks before it sends a saved password unencrypted.

Version 2.8.0 ›

• Overhauled SFTP and FTP file manager: two panes, background transfers, and a live transfer queue — pause and resume it, reorder the waiting transfers, run one immediately, or clear the finished entries.
• Files and folders can now be copied and pasted between your computer and an RDP session, in both directions and in both engines — straight through the regular clipboard.
• Closing an RDP session no longer risks hanging the connection engine: a rare deadlock in the session teardown was found and fixed.
• The SSH library was updated with a security fix (CVE-2026-48798).
• Dialog texts no longer get clipped in the Russian and Ukrainian interfaces.

Version 2.7.5 ›

• Permission to reveal a password is checked against the connection's own folder as well as the linked credential's. That same check also governs the private key, its passphrase, and whether PuTTY and WinSCP are handed the password.
• Remote sessions stay on the certificate you approved: RDP verifies the pinned certificate on every reconnect, a VNC server can no longer talk the session down to an unencrypted one, and a connection through a jump host is refused instead of being made directly when the jump host cannot be resolved.
• A password copied inside the app is handed to a remote session only if you trusted that host's certificate — the verification window now says so as part of what trusting means. A host you never trusted, or one you connected to just once, receives ordinary clipboard text only. Copied passwords also stay out of the Windows clipboard history, even while another program is holding the clipboard.
• Changing the master password now re-encrypts the writes still waiting in the offline queue as well. They used to stay sealed under the key that no longer exists, which made them unreadable on every device.
• Offline synchronisation: an edit made offline no longer comes back as a conflict against a change nobody made, and resolving a conflict with Keep my version no longer restores the values from before it.
• Choosing a different cloud database in Settings now takes effect when you press Save — the selection was accepted and then quietly dropped.
• A folder that links back to itself no longer takes the app down during an import, a backup or a file transfer, and serial connections open again when their settings were saved by another BURSUcm client.

Version 2.7.4 ›

• Right-clicking in a terminal now copies the selected text when there is a selection and pastes when there is none. This is the new default; the previous behaviour, where the right button always pastes, is still available in a connection's SSH options.
• The Georgian interface now uses one consistent term for the master password across the app, the website and the documentation.

Version 2.7.3 ›

• The master password for a cloud database can now be set right in the app: every stored password is encrypted on your device before it is uploaded, so the master password itself never leaves your computer.
• The master-password dialog gains a Generate button that creates a strong random password and shows it so you can write it down.
• Setting a master password — in the app or on the website — now also encrypts the passwords that were saved before it existed; previously they quietly stayed unencrypted.
• The database page on the website now shows a clear red warning while there is no master password, with a button to set one right there and a password generator.

Version 2.7.2 ›

• A security and reliability release: an audit of the whole codebase was carried out and every confirmed finding fixed. Backups keep stored SSH keys, the clipboard no longer leaks passwords into remote sessions, synchronisation stops losing edits, and helper programs are started only from their real install locations.
• Backups now include the SSH private keys stored in the database. They were left out silently, so a connection restored from a backup could no longer sign in with its key.
• The master password is verified properly, and a stored secret that has been damaged is reported as unreadable instead of being handed back as though it were the password.
• A web tab is given the saved credentials only for the address the connection points at — any other page opened in that tab used to receive them too.
• A file downloaded from a server can no longer disguise an executable by putting a colon in its name: the launch warning applies to every such file now.
• Clipboard in VNC sessions: it is sent only from the tab you are working in, never a password copied from the vault, and text a server puts on the clipboard is no longer forwarded on to another server.
• Synchronisation: an edit no longer disappears when a background sync and a save overlap, an offline delete no longer wipes out newer changes made by someone else, and the conflicts window now explains what the server refused and why.
• The SFTP tab no longer leaves an authenticated jump-host session open when the connection fails.
• PuTTY, WinSCP, mstsc and Explorer are started only from their real install locations, never from the current working directory.
• Pinned FTPS certificates are kept apart from SSH host keys and have their own button in Settings — clearing SSH keys used to unpin every FTPS server as well.
• Importing no longer freezes the window, renaming a folder with a credential assigned no longer leaves an empty ghost folder behind, and a .vnc file carrying an IPv6 address imports correctly.
• The diagnostic log is capped and rotated instead of growing without limit, and after signing in with a different cloud account the previous account's offline cache is no longer used.

Version 2.7.1 ›

• The terminal now colours key words in its output — errors, warnings, successes, IP and MAC addresses and links — and the highlighting can be turned off in the settings.
• A session tab can be reset from its right-click menu, reconnecting it in place instead of closing and reopening the tab by hand.

Version 2.7.0 ›

• SSH private keys can now be stored in the connection itself, encrypted with your master password. The key travels with your database, so a connection that needs a key works on every computer you sign in from — no more copying key files around or fixing paths that only existed on one machine.
• The private key box sits in the connection dialog with a Browse button that reads a key file straight in, and a Delete key button that removes a stored key for good.
• Authentication is now chosen in the connection dialog itself, and only the fields that choice needs are shown: username and password for password sign-in, the key and its passphrase for key sign-in.
• A connection that signs in with a key and has no password is no longer shown as if it had no credentials — the connection list and the details panel now mark it with a key.
• Connections and credentials record who created them, shown in the details panel. Ownership can be handed to any user allowed to edit that folder, so a leaver's entries need not stay in their name.
• Stronger protection for saved secrets: every stored password, key and two-factor code is now cryptographically tied to the entry it belongs to, so it can only ever be opened in its own place.
• The connection list now refreshes by itself when another device changes something — and only when something actually changed, so your selection and open folders stay where you left them.
• The jump-host picker lists only the connections you marked as jump hosts, and creating or deleting a folder in a cloud database is no longer slow.

Version 2.5.3 ›

• Middle-click autoscroll works again in the built-in web browser: press the mouse wheel to scroll a device panel or web page by moving the pointer.
• Web connection tabs now show the page address in the tab bar instead of a wrong "ssh admin@http://…" label; serial connections show the COM port and baud rate.
• Offline-mode hardening: on a shared computer, signing in with a different account now clears the previous account's offline cache and queued changes, so one user can never see another's cached catalog. The database health-check is also rate-limited.

Version 2.5.2 ›

• Offline mode: when the network — or the database itself — is unreachable, BURSUcm keeps working from an encrypted local copy of your catalog, including a full start with no connection at all.
• Changes made offline are queued and uploaded automatically as soon as the database is reachable again — items created offline get their real identity on sync, with linked credentials and jump hosts preserved.
• A status bar shows what is happening: red while offline (with an offline-changes counter and a Retry button), amber while synchronizing, green Synchronized for a moment when done.
• If the same item was changed both on this device and on the server, a conflict window shows the two versions side by side and lets you keep either one — passwords are never displayed there.
• Availability is detected by pinging your database itself — every 30 seconds in the background and instantly when you act — so a dead server is noticed even while the internet is fine, and recovery is picked up within half a minute.
• Signing out while offline now warns how many changes are still waiting to be uploaded.
• Works for both BURSUcloud and direct PostgreSQL databases — PostgreSQL keeps an up-to-date local mirror on this computer.

Version 2.5.1 ›

• Fixed several rare cases where a saved secret could be lost: editing or duplicating a credential no longer clears its two-factor (TOTP) code, changing your master password or turning the vault off and on no longer makes saved SSH key passphrases unreadable, and a cloud database password can no longer be silently dropped when it is saved while the vault is locked.
• Duplicating a session tab now carries the full connection — SSH key authentication, jump host, port forwards and RDP options — so the copy connects exactly like the original, key-only servers included.
• More reliable sessions: an emoji or other multi-byte character split across the network no longer drops an SSH, Telnet or Serial session, and signing out now properly closes every open session and releases the serial (COM) port for the next connection.
• Import and backup fixes: folders whose paths differ only in capitalisation no longer hide their subfolders and connections, and a portable (.db) export now always opens with the password you set for it.
• Security hardening: FTPS connections set to ignore certificate errors now pin the server's certificate on first use, a malicious FTP server can no longer write files outside the download folder, and passwords are kept off external tools' command lines.
• The terminal now shows a slim, elegant scrollbar, so scrolling back through long output is easier.

Version 2.5.0 ›

• VNC support: connect to VNC servers with TLS/VeNCrypt encryption, Tight, ZRLE and Hextile encodings, view-only mode, clipboard sharing and scaling — and import your existing .vnc files in one click.
• New two-pane SFTP file manager: open any SSH connection's files in their own tab with a side-by-side local and remote view — a live transfer queue with progress, drag-and-drop, rename, delete, new folder or file, change permissions (chmod), copy path and properties, all from a right-click menu that adapts to what you clicked.
• TOTP two-factor codes in credentials: store a Base32 or otpauth:// secret and get a live 6-digit code with one-click "Copy TOTP code", protected by the master-password vault.
• Built-in password generator in the credential dialog: choose the length and character classes and copy a strong password in one click.
• Customisable terminal appearance: pick a colour scheme (Classic, Dracula, Solarized and more), font family and size for your SSH, Telnet and Serial sessions.
• Log session output to a file: turn on per-connection logging to keep a transcript of a terminal session; the log folder is configurable in Settings.
• More native RDP options in the UI: RemoteFX, UDP transport, smart-card redirection and the GFX pipeline are now exposed in the RDP options dialog and as global defaults.
• Wake-on-LAN: send a magic packet to a connection's MAC address straight from its right-click menu to power on a sleeping machine.
• The BURSUcloud account card now shows the logo of the provider your account signs in with — Google, Microsoft or BURSUcloud.
• Cleaner menus: the File and Help menus use the standard arrow cursor with a subtle hover, and the keyboard-shortcuts panel in Settings now uses a tidy two-column layout.
• More reliable sessions and files: multi-byte (UTF-8) terminal characters are no longer garbled, serial hardware flow control works correctly, settings and database snapshots are saved atomically, and an interrupted download can no longer leave behind a half-written file that looks complete.
• Security hardening across the credential vault, BURSUcloud sign-in and remote-file access paths.

Version 2.3.1 ›

• Verify RDP servers before connecting: the first time you open an RDP connection, BURSUcm shows the server's certificate fingerprint and lets you trust and remember it — the same trust-on-first-use protection already used for SSH. If a server's certificate later changes, you're warned before connecting.
• Manage trusted RDP certificates in Settings: a new "Forget all trusted RDP certificates" button clears them independently of your SSH host keys.
• Diagnostic logs now save to your user profile folder instead of the installation folder, so logging works even when BURSUcm is installed under Program Files.
• Stronger protection for your data: encrypted backups and the local sign-in now use a stronger key-strengthening level, and the connection to bursucm.com is certificate-pinned for extra protection against network interception.
• Safer CSV export: an exported connection list can no longer let a specially crafted field run as a spreadsheet formula when the file is opened.

Version 2.3.0 ›

• Our own built-in RDP engine — BURSUrdp: the remote desktop is now drawn directly inside BURSUcm by our own RDP engine, built in-house, from one self-contained library, with no external processes and no side-by-side DLLs — giving us full control over its reliability, security and features.
• Multiple monitors for RDP: each extra monitor opens as its own movable window that you can drag onto your second screen and switch to full screen (F11). Its resolution follows the window size, and its position and full-screen state are remembered for next time.
• Smoother RDP graphics: H.264 video decoding for crisper video playback and animations.
• Fixed a black screen that could appear on the first RDP connection after launching the app.
• DOMAIN\username logins now work for RDP, and disabling Clipboard in a connection's RDP options now actually turns clipboard sharing off.
• Folders can now be renamed, moved under another folder, or promoted to the top level in one step — from the folder's Edit dialog.
• The RDP engine ships as a single self-contained file for 64-bit, 32-bit and ARM64 Windows; added a Reset engine choice button in Settings; and completed the Russian, Ukrainian and Georgian translations across the app.

Version 2.2.2 ›

• Web tabs: a page that opens a new window — a link set to open in a new tab, or a device panel's pop-up — now opens as a new tab inside the app instead of a separate browser window.
• Web tabs are safer with "ignore certificate errors": the app now remembers the panel's certificate the first time you trust it and shows its SHA-256 fingerprint. If the certificate later changes it warns you and asks again, instead of silently accepting any certificate for that host — and the exception, along with any saved login, stays scoped to that exact host.
• The RDP password is no longer placed on the RDP client's command line, where other programs on your PC could read it — it is now handed to the RDP client privately over its input stream.

Version 2.2.1 ›

• You can now arrange connections and credentials inside folders in any order you like — hover a row and use the up/down arrows. The order is saved in your database and synced everywhere: the portal, the Android app and the Linux/macOS app show the exact same order.
• All reorder arrows (folders included) now appear only while you hover the row, keeping the tree clean.
• Fixed unreadable highlighting in the terminal: modern shells (bash 5.2+) highlight pasted text until you press a key, and that highlight rendered as gray-on-gray. It now shows as dark text on a light block, like in other terminals.

Version 2.2.0 ›

• Terminal paste reworked: Windows line endings no longer arrive as an extra Enter per line (or as ^M characters inside editors and heredocs), and bracketed paste is supported — shells and REPLs that enable it receive a multi-line paste as one editable block instead of executing it line by line. The multi-line paste confirmation still guards every paste path.
• Fixed a freeze when copying text in the terminal while another program (for example the VirtualBox shared clipboard) was holding the Windows clipboard open.

Version 2.1.0 ›

• One import window for everything: bring your connections over from WinSCP (saved passwords are decrypted automatically), PuTTY, mRemoteNG, Remote Desktop Manager, Royal TS, OpenSSH config files and .rdp files — with a folder-tree preview where you tick exactly what to import and pick a target folder
• The same import and export now live on the web portal too: move connections between the app, the portal and other tools with one portable backup format
• Portable backups (.bcmbackup): export with a master password (encrypted) or without one for quick transfers — the app warns clearly when passwords would be stored in plain text; CSV export without passwords is also available
• Your cloud database now carries its own users: database users are stored inside the database itself, so a full backup or SQL dump moves them along with everything else, and changing the database handle is instant
• Sign in with Microsoft: personal and work Microsoft accounts now work everywhere Google sign-in does — on the website, in the app and during first-run setup
• SFTP file panel: a real transfer queue with progress bars and speed, drag & drop from Windows Explorer, and full folder upload/download (the whole tree is mirrored)
• FTP panel gets the same transfer queue and recursive folder transfers
• Duplicate with cwd: duplicate an SSH tab and the new session opens in the same directory you were working in
• Serial connections now auto-detect COM ports with friendly device names and a refresh button
• Friendlier first run: a redesigned database chooser with visible sign-in fields and a clear database list, PostgreSQL and local storage tucked behind buttons, a first sign-in hint showing the default admin credentials, and one-click switching between local and BURSUcloud sign-in
• Deleting a cloud database now requires typing a confirmation phrase, so a whole database can never be lost to a stray click
• An Import / Export button on the Home tab, clearer user-management labels explaining members vs database users, the database handle editable right from the user dialog, and a slimmer credentials tree that matches the connections list

Version 2.0.0 ›

• Jump host / bastion support: route an SSH connection through one or more intermediate servers (ProxyJump), with the host key verified against the real target — the terminal and the SFTP file panel both work through the tunnel; mark connections that may be used as jump hosts
• Per-connection port forwarding: define local (-L) and remote (-R) tunnels that open automatically with the session and work through a jump host too
• SSH agent support: use keys from the Windows OpenSSH Agent (named pipe) so a key passphrase is entered once in the agent instead of on every connection
• Split view: run two sessions side by side in one tab — open another server in a split or duplicate the current one — and switch between vertical and horizontal layout on the fly
• Broadcast input: type once and send the same keystrokes to every open session at once, with a bright banner showing how many sessions are receiving input
• Keyboard shortcuts throughout the app (new connection, close and switch tabs, jump to a tab, focus search, lock the vault and more), with an on/off toggle and a shortcut legend in Settings
• Command snippets: a shared, synced library of commands you send into a terminal in one click, with {placeholder} prompts filled at send time, managed from a dedicated window and from the web portal
• Full cloud team access: manage both database users and shared portal members from the app, each with per-folder connection and credential permissions (view / edit / reveal passwords)
• The database owner is always an administrator and can no longer be demoted or removed, so a cloud database is never left without an admin
• Live status dot on every session tab — yellow while connecting, green when live, red when the connection drops — so you can spot a dead session without opening the tab
• One-click reconnect: when a session drops unexpectedly, a Reconnect button (press Enter) appears right inside the session instead of having to close and reopen it
• Safer paste: pasting multi-line text into a terminal now asks for confirmation with a preview, protecting against hidden commands copied from a web page
• Plus polish across the board: a new Other tab in Settings, cleaner action buttons and a sticky footer on the web portal, and numerous smaller fixes

Version 1.7.5 ›

• Our built-in RDP engine is now the primary one, with Microsoft RDP still available as an alternative
• Fixed the app interface freezing during an active RDP session — the sidebar, panel and keyboard shortcuts now stay responsive
• Embedded RDP connections are now much more reliable (fixed a timeout that sometimes prevented a session from connecting)
• Fixed local drive redirection — your drives now actually appear on the remote desktop
• Fixed printer and microphone redirection (previously enabling them could break the connection entirely)
• Clipboard redirection can now be turned off correctly for an individual connection
• New: a friendly notice before your first embedded RDP connection (with a "don't show again" option)
• Native RDP now closes the tab by itself when the server ends the session (instead of leaving a gray window)
• The bundled RDP engine is now a single self-contained file (no DLLs) for x64/x86/ARM64 — including 32-bit Windows for the first time
• Keyboard and mouse focus is now kept after switching monitors
• Full Screen now expands correctly from Full Window

Version 1.7.3 ›

• Full Screen now shows your open session tabs in the top toolbar — switch, reorder by dragging, close, and right-click for Duplicate / Pin / Close, all without leaving full screen
• Duplicating a connection now opens the copy right after the original instead of at the end
• Connection and credential pages now have a "Go back to open sessions" button that returns you to the session you came from
• Disconnecting a session now returns to the Welcome tab instead of a blank detail page
• Removed the close (X) button from the full-screen and full-window toolbars to avoid accidentally quitting the app — use Disconnect or Exit
• Fixed white flicker while dragging session tabs, and the full-screen toolbar no longer lingers after minimizing and restoring
• Crisper buttons (no more blurry labels) and a roomier Settings window

Version 1.7.2 ›

• Connection details now show the linked credential's name instead of an internal ID, and add a Copy button next to the host address
• New Full Screen mode: a session fills the whole screen with an auto-hiding top toolbar (pin it to keep it visible) — press F11 to exit
• The previous maximized behaviour is now called Full Window, with Minimize and Close buttons in its toolbar
• Improved Georgian translation and minor fixes

Version 1.7.1 ›

• Home dashboard: the Vault card's Security button now opens Settings directly on the Security tab
• Home dashboard: the Administrator card now opens user management directly
• Minor visual and behaviour polish

Version 1.7.0 ›

• New Home dashboard tab: a pinnable, closable welcome screen with quick stats, recent and favorite connections, vault status and one-click actions
• Restore last session: reopen the connections that were open when you last closed the app — on demand, or automatically on startup (Settings)
• Automatic update notifications: the app can check for a newer version and let you know, with a one-click link to download (toggleable in Settings)
• Click any connection while a session is open to view its details page without losing your open tabs
• Favorites: the star now updates instantly and clearly shows when a connection is favorited
• Fixed: editing a connection now reliably saves cleared fields (tags, notes, and more)
• Refined empty-state graphics and overall visual polish

Version 1.5.9 ›

• The app now bundles the .NET 8 runtime — no separate .NET install required; just download and run
• Much faster startup: ReadyToRun precompilation plus optimized BURSUcloud loading (the catalog is now fetched once and in parallel)
• Native builds for x64, x86 and ARM64 — the installer automatically installs the right one for your PC
• Security: the SFTP file panel now always verifies the SSH host key (no fallback that could skip verification)
• Security: BURSUcloud connections to any non-local host are forced to HTTPS, so credentials are never sent over plain HTTP
• Minimum password length raised to 8 characters
• Improved Russian, Ukrainian and Georgian translations

Version 1.5.8 ›

• App settings are now stored fully encrypted on disk with Windows DPAPI (tied to your Windows account) instead of a readable file — including cloud database identifiers and the remembered vault key. Existing settings are migrated automatically

Version 1.5.7 ›

• Folder order and expanded/collapsed state are now stored in the database and synced across all your devices and the web portal, instead of being saved per-computer
• Fixed FTP/FTPS connections and a crash that could happen when pressing Disconnect
• Unexpected errors no longer close the app — they are caught and can be logged for diagnostics

Version 1.5.3 ›

• Complete interface localization — every dialog and message (SSH, RDP, FTP and Serial options, the SFTP file panel, BURSUcloud sign-in and the master-password screens) is now fully translated into Russian, Ukrainian and Georgian
• New database snapshot backup: export or import a master-password-protected snapshot of your database; local mode can also import an existing SQLite database file
• Full FTP and FTPS support — a new FTP connection type with explicit/implicit TLS, passive mode and a dual-pane file browser
• Various stability fixes and interface polish

Version 1.5.0 ›

• Major architecture upgrade: BURSUcloud connections no longer go through an SSH tunnel — the app now talks to our own purpose-built, zero-knowledge HTTPS API
• Your master password never leaves your device: all encryption and decryption happens locally, the server only ever sees ciphertext
• Faster, more reliable BURSUcloud sync — no more tunnel handshakes, dropped connections, or SSH key management for end users
• Simplified sign-in: log into BURSUcloud with your email/password or Google account directly, no manual connection tokens to copy or paste
• Hardened server side: removed the legacy token-based pairing system entirely, closing off an old attack surface
• Smaller, cleaner connection setup dialog now that tunnel/token configuration is gone
• Numerous internal stability and security improvements across the BURSUcloud client and server

Version 1.1.2 ›

• Security: updated the bundled SQLite engine to address a High-severity advisory (GHSA-2m69-gcr7-jv3q)

Version 1.1.1 ›

• New Serial (COM port) connections with a full options dialog (baud, data bits, parity, stop bits, flow control)
• New Web (HTTP/HTTPS) connections in an embedded browser tab, with saved username/password and a mini toolbar
• Connection details now show the username and password with Copy buttons and a Show/Hide toggle, including credentials inherited from a saved login
• Clear prompt to enter the master password when a saved password is locked
• Prettier connection-type picker with per-type icons, matched on the BURSUcloud web portal
• Various fixes and cleanup (correct icons, encoding, and translations)

Version 1.1.0 ›

• Per-connection SSH options (key auth, timeouts) and per-connection RDP options (display, performance, redirection, security), each with global defaults in Settings
• SSH host-key verification (Trust On First Use), like PuTTY, to protect against man-in-the-middle attacks
• Terminal right-click modes: paste, smart copy/paste, or a Copy/Paste context menu
• Standard ANSI terminal colours so Midnight Commander and other TUI apps render correctly
• Sessions now close automatically when the remote side disconnects (Ctrl+D / exit)
• Folder highlight on click and "Add connection" directly into the selected folder
• Redesigned BURSUcloud account card with Google / BURSUcloud provider logos and automatic database loading
• Removed the old bundled RDP engine; RDP uses the native Windows control plus "Open with Remote Desktop"

Version 1.0.1 ›

• Minor security fixes

Version 1.0.0 ›

• First public release of BURSU Connection Manager. Windows installer (Any CPU)