# New release: 5.14.0 ~ "Sunshine" | Browser Extension & API

**URL:** <https://community.passbolt.com/t/new-release-5-14-0-sunshine-browser-extension-api/14575>\
**Category:** Announcements\
**Created:** [July 28, 2026, 2:49pm UTC](https://community.passbolt.com/t/new-release-5-14-0-sunshine-browser-extension-api/14575 "2026-07-28T14:49:52Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Akanksha](https://avatars.discourse-cdn.com/v4/letter/a/b4bc9f/32.png) [@Akanksha](https://community.passbolt.com/u/Akanksha)\
**Post date:** [July 28, 2026, 2:49pm UTC](https://community.passbolt.com/t/new-release-5-14-0-sunshine-browser-extension-api/14575/1 "2026-07-28T14:49:52Z")

</div>

# **What’s in Passbolt 5.14.0?**

Passbolt 5.14.0 Sunshine introduces explicit permission confirmation prompts to improve control over shared resources. This release also addresses a security issue related to MFA policy enforcement and includes usability improvements.

## **Improved Sharing Transparency**

Users now receive an explicit confirmation dialog before creating items in shared folders or editing shared resources. This provides full permission transparency before changes take effect, preventing accidental privilege exposure.

Previously, when a group appeared in the access list, its individual members were not visible, making it difficult to assess the actual reach of shared access. Group members are now displayed directly within the dialog before finalizing permission changes.

As the first stage of a broader security initiative, future updates will extend these confirmations to folder move operations and offer enhanced permission preview dialogs.

 ![Fig. Permission Confirmation Dialog](https://canada1.discourse-cdn.com/flex031/uploads/passbolt/original/2X/1/17b2718596cda25bddecd2b761473c661eda2a26.jpeg)

## **Edition and Subscription Management**

The Passbolt edition is now visible in the application footer, and Terms and Credits links have moved to the main navigation menu.

 ![Fig. Passbolt Edition in the footer](https://canada1.discourse-cdn.com/flex031/uploads/passbolt/original/2X/d/d0a4225bf311bf70e2e177e325f8de99820842e7.jpeg)

 ![Fig. Terms and Credits in the navigation menu](https://canada1.discourse-cdn.com/flex031/uploads/passbolt/original/2X/d/d5f2c917f63c1f73c9ba5b33c193896e8af414e0.jpeg)

Additionally, whenever administrators downgrade to the Community edition they will be explained the impact on data and features beforehand so they can make an informed decision.

 ![Fig. Downgrade to Passbolt Community Edition in the Organisation settings](https://canada1.discourse-cdn.com/flex031/uploads/passbolt/original/2X/c/c6f01dc77524605c59d6f324886365d64c4c40f6.png)

## **More Relevant Resource Suggestions**

Suggested resources in the browser extension are now ranked using an improved URL relevance algorithm. Exact URL matches appear first, followed by parent paths and domain matches, allowing users to select the correct credentials faster and with fewer autofill errors.

## **Security Improvements**

This release addresses a low-severity vulnerability that allowed a user with a valid account and MFA access to remember their device for a month even when the organisation had disabled that option. Reported by security researcher **Damir** , the issue affected Passbolt API versions up to 5.13.0 and is now enforced correctly at the API level in 5.14.0.

## **Additional Improvements**

Passbolt Pro extends email-free account setup and recovery to OIDC and ADFS SSO providers, improving onboarding by integrating directly with enterprise identity management systems.

Finally, this release also lays the foundational backend architecture required for upcoming offline functionality.

## **Conclusion**

Many thanks to **Damir** and everyone who provided feedback, reported bugs, and contributed to making Passbolt better!

**Platform** : Browser Extension & API  
**Name** : Sunshine | Browser Extension & API

**Release notes** : [https://www.passbolt.com/changelog/api-bext/sunshine-browser-extension-api-2](https://www.passbolt.com/changelog/api-bext/sunshine-browser-extension-api-2)  
**Release Date** : July 28, 2026  
**Song** : 🎶[Sunshine](https://www.youtube.com/watch?v=JfP3sB-hke4) 🎶

Enjoy Passbolt? Leave us a ⭐⭐⭐⭐⭐ review:  
[Chrome](https://chromewebstore.google.com/detail/passbolt-open-source-pass/didegimhafipceonhjepacocaffmoppf) |[Firefox](https://addons.mozilla.org/en-US/firefox/addon/passbolt/) |[Edge](https://microsoftedge.microsoft.com/addons/detail/passbolt-open-source-pa/ljeppgjhohmhpbdhjjjbiflabdgfkhpo) |[iOS](https://apps.apple.com/fr/app/passbolt-password-manager/id1569629432) |[Android](https://play.google.com/store/apps/details?id=com.passbolt.mobile.android&pli=1) |[Windows](https://apps.microsoft.com/detail/9pfxs2wvkvpb?hl=en-US&gl=US)

Thank you to everyone who tested, reported, and shaped this release.  
Your feedback helps keep Passbolt simple, secure, and open. ❤

---

<div class="post-metadata">

**Author:** ![Kuma](https://avatars.discourse-cdn.com/v4/letter/k/a587f6/32.png) [@Kuma](https://community.passbolt.com/u/Kuma)\
**Post date:** [August 10, 2026, 4:45am UTC](https://community.passbolt.com/t/new-release-5-14-0-sunshine-browser-extension-api/14575/3 "2026-08-10T04:45:18Z")

</div>

Good morning, I’ve noticed that with server version 5.14.0 and the browser extension 5.14.2 (Free Edition), there’s an issue with creating passwords in Chrome. It returns the following error: “Missing or incorrect CSRF cookie type.”  
This doesn’t happen in Firefox. Has anyone else encountered this problem?
