sunerpy · Oct 22, 2026 · Oct 22, 2026 · Oct 22, 2026
@@ -75,7 +75,8 @@ made-up site; a sharper version plays on the [website](https://firlab.app/lockra
 - **Passwords** (from 0.10.0): logins with a user name and an email address, a password, sites
   matched by domain, host or a pattern, notes, custom fields, tags, groups and a linked code; a
   protection level per login (fill directly, verify first, or not for the extension) and a
-  password history. A generator makes random passwords and passphrases to sites' password rules.
+  password history. A generator makes random passwords and passphrases to sites' password rules;
+  from 0.16.3 it has a page of its own beside the logins, with its history.
   Logins import from Chrome, Edge, Firefox, Safari, Bitwarden, 1Password, LastPass and KeePass
   (KDBX 4), and export to KeePass or a plain CSV file. The phone shows, copies and edits them
   ([passwords guide](https://firlab.app/lockra/passwords/)).
@@ -91,7 +92,10 @@ made-up site; a sharper version plays on the [website](https://firlab.app/lockra
   itself, and matching can count the port too. From 0.16.0, matching can go by the full host (as
   the default, for single sites, or from the popup), a code field that masks the code as a password
   field does gets the code too, and a code sent as a password can be linked to its login instead of
-  saved. Lockra decides every fill, and can keep running in the tray for it. Chrome, Edge and Brave load
+  saved. From 0.16.3, `Alt Shift L` opens Lockra's menu on any field, a password page that only
+  shows the user name gives it to the login saved there, a login saved without a user name gets it
+  at the next sign-in, and a form that also asks for a code is left to you when the login has none
+  linked. Lockra decides every fill, and can keep running in the tray for it. Chrome, Edge and Brave load
   it unpacked from the folder Lockra keeps it in, and Lockra updates it there with itself (from
   0.11.1); the Edge Add-ons and Firefox Add-ons listings, which Firefox needs,
   are not live yet ([extension guide](https://firlab.app/lockra/passwords/browser)).
@@ -116,7 +120,8 @@ made-up site; a sharper version plays on the [website](https://firlab.app/lockra
   auto-lock, and screen-capture protection while a secret is shown (Windows and macOS).
 - **Updates**: the title bar tells you when a new version is out and opens the update dialog
   (its notes, the download with its speed, the restart); with automatic updates on, Lockra
-  downloads it at start and installs it when you restart. A package is installed only when it
+  downloads it at start (and, from 0.16.3, every 4 hours while it runs) and installs it when you
+  restart. A package is installed only when it
   carries Lockra's signature, through the package Lockra was installed from (deb, rpm, AppImage,
   the Windows installer or the macOS app).
 - **Interface**: eight themes (Clear sky by default, which follows the system's light or dark

@@ -62,7 +62,8 @@ Lockra 是一个两步验证器，也是密码管理器，支持 Windows、macOS
   每种方式都要再次输入主密码，二维码旁边显示当前验证码，方便与手机核对。
 - **密码**（0.10.0 起）：登录项包含用户名和邮箱、密码、按注册域、主机或模式匹配的网址、备注、自定义字段、
   标签、分组和关联的验证码；每个登录项有自己的保护级别（直接填充、填充前验证，或不交给扩展）和密码历史。
-  密码生成器可以按网站的密码规则生成随机密码和口令。登录项可以从 Chrome、Edge、Firefox、Safari、Bitwarden、
+  密码生成器可以按网站的密码规则生成随机密码和口令；自 0.16.3 起，它在「密码」页有单独的页面，并显示生成历史。
+  登录项可以从 Chrome、Edge、Firefox、Safari、Bitwarden、
   1Password、LastPass 和 KeePass（KDBX 4）导入，并导出为 KeePass 数据库或明文 CSV 文件。手机上可以查看、复制和
   编辑登录项（[密码指南](https://firlab.app/lockra/zh/passwords/)）。
 - **浏览器扩展**（Windows、macOS 和 Linux 上的 Chrome、Edge 和 Firefox）：扩展本身不保存密码，而是经端到端
@@ -71,6 +72,10 @@ Lockra 是一个两步验证器，也是密码管理器，支持 Windows、macOS
   开启「填充后自动提交」时，填入密码后才提交，关联了验证码的登录项则在填入验证码后才提交。扩展会提示保存和
   更新密码，也可以关闭浏览器自带的保存密码提示，只由 Lockra 提示。自 0.12.0 起，菜单匹配到多个登录项时可以搜索，
   登录项可以在菜单或弹窗中确认后删除；验证码没有自动填入时，可以从弹窗填入或复制；匹配时还可以要求端口一致。
+  自 0.16.0 起，匹配可以按完整域名（作为默认、为单个网站设置，或在弹窗中切换），把验证码显示成密码框的
+  验证码框也能填入，作为密码提交的验证码可以关联到它的登录项而不是被保存。自 0.16.3 起，`Alt Shift L`
+  可以在任意输入框打开 Lockra 菜单；只以文字显示用户名的密码页会把用户名交给在那里保存的登录项，没有用户名的
+  登录项会在下次登录时补上；表单还要求验证码、而登录项没有关联验证码时，留给你填写和提交。
   每一次填充都由 Lockra 决定，Lockra 可以为此留在托盘中运行。Chrome、Edge 和 Brave 以解压方式加载 Lockra 保存扩展的文件夹，Lockra 更新时会一并更新它（自 0.11.1 起）；Edge 加载项和 Firefox 附加组件的页面
   尚未上线，Firefox 只能从后者安装（[扩展指南](https://firlab.app/lockra/zh/passwords/browser)）。
 - **全局快捷搜索**（0.10.0 起，Windows、macOS 和 Linux）：在任何应用里按下自己设定的组合键唤出命令面板，复制
@@ -87,7 +92,7 @@ Lockra 是一个两步验证器，也是密码管理器，支持 Windows、macOS
 - **安全**：Argon2id 与 XChaCha20-Poly1305，可选用系统钥匙串解锁，自动锁定，显示密钥时阻止截屏（Windows 和
   macOS）。
 - **更新**：有新版本时，标题栏会提示，并可打开更新对话框（更新内容、带速度的下载进度、重启）；开启自动更新后，
-  Lockra 在启动时下载新版本，重启时完成安装。只安装带有 Lockra 签名的安装包，并通过 Lockra 原来的安装方式
+  Lockra 在启动时下载新版本（自 0.16.3 起，运行期间还会每 4 小时检查一次），重启时完成安装。只安装带有 Lockra 签名的安装包，并通过 Lockra 原来的安装方式
   （deb、rpm、AppImage、Windows 安装程序或 macOS 应用）完成安装。
 - **界面**：八套主题（默认「澄空」，跟随系统的浅色与深色）、八种强调色，列表或卡片视图，中英文界面，
   命令面板（`Ctrl K`），全程可用键盘操作。在电脑上，托盘图标（0.10.0 起）可以打开窗口、全局快捷搜索、设置和

@@ -56,7 +56,8 @@ version and downloads it at once. Lockra 0.2.0's **Check for updates automatical
 so it is not carried over, and from 0.3.2 a switch turned on under 0.3.0 or 0.3.1 is off once as
 well: turn on **Automatic updates** again if you want them.
 
-<StatusTag status="building" /> While Lockra runs, it also looks again 4 hours after each check
+<StatusTag status="available" /> From version 0.16.3, while Lockra runs, it also looks again 4 hours
+after each check
 and downloads a newer version in the background; these later looks never install it. Once a
 version is downloaded, nothing more goes online until the restart: choose **Restart to update** in
 the title bar and Lockra restarts into the new version.

@@ -161,7 +161,7 @@ home:
             status: available
             link: /security/#secrets-on-screen
           - title: Signed updates
-            body: The title bar tells you when a new version is out, or downloads it at start if you turn on automatic updates, and Lockra installs only a package that carries its signature.
+            body: The title bar tells you when a new version is out; with automatic updates on, Lockra downloads it at start and every 4 hours while it runs, and installs only a package that carries its signature.
             status: available
             link: /guide/updates#updating
 
@@ -273,7 +273,7 @@ home:
         detail: Each device writes encrypted files to the Lockra relay, bucket or WebDAV folder you set up. None of them can read an account, a secret or a device name.
       - name: The network
         value: Updates and your sync
-        detail: Lockra asks GitHub for the newest version when you check, or at start if you turn on automatic updates; nothing from your accounts goes with it. There is no Lockra account or telemetry, and fonts and images ship with the app.
+        detail: Lockra asks GitHub for the newest version when you check, or at start and every 4 hours while it runs if you turn on automatic updates; nothing from your accounts goes with it. There is no Lockra account or telemetry, and fonts and images ship with the app.
       - name: The browser extension
         value: Lockra on this computer only
         detail: It asks Lockra on the same computer, over a connection encrypted between the two, keeps no passwords and sends nothing over the network.

@@ -157,7 +157,9 @@ Shortcuts**).
 
 ### Lockra's menu on any field
 
-<StatusTag status="building" /> On a page whose fields Lockra cannot tell, no menu opens by the
+<StatusTag status="available" /> Available from version 0.16.3.
+
+On a page whose fields Lockra cannot tell, no menu opens by the
 field and `Ctrl Shift L` finds no form to fill. Click into the field and press `Alt Shift L`
 (`⌥ Shift L` on macOS): Lockra's menu opens there with the logins that match the site (by its root
 domain, or the full host where you chose so), and `Enter` fills the chosen one. A field Lockra
@@ -197,8 +199,8 @@ after filling** on:
   one page, once both are; with the code on the next page, the password page waits for your **Sign
   in**, and the code's page is submitted once the code is filled.
 
-<StatusTag status="building" /> A form that also asks for a code is not submitted for a login
-without a linked code: the code and **Sign in** are yours. Link the code to the login and Lockra
+<StatusTag status="available" /> From version 0.16.3, a form that also asks for a code is not
+submitted for a login without a linked code: the code and **Sign in** are yours. Link the code to the login and Lockra
 fills it too ([Adding and editing a login](/passwords/#adding-and-editing-a-login)).
 
 Lockra submits as Enter would, with a click on the form's submit button, passing over buttons such
@@ -227,7 +229,9 @@ filled this way: fill it again as usual. A fill as the page loads has no next pa
 
 ### Fields named only by their label
 
-<StatusTag status="building" /> Lockra also reads the label a page shows for a field (a
+<StatusTag status="available" /> Available from version 0.16.3.
+
+Lockra also reads the label a page shows for a field (a
 `<label>`, or the text the field points at), not only the field's own names. A user name or code
 field that names nothing itself, as on the sign-in of AWS IAM Identity Center, then opens the
 menu, and its sign-in can be saved.
@@ -304,7 +308,9 @@ already.
 
 ### When the page only shows the user name
 
-<StatusTag status="building" /> Some password pages have no field for the user name and only show
+<StatusTag status="available" /> Available from version 0.16.3.
+
+Some password pages have no field for the user name and only show
 it as text, as AWS IAM Identity Center does when it remembers you. The extension then takes that
 text as the user name: **Save to Lockra?** shows it, where it can still be changed, and a login
 added with **Use a generated password** on such a page gets it too.
@@ -339,7 +345,9 @@ one of the site's logins: its current code, or the one before or after it.
 
 ### A login saved without a user name
 
-<StatusTag status="building" /> Some sign-in pages show the user name only as text, without a
+<StatusTag status="available" /> Available from version 0.16.3.
+
+Some sign-in pages show the user name only as text, without a
 user-name box (AWS IAM Identity Center's password page once it remembers you), and a login saved
 on such a page may have no user name. When a later sign-in brings the user name (typed on the page
 before, or shown on the page) and the site has a login with the same password but no user name,

@@ -184,10 +184,11 @@ device only: it is not synced and not in backups.
 
 ### The Generator page
 
-<StatusTag status="building" /> The password generator is getting a page of its own, a part of
-the Passwords page: **Generator**, beside **Add login** at the top of the Passwords page, will open
-it, and so will **Add login › Generate a password…**, `Ctrl G` and the command palette; **Back to
-Passwords** at its top goes back. The page shows the generator, making passwords for no site, with
+<StatusTag status="available" /> Available from version 0.16.3.
+
+The password generator has a page of its own, a part of the Passwords page: **Generator**, beside
+**Add login** at the top of the Passwords page, opens it, and so do **Add login › Generate a
+password…**, `Ctrl G` and the command palette; **Back to Passwords** at its top goes back. The page shows the generator, making passwords for no site, with
 **Copy** beside **Generate again**. Under it, **Generated passwords** says how many passwords the
 history holds, which ones go into it and how long they are kept. **Show the history…** lists them
 after the master password, Touch ID or Windows Hello, each with when it was made and the site it

@@ -28,8 +28,8 @@ Automatic updates** on, it also asks 10 seconds after each start and downloads a
 the background. Nothing from your accounts, your vault or your settings goes with these requests; GitHub sees the request and the address it came from, as for any download
 ([Updating](/guide/updates#updating)).
 
-<StatusTag status="building" /> With **Automatic updates** on, Lockra also asks again every 4 hours
-while it runs, until a downloaded version waits for the restart.
+<StatusTag status="available" /> From version 0.16.3, with **Automatic updates** on, Lockra also asks
+again every 4 hours while it runs, until a downloaded version waits for the restart.
 
 With sync on (from version 0.4.0), each device writes encrypted files to the S3-compatible bucket
 or WebDAV folder you set up and reads the other devices' files from there, and contacts nothing else for it. The

@@ -86,6 +86,6 @@ The browser's own settings change the first two: `chrome://extensions/shortcuts`
 `edge://extensions/shortcuts` in Edge, and **Manage Extension Shortcuts** in Firefox's add-ons
 manager.
 
-<StatusTag status="building" /> `Alt Shift L` (`⌥ Shift L` on macOS) opens Lockra's menu on the
-focused field, any field, with the logins that match the site; the browser's settings change it
+<StatusTag status="available" /> From version 0.16.3, `Alt Shift L` (`⌥ Shift L` on macOS) opens
+Lockra's menu on the focused field, any field, with the logins that match the site; the browser's settings change it
 too ([Lockra's menu on any field](/passwords/browser#lockra-s-menu-on-any-field)).
@@ -31,7 +31,7 @@
 
 「设置 › 通用 › 自动更新」默认关闭。开启后，Lockra 在启动 10 秒后查找新版本，并在后台下载；下载完成后，标题栏显示「重启以更新」。在你选择之前，或在下次启动之前，不会安装任何内容：如果你直接退出 Lockra，下次启动时它会安装已下载的版本，然后重启。比已下载版本更新的版本会再次等待你确认。开启此开关时，会立即查找并下载新版本。Lockra 0.2.0 的「自动检查更新」只检查不下载，因此不会沿用；从 0.3.2 起，在 0.3.0 或 0.3.1 中开启的开关也会关闭一次：如需自动更新，请重新开启「自动更新」。
 
-<StatusTag status="building" /> Lockra 运行期间，每次检查结束 4 小时后会再检查一次，有新版本就在后台下载；这些检查不会安装新版本。下载完成后，在重启之前不再联网检查：选择标题栏的「重启以更新」，Lockra 会重启并完成更新。
+<StatusTag status="available" /> 自 0.16.3 版起，Lockra 运行期间，每次检查结束 4 小时后会再检查一次，有新版本就在后台下载；这些检查不会安装新版本。下载完成后，在重启之前不再联网检查：选择标题栏的「重启以更新」，Lockra 会重启并完成更新。
 
 ### 检查时发送的内容
 

@@ -161,7 +161,7 @@ home:
             status: available
             link: /zh/security/#屏幕上的密钥
           - title: 经过签名校验的更新
-            body: 有新版本时，标题栏会提示；开启自动更新后，Lockra 在启动时下载新版本，并且只安装带有 Lockra 签名的安装包。
+            body: 有新版本时，标题栏会提示；开启自动更新后，Lockra 在启动时和运行期间每 4 小时下载新版本，并且只安装带有 Lockra 签名的安装包。
             status: available
             link: /zh/guide/updates#更新
 
@@ -273,7 +273,7 @@ home:
         detail: 每台设备把加密文件写入你设置的 Lockra 中继、存储桶或 WebDAV 文件夹。它们都无法读取任何账号、密钥或设备名称。
       - name: 网络
         value: 更新与你的同步
-        detail: 你检查更新时，或开启自动更新后每次启动时，Lockra 向 GitHub 查询最新版本，不发送账号中的任何内容。Lockra 没有用户账户或遥测，字体和图片都随应用提供。
+        detail: 你检查更新时，或开启自动更新后在每次启动时和运行期间每 4 小时，Lockra 向 GitHub 查询最新版本，不发送账号中的任何内容。Lockra 没有用户账户或遥测，字体和图片都随应用提供。
       - name: 浏览器扩展
         value: 只连接本机的 Lockra
         detail: 它向同一台电脑上的 Lockra 请求，两者之间的连接经过加密；扩展不保存密码，也不经网络发送任何内容。