## [1.0.0-beta1] - 2025-09-25
### Added
- Per-form, per-session encryption keys embedded in forms for login, registration, and user edit.
- Client-side derivation of SHA256 passkey from form-provided key.
- Server-side validation of submitted form keys and user-facing error when keys mismatch.
- Detailed logging for key mismatches and decryption failures.
### Changed
- Removed session-token exposure via `drupalSettings`.
- Moved key storage from session to persistent state keyed by form ID and session ID.
This is the first alpha release of Auth Encrypt, a module that provides client-side encryption for authentication data . The release includes:
• Initial release with AES-256-CBC encryption of authentication fields.
• Secure server-side decryption using OpenSSL.
• Session-based encryption key management.
• Support for login, registration, and user edit forms.
• Zero configuration required out of the box.
• Flexibility to use either CDN or local CryptoJS library.
