Password Depot for Android — RC5 QA Test Report
Build 20.0.0 RC5 (2004) · Release Candidate 5 · Regression of 20.0.0 RC4 · RC4 QA Report · 2026-09-28 · Generated 9/30/2026, 6:48:07 PM
1 · Environment
| Device / Android | Phone: Galaxy S22, Android 15, Tablet: T33-F11, Android 14 |
|---|
| Keyboard | Samsung Keyboard 5.9.12, Gboard |
|---|
| Browser(s) | Chrome 154 |
|---|
| Build line | 20.0.0 RC5 (2004) |
|---|
| Tester | Sheva Ma |
|---|
| Date started | 2026-09-29 |
|---|
2 · Summary
| Block | Total | ✅ Pass/Fixed | ❌ Fail | 🚫 Blocked | ⏭️ Skip | 🔄 In Progress | ⬜ Pending |
|---|
| Part 0 — New Bugs Discovered (Manual Entry — this round) | 10 | 0 | 0 | 0 | 0 | 0 | 10 |
| Part 1 — RC4 FAILURES Re-Test | 1 | 1 | 0 | 0 | 0 | 0 | 0 |
| Part 2 — RC4 NEW BUGS Re-Test | 2 | 2 | 0 | 0 | 0 | 0 | 0 |
| Part 3 — RC4 CLOSED BUGS Regression (11) | 11 | 11 | 0 | 0 | 0 | 0 | 0 |
| Part 4 — RC5 Smoke: Google Play Readiness | 7 | 7 | 0 | 0 | 0 | 0 | 0 |
| Part 5 — Security & MDM | 4 | 4 | 0 | 0 | 0 | 0 | 0 |
| Part 6 — RC1 Reported Bugs Re-Verification (from RC1 report) | 11 | 11 | 0 | 0 | 0 | 0 | 0 |
| Part 7 — Beta21 / RC1 Regression (R18-1 – R18-7) | 7 | 7 | 0 | 0 | 0 | 0 | 0 |
| Part 8 — Core Pass: A1–A10 (Every Tester, Every Device) | 10 | 10 | 0 | 0 | 0 | 0 | 0 |
| Part 9 — Focus Blocks C1–C11 | 11 | 11 | 0 | 0 | 0 | 0 | 0 |
| Total | 74 | 64 | 0 | 0 | 0 | 0 | 10 |
| Items tested / total | 64 / 74 |
|---|
| Pass rate (of decided items) | 100% |
|---|
| Failures | 0 |
|---|
| Blocked items | 0 |
|---|
| Reported bugs re-verified: fixed | 11 / 11 |
|---|
| Reported bugs re-verified: still broken | 0 / 11 |
|---|
| New bugs discovered (manual entry) | 10 |
|---|
| Closed bugs (verified fixed this round) | 0 |
|---|
3a · New Bugs Discovered (Manual Entry — this round) (10)
NEW #1AC-714Sev-2Server offline DB shows "No entry matches" and empty list in Autofill test after Server DB login and PIN unlock
Tested device: Phone: Galaxy S22, Android 15, Tablet: T33-F11, Android 14
Description:
Impact
Users cannot access autofill entries correctly on the Autofill test page when using a Server offline DB on Android.
After login and PIN unlock, the app shows no matching entries and an empty list.
NEW #2AC-717Sev-2Switching to standard user offline DB still prompts for SSO login after saving SSO offline DB
Tested device: Phone: Galaxy S22, Android 15, Tablet: T33-F11, Android 14
Description:
Impact
Users cannot log in to or open a standard user's offline database. The client stays locked in SSO authentication mode from the previously saved SSO offline DB, so users cannot switch back to standard user login.
NEW #3AC-732Sev-2Server certificate confirmation prompt reappears when clicking "Load databases" in "Save offline copy" after already trusting the certificate
Tested device: Phone: Galaxy S22, Android 15, Tablet: T33-F11, Android 14
Description:
Server certificate confirmation prompt reappears when clicking "Load databases" in "Save offline copy" after already trusting the certificate
NEW #4AC-679Sev-2Home screen: Keep "Another way in" section expanded by default when databases exist
Tested device: Phone: Galaxy S22, Android 15, Tablet: T33-F11, Android 14
Description:
I can see "Another way in" now remembers the expanded state, but it hides automatically when I create a new local DB. It should stay expanded unless the customer clicks the hide icon.
NEW #5AC-733Sev-2[UX] Expand markdown toolbar items in full-screen comment editor instead of keeping them in the overflow dropdown
Tested device: Phone: Galaxy S22, Android 15, Tablet: T33-F11, Android 14
Description:
Background: In the comment editor, when switching to full-screen mode, there is ample horizontal space available on the toolbar.
Current Behavior: The toolbar retains the collapsed state from the compact/inline view, hiding many markdown/formatting actions under the ... (More) dropdown menu.
Expected Behavior: The toolbar should dynamically adapt to the viewport width in full-screen mode, exposing more (or all) formatting items directly on the toolbar to minimize clicks and improve editing efficiency.
Impact / Benefit: Faster content formatting, better utilization of screen real estate, and improved writing experience on large screens.
NEW #6AC-734Sev-2Align "Conditional access" tab in Entry editor with Windows client (UI items, warning levels & access triggers)
Tested device: Phone: Galaxy S22, Android 15, Tablet: T33-F11, Android 14
Description:
Summary
Align the Conditional access tab in the Entry editor with the Windows client.
Context
The goal is to match Windows client behavior for the Entry editor's Conditional access tab.
Acceptance criteria
Provide three severity radio options:
Informational: popup notification / toast
Major: modal message dialog
Critical: modal dialog with verification text checkbox
Provide a Verification text input that is active only when Critical is selected.
Support this feature on:
Local databases (.pswe)
Offline copies
Server DB via REST v2 ES-1002
NEW #7AC-736Sev-2[UX/Storage] Support listing databases automatically for WebDAV, FTP, and HiDrive storage instead of requiring full file paths
Tested device: Phone: Galaxy S22, Android 15, Tablet: T33-F11, Android 14
Description:
1. Background & Context
Currently, when opening or adding a database from WebDAV, FTP/FTPS/SFTP, or HiDrive, the client requires the user to input the full database path/filename directly.
This behavior is inconsistent with:
Cloud Services in Android v20 (Dropbox, OneDrive, Google Drive), which allow users to log in and directly select from an automatically populated list of .pswe databases.
Legacy Clients & Windows Client, where users configure the server address/credentials, and the client queries the directory to present the available database files.
Requiring full paths on mobile creates high friction, is prone to typing errors, and makes managing multiple databases under the same server cumbersome.
NEW #8AC-737Sev-2[UI/UX] Differentiate icons for Sidebar navigation items (Home, Entries, DB) and database storage types (Local, Cloud, Offline)
Tested device: Phone: Galaxy S22, Android 15, Tablet: T33-F11, Android 14
Description:
Background & Problem Statement:
Currently in the navigation drawer / sidebar:
Icon Duplication across Views:
Home and Entries (after clicking the Home icon) use the same icon.
Items listed under "Your Databases" also reuse this exact same icon.
Having Home, Entries, and Databases share identical iconography makes it difficult for users to visually distinguish between top-level navigation, active item lists, and individual database targets.
Lack of Storage Type Distinction:
All databases in the list look identical regardless of their origin or storage backend.
Users cannot tell at a glance whether a database is Local, Cloud-synced (WebDAV, Dropbox, Google Drive, OneDrive, etc.), or in an Offline/Cached state.
NEW #9AC-738Sev-2[Support Data] Copy button fails to copy logs under 'From the autofill process'
Tested device: Phone: Galaxy S22, Android 15, Tablet: T33-F11, Android 14
Description:
Impact
Users and QA cannot easily export complete autofill diagnostic logs using the Copy button.
Expected behaviour
The complete Support Data content should be copied to the clipboard, including:
the main logs
all content under "From the autofill process"
Actual behaviour
When the "Copy" button is clicked in Support Data, only the initial logs before "From the autofill process" are copied to the clipboard.
Any log entries under or after "From the autofill process" are omitted.
NEW #10AC-739Sev-2[Support Data] Include app version, Android OS version, and default browser version in support data logs
Tested device: Phone: Galaxy S22, Android 15, Tablet: T33-F11, Android 14
Description:
Context / Problem:
Currently, when customers encounter issues and submit Support Data, key environment details such as the Password Depot app version, Android OS version, and default browser version are not automatically included in the logs. Support agents often need to follow up with customers repeatedly to confirm these basic version details.
3b · RC4 FAILURES Re-Test (0)
No RC4 failures re-tested this round. 🎉
3c · RC4 NEW BUGS Re-Test (2)
RC4-N1AC-669Editing entry with configured TOTP does not load/mask existing setup key (shows placeholder "New setup key (Base32)") — ✅ FIXED
Verified on device: — not provided —
Comments: — none —
RC4-N2AC-671SSO connecting Server DB: closing/canceling web login disables "Connect" button permanently — ✅ FIXED
Verified on device: — not provided —
Comments: — none —
3d · RC4 CLOSED BUGS Regression (11)
RC4-C1AC-638✅ PASS
Migration: After setting master password on an imported key-file-only database, unlock screen fails to show password field and reports "The key file is incorrect"
RC4 note: Fixed in 20.0.0 RC4. Verified on Galaxy S22.
Tested device: — not provided —
Comments: — none —
RC4-C2AC-639✅ PASS
Encrypted file & Certificate entry created on Windows client not visible on Android client
RC4 note: Fixed in 20.0.0 RC4. Verified on Galaxy S22.
Tested device: — not provided —
Comments: — none —
RC4-C3AC-646✅ PASS
Migration: "Verify and import" button is disabled when importing multiple databases with different keyfiles/passwords
RC4 note: Fixed in 20.0.0 RC4. Verified on Galaxy S22.
Tested device: — not provided —
Comments: — none —
RC4-C4AC-611✅ PASS
Second password: Saved field contents lost on next save due to unprotect/reprotect projection discarding undecrypted custom fields and U+FFFD characters
RC4 note: Fixed in 20.0.0 RC4. Verified on Galaxy S22.
Tested device: — not provided —
Comments: — none —
RC4-C5AC-612✅ PASS
Document entry: Selecting file via "Choose file..." does not populate "Original path" and leaves "Save" button disabled
RC4 note: Fixed in 20.0.0 RC4. Verified on Galaxy S22.
Tested device: — not provided —
Comments: — none —
RC4-C6AC-613✅ PASS
Server DB: Category field does not display dropdown / selection menu in entry editor
RC4 note: Fixed in 20.0.0 RC4. Verified on Galaxy S22.
Tested device: — not provided —
Comments: — none —
RC4-C7AC-614✅ PASS
Server DB: TOTP field does not support QR code scanning in entry editor
RC4 note: Fixed in 20.0.0 RC4. Verified on Galaxy S22.
Tested device: — not provided —
Comments: — none —
RC4-C8AC-615✅ PASS
OIDC SSO: passkey unlock launches PD master-password prompt after sign-out (blocks WebAuthn auth)
RC4 note: Fixed in 20.0.0 RC4. Verified on Galaxy S22.
Tested device: — not provided —
Comments: — none —
RC4-C9AC-617✅ PASS
Sync: "Sign in with OIDC" button has no response on "Load fresh copy from the server" dialog
RC4 note: Fixed in 20.0.0 RC4. Verified on Galaxy S22.
Tested device: — not provided —
Comments: — none —
RC4-C10AC-627✅ PASS
Entry: Warning message configured on Windows client does not pop up when accessing the entry on Android
RC4 note: Fixed in 20.0.0 RC4. Verified on Galaxy S22.
Tested device: — not provided —
Comments: — none —
RC4-C11AC-642✅ PASS
SSO opening offline Server DB: closing/canceling web login disables "Sign in and open" button permanently
RC4 note: Fixed in 20.0.0 RC4. Verified on Galaxy S22.
Tested device: — not provided —
Comments: — none —
3e · RC5 Smoke: Google Play Readiness (7)
RC-1Sev-0✅ PASS
Release build identity and Play Store readiness
RC1 status: PASS · RC4 status: PASS
RC-2Sev-0✅ PASS
First launch on a clean device (no test data)
RC1 status: PASS · RC4 status: PASS
RC-4Sev-0✅ PASS
Privacy policy and data safety
RC1 status: PASS · RC4 status: PASS
RC-5Sev-1✅ PASS
Android 16 (API 36) edge-to-edge and 3-button navigation
RC1 status: PASS · RC4 status: PASS
RC-6Sev-1✅ PASS
All 27 languages shipped in RC5
RC1 status: PASS · RC4 status: PASS
RC-7Sev-1✅ PASS
Upgrade from a beta/RC build to RC5 with data kept
RC1 status: PASS · RC4 status: PASS
RC-8Sev-0✅ PASS
Crash-free cold start and warm start
RC1 status: FAIL · RC4 status: PASS
3f · Security & MDM (4)
SEC-1Sev-1✅ PASS
Migration path uses the same wrong-password throttle as the unlock screen
SEC-2Sev-1✅ PASS
MDM bans (export, cloud, autofill, clipboard) enforced at the sink
SEC-3Sev-1✅ PASS
MDM bans enforced in the autofill / passkey process (from round 5)
SEC-4Sev-1✅ PASS
Tablet: revealing a password no longer wanders to the next entry when selection changes
3g · RC1 Reported Bugs Re-Verification (11)
These are the 8 New Bugs and 3 Closed Bugs from the RC1 report. Re-verified on RC5.
New Bugs from RC1 report (8)
REV-N1AC-620Sev-2RC4: FIXEDRC5: ✅ FIXEDAutofill: Modifying username after autofill and logging in creates a new entry instead of updating existing entry
REV-N2AC-623Sev-2RC4: FIXEDRC5: ✅ FIXEDRecycle Bin: Add button/option to empty or clean recycle bin
REV-N3AC-624Sev-2RC4: FIXEDRC5: ✅ FIXEDAutofill: Autofill in Edge browser fails to detect target URL (unknown target)
REV-N4AC-625Sev-2RC4: FIXEDRC5: ✅ FIXEDServer DB: TOTP field/code is not displayed in entry details view on Android client
REV-N5AC-626Sev-2RC4: FIXEDRC5: ✅ FIXEDEntry Details: Importance set to "High" is incorrectly displayed as "Low" on Android client
REV-N6AC-627Sev-2RC4: FIXEDRC5: ✅ FIXEDEntry: Warning message configured on Windows client does not pop up when accessing the entry on Android
REV-N7AC-628Sev-2RC4: FIXEDRC5: ✅ FIXEDServer DB: Redundant "Expires" field displayed in DETAILS block for Credit Card entries created via Windows Client in ES DB
REV-N8AC-629Sev-2RC4: FIXEDRC5: ✅ FIXEDUnify entry field/item names across new clients with Windows client
Closed Bugs from RC1 report (3)
REV-C1AC-440Sev-2RC4: FIXEDRC5: ✅ FIXEDAndroid Client becomes slow and laggy when database contains 20,000+ entries
REV-C2AC-430Sev-2RC4: FIXEDRC5: ✅ FIXEDSSPI login mode - User Logon Name Format settings do not match expected behavior for Simple, Domain\sAMAccountName, and UPN modes
REV-C3AC-333Sev-2RC4: FIXEDRC5: ✅ FIXEDBetter to open a numeric keyboard when input a Service phone field
3h · Beta21 / RC1 Regression (R18-1 – R18-7) (7)
R18-1AC-604✅ PASS
Key file of the old app — now visible in every key-file prompt
R18-2AC-605✅ PASS
Key-file wording: "Protected with" vs "Additionally protected with"
R18-3AC-606✅ PASS
Names after the takeover
R18-4AC-607✅ PASS
Takeover report lists skipped settings by name
R18-5AC-609✅ PASS
WebDAV address with "#" gets its own message
R18-6AC-610✅ PASS
Autofill hint names the app's auto-lock value
R18-7AC-537 / AC-608✅ PASS
Enterprise Server: one-time codes and 2FA against Server 20
3i · Core Pass: A1–A10 (Every Tester, Every Device) (10)
A1✅ PASS
First Launch & Database Creation
A2✅ PASS
Entries of Several Types
A3✅ PASS
Folders, Search, Trash
A5✅ PASS
Biometric Unlock + Invalidation
A7✅ PASS
Autofill in Your Daily Browser
A8✅ PASS
Autofill in One App
A9✅ PASS
Appearance, Language, Rotation, Tablet
A10✅ PASS
Stability & Error Visibility
3j · Focus Blocks C1–C11 (11)
C2✅ PASS
Passkeys (Android 14+)
C6✅ PASS
Multi-Database & Master Password Change
C8✅ PASS
Enterprise Thin Client
C9✅ PASS
Enterprise Offline Copy
C10✅ PASS
Enterprise Single Sign-On (OpenID Connect / Entra ID)
C11✅ PASS
Hand-Over of Previous-App Offline Changes
3k · Closed Bugs (Verified Fixed — this round) (0)
No closed bugs were logged this round.
3l · Blocked Items (0)
No items were blocked this round.
4 · Device Matrix Contribution
| Dimension | Variant | Covered | Notes |
|---|
| Keyboard | Gboard | ✅ | |
| Keyboard | Samsung Keyboard | ✅ | |
| Keyboard | SwiftKey | ✅ | |
| Browser | Chrome | ✅ | |
| Browser | Edge | ✅ | |
| Browser | Firefox | ✅ | |
| Browser | Samsung Internet | — | |
| Autofill style | Android 11+ inline chips | ✅ | |
| Autofill style | Android ≤13 dropdown | ✅ | |
| Clipboard | Samsung clipboard behavior | ✅ | |
| Clipboard | Pixel clipboard behavior | ❌ | |
| Clipboard | Xiaomi clipboard behavior | ✅ | |
| Biometrics | Fingerprint | ✅ | |
| Biometrics | Face unlock | ✅ | |
| Biometrics | Both enrolled | ✅ | |
| OEM quirks | Xiaomi/HyperOS battery saver — auto-lock reliable? | n/a | |
| OEM quirks | Samsung battery saver — session killed mid-edit? | ✅ | |
| Form factor | Phone | ✅ | |
| Form factor | Tablet (≥ 600 dp) | ✅ | |
| Form factor | Foldable | n/a | |
| Storage | FTPS / FTPES | ✅ | |
| Storage | HiDrive | ✅ | |
| Migration | 19.x migration with key-file database | ✅ | |
| RC5 Smoke | Google Play internal test track install | ✅ | |
5 · Reporting Reference
| Jira Project | Android Client (AC) |
|---|
| Affects Version | 20.0.0 |
|---|
| Build line | 20.0.0 RC5 (2004) |
|---|
| Release | RC5 · Google Play submission pending |
|---|
| Severity 0 | crash · data loss · lock-out |
|---|
| Severity 1 | feature wrong or unusable |
|---|
| Severity 2 | wrong, has a workaround |
|---|
| Severity 3 | visual / text |
|---|
Support data: lock the app → tap "Support data…" on the unlock screen.