🚀 SesWi v4.0.2 — Hotfixes & Reliability

Aaa little bug fixes

🚀 SesWi v4.0.0 — Your sessions, your 2FA, your rules. On any browser.

Hey everyone! 👋

v4.0.0 is the biggest SesWi update yet — rebuilt engine room, hardened security, and
Firefox finally runs the same experience as Chrome. No compromises.

---

🦊 Firefox is here

SesWi now ships Manifest V3 for both browsers from one codebase. Alt+Q works instantly on either.
The popup fits. The footer stays visible. It just works.

🔐 2FA, done right

• Import from anywhere — Aegis (encrypted or plain), Google Authenticator migration, OTPAuth URIs from Bitwarden, Ente, and others. Drop a file into Backup & Restore, paste it into Add Session, or use the dedicated modal — all three paths handle it.
• Cards you can actually use — colored avatars, large codes, clear Edit/Delete buttons. One shared expiry timer instead of per-card ticking.
• Batch delete — select multiple, delete once. Atomic behind the scenes, no race conditions.

📦 Smarter sessions

• Import sessions + 2FA together — SesWi figures out what's in your file and restores everything. No need to guess which tab to use.
• Domain cleanup — wipe all saved sessions for a domain with one confirmation.
• Restores that actually restore — no more silent zero-restore "success" when merging cookie backups.

🛡️ Security that means it

We ran a 10-point audit and fixed every finding:

• Master Password cache auto-purges at exactly 5 minutes
• Userscript actions locked to the tab that requested them
• Aegis imports hardened: wrong password leaks nothing, oversized scrypt rejected, corrupted slots skipped cleanly
• 2FA edits validated before saving — no more corrupted entries
• Clean Current Tab stays scoped to the site you asked for

✨ Polish you'll feel

• Zero native alert()/confirm() popups — every dialog is SesWi's own
• Ctrl+N for new session, Alt+Q to toggle — rock solid on both browsers
• Backup & Restore shows real counts the moment it opens
• Wrong password? Field stays put — no remove-and-re-add dance

🚀 Get it

git checkout v4.0.0

zip first all the content inside chrome/firefox folder.
Chrome: Load unpacked from .output/chrome-mv3
Firefox: Load temporary add-on from .output/firefox-mv3

NOTES
Upgrading from v3.4? Just load the new build. (v3.3 or earlier: export sessions as JSON first.)

---

Thank you to everyone who tested, reported bugs, and pushed for Firefox MV3. SesWi v4 wouldn't exist without you. 🧡

— risunCode & the SesWi team

SesWi v3.4, New Security & Feature Enhancement

v3.4.0 (2026-05-14)

Breaking Changes

• Web Crypto API Only — Encryption now uses native Web Crypto API (AES-256-GCM) exclusively
  • SJCL library support has been removed
  • Users upgrading from v3.3.0 or earlier must export sessions as JSON first, then re-import after updating
  • OWI files from previous versions are no longer compatible

New Features

• Cookie Editor Export — New export format compatible with Cookie Editor extension
  • Available in Quick Actions modal alongside JSON and Netscape formats
  • Includes hostOnly, session, storeId, and sameSite fields
• Update Checker — Automatically checks GitHub releases for new versions
  • Badge appears in footer when update is available
  • Checks once per 24 hours (cached to avoid API rate limits)
  • Click badge to go directly to release page

Security

• Native AES-256-GCM — Replaced SJCL with Web Crypto API
  • PBKDF2 with SHA-256 for key derivation (100k iterations)
  • Recovery answers use 200k iterations (compensate for lower entropy)
  • 12-byte IV, 16-byte salt, authenticated encryption
• Cleaner codebase — Removed ~100 lines of legacy SJCL compatibility code

SesWi V3 - New UI, New Logic and features

Changelog

v3.0.0 (2026-02-07)

New Features

• UI Overhaul — New macOS-inspired "Traffic Lights" modal design with smooth entry/exit animations
• Delete Expired Sessions — New batch action in Manage tab to find and delete sessions with expired auth cookies
• Edit Session Modal — Proper modal dialog for editing session names (replaces browser prompt)
• Replace Session Modal — Safe confirmation dialog for replacing sessions (replaces browser confirm)
• Batch OWI Export — New modal for password-protected batch exports
• Saved Data Card — New card in Session Actions showing cookies/localStorage/sessionStorage counts
• Repo Info Card — Added repository and author information card in the popup

UI Improvements

• Cleaner Session Cards — Removed data counts from cards, now shows only expiration status
• Compact Expiration Info — New format: "Expiration info (Valid: 48d)" with expand toggle
• Domain Badge — Shows simplified domain (e.g., "facebook" not "facebook.com") next to Visit button
• Better Layout — URL on left, timestamp on right in session cards
• Auto Domain Grouping — Sessions grouped by domain instead of manual tags
• Consistent Icons — All favicons now have a unified light grey background for better visibility
• Enhanced Add Session Button — Improved button styling with better visibility and hover effects

Browser Support

• Only chromium based for now