From 44d50a70c25249a82b6db40341b9f3a4f6965135 Mon Sep 17 00:00:00 2001
From: Jared Snider <116684653+JaredSnider-Bitwarden@users.noreply.github.com>
Date: Tue, 25 Feb 2025 17:58:26 -0500
Subject: [PATCH 01/47] Auth/PM-5712 - Extension & Desktop Account Switcher -
 Fix incorrect env showing when adding new accounts (#13362)

* PM-5712 - Refactor env service to require user id instead of having global and active user state fallbacks per working session with Justin.

* PM-5712 - AccountSwitcherService tests - fix tests and add env assertions.
---
 .../services/account-switcher.service.spec.ts |  19 +++-
 .../services/account-switcher.service.ts      |   3 +-
 .../app/layout/account-switcher.component.ts  |   8 +-
 .../abstractions/environment.service.ts       |   2 +-
 .../default-environment.service.spec.ts       | 104 ++++++------------
 .../services/default-environment.service.ts   |  20 +---
 6 files changed, 65 insertions(+), 91 deletions(-)

diff --git a/apps/browser/src/auth/popup/account-switching/services/account-switcher.service.spec.ts b/apps/browser/src/auth/popup/account-switching/services/account-switcher.service.spec.ts
index 3084c3e5407..1fdd0b1ecf2 100644
--- a/apps/browser/src/auth/popup/account-switching/services/account-switcher.service.spec.ts
+++ b/apps/browser/src/auth/popup/account-switching/services/account-switcher.service.spec.ts
@@ -9,7 +9,10 @@ import {
 import { AuthService } from "@bitwarden/common/auth/abstractions/auth.service";
 import { AvatarService } from "@bitwarden/common/auth/abstractions/avatar.service";
 import { AuthenticationStatus } from "@bitwarden/common/auth/enums/authentication-status";
-import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
+import {
+  Environment,
+  EnvironmentService,
+} from "@bitwarden/common/platform/abstractions/environment.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { UserId } from "@bitwarden/common/types/guid";
@@ -21,6 +24,12 @@ describe("AccountSwitcherService", () => {
   let activeAccountSubject: BehaviorSubject<Account | null>;
   let authStatusSubject: ReplaySubject<Record<UserId, AuthenticationStatus>>;
 
+  let envBSubject: BehaviorSubject<Environment | undefined>;
+  const mockHostName = "mockHostName";
+  const mockEnv: Partial<Environment> = {
+    getHostname: () => mockHostName,
+  };
+
   const accountService = mock<AccountService>();
   const avatarService = mock<AvatarService>();
   const messagingService = mock<MessagingService>();
@@ -41,6 +50,9 @@ describe("AccountSwitcherService", () => {
     accountService.activeAccount$ = activeAccountSubject;
     authService.authStatuses$ = authStatusSubject;
 
+    envBSubject = new BehaviorSubject<Environment | undefined>(mockEnv as Environment);
+    environmentService.getEnvironment$.mockReturnValue(envBSubject);
+
     accountSwitcherService = new AccountSwitcherService(
       accountService,
       avatarService,
@@ -79,11 +91,16 @@ describe("AccountSwitcherService", () => {
       expect(accounts).toHaveLength(3);
       expect(accounts[0].id).toBe("1");
       expect(accounts[0].isActive).toBeTruthy();
+
+      expect(accounts[0].server).toBe(mockHostName);
+
       expect(accounts[1].id).toBe("2");
       expect(accounts[1].isActive).toBeFalsy();
+      expect(accounts[1].server).toBe(mockHostName);
 
       expect(accounts[2].id).toBe("addAccount");
       expect(accounts[2].isActive).toBeFalsy();
+      expect(accounts[2].server).toBe(undefined);
     });
 
     it.each([5, 6])(
diff --git a/apps/browser/src/auth/popup/account-switching/services/account-switcher.service.ts b/apps/browser/src/auth/popup/account-switching/services/account-switcher.service.ts
index 535df3ec6bb..bfed7dc1408 100644
--- a/apps/browser/src/auth/popup/account-switching/services/account-switcher.service.ts
+++ b/apps/browser/src/auth/popup/account-switching/services/account-switcher.service.ts
@@ -66,11 +66,12 @@ export class AccountSwitcherService {
         const hasMaxAccounts = loggedInIds.length >= this.ACCOUNT_LIMIT;
         const options: AvailableAccount[] = await Promise.all(
           loggedInIds.map(async (id: UserId) => {
+            const userEnv = await firstValueFrom(this.environmentService.getEnvironment$(id));
             return {
               name: accounts[id].name ?? accounts[id].email,
               email: accounts[id].email,
               id: id,
-              server: (await this.environmentService.getEnvironment(id))?.getHostname(),
+              server: userEnv?.getHostname(),
               status: accountStatuses[id],
               isActive: id === activeAccount?.id,
               avatarColor: await firstValueFrom(
diff --git a/apps/desktop/src/app/layout/account-switcher.component.ts b/apps/desktop/src/app/layout/account-switcher.component.ts
index db8c2a85bde..d8ffa5ae546 100644
--- a/apps/desktop/src/app/layout/account-switcher.component.ts
+++ b/apps/desktop/src/app/layout/account-switcher.component.ts
@@ -110,7 +110,9 @@ export class AccountSwitcherComponent implements OnInit {
           name: active.name,
           email: active.email,
           avatarColor: await firstValueFrom(this.avatarService.avatarColor$),
-          server: (await this.environmentService.getEnvironment())?.getHostname(),
+          server: (
+            await firstValueFrom(this.environmentService.getEnvironment$(active.id))
+          )?.getHostname(),
         };
       }),
     );
@@ -221,7 +223,9 @@ export class AccountSwitcherComponent implements OnInit {
         email: baseAccounts[userId].email,
         authenticationStatus: await this.authService.getAuthStatus(userId),
         avatarColor: await firstValueFrom(this.avatarService.getUserAvatarColor$(userId as UserId)),
-        server: (await this.environmentService.getEnvironment(userId))?.getHostname(),
+        server: (
+          await firstValueFrom(this.environmentService.getEnvironment$(userId as UserId))
+        )?.getHostname(),
       };
     }
 
diff --git a/libs/common/src/platform/abstractions/environment.service.ts b/libs/common/src/platform/abstractions/environment.service.ts
index 8d32fc4231d..4a10f856893 100644
--- a/libs/common/src/platform/abstractions/environment.service.ts
+++ b/libs/common/src/platform/abstractions/environment.service.ts
@@ -128,7 +128,7 @@ export abstract class EnvironmentService {
   /**
    * Get the environment from state. Useful if you need to get the environment for another user.
    */
-  abstract getEnvironment$(userId?: string): Observable<Environment | undefined>;
+  abstract getEnvironment$(userId: UserId): Observable<Environment | undefined>;
 
   /**
    * @deprecated Use {@link getEnvironment$} instead.
diff --git a/libs/common/src/platform/services/default-environment.service.spec.ts b/libs/common/src/platform/services/default-environment.service.spec.ts
index 870f887c160..553f80f83b8 100644
--- a/libs/common/src/platform/services/default-environment.service.spec.ts
+++ b/libs/common/src/platform/services/default-environment.service.spec.ts
@@ -304,85 +304,21 @@ describe("EnvironmentService", () => {
     });
   });
 
-  describe("getEnvironment", () => {
+  describe("getEnvironment$", () => {
     it.each([
       { region: Region.US, expectedHost: "bitwarden.com" },
       { region: Region.EU, expectedHost: "bitwarden.eu" },
-    ])("gets it from user data if there is an active user", async ({ region, expectedHost }) => {
-      setGlobalData(Region.US, new EnvironmentUrls());
-      setUserData(region, new EnvironmentUrls());
+    ])("gets it from the passed in userId: %s", async ({ region, expectedHost }) => {
+      setUserData(Region.US, new EnvironmentUrls());
+      setUserData(region, new EnvironmentUrls(), alternateTestUser);
 
       await switchUser(testUser);
 
-      const env = await firstValueFrom(sut.getEnvironment$());
-      expect(env.getHostname()).toBe(expectedHost);
+      const env = await firstValueFrom(sut.getEnvironment$(alternateTestUser));
+      expect(env?.getHostname()).toBe(expectedHost);
     });
 
-    it.each([
-      { region: Region.US, expectedHost: "bitwarden.com" },
-      { region: Region.EU, expectedHost: "bitwarden.eu" },
-    ])("gets it from global data if there is no active user", async ({ region, expectedHost }) => {
-      setGlobalData(region, new EnvironmentUrls());
-      setUserData(Region.US, new EnvironmentUrls());
-
-      const env = await firstValueFrom(sut.getEnvironment$());
-      expect(env.getHostname()).toBe(expectedHost);
-    });
-
-    it.each([
-      { region: Region.US, expectedHost: "bitwarden.com" },
-      { region: Region.EU, expectedHost: "bitwarden.eu" },
-    ])(
-      "gets it from global state if there is no active user even if a user id is passed in.",
-      async ({ region, expectedHost }) => {
-        setGlobalData(region, new EnvironmentUrls());
-        setUserData(Region.US, new EnvironmentUrls());
-
-        const env = await firstValueFrom(sut.getEnvironment$(testUser));
-        expect(env.getHostname()).toBe(expectedHost);
-      },
-    );
-
-    it.each([
-      { region: Region.US, expectedHost: "bitwarden.com" },
-      { region: Region.EU, expectedHost: "bitwarden.eu" },
-    ])(
-      "gets it from the passed in userId if there is any active user: %s",
-      async ({ region, expectedHost }) => {
-        setGlobalData(Region.US, new EnvironmentUrls());
-        setUserData(Region.US, new EnvironmentUrls());
-        setUserData(region, new EnvironmentUrls(), alternateTestUser);
-
-        await switchUser(testUser);
-
-        const env = await firstValueFrom(sut.getEnvironment$(alternateTestUser));
-        expect(env.getHostname()).toBe(expectedHost);
-      },
-    );
-
-    it("gets it from base url saved in self host config", async () => {
-      const globalSelfHostUrls = new EnvironmentUrls();
-      globalSelfHostUrls.base = "https://base.example.com";
-      setGlobalData(Region.SelfHosted, globalSelfHostUrls);
-      setUserData(Region.EU, new EnvironmentUrls());
-
-      const env = await firstValueFrom(sut.getEnvironment$());
-      expect(env.getHostname()).toBe("base.example.com");
-    });
-
-    it("gets it from webVault url saved in self host config", async () => {
-      const globalSelfHostUrls = new EnvironmentUrls();
-      globalSelfHostUrls.webVault = "https://vault.example.com";
-      globalSelfHostUrls.base = "https://base.example.com";
-      setGlobalData(Region.SelfHosted, globalSelfHostUrls);
-      setUserData(Region.EU, new EnvironmentUrls());
-
-      const env = await firstValueFrom(sut.getEnvironment$());
-      expect(env.getHostname()).toBe("vault.example.com");
-    });
-
-    it("gets it from saved self host config from passed in user when there is an active user", async () => {
-      setGlobalData(Region.US, new EnvironmentUrls());
+    it("gets env from saved self host config from passed in user when there is a different active user", async () => {
       setUserData(Region.EU, new EnvironmentUrls());
 
       const selfHostUserUrls = new EnvironmentUrls();
@@ -392,7 +328,31 @@ describe("EnvironmentService", () => {
       await switchUser(testUser);
 
       const env = await firstValueFrom(sut.getEnvironment$(alternateTestUser));
-      expect(env.getHostname()).toBe("base.example.com");
+      expect(env?.getHostname()).toBe("base.example.com");
+    });
+  });
+
+  describe("getEnvironment (deprecated)", () => {
+    it("gets self hosted env from active user when no user passed in", async () => {
+      const selfHostUserUrls = new EnvironmentUrls();
+      selfHostUserUrls.base = "https://base.example.com";
+      setUserData(Region.SelfHosted, selfHostUserUrls);
+
+      await switchUser(testUser);
+
+      const env = await sut.getEnvironment();
+      expect(env?.getHostname()).toBe("base.example.com");
+    });
+
+    it("gets self hosted env from passed in user", async () => {
+      const selfHostUserUrls = new EnvironmentUrls();
+      selfHostUserUrls.base = "https://base.example.com";
+      setUserData(Region.SelfHosted, selfHostUserUrls);
+
+      await switchUser(testUser);
+
+      const env = await sut.getEnvironment(testUser);
+      expect(env?.getHostname()).toBe("base.example.com");
     });
   });
 
diff --git a/libs/common/src/platform/services/default-environment.service.ts b/libs/common/src/platform/services/default-environment.service.ts
index ac3e39b2bb3..df55693ba0b 100644
--- a/libs/common/src/platform/services/default-environment.service.ts
+++ b/libs/common/src/platform/services/default-environment.service.ts
@@ -271,19 +271,8 @@ export class DefaultEnvironmentService implements EnvironmentService {
     }
   }
 
-  getEnvironment$(userId?: UserId): Observable<Environment | undefined> {
-    if (userId == null) {
-      return this.environment$;
-    }
-
-    return this.activeAccountId$.pipe(
-      switchMap((activeUserId) => {
-        // Previous rules dictated that we only get from user scoped state if there is an active user.
-        if (activeUserId == null) {
-          return this.globalState.state$;
-        }
-        return this.stateProvider.getUser(userId ?? activeUserId, USER_ENVIRONMENT_KEY).state$;
-      }),
+  getEnvironment$(userId: UserId): Observable<Environment | undefined> {
+    return this.stateProvider.getUser(userId, USER_ENVIRONMENT_KEY).state$.pipe(
       map((state) => {
         return this.buildEnvironment(state?.region, state?.urls);
       }),
@@ -294,7 +283,10 @@ export class DefaultEnvironmentService implements EnvironmentService {
    * @deprecated Use getEnvironment$ instead.
    */
   async getEnvironment(userId?: UserId): Promise<Environment | undefined> {
-    return firstValueFrom(this.getEnvironment$(userId));
+    // Add backwards compatibility support for null userId
+    const definedUserId = userId ?? (await firstValueFrom(this.activeAccountId$));
+
+    return firstValueFrom(this.getEnvironment$(definedUserId));
   }
 
   async seedUserEnvironment(userId: UserId) {

From ce5a5e36498eddcf3e10222278a7f8b372a1fed2 Mon Sep 17 00:00:00 2001
From: Andreas Coroiu <acoroiu@bitwarden.com>
Date: Wed, 26 Feb 2025 09:08:42 +0100
Subject: [PATCH 02/47] Improve SDK direct function usage (#13353)

* feat: initalize WASM/SDK directly after load

* fix: default sdk service trying to set log level

* feat: wait for sdk to load in sdk service

* fix: add required disposable polyfills

* feat: update sdk version

* feat: replace rc-specific workaround with global polyfill

* fix: sdk service tests
---
 .../browser/src/background/main.background.ts |  4 +-
 .../services/sdk/browser-sdk-load.service.ts  |  6 ++-
 apps/browser/src/popup/polyfills.ts           |  1 +
 .../src/popup/services/init.service.ts        |  2 +-
 apps/cli/src/bw.ts                            |  2 +
 .../platform/services/cli-sdk-load.service.ts |  2 +-
 .../service-container/service-container.ts    |  2 +-
 apps/desktop/src/app/main.ts                  |  2 +
 apps/desktop/src/app/services/init.service.ts |  2 +-
 apps/desktop/src/main.ts                      |  2 +
 apps/web/src/app/core/init.service.ts         |  2 +-
 .../src/app/platform/web-sdk-load.service.ts  |  2 +-
 apps/web/src/polyfills.ts                     |  1 +
 .../abstractions/sdk/sdk-load.service.ts      | 53 ++++++++++++++++++-
 .../misc/reference-counting/rc.spec.ts        |  8 ---
 .../services/sdk/default-sdk-load.service.ts  |  2 +-
 .../services/sdk/default-sdk.service.spec.ts  | 12 ++++-
 .../services/sdk/default-sdk.service.ts       |  8 +--
 .../services/sdk/noop-sdk-load.service.ts     |  2 +-
 libs/common/test.setup.ts                     |  2 +
 package-lock.json                             |  8 +--
 package.json                                  |  2 +-
 tsconfig.json                                 |  2 +-
 23 files changed, 98 insertions(+), 31 deletions(-)

diff --git a/apps/browser/src/background/main.background.ts b/apps/browser/src/background/main.background.ts
index bb9ec41cc7d..914938ba130 100644
--- a/apps/browser/src/background/main.background.ts
+++ b/apps/browser/src/background/main.background.ts
@@ -1,5 +1,7 @@
 // FIXME: Update this file to be type safe and remove this and next line
 // @ts-strict-ignore
+import "core-js/proposals/explicit-resource-management";
+
 import { filter, firstValueFrom, map, merge, Subject, timeout } from "rxjs";
 
 import { CollectionService, DefaultCollectionService } from "@bitwarden/admin-console/common";
@@ -1290,7 +1292,7 @@ export default class MainBackground {
     }
     this.containerService.attachToGlobal(self);
 
-    await this.sdkLoadService.load();
+    await this.sdkLoadService.loadAndInit();
     // Only the "true" background should run migrations
     await this.stateService.init({ runMigrations: true });
 
diff --git a/apps/browser/src/platform/services/sdk/browser-sdk-load.service.ts b/apps/browser/src/platform/services/sdk/browser-sdk-load.service.ts
index ca41127407c..409ff0dea06 100644
--- a/apps/browser/src/platform/services/sdk/browser-sdk-load.service.ts
+++ b/apps/browser/src/platform/services/sdk/browser-sdk-load.service.ts
@@ -60,8 +60,10 @@ async function importModule(): Promise<GlobalWithWasmInit["initSdk"]> {
   return (globalThis as GlobalWithWasmInit).initSdk;
 }
 
-export class BrowserSdkLoadService implements SdkLoadService {
-  constructor(readonly logService: LogService) {}
+export class BrowserSdkLoadService extends SdkLoadService {
+  constructor(readonly logService: LogService) {
+    super();
+  }
 
   async load(): Promise<void> {
     const startTime = performance.now();
diff --git a/apps/browser/src/popup/polyfills.ts b/apps/browser/src/popup/polyfills.ts
index f76b9e632fc..4bb2aa0bbee 100644
--- a/apps/browser/src/popup/polyfills.ts
+++ b/apps/browser/src/popup/polyfills.ts
@@ -1,2 +1,3 @@
 import "core-js/stable";
+import "core-js/proposals/explicit-resource-management";
 import "zone.js";
diff --git a/apps/browser/src/popup/services/init.service.ts b/apps/browser/src/popup/services/init.service.ts
index 2ca25d690f1..fe6fba85a4b 100644
--- a/apps/browser/src/popup/services/init.service.ts
+++ b/apps/browser/src/popup/services/init.service.ts
@@ -32,7 +32,7 @@ export class InitService {
 
   init() {
     return async () => {
-      await this.sdkLoadService.load();
+      await this.sdkLoadService.loadAndInit();
       await this.stateService.init({ runMigrations: false }); // Browser background is responsible for migrations
       await this.i18nService.init();
       this.twoFactorService.init();
diff --git a/apps/cli/src/bw.ts b/apps/cli/src/bw.ts
index 5e9d3dfbc94..fcf0ef3dc8d 100644
--- a/apps/cli/src/bw.ts
+++ b/apps/cli/src/bw.ts
@@ -1,3 +1,5 @@
+import "core-js/proposals/explicit-resource-management";
+
 import { program } from "commander";
 
 import { OssServeConfigurator } from "./oss-serve-configurator";
diff --git a/apps/cli/src/platform/services/cli-sdk-load.service.ts b/apps/cli/src/platform/services/cli-sdk-load.service.ts
index ee3b48e34d7..638e64a8214 100644
--- a/apps/cli/src/platform/services/cli-sdk-load.service.ts
+++ b/apps/cli/src/platform/services/cli-sdk-load.service.ts
@@ -1,7 +1,7 @@
 import { SdkLoadService } from "@bitwarden/common/platform/abstractions/sdk/sdk-load.service";
 import * as sdk from "@bitwarden/sdk-internal";
 
-export class CliSdkLoadService implements SdkLoadService {
+export class CliSdkLoadService extends SdkLoadService {
   async load(): Promise<void> {
     const module = await import("@bitwarden/sdk-internal/bitwarden_wasm_internal_bg.wasm");
     (sdk as any).init(module);
diff --git a/apps/cli/src/service-container/service-container.ts b/apps/cli/src/service-container/service-container.ts
index 98926f7ae65..fcf18fd508f 100644
--- a/apps/cli/src/service-container/service-container.ts
+++ b/apps/cli/src/service-container/service-container.ts
@@ -867,7 +867,7 @@ export class ServiceContainer {
       return;
     }
 
-    await this.sdkLoadService.load();
+    await this.sdkLoadService.loadAndInit();
     await this.storageService.init();
     await this.stateService.init();
     this.containerService.attachToGlobal(global);
diff --git a/apps/desktop/src/app/main.ts b/apps/desktop/src/app/main.ts
index ba964177dbc..16d03aefbdd 100644
--- a/apps/desktop/src/app/main.ts
+++ b/apps/desktop/src/app/main.ts
@@ -1,3 +1,5 @@
+import "core-js/proposals/explicit-resource-management";
+
 import { enableProdMode } from "@angular/core";
 import { platformBrowserDynamic } from "@angular/platform-browser-dynamic";
 
diff --git a/apps/desktop/src/app/services/init.service.ts b/apps/desktop/src/app/services/init.service.ts
index 6a58f36cfb9..5e00e406360 100644
--- a/apps/desktop/src/app/services/init.service.ts
+++ b/apps/desktop/src/app/services/init.service.ts
@@ -54,7 +54,7 @@ export class InitService {
 
   init() {
     return async () => {
-      await this.sdkLoadService.load();
+      await this.sdkLoadService.loadAndInit();
       await this.sshAgentService.init();
       this.nativeMessagingService.init();
       await this.stateService.init({ runMigrations: false }); // Desktop will run them in main process
diff --git a/apps/desktop/src/main.ts b/apps/desktop/src/main.ts
index c6e074ead91..7e417e8e5a8 100644
--- a/apps/desktop/src/main.ts
+++ b/apps/desktop/src/main.ts
@@ -1,5 +1,7 @@
 // FIXME: Update this file to be type safe and remove this and next line
 // @ts-strict-ignore
+import "core-js/proposals/explicit-resource-management";
+
 import * as path from "path";
 
 import { app } from "electron";
diff --git a/apps/web/src/app/core/init.service.ts b/apps/web/src/app/core/init.service.ts
index 3623d9b0d2f..307eed4c1e4 100644
--- a/apps/web/src/app/core/init.service.ts
+++ b/apps/web/src/app/core/init.service.ts
@@ -42,7 +42,7 @@ export class InitService {
 
   init() {
     return async () => {
-      await this.sdkLoadService.load();
+      await this.sdkLoadService.loadAndInit();
       await this.stateService.init();
 
       const activeAccount = await firstValueFrom(this.accountService.activeAccount$);
diff --git a/apps/web/src/app/platform/web-sdk-load.service.ts b/apps/web/src/app/platform/web-sdk-load.service.ts
index cae3399b81e..8be3d20b0a7 100644
--- a/apps/web/src/app/platform/web-sdk-load.service.ts
+++ b/apps/web/src/app/platform/web-sdk-load.service.ts
@@ -18,7 +18,7 @@ const supported = (() => {
   return false;
 })();
 
-export class WebSdkLoadService implements SdkLoadService {
+export class WebSdkLoadService extends SdkLoadService {
   async load(): Promise<void> {
     let module: any;
     if (supported) {
diff --git a/apps/web/src/polyfills.ts b/apps/web/src/polyfills.ts
index 33af553f786..3971ed3207f 100644
--- a/apps/web/src/polyfills.ts
+++ b/apps/web/src/polyfills.ts
@@ -1,4 +1,5 @@
 import "core-js/stable";
+import "core-js/proposals/explicit-resource-management";
 import "zone.js";
 
 if (process.env.NODE_ENV === "production") {
diff --git a/libs/common/src/platform/abstractions/sdk/sdk-load.service.ts b/libs/common/src/platform/abstractions/sdk/sdk-load.service.ts
index 16482e797b2..fb443d61777 100644
--- a/libs/common/src/platform/abstractions/sdk/sdk-load.service.ts
+++ b/libs/common/src/platform/abstractions/sdk/sdk-load.service.ts
@@ -1,3 +1,52 @@
-export abstract class SdkLoadService {
-  abstract load(): Promise<void>;
+import { init_sdk } from "@bitwarden/sdk-internal";
+
+// eslint-disable-next-line @typescript-eslint/no-unused-vars -- used in docs
+import type { SdkService } from "./sdk.service";
+
+export class SdkLoadFailedError extends Error {
+  constructor(error: unknown) {
+    super(`SDK loading failed: ${error}`);
+  }
+}
+
+export abstract class SdkLoadService {
+  private static markAsReady: () => void;
+  private static markAsFailed: (error: unknown) => void;
+
+  /**
+   * This promise is resolved when the SDK is ready to be used. Use it when your code might run early and/or is not able to use DI.
+   * Beware that WASM always requires a load step which makes it tricky to use functions and classes directly, it is therefore recommended
+   * to use the SDK through the {@link SdkService}. Only use this promise in advanced scenarios!
+   *
+   * @example
+   * ```typescript
+   * import { pureFunction } from "@bitwarden/sdk-internal";
+   *
+   * async function myFunction() {
+   *   await SdkLoadService.Ready;
+   *   pureFunction();
+   * }
+   * ```
+   */
+  static readonly Ready = new Promise<void>((resolve, reject) => {
+    SdkLoadService.markAsReady = resolve;
+    SdkLoadService.markAsFailed = (error: unknown) => reject(new SdkLoadFailedError(error));
+  });
+
+  /**
+   * Load WASM and initalize SDK-JS integrations such as logging.
+   * This method should be called once at the start of the application.
+   * Raw functions and classes from the SDK can be used after this method resolves.
+   */
+  async loadAndInit(): Promise<void> {
+    try {
+      await this.load();
+      init_sdk();
+      SdkLoadService.markAsReady();
+    } catch (error) {
+      SdkLoadService.markAsFailed(error);
+    }
+  }
+
+  protected abstract load(): Promise<void>;
 }
diff --git a/libs/common/src/platform/misc/reference-counting/rc.spec.ts b/libs/common/src/platform/misc/reference-counting/rc.spec.ts
index 094abfe3615..f8767242ba5 100644
--- a/libs/common/src/platform/misc/reference-counting/rc.spec.ts
+++ b/libs/common/src/platform/misc/reference-counting/rc.spec.ts
@@ -1,11 +1,3 @@
-// Temporary workaround for Symbol.dispose
-// remove when https://github.com/jestjs/jest/issues/14874 is resolved and *released*
-const disposeSymbol: unique symbol = Symbol("Symbol.dispose");
-const asyncDisposeSymbol: unique symbol = Symbol("Symbol.asyncDispose");
-(Symbol as any).asyncDispose ??= asyncDisposeSymbol as unknown as SymbolConstructor["asyncDispose"];
-(Symbol as any).dispose ??= disposeSymbol as unknown as SymbolConstructor["dispose"];
-
-// Import needs to be after the workaround
 import { Rc } from "./rc";
 
 export class FreeableTestValue {
diff --git a/libs/common/src/platform/services/sdk/default-sdk-load.service.ts b/libs/common/src/platform/services/sdk/default-sdk-load.service.ts
index eff641f0351..0c4114b8796 100644
--- a/libs/common/src/platform/services/sdk/default-sdk-load.service.ts
+++ b/libs/common/src/platform/services/sdk/default-sdk-load.service.ts
@@ -8,7 +8,7 @@ import { SdkLoadService } from "../../abstractions/sdk/sdk-load.service";
  *
  * **Warning**: This requires WASM support and will fail if the environment does not support it.
  */
-export class DefaultSdkLoadService implements SdkLoadService {
+export class DefaultSdkLoadService extends SdkLoadService {
   async load(): Promise<void> {
     (sdk as any).init(bitwardenModule);
   }
diff --git a/libs/common/src/platform/services/sdk/default-sdk.service.spec.ts b/libs/common/src/platform/services/sdk/default-sdk.service.spec.ts
index fed4746acd3..a66b2a9cb6f 100644
--- a/libs/common/src/platform/services/sdk/default-sdk.service.spec.ts
+++ b/libs/common/src/platform/services/sdk/default-sdk.service.spec.ts
@@ -11,6 +11,7 @@ import { UserKey } from "../../../types/key";
 import { Environment, EnvironmentService } from "../../abstractions/environment.service";
 import { PlatformUtilsService } from "../../abstractions/platform-utils.service";
 import { SdkClientFactory } from "../../abstractions/sdk/sdk-client-factory";
+import { SdkLoadService } from "../../abstractions/sdk/sdk-load.service";
 import { UserNotLoggedInError } from "../../abstractions/sdk/sdk.service";
 import { Rc } from "../../misc/reference-counting/rc";
 import { EncryptedString } from "../../models/domain/enc-string";
@@ -18,6 +19,13 @@ import { SymmetricCryptoKey } from "../../models/domain/symmetric-crypto-key";
 
 import { DefaultSdkService } from "./default-sdk.service";
 
+class TestSdkLoadService extends SdkLoadService {
+  protected override load(): Promise<void> {
+    // Simulate successfull WASM load
+    return Promise.resolve();
+  }
+}
+
 describe("DefaultSdkService", () => {
   describe("userClient$", () => {
     let sdkClientFactory!: MockProxy<SdkClientFactory>;
@@ -28,7 +36,9 @@ describe("DefaultSdkService", () => {
     let keyService!: MockProxy<KeyService>;
     let service!: DefaultSdkService;
 
-    beforeEach(() => {
+    beforeEach(async () => {
+      await new TestSdkLoadService().loadAndInit();
+
       sdkClientFactory = mock<SdkClientFactory>();
       environmentService = mock<EnvironmentService>();
       platformUtilsService = mock<PlatformUtilsService>();
diff --git a/libs/common/src/platform/services/sdk/default-sdk.service.ts b/libs/common/src/platform/services/sdk/default-sdk.service.ts
index 96a1dedf175..5c381c7dd1b 100644
--- a/libs/common/src/platform/services/sdk/default-sdk.service.ts
+++ b/libs/common/src/platform/services/sdk/default-sdk.service.ts
@@ -18,7 +18,6 @@ import { KeyService, KdfConfigService, KdfConfig, KdfType } from "@bitwarden/key
 import {
   BitwardenClient,
   ClientSettings,
-  LogLevel,
   DeviceType as SdkDeviceType,
 } from "@bitwarden/sdk-internal";
 
@@ -30,6 +29,7 @@ import { UserKey } from "../../../types/key";
 import { Environment, EnvironmentService } from "../../abstractions/environment.service";
 import { PlatformUtilsService } from "../../abstractions/platform-utils.service";
 import { SdkClientFactory } from "../../abstractions/sdk/sdk-client-factory";
+import { SdkLoadService } from "../../abstractions/sdk/sdk-load.service";
 import { SdkService, UserNotLoggedInError } from "../../abstractions/sdk/sdk.service";
 import { compareValues } from "../../misc/compare-values";
 import { Rc } from "../../misc/reference-counting/rc";
@@ -47,8 +47,9 @@ export class DefaultSdkService implements SdkService {
 
   client$ = this.environmentService.environment$.pipe(
     concatMap(async (env) => {
+      await SdkLoadService.Ready;
       const settings = this.toSettings(env);
-      return await this.sdkClientFactory.createSdkClient(settings, LogLevel.Info);
+      return await this.sdkClientFactory.createSdkClient(settings);
     }),
     shareReplay({ refCount: true, bufferSize: 1 }),
   );
@@ -135,6 +136,7 @@ export class DefaultSdkService implements SdkService {
       privateKey$,
       userKey$,
       orgKeys$,
+      SdkLoadService.Ready, // Makes sure we wait (once) for the SDK to be loaded
     ]).pipe(
       // switchMap is required to allow the clean-up logic to be executed when `combineLatest` emits a new value.
       switchMap(([env, account, kdfParams, privateKey, userKey, orgKeys]) => {
@@ -146,7 +148,7 @@ export class DefaultSdkService implements SdkService {
             }
 
             const settings = this.toSettings(env);
-            const client = await this.sdkClientFactory.createSdkClient(settings, LogLevel.Info);
+            const client = await this.sdkClientFactory.createSdkClient(settings);
 
             await this.initializeClient(client, account, kdfParams, privateKey, userKey, orgKeys);
 
diff --git a/libs/common/src/platform/services/sdk/noop-sdk-load.service.ts b/libs/common/src/platform/services/sdk/noop-sdk-load.service.ts
index 60dac4f21f1..9fd04fdf833 100644
--- a/libs/common/src/platform/services/sdk/noop-sdk-load.service.ts
+++ b/libs/common/src/platform/services/sdk/noop-sdk-load.service.ts
@@ -2,6 +2,6 @@ import { SdkLoadService } from "../../abstractions/sdk/sdk-load.service";
 
 export class NoopSdkLoadService extends SdkLoadService {
   async load() {
-    return;
+    throw new Error("SDK not available in this environment");
   }
 }
diff --git a/libs/common/test.setup.ts b/libs/common/test.setup.ts
index aa71b3e508a..9087c15c6b6 100644
--- a/libs/common/test.setup.ts
+++ b/libs/common/test.setup.ts
@@ -1,3 +1,5 @@
+import "core-js/proposals/explicit-resource-management";
+
 import { webcrypto } from "crypto";
 
 import { addCustomMatchers } from "./spec";
diff --git a/package-lock.json b/package-lock.json
index 1431f31daac..ab526f2730b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -24,7 +24,7 @@
         "@angular/platform-browser": "18.2.13",
         "@angular/platform-browser-dynamic": "18.2.13",
         "@angular/router": "18.2.13",
-        "@bitwarden/sdk-internal": "0.2.0-main.105",
+        "@bitwarden/sdk-internal": "0.2.0-main.107",
         "@electron/fuses": "1.8.0",
         "@emotion/css": "11.13.5",
         "@koa/multer": "3.0.2",
@@ -4651,9 +4651,9 @@
       "link": true
     },
     "node_modules/@bitwarden/sdk-internal": {
-      "version": "0.2.0-main.105",
-      "resolved": "https://registry.npmjs.org/@bitwarden/sdk-internal/-/sdk-internal-0.2.0-main.105.tgz",
-      "integrity": "sha512-MaQFJbuKTCbN9oZC/+opYVeegaNNJpiUv9/zx+gu8KxWmX0hyEkNPtHKxBjDt3kLLz69CudDtUxEgqOfcDsYAw==",
+      "version": "0.2.0-main.107",
+      "resolved": "https://registry.npmjs.org/@bitwarden/sdk-internal/-/sdk-internal-0.2.0-main.107.tgz",
+      "integrity": "sha512-xpOF6NAS0/em3jFBv4FI1ASy1Nuc7I1v41TVmG56wS+80y+NH1RnfGjp+a+XiO7Xxh3jssrxmjzihJjWQQA0rg==",
       "license": "GPL-3.0"
     },
     "node_modules/@bitwarden/send-ui": {
diff --git a/package.json b/package.json
index 54b1f642086..cb941238fc2 100644
--- a/package.json
+++ b/package.json
@@ -154,7 +154,7 @@
     "@angular/platform-browser": "18.2.13",
     "@angular/platform-browser-dynamic": "18.2.13",
     "@angular/router": "18.2.13",
-    "@bitwarden/sdk-internal": "0.2.0-main.105",
+    "@bitwarden/sdk-internal": "0.2.0-main.107",
     "@electron/fuses": "1.8.0",
     "@emotion/css": "11.13.5",
     "@koa/multer": "3.0.2",
diff --git a/tsconfig.json b/tsconfig.json
index 37f7aac05d8..fb50f1e7033 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -6,7 +6,7 @@
     "noImplicitAny": true,
     "target": "ES2016",
     "module": "ES2020",
-    "lib": ["es5", "es6", "es7", "dom", "ES2021"],
+    "lib": ["es5", "es6", "es7", "dom", "ES2021", "ESNext.Disposable"],
     "sourceMap": true,
     "allowSyntheticDefaultImports": true,
     "experimentalDecorators": true,

From cb028eadb5fb17263a4a1c0c0ffda6b23caeb0b5 Mon Sep 17 00:00:00 2001
From: Bernd Schoolmann <mail@quexten.com>
Date: Wed, 26 Feb 2025 12:12:27 +0100
Subject: [PATCH 03/47] [PM-15934] Add agent-forwarding detection and git
 signing detection parsers (#12371)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Add agent-forwarding detection and git signing detection parsers

* Cleanup

* Pin russh version

* Run cargo fmt

* Fix build

* Update apps/desktop/desktop_native/core/src/ssh_agent/mod.rs

Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>

* Pass through entire namespace

* Move to bytes crate

* Fix clippy errors

* Fix clippy warning

* Run cargo fmt

* Fix build

* Add renovate for bytes

* Fix clippy warn

---------

Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
---
 .github/renovate.json5                        |  1 +
 apps/desktop/desktop_native/Cargo.lock        |  3 +-
 apps/desktop/desktop_native/core/Cargo.toml   | 35 ++++++++--------
 .../desktop_native/core/src/ssh_agent/mod.rs  | 41 +++++++++++++++++--
 .../peercred_unix_listener_stream.rs          |  4 +-
 .../core/src/ssh_agent/peerinfo/models.rs     | 23 ++++++++++-
 .../core/src/ssh_agent/request_parser.rs      | 41 +++++++++++++++++++
 apps/desktop/desktop_native/napi/index.d.ts   |  9 +++-
 apps/desktop/desktop_native/napi/src/lib.rs   | 23 ++++++++---
 apps/desktop/src/locales/en/messages.json     | 18 ++++++++
 .../components/approve-ssh-request.html       | 11 ++++-
 .../components/approve-ssh-request.ts         | 19 ++++++++-
 .../platform/main/main-ssh-agent.service.ts   | 10 +++--
 .../platform/services/ssh-agent.service.ts    |  4 ++
 14 files changed, 203 insertions(+), 39 deletions(-)
 create mode 100644 apps/desktop/desktop_native/core/src/ssh_agent/request_parser.rs

diff --git a/.github/renovate.json5 b/.github/renovate.json5
index a0826039bb8..b9de0084c25 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -123,6 +123,7 @@
       matchPackageNames: [
         "@emotion/css",
         "@webcomponents/custom-elements",
+        "bytes",
         "concurrently",
         "cross-env",
         "del",
diff --git a/apps/desktop/desktop_native/Cargo.lock b/apps/desktop/desktop_native/Cargo.lock
index 948e03cd49b..58cc4552f1e 100644
--- a/apps/desktop/desktop_native/Cargo.lock
+++ b/apps/desktop/desktop_native/Cargo.lock
@@ -439,7 +439,7 @@ checksum = "8f68f53c83ab957f72c32642f3868eec03eb974d1fb82e453128456482613d36"
 [[package]]
 name = "bitwarden-russh"
 version = "0.1.0"
-source = "git+https://github.com/bitwarden/bitwarden-russh.git?rev=23b50e3bbe6d56ef19ab0e98e8bb1462cb6d77ae#23b50e3bbe6d56ef19ab0e98e8bb1462cb6d77ae"
+source = "git+https://github.com/bitwarden/bitwarden-russh.git?rev=3d48f140fd506412d186203238993163a8c4e536#3d48f140fd506412d186203238993163a8c4e536"
 dependencies = [
  "anyhow",
  "byteorder",
@@ -942,6 +942,7 @@ dependencies = [
  "base64",
  "bitwarden-russh",
  "byteorder",
+ "bytes",
  "cbc",
  "core-foundation",
  "desktop_objc",
diff --git a/apps/desktop/desktop_native/core/Cargo.toml b/apps/desktop/desktop_native/core/Cargo.toml
index c821662f112..8a0bcd0e0a7 100644
--- a/apps/desktop/desktop_native/core/Cargo.toml
+++ b/apps/desktop/desktop_native/core/Cargo.toml
@@ -21,7 +21,7 @@ manual_test = []
 aes = "=0.8.4"
 anyhow = { workspace = true }
 arboard = { version = "=3.4.1", default-features = false, features = [
-  "wayland-data-control",
+    "wayland-data-control",
 ] }
 argon2 = { version = "=0.5.3", features = ["zeroize"] }
 base64 = "=0.22.1"
@@ -39,12 +39,12 @@ scopeguard = "=1.2.0"
 sha2 = "=0.10.8"
 ssh-encoding = "=0.2.0"
 ssh-key = { version = "=0.6.7", default-features = false, features = [
-  "encryption",
-  "ed25519",
-  "rsa",
-  "getrandom",
+    "encryption",
+    "ed25519",
+    "rsa",
+    "getrandom",
 ] }
-bitwarden-russh = { git = "https://github.com/bitwarden/bitwarden-russh.git", rev = "23b50e3bbe6d56ef19ab0e98e8bb1462cb6d77ae" }
+bitwarden-russh = { git = "https://github.com/bitwarden/bitwarden-russh.git", rev = "3d48f140fd506412d186203238993163a8c4e536" }
 tokio = { workspace = true, features = ["io-util", "sync", "macros", "net"] }
 tokio-stream = { workspace = true, features = ["net"] }
 tokio-util = { workspace = true, features = ["codec"] }
@@ -53,21 +53,22 @@ typenum = "=1.17.0"
 pkcs8 = { version = "=0.10.2", features = ["alloc", "encryption", "pem"] }
 rsa = "=0.9.6"
 ed25519 = { version = "=2.2.3", features = ["pkcs8"] }
-sysinfo = { version = "=0.33.1", features = ["windows"] }
+bytes = "1.9.0"
+sysinfo = { version = "0.33.1", features = ["windows"] }
 
 [target.'cfg(windows)'.dependencies]
 widestring = { version = "=1.1.0", optional = true }
 windows = { version = "=0.58.0", features = [
-  "Foundation",
-  "Security_Credentials_UI",
-  "Security_Cryptography",
-  "Storage_Streams",
-  "Win32_Foundation",
-  "Win32_Security_Credentials",
-  "Win32_System_WinRT",
-  "Win32_UI_Input_KeyboardAndMouse",
-  "Win32_UI_WindowsAndMessaging",
-  "Win32_System_Pipes",
+    "Foundation",
+    "Security_Credentials_UI",
+    "Security_Cryptography",
+    "Storage_Streams",
+    "Win32_Foundation",
+    "Win32_Security_Credentials",
+    "Win32_System_WinRT",
+    "Win32_UI_Input_KeyboardAndMouse",
+    "Win32_UI_WindowsAndMessaging",
+    "Win32_System_Pipes",
 ], optional = true }
 
 [target.'cfg(windows)'.dev-dependencies]
diff --git a/apps/desktop/desktop_native/core/src/ssh_agent/mod.rs b/apps/desktop/desktop_native/core/src/ssh_agent/mod.rs
index 4e304ccea78..3fe327948f8 100644
--- a/apps/desktop/desktop_native/core/src/ssh_agent/mod.rs
+++ b/apps/desktop/desktop_native/core/src/ssh_agent/mod.rs
@@ -18,6 +18,8 @@ mod peercred_unix_listener_stream;
 
 pub mod importer;
 pub mod peerinfo;
+mod request_parser;
+
 #[derive(Clone)]
 pub struct BitwardenDesktopAgent {
     keystore: ssh_agent::KeyStore,
@@ -35,19 +37,37 @@ pub struct SshAgentUIRequest {
     pub cipher_id: Option<String>,
     pub process_name: String,
     pub is_list: bool,
+    pub namespace: Option<String>,
+    pub is_forwarding: bool,
 }
 
 impl ssh_agent::Agent<peerinfo::models::PeerInfo> for BitwardenDesktopAgent {
-    async fn confirm(&self, ssh_key: Key, info: &peerinfo::models::PeerInfo) -> bool {
+    async fn confirm(&self, ssh_key: Key, data: &[u8], info: &peerinfo::models::PeerInfo) -> bool {
         if !self.is_running() {
             println!("[BitwardenDesktopAgent] Agent is not running, but tried to call confirm");
             return false;
         }
 
         let request_id = self.get_request_id().await;
+        let request_data = match request_parser::parse_request(data) {
+            Ok(data) => data,
+            Err(e) => {
+                println!("[SSH Agent] Error while parsing request: {}", e);
+                return false;
+            }
+        };
+        let namespace = match request_data {
+            request_parser::SshAgentSignRequest::SshSigRequest(ref req) => {
+                Some(req.namespace.clone())
+            }
+            _ => None,
+        };
+
         println!(
-            "[SSH Agent] Confirming request from application: {}",
-            info.process_name()
+            "[SSH Agent] Confirming request from application: {}, is_forwarding: {}, namespace: {}",
+            info.process_name(),
+            info.is_forwarding(),
+            namespace.clone().unwrap_or_default(),
         );
 
         let mut rx_channel = self.get_ui_response_rx.lock().await.resubscribe();
@@ -57,6 +77,8 @@ impl ssh_agent::Agent<peerinfo::models::PeerInfo> for BitwardenDesktopAgent {
                 cipher_id: Some(ssh_key.cipher_uuid.clone()),
                 process_name: info.process_name().to_string(),
                 is_list: false,
+                namespace,
+                is_forwarding: info.is_forwarding(),
             })
             .await
             .expect("Should send request to ui");
@@ -81,6 +103,8 @@ impl ssh_agent::Agent<peerinfo::models::PeerInfo> for BitwardenDesktopAgent {
             cipher_id: None,
             process_name: info.process_name().to_string(),
             is_list: true,
+            namespace: None,
+            is_forwarding: info.is_forwarding(),
         };
         self.show_ui_request_tx
             .send(message)
@@ -93,6 +117,17 @@ impl ssh_agent::Agent<peerinfo::models::PeerInfo> for BitwardenDesktopAgent {
         }
         false
     }
+
+    async fn set_is_forwarding(
+        &self,
+        is_forwarding: bool,
+        connection_info: &peerinfo::models::PeerInfo,
+    ) {
+        // is_forwarding can only be added but never removed from a connection
+        if is_forwarding {
+            connection_info.set_forwarding(is_forwarding);
+        }
+    }
 }
 
 impl BitwardenDesktopAgent {
diff --git a/apps/desktop/desktop_native/core/src/ssh_agent/peercred_unix_listener_stream.rs b/apps/desktop/desktop_native/core/src/ssh_agent/peercred_unix_listener_stream.rs
index da9d8a54318..77eec5e35c7 100644
--- a/apps/desktop/desktop_native/core/src/ssh_agent/peercred_unix_listener_stream.rs
+++ b/apps/desktop/desktop_native/core/src/ssh_agent/peercred_unix_listener_stream.rs
@@ -34,9 +34,7 @@ impl Stream for PeercredUnixListenerStream {
                             return Poll::Ready(Some(Ok((stream, PeerInfo::unknown()))));
                         }
                     },
-                    Err(_) => {
-                        return Poll::Ready(Some(Ok((stream, PeerInfo::unknown()))));
-                    }
+                    Err(_) => return Poll::Ready(Some(Ok((stream, PeerInfo::unknown())))),
                 };
                 let peer_info = peerinfo::gather::get_peer_info(pid as u32);
                 match peer_info {
diff --git a/apps/desktop/desktop_native/core/src/ssh_agent/peerinfo/models.rs b/apps/desktop/desktop_native/core/src/ssh_agent/peerinfo/models.rs
index 9c2ee363e8f..35a5a508263 100644
--- a/apps/desktop/desktop_native/core/src/ssh_agent/peerinfo/models.rs
+++ b/apps/desktop/desktop_native/core/src/ssh_agent/peerinfo/models.rs
@@ -1,3 +1,5 @@
+use std::sync::{atomic::AtomicBool, Arc};
+
 /**
 * Peerinfo represents the information of a peer process connecting over a socket.
 * This can be later extended to include more information (icon, app name) for the corresponding application.
@@ -7,6 +9,7 @@ pub struct PeerInfo {
     uid: u32,
     pid: u32,
     process_name: String,
+    is_forwarding: Arc<AtomicBool>,
 }
 
 impl PeerInfo {
@@ -15,6 +18,16 @@ impl PeerInfo {
             uid,
             pid,
             process_name,
+            is_forwarding: Arc::new(AtomicBool::new(false)),
+        }
+    }
+
+    pub fn unknown() -> Self {
+        Self {
+            uid: 0,
+            pid: 0,
+            process_name: "Unknown application".to_string(),
+            is_forwarding: Arc::new(AtomicBool::new(false)),
         }
     }
 
@@ -30,7 +43,13 @@ impl PeerInfo {
         &self.process_name
     }
 
-    pub fn unknown() -> Self {
-        Self::new(0, 0, "Unknown application".to_string())
+    pub fn is_forwarding(&self) -> bool {
+        self.is_forwarding
+            .load(std::sync::atomic::Ordering::Relaxed)
+    }
+
+    pub fn set_forwarding(&self, value: bool) {
+        self.is_forwarding
+            .store(value, std::sync::atomic::Ordering::Relaxed);
     }
 }
diff --git a/apps/desktop/desktop_native/core/src/ssh_agent/request_parser.rs b/apps/desktop/desktop_native/core/src/ssh_agent/request_parser.rs
new file mode 100644
index 00000000000..e93aa19869e
--- /dev/null
+++ b/apps/desktop/desktop_native/core/src/ssh_agent/request_parser.rs
@@ -0,0 +1,41 @@
+use bytes::{Buf, Bytes};
+
+#[derive(Debug)]
+pub(crate) struct SshSigRequest {
+    pub namespace: String,
+}
+
+#[derive(Debug)]
+pub(crate) struct SignRequest {}
+
+#[derive(Debug)]
+pub(crate) enum SshAgentSignRequest {
+    SshSigRequest(SshSigRequest),
+    SignRequest(SignRequest),
+}
+
+pub(crate) fn parse_request(data: &[u8]) -> Result<SshAgentSignRequest, anyhow::Error> {
+    let mut data = Bytes::copy_from_slice(data);
+    let magic_header = "SSHSIG";
+    let header = data.split_to(magic_header.len());
+
+    // sshsig; based on https://github.com/openssh/openssh-portable/blob/master/PROTOCOL.sshsig
+    if header == magic_header.as_bytes() {
+        let _version = data.get_u32();
+
+        // read until null byte
+        let namespace = data
+            .into_iter()
+            .take_while(|&x| x != 0)
+            .collect::<Vec<u8>>();
+        let namespace =
+            String::from_utf8(namespace).map_err(|_| anyhow::anyhow!("Invalid namespace"))?;
+
+        Ok(SshAgentSignRequest::SshSigRequest(SshSigRequest {
+            namespace,
+        }))
+    } else {
+        // regular sign request
+        Ok(SshAgentSignRequest::SignRequest(SignRequest {}))
+    }
+}
diff --git a/apps/desktop/desktop_native/napi/index.d.ts b/apps/desktop/desktop_native/napi/index.d.ts
index 997e951c89e..c40b7aed487 100644
--- a/apps/desktop/desktop_native/napi/index.d.ts
+++ b/apps/desktop/desktop_native/napi/index.d.ts
@@ -67,7 +67,14 @@ export declare namespace sshagent {
     status: SshKeyImportStatus
     sshKey?: SshKey
   }
-  export function serve(callback: (err: Error | null, arg0: string | undefined | null, arg1: boolean, arg2: string) => any): Promise<SshAgentState>
+  export interface SshUiRequest {
+    cipherId?: string
+    isList: boolean
+    processName: string
+    isForwarding: boolean
+    namespace?: string
+  }
+  export function serve(callback: (err: Error | null, arg: SshUiRequest) => any): Promise<SshAgentState>
   export function stop(agentState: SshAgentState): void
   export function isRunning(agentState: SshAgentState): boolean
   export function setKeys(agentState: SshAgentState, newKeys: Array<PrivateKey>): void
diff --git a/apps/desktop/desktop_native/napi/src/lib.rs b/apps/desktop/desktop_native/napi/src/lib.rs
index 35566e16813..7d20bd50699 100644
--- a/apps/desktop/desktop_native/napi/src/lib.rs
+++ b/apps/desktop/desktop_native/napi/src/lib.rs
@@ -243,9 +243,18 @@ pub mod sshagent {
         }
     }
 
+    #[napi(object)]
+    pub struct SshUIRequest {
+        pub cipher_id: Option<String>,
+        pub is_list: bool,
+        pub process_name: String,
+        pub is_forwarding: bool,
+        pub namespace: Option<String>,
+    }
+
     #[napi]
     pub async fn serve(
-        callback: ThreadsafeFunction<(Option<String>, bool, String), CalleeHandled>,
+        callback: ThreadsafeFunction<SshUIRequest, CalleeHandled>,
     ) -> napi::Result<SshAgentState> {
         let (auth_request_tx, mut auth_request_rx) =
             tokio::sync::mpsc::channel::<desktop_core::ssh_agent::SshAgentUIRequest>(32);
@@ -262,11 +271,13 @@ pub mod sshagent {
                     let auth_response_tx_arc = cloned_response_tx_arc;
                     let callback = cloned_callback;
                     let promise_result: Result<Promise<bool>, napi::Error> = callback
-                        .call_async(Ok((
-                            request.cipher_id,
-                            request.is_list,
-                            request.process_name,
-                        )))
+                        .call_async(Ok(SshUIRequest {
+                            cipher_id: request.cipher_id,
+                            is_list: request.is_list,
+                            process_name: request.process_name,
+                            is_forwarding: request.is_forwarding,
+                            namespace: request.namespace,
+                        }))
                         .await;
                     match promise_result {
                         Ok(promise_result) => match promise_result.await {
diff --git a/apps/desktop/src/locales/en/messages.json b/apps/desktop/src/locales/en/messages.json
index ed55c5fb070..726b5c4b316 100644
--- a/apps/desktop/src/locales/en/messages.json
+++ b/apps/desktop/src/locales/en/messages.json
@@ -3509,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/platform/components/approve-ssh-request.html b/apps/desktop/src/platform/components/approve-ssh-request.html
index eac451a1fbe..952e3344e9c 100644
--- a/apps/desktop/src/platform/components/approve-ssh-request.html
+++ b/apps/desktop/src/platform/components/approve-ssh-request.html
@@ -2,8 +2,17 @@
   <bit-dialog>
     <div class="tw-font-semibold" bitDialogTitle>{{ "sshkeyApprovalTitle" | i18n }}</div>
     <div bitDialogContent>
+      <app-callout
+        type="warning"
+        title="{{ 'agentForwardingWarningTitle' | i18n }}"
+        *ngIf="params.isAgentForwarding"
+      >
+        {{ 'agentForwardingWarningText' | i18n }}
+      </app-callout>
+
       <b>{{params.applicationName}}</b> {{ "sshkeyApprovalMessageInfix" | i18n }}
-      <b>{{params.cipherName}}</b>.
+      <b>{{params.cipherName}}</b>
+      {{ "sshkeyApprovalMessageSuffix" | i18n }} {{ params.action | i18n }}
     </div>
     <div bitDialogFooter>
       <button type="submit" bitButton bitFormButton buttonType="primary">
diff --git a/apps/desktop/src/platform/components/approve-ssh-request.ts b/apps/desktop/src/platform/components/approve-ssh-request.ts
index 0443034f551..c2351f6c1b0 100644
--- a/apps/desktop/src/platform/components/approve-ssh-request.ts
+++ b/apps/desktop/src/platform/components/approve-ssh-request.ts
@@ -17,6 +17,8 @@ import { CipherFormGeneratorComponent } from "@bitwarden/vault";
 export interface ApproveSshRequestParams {
   cipherName: string;
   applicationName: string;
+  isAgentForwarding: boolean;
+  action: string;
 }
 
 @Component({
@@ -44,11 +46,26 @@ export class ApproveSshRequestComponent {
     private formBuilder: FormBuilder,
   ) {}
 
-  static open(dialogService: DialogService, cipherName: string, applicationName: string) {
+  static open(
+    dialogService: DialogService,
+    cipherName: string,
+    applicationName: string,
+    isAgentForwarding: boolean,
+    namespace: string,
+  ) {
+    let actioni18nKey = "sshActionLogin";
+    if (namespace === "git") {
+      actioni18nKey = "sshActionGitSign";
+    } else if (namespace != null && namespace != "") {
+      actioni18nKey = "sshActionSign";
+    }
+
     return dialogService.open<boolean, ApproveSshRequestParams>(ApproveSshRequestComponent, {
       data: {
         cipherName,
         applicationName,
+        isAgentForwarding,
+        action: actioni18nKey,
       },
     });
   }
diff --git a/apps/desktop/src/platform/main/main-ssh-agent.service.ts b/apps/desktop/src/platform/main/main-ssh-agent.service.ts
index cc4565f27f4..af79d9d7316 100644
--- a/apps/desktop/src/platform/main/main-ssh-agent.service.ts
+++ b/apps/desktop/src/platform/main/main-ssh-agent.service.ts
@@ -47,7 +47,7 @@ export class MainSshAgentService {
   init() {
     // handle sign request passing to UI
     sshagent
-      .serve(async (err: Error, cipherId: string, isListRequest: boolean, processName: string) => {
+      .serve(async (err: Error, sshUiRequest: sshagent.SshUiRequest) => {
         // clear all old (> SIGN_TIMEOUT) requests
         this.requestResponses = this.requestResponses.filter(
           (response) => response.timestamp > new Date(Date.now() - this.SIGN_TIMEOUT),
@@ -56,10 +56,12 @@ export class MainSshAgentService {
         this.request_id += 1;
         const id_for_this_request = this.request_id;
         this.messagingService.send("sshagent.signrequest", {
-          cipherId,
-          isListRequest,
+          cipherId: sshUiRequest.cipherId,
+          isListRequest: sshUiRequest.isList,
           requestId: id_for_this_request,
-          processName,
+          processName: sshUiRequest.processName,
+          isAgentForwarding: sshUiRequest.isForwarding,
+          namespace: sshUiRequest.namespace,
         });
 
         const result = await firstValueFrom(
diff --git a/apps/desktop/src/platform/services/ssh-agent.service.ts b/apps/desktop/src/platform/services/ssh-agent.service.ts
index 31b615dd365..5fd1bafdc1b 100644
--- a/apps/desktop/src/platform/services/ssh-agent.service.ts
+++ b/apps/desktop/src/platform/services/ssh-agent.service.ts
@@ -148,6 +148,8 @@ export class SshAgentService implements OnDestroy {
           const isListRequest = message.isListRequest as boolean;
           const requestId = message.requestId as number;
           let application = message.processName as string;
+          const namespace = message.namespace as string;
+          const isAgentForwarding = message.isAgentForwarding as boolean;
           if (application == "") {
             application = this.i18nService.t("unknownApplication");
           }
@@ -181,6 +183,8 @@ export class SshAgentService implements OnDestroy {
             this.dialogService,
             cipher.name,
             application,
+            isAgentForwarding,
+            namespace,
           );
 
           const result = await firstValueFrom(dialogRef.closed);

From 164f15d9f954c970f040430aa25ab5dc1f62826c Mon Sep 17 00:00:00 2001
From: Opeyemi <Alaoopeyemi101@gmail.com>
Date: Wed, 26 Feb 2025 13:17:24 +0000
Subject: [PATCH 04/47] [BRE-610] - Sign windows CLI (#13542)

* [BRE-610] - Sign windows CLI

* little fix

* testing path to script

* testing script path

* Testing windows signing script

* single line run

---------

Co-authored-by: Andy Pixley <3723676+pixman20@users.noreply.github.com>
---
 .github/workflows/build-cli.yml     | 33 ++++++++++++++++++++++
 .github/workflows/build-desktop.yml |  3 +-
 apps/cli/scripts/sign-cli.ps1       | 44 +++++++++++++++++++++++++++++
 3 files changed, 78 insertions(+), 2 deletions(-)
 create mode 100644 apps/cli/scripts/sign-cli.ps1

diff --git a/.github/workflows/build-cli.yml b/.github/workflows/build-cli.yml
index cfbd53505af..8599a699d9d 100644
--- a/.github/workflows/build-cli.yml
+++ b/.github/workflows/build-cli.yml
@@ -205,6 +205,9 @@ jobs:
         with:
           ref: ${{  github.event.pull_request.head.sha }}
 
+      - name: Install AST
+        run: dotnet tool install --global AzureSignTool --version 4.0.1
+
       - name: Setup Windows builder
         run: |
           choco install checksum --no-progress
@@ -273,6 +276,24 @@ jobs:
           ResourceHacker -open version-info.rc -save version-info.res -action compile
           ResourceHacker -open %WIN_PKG_BUILT% -save %WIN_PKG_BUILT% -action addoverwrite -resource version-info.res
 
+      - name: Login to Azure
+        if: ${{ needs.setup.outputs.has_secrets == 'true' }}
+        uses: Azure/login@e15b166166a8746d1a47596803bd8c1b595455cf # v1.6.0
+        with:
+          creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }}
+
+      - name: Retrieve secrets
+        id: retrieve-secrets
+        if: ${{ needs.setup.outputs.has_secrets == 'true' }}
+        uses: bitwarden/gh-actions/get-keyvault-secrets@main
+        with:
+          keyvault: "bitwarden-ci"
+          secrets: "code-signing-vault-url,
+            code-signing-client-id,
+            code-signing-tenant-id,
+            code-signing-client-secret,
+            code-signing-cert-name"
+
       - name: Install
         run: npm ci
         working-directory: ./
@@ -300,6 +321,18 @@ jobs:
       - name: Build & Package Windows
         run: npm run dist:${{ matrix.license_type.build_prefix }}:win --quiet
 
+      - name: Sign executable
+        if: ${{ needs.setup.outputs.has_secrets == 'true' }}
+        shell: pwsh
+        env:
+          SIGNING_VAULT_URL: ${{ steps.retrieve-secrets.outputs.code-signing-vault-url }}
+          SIGNING_CLIENT_ID: ${{ steps.retrieve-secrets.outputs.code-signing-client-id }}
+          SIGNING_TENANT_ID: ${{ steps.retrieve-secrets.outputs.code-signing-tenant-id }}
+          SIGNING_CLIENT_SECRET: ${{ steps.retrieve-secrets.outputs.code-signing-client-secret }}
+          SIGNING_CERT_NAME: ${{ steps.retrieve-secrets.outputs.code-signing-cert-name }}
+          EXE_PATH: dist/${{ matrix.license_type.build_prefix }}/windows/bw.exe
+        run: . .\scripts\sign-cli.ps1
+
       - name: Package Chocolatey
         shell: pwsh
         if: ${{ matrix.license_type.build_prefix == 'bit' }}
diff --git a/.github/workflows/build-desktop.yml b/.github/workflows/build-desktop.yml
index 23722e7c7df..c65366c7796 100644
--- a/.github/workflows/build-desktop.yml
+++ b/.github/workflows/build-desktop.yml
@@ -392,8 +392,7 @@ jobs:
         run: node build.js cross-platform
 
       - name: Build
-        run: |
-          npm run build
+        run: npm run build
 
       - name: Pack
         if: ${{ needs.setup.outputs.has_secrets == 'false' }}
diff --git a/apps/cli/scripts/sign-cli.ps1 b/apps/cli/scripts/sign-cli.ps1
new file mode 100644
index 00000000000..65b763f19ad
--- /dev/null
+++ b/apps/cli/scripts/sign-cli.ps1
@@ -0,0 +1,44 @@
+
+
+function SignExe {
+        param (
+        [Parameter(Mandatory=$true)]
+        [ValidateScript({![string]::IsNullOrEmpty($_)})]
+        [string]$vaultUrl,
+
+        [Parameter(Mandatory=$false)]
+        [ValidateScript({![string]::IsNullOrEmpty($_)})]
+        [string]$clientId,
+
+        [Parameter(Mandatory=$false)]
+        [ValidateScript({![string]::IsNullOrEmpty($_)})]
+        [string]$tenantId,
+
+        [Parameter(Mandatory=$false)]
+        [ValidateScript({![string]::IsNullOrEmpty($_)})]
+        [string]$clientSecret,
+
+        [Parameter(Mandatory=$false)]
+        [ValidateScript({![string]::IsNullOrEmpty($_)})]
+        [string]$certName,
+
+        [Parameter(Mandatory=$false)]
+        [ValidateScript({Test-Path $_})]
+        [string] $exePath,
+
+        # [Parameter(Mandatory=$false)]
+        # [string] $hashAlgorithm, # -fd option
+
+        # [Parameter(Mandatory=$false)]
+        # [string] $site, # -du option
+
+        [Parameter(Mandatory=$false)]
+        [string] $timestampService = "http://timestamp.digicert.com"
+    )
+
+    echo "Signing $exePath ..."
+    azuresigntool sign -kvu $vaultUrl -kvi $clientId -kvt $tenantId -kvs $clientSecret -kvc $certName -tr $timestampService $exePath
+}
+
+
+SignExe -vaultUrl $env:SIGNING_VAULT_URL -clientId $env:SIGNING_CLIENT_ID -tenantId $env:SIGNING_TENANT_ID -clientSecret $env:SIGNING_CLIENT_SECRET -certName $env:SIGNING_CERT_NAME -exePath $env:EXE_PATH

From 14584c8abb861034b7660f444047a675e9975671 Mon Sep 17 00:00:00 2001
From: Vijay Oommen <voommen@livefront.com>
Date: Wed, 26 Feb 2025 08:07:37 -0600
Subject: [PATCH 05/47] Tools/pm 18616/disable notify button (#13563)

---
 apps/web/src/locales/en/messages.json                       | 3 +++
 .../critical-applications.component.html                    | 6 +++++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/apps/web/src/locales/en/messages.json b/apps/web/src/locales/en/messages.json
index 3d50e842a81..75cca17d3f8 100644
--- a/apps/web/src/locales/en/messages.json
+++ b/apps/web/src/locales/en/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk":{
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
diff --git a/bitwarden_license/bit-web/src/app/tools/access-intelligence/critical-applications.component.html b/bitwarden_license/bit-web/src/app/tools/access-intelligence/critical-applications.component.html
index 73b0af312b6..d9ad4dce0ff 100644
--- a/bitwarden_license/bit-web/src/app/tools/access-intelligence/critical-applications.component.html
+++ b/bitwarden_license/bit-web/src/app/tools/access-intelligence/critical-applications.component.html
@@ -37,7 +37,11 @@
       (click)="requestPasswordChange()"
     >
       <i class="bwi bwi-envelope tw-mr-2"></i>
-      {{ "requestPasswordChange" | i18n }}
+      {{
+        enableRequestPasswordChange
+          ? ("requestPasswordChange" | i18n)
+          : ("noCriticalAppsAtRisk" | i18n)
+      }}
     </button>
   </div>
   <div class="tw-flex tw-gap-6">

From 63ba9f6b311cfdbb1d30b3fff21826feaa6bde07 Mon Sep 17 00:00:00 2001
From: Conner Turnbull <133619638+cturnbull-bitwarden@users.noreply.github.com>
Date: Wed, 26 Feb 2025 14:09:29 -0500
Subject: [PATCH 06/47] Fixed typo in tailwind class name (#13586)

---
 .../app/billing/organizations/organization-plans.component.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/web/src/app/billing/organizations/organization-plans.component.html b/apps/web/src/app/billing/organizations/organization-plans.component.html
index 263ef12ebea..3b765927c3c 100644
--- a/apps/web/src/app/billing/organizations/organization-plans.component.html
+++ b/apps/web/src/app/billing/organizations/organization-plans.component.html
@@ -216,7 +216,7 @@
             formControlName="additionalSeats"
             placeholder="{{ 'userSeatsDesc' | i18n }}"
           />
-          <bit-hint class="tx-text-sm"
+          <bit-hint class="tw-text-sm"
             >{{
               "userSeatsAdditionalDesc"
                 | i18n

From cdbbbb365b0b3857fca87b92f0aeb96df5c0b37e Mon Sep 17 00:00:00 2001
From: Conner Turnbull <133619638+cturnbull-bitwarden@users.noreply.github.com>
Date: Wed, 26 Feb 2025 14:09:36 -0500
Subject: [PATCH 07/47] Bootstrap to tailwind updates (#13582)

---
 .../change-plan-dialog.component.html         | 31 +++++++++----------
 1 file changed, 15 insertions(+), 16 deletions(-)

diff --git a/apps/web/src/app/billing/organizations/change-plan-dialog.component.html b/apps/web/src/app/billing/organizations/change-plan-dialog.component.html
index ca1b9245c0b..64a694cdef0 100644
--- a/apps/web/src/app/billing/organizations/change-plan-dialog.component.html
+++ b/apps/web/src/app/billing/organizations/change-plan-dialog.component.html
@@ -55,7 +55,7 @@
           class="tw-grid tw-grid-flow-col tw-gap-4 tw-mb-4"
           [class]="'tw-grid-cols-' + selectableProducts.length"
         >
-          <div
+          <bit-card
             *ngFor="
               let selectableProduct of selectableProducts;
               trackBy: manageSelectableProduct;
@@ -64,7 +64,6 @@
             [ngClass]="getPlanCardContainerClasses(selectableProduct, i)"
             (click)="selectPlan(selectableProduct)"
             [attr.tabindex]="focusedIndex !== i || isCardDisabled(i) ? '-1' : '0'"
-            class="product-card"
             (keyup)="onKeydown($event, i)"
             (focus)="onFocus(i)"
             [attr.aria-disabled]="isCardDisabled(i)"
@@ -322,7 +321,7 @@
                 </ul>
               </ng-template>
             </ng-template>
-          </div>
+          </bit-card>
         </div>
         <br />
         <bit-callout
@@ -353,7 +352,7 @@
         >
           <i class="bwi bwi-fw" [ngClass]="paymentSourceClasses"></i>
           {{ paymentSource?.description }}
-          <span class="ml-2 tw-text-primary-600 tw-cursor-pointer" (click)="toggleShowPayment()">
+          <span class="tw-ml-2 tw-text-primary-600 tw-cursor-pointer" (click)="toggleShowPayment()">
             {{ "changePaymentMethod" | i18n }}
           </span>
           <a></a>
@@ -382,8 +381,8 @@
           </p>
         </div>
         <!-- SM + PM and PM only cost summary -->
-        <div *ngIf="totalOpened && !isSecretsManagerTrial()" class="row">
-          <bit-hint class="col-6" *ngIf="selectedInterval == planIntervals.Annually">
+        <div *ngIf="totalOpened && !isSecretsManagerTrial()" class="tw-flex tw-flex-wrap tw-gap-4">
+          <bit-hint class="tw-w-1/2" *ngIf="selectedInterval == planIntervals.Annually">
             <p class="tw-font-semibold tw-mb-1" *ngIf="organization.useSecretsManager">
               {{ "passwordManager" | i18n }}
             </p>
@@ -550,7 +549,7 @@
               </ng-container>
             </p>
           </bit-hint>
-          <bit-hint class="col-6" *ngIf="selectedInterval == planIntervals.Monthly">
+          <bit-hint class="tw-w-1/2" *ngIf="selectedInterval == planIntervals.Monthly">
             <p class="tw-font-semibold tw-mb-1" *ngIf="organization.useSecretsManager">
               {{ "passwordManager" | i18n }}
             </p>
@@ -706,8 +705,8 @@
           </bit-hint>
         </div>
         <!-- SM + Free PM cost summary -->
-        <div *ngIf="totalOpened && isSecretsManagerTrial()" class="row">
-          <bit-hint class="col-6" *ngIf="selectedInterval == planIntervals.Annually">
+        <div *ngIf="totalOpened && isSecretsManagerTrial()" class="tw-flex tw-flex-wrap tw-gap-4">
+          <bit-hint class="tw-w-1/2" *ngIf="selectedInterval == planIntervals.Annually">
             <!-- secrets manager summary for annual -->
             <p class="tw-font-semibold tw-mt-2 tw-mb-0" *ngIf="organization.useSecretsManager">
               {{ "secretsManager" | i18n }}
@@ -826,7 +825,7 @@
               </span>
             </p>
           </bit-hint>
-          <bit-hint class="col-6" *ngIf="selectedInterval == planIntervals.Monthly">
+          <bit-hint class="tw-w-1/2" *ngIf="selectedInterval == planIntervals.Monthly">
             <!-- secrets manager summary for monthly -->
             <p class="tw-font-semibold tw-mt-2 tw-mb-0" *ngIf="organization.useSecretsManager">
               {{ "secretsManager" | i18n }}
@@ -930,9 +929,9 @@
         <!-- discountPercentage to PM Only -->
         <div
           *ngIf="totalOpened && discountPercentage && !organization.useSecretsManager"
-          class="row"
+          class="tw-flex tw-flex-wrap tw-gap-4"
         >
-          <bit-hint class="col-6">
+          <bit-hint class="tw-w-1/2">
             <p
               class="tw-mb-0 tw-flex tw-justify-between"
               bitTypography="body2"
@@ -949,8 +948,8 @@
             </p>
           </bit-hint>
         </div>
-        <div *ngIf="totalOpened" class="row tw-mt-4">
-          <bit-hint class="col-6">
+        <div *ngIf="totalOpened" class="tw-flex tw-flex-wrap tw-gap-4 tw-mt-4">
+          <bit-hint class="tw-w-1/2">
             <p
               class="tw-flex tw-justify-between tw-border-0 tw-border-solid tw-border-t tw-border-secondary-300 tw-pt-2 tw-mb-0"
             >
@@ -963,8 +962,8 @@
             </p>
           </bit-hint>
         </div>
-        <div *ngIf="totalOpened" class="row tw-mt-4">
-          <bit-hint class="col-6">
+        <div *ngIf="totalOpened" class="tw-flex tw-flex-wrap tw-gap-4 tw-mt-4">
+          <bit-hint class="tw-w-1/2">
             <p
               class="tw-flex tw-justify-between tw-border-0 tw-border-solid tw-border-t tw-border-secondary-300 tw-pt-2 tw-mb-0"
             >

From 9395e9495eac3c7f0624bab792c09d27454b45a0 Mon Sep 17 00:00:00 2001
From: Conner Turnbull <133619638+cturnbull-bitwarden@users.noreply.github.com>
Date: Wed, 26 Feb 2025 14:09:41 -0500
Subject: [PATCH 08/47] Updated trial-billing-step.component.html to use
 tw-text-muted instead of text-muted (#13569)

---
 .../accounts/trial-initiation/trial-billing-step.component.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/web/src/app/billing/accounts/trial-initiation/trial-billing-step.component.html b/apps/web/src/app/billing/accounts/trial-initiation/trial-billing-step.component.html
index b3b8668e90b..212df558d94 100644
--- a/apps/web/src/app/billing/accounts/trial-initiation/trial-billing-step.component.html
+++ b/apps/web/src/app/billing/accounts/trial-initiation/trial-billing-step.component.html
@@ -1,6 +1,6 @@
 <ng-container *ngIf="loading">
   <i
-    class="bwi bwi-spinner bwi-spin text-muted"
+    class="bwi bwi-spinner bwi-spin tw-text-muted"
     title="{{ 'loading' | i18n }}"
     aria-hidden="true"
   ></i>

From 19326609e335859e54421ff0105570e035d46fe7 Mon Sep 17 00:00:00 2001
From: Conner Turnbull <133619638+cturnbull-bitwarden@users.noreply.github.com>
Date: Wed, 26 Feb 2025 14:14:28 -0500
Subject: [PATCH 09/47] Updated to use tailwind's tw-text-muted (#13587)

---
 .../organization-subscription-cloud.component.html              | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/web/src/app/billing/organizations/organization-subscription-cloud.component.html b/apps/web/src/app/billing/organizations/organization-subscription-cloud.component.html
index 1d8a7846d9d..062b3c05eb8 100644
--- a/apps/web/src/app/billing/organizations/organization-subscription-cloud.component.html
+++ b/apps/web/src/app/billing/organizations/organization-subscription-cloud.component.html
@@ -1,7 +1,7 @@
 <app-header></app-header>
 
 <ng-container *ngIf="loading">
-  <i class="bwi bwi-spinner bwi-spin text-muted" title="{{ 'loading' | i18n }}"></i>
+  <i class="bwi bwi-spinner bwi-spin tw-text-muted" title="{{ 'loading' | i18n }}"></i>
   <span class="tw-sr-only">{{ "loading" | i18n }}</span>
 </ng-container>
 

From 359007ab8d3264262920b33cebc71328958d55a0 Mon Sep 17 00:00:00 2001
From: rr-bw <102181210+rr-bw@users.noreply.github.com>
Date: Wed, 26 Feb 2025 11:44:41 -0800
Subject: [PATCH 10/47] fix(auth): [PM-18639] Resend Admin Auth Request After
 Previous Denial (#13574)

---
 .../services/auth-request/auth-request-api.service.ts     | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/libs/auth/src/common/services/auth-request/auth-request-api.service.ts b/libs/auth/src/common/services/auth-request/auth-request-api.service.ts
index 180e0079396..b5fc72588a6 100644
--- a/libs/auth/src/common/services/auth-request/auth-request-api.service.ts
+++ b/libs/auth/src/common/services/auth-request/auth-request-api.service.ts
@@ -16,7 +16,7 @@ export class DefaultAuthRequestApiService implements AuthRequestApiService {
       const path = `/auth-requests/${requestId}`;
       const response = await this.apiService.send("GET", path, null, true, true);
 
-      return response;
+      return new AuthRequestResponse(response);
     } catch (e: unknown) {
       this.logService.error(e);
       throw e;
@@ -28,7 +28,7 @@ export class DefaultAuthRequestApiService implements AuthRequestApiService {
       const path = `/auth-requests/${requestId}/response?code=${accessCode}`;
       const response = await this.apiService.send("GET", path, null, false, true);
 
-      return response;
+      return new AuthRequestResponse(response);
     } catch (e: unknown) {
       this.logService.error(e);
       throw e;
@@ -45,7 +45,7 @@ export class DefaultAuthRequestApiService implements AuthRequestApiService {
         true,
       );
 
-      return response;
+      return new AuthRequestResponse(response);
     } catch (e: unknown) {
       this.logService.error(e);
       throw e;
@@ -56,7 +56,7 @@ export class DefaultAuthRequestApiService implements AuthRequestApiService {
     try {
       const response = await this.apiService.send("POST", "/auth-requests/", request, false, true);
 
-      return response;
+      return new AuthRequestResponse(response);
     } catch (e: unknown) {
       this.logService.error(e);
       throw e;

From d999d91f19f23fe278ae4e00bcd1d2447adef1fc Mon Sep 17 00:00:00 2001
From: Patrick-Pimentel-Bitwarden <ppimentel@bitwarden.com>
Date: Wed, 26 Feb 2025 14:54:06 -0500
Subject: [PATCH 11/47] fix(sso-routing): [Auth/PM-13458] Fixes for routing
 flow on TDE login (#13479)

* fix(sso-routing): [PM-13458] Fixes for routing flow on TDE login - Fixed routing flow and added comments.

* fix(sso-routing): [PM-13458] Fixes for routing flow on TDE login - Undid the old sso component flow because we determined it's not worth fixing.

* fix(sso-routing): [PM-13458] Fixes for routing flow on TDE login - Removed flow entirely.
---
 libs/auth/src/angular/sso/sso.component.ts | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/libs/auth/src/angular/sso/sso.component.ts b/libs/auth/src/angular/sso/sso.component.ts
index 9f81ab2a748..cd3429323b5 100644
--- a/libs/auth/src/angular/sso/sso.component.ts
+++ b/libs/auth/src/angular/sso/sso.component.ts
@@ -445,13 +445,6 @@ export class SsoComponent implements OnInit {
       const userId = (await firstValueFrom(this.accountService.activeAccount$))?.id;
       await this.ssoLoginService.setActiveUserOrganizationSsoIdentifier(orgSsoIdentifier, userId);
 
-      // Users enrolled in admin acct recovery can be forced to set a new password after
-      // having the admin set a temp password for them (affects TDE & standard users)
-      if (authResult.forcePasswordReset == ForceSetPasswordReason.AdminForcePasswordReset) {
-        // Weak password is not a valid scenario here b/c we cannot have evaluated a MP yet
-        return await this.handleForcePasswordReset(orgSsoIdentifier);
-      }
-
       // must come after 2fa check since user decryption options aren't available if 2fa is required
       const userDecryptionOpts = await firstValueFrom(
         this.userDecryptionOptionsService.userDecryptionOptions$,

From 9aee5f16c40b0cbde4e1a67bf50976818ff60ae1 Mon Sep 17 00:00:00 2001
From: Daniel Riera <driera@livefront.com>
Date: Wed, 26 Feb 2025 16:13:27 -0500
Subject: [PATCH 12/47] PM-18276-Connect confirmation UI (#13498)

* PM-18276-wip

* update typing

* dynamically retrieve messages, resolve theme in function

* five second timeout after save or update

* adjust timeout to five seconds

* negligible performance gain-revert

* sacrifice contorl for to remove event listeners-revert
---
 .../notification/confirmation-container.ts    |  98 ++++++++++
 .../content/components/notification/header.ts |   6 +-
 apps/browser/src/autofill/notification/bar.ts | 174 +++++++++++-------
 3 files changed, 206 insertions(+), 72 deletions(-)
 create mode 100644 apps/browser/src/autofill/content/components/notification/confirmation-container.ts

diff --git a/apps/browser/src/autofill/content/components/notification/confirmation-container.ts b/apps/browser/src/autofill/content/components/notification/confirmation-container.ts
new file mode 100644
index 00000000000..4fda95986db
--- /dev/null
+++ b/apps/browser/src/autofill/content/components/notification/confirmation-container.ts
@@ -0,0 +1,98 @@
+import { css } from "@emotion/css";
+import { html } from "lit";
+
+import { Theme, ThemeTypes } from "@bitwarden/common/platform/enums";
+
+import {
+  NotificationBarIframeInitData,
+  NotificationTypes,
+  NotificationType,
+} from "../../../notification/abstractions/notification-bar";
+import { themes, spacing } from "../constants/styles";
+
+import { NotificationConfirmationBody } from "./confirmation";
+import {
+  NotificationHeader,
+  componentClassPrefix as notificationHeaderClassPrefix,
+} from "./header";
+
+export function NotificationConfirmationContainer({
+  error,
+  handleCloseNotification,
+  i18n,
+  theme = ThemeTypes.Light,
+  type,
+}: NotificationBarIframeInitData & {
+  handleCloseNotification: (e: Event) => void;
+} & {
+  error: string;
+  i18n: { [key: string]: string };
+  type: NotificationType;
+}) {
+  const headerMessage = getHeaderMessage(i18n, type, error);
+  const confirmationMessage = getConfirmationMessage(i18n, type, error);
+  const buttonText = error ? i18n.newItem : i18n.view;
+
+  return html`
+    <div class=${notificationContainerStyles(theme)}>
+      ${NotificationHeader({
+        handleCloseNotification,
+        message: headerMessage,
+        theme,
+      })}
+      ${NotificationConfirmationBody({
+        error: error,
+        buttonText,
+        confirmationMessage,
+        theme,
+      })}
+    </div>
+  `;
+}
+
+const notificationContainerStyles = (theme: Theme) => css`
+  position: absolute;
+  right: 20px;
+  border: 1px solid ${themes[theme].secondary["300"]};
+  border-radius: ${spacing["4"]};
+  box-shadow: -2px 4px 6px 0px #0000001a;
+  background-color: ${themes[theme].background.alt};
+  width: 400px;
+  overflow: hidden;
+
+  [class*="${notificationHeaderClassPrefix}-"] {
+    border-radius: ${spacing["4"]} ${spacing["4"]} 0 0;
+    border-bottom: 0.5px solid ${themes[theme].secondary["300"]};
+  }
+`;
+
+function getConfirmationMessage(
+  i18n: { [key: string]: string },
+  type?: NotificationType,
+  error?: string,
+) {
+  if (error) {
+    return i18n.saveFailureDetails;
+  }
+  return type === "add" ? i18n.loginSaveSuccessDetails : i18n.loginUpdateSuccessDetails;
+}
+function getHeaderMessage(
+  i18n: { [key: string]: string },
+  type?: NotificationType,
+  error?: string,
+) {
+  if (error) {
+    return i18n.saveFailure;
+  }
+
+  switch (type) {
+    case NotificationTypes.Add:
+      return i18n.loginSaveSuccess;
+    case NotificationTypes.Change:
+      return i18n.loginUpdateSuccess;
+    case NotificationTypes.Unlock:
+      return "";
+    default:
+      return undefined;
+  }
+}
diff --git a/apps/browser/src/autofill/content/components/notification/header.ts b/apps/browser/src/autofill/content/components/notification/header.ts
index 85f6e48cd5d..50c2c629942 100644
--- a/apps/browser/src/autofill/content/components/notification/header.ts
+++ b/apps/browser/src/autofill/content/components/notification/header.ts
@@ -17,12 +17,12 @@ const { css } = createEmotion({
 
 export function NotificationHeader({
   message,
-  standalone,
+  standalone = false,
   theme = ThemeTypes.Light,
   handleCloseNotification,
 }: {
   message?: string;
-  standalone: boolean;
+  standalone?: boolean;
   theme: Theme;
   handleCloseNotification: (e: Event) => void;
 }) {
@@ -49,7 +49,7 @@ const notificationHeaderStyles = ({
   display: flex;
   align-items: center;
   justify-content: flex-start;
-  background-color: ${themes[theme].background.alt};
+  background-color: ${themes[theme].background};
   padding: 12px 16px 8px 16px;
   white-space: nowrap;
 
diff --git a/apps/browser/src/autofill/notification/bar.ts b/apps/browser/src/autofill/notification/bar.ts
index 5a8d7855bea..8c4c8a3e229 100644
--- a/apps/browser/src/autofill/notification/bar.ts
+++ b/apps/browser/src/autofill/notification/bar.ts
@@ -7,6 +7,7 @@ import { ConsoleLogService } from "@bitwarden/common/platform/services/console-l
 import type { FolderView } from "@bitwarden/common/vault/models/view/folder.view";
 
 import { AdjustNotificationBarMessageData } from "../background/abstractions/notification.background";
+import { NotificationConfirmationContainer } from "../content/components/notification/confirmation-container";
 import { NotificationContainer } from "../content/components/notification/container";
 import { buildSvgDomElement } from "../utils";
 import { circleCheckIcon } from "../utils/svg-icons";
@@ -22,12 +23,17 @@ const logService = new ConsoleLogService(false);
 let notificationBarIframeInitData: NotificationBarIframeInitData = {};
 let windowMessageOrigin: string;
 let useComponentBar = false;
+
 const notificationBarWindowMessageHandlers: NotificationBarWindowMessageHandlers = {
   initNotificationBar: ({ message }) => initNotificationBar(message),
-  saveCipherAttemptCompleted: ({ message }) => handleSaveCipherAttemptCompletedMessage(message),
+  saveCipherAttemptCompleted: ({ message }) =>
+    useComponentBar
+      ? handleSaveCipherConfirmation(message)
+      : handleSaveCipherAttemptCompletedMessage(message),
 };
 
 globalThis.addEventListener("load", load);
+
 function load() {
   setupWindowMessageListener();
   sendPlatformMessage({ command: "notificationRefreshFlagValue" }, (flagValue) => {
@@ -35,7 +41,6 @@ function load() {
     applyNotificationBarStyle();
   });
 }
-
 function applyNotificationBarStyle() {
   if (!useComponentBar) {
     // eslint-disable-next-line @typescript-eslint/no-require-imports
@@ -44,16 +49,8 @@ function applyNotificationBarStyle() {
   postMessageToParent({ command: "initNotificationBar" });
 }
 
-function initNotificationBar(message: NotificationBarWindowMessage) {
-  const { initData } = message;
-  if (!initData) {
-    return;
-  }
-
-  notificationBarIframeInitData = initData;
-  const { isVaultLocked, theme } = notificationBarIframeInitData;
-
-  const i18n = {
+function getI18n() {
+  return {
     appName: chrome.i18n.getMessage("appName"),
     close: chrome.i18n.getMessage("close"),
     never: chrome.i18n.getMessage("never"),
@@ -74,20 +71,30 @@ function initNotificationBar(message: NotificationBarWindowMessage) {
     updateLoginPrompt: "Update existing login?",
     loginSaveSuccess: "Login saved",
     loginSaveSuccessDetails: "Login saved to Bitwarden.",
-    loginUpdateSuccess: "Login saved",
+    loginUpdateSuccess: "Login updated",
     loginUpdateSuccessDetails: "Login updated in Bitwarden.",
     saveFailure: "Error saving",
     saveFailureDetails: "Oh no! We couldn't save this. Try entering the details as a New item",
+    newItem: "New item",
+    view: "View",
   };
+}
+
+function initNotificationBar(message: NotificationBarWindowMessage) {
+  const { initData } = message;
+  if (!initData) {
+    return;
+  }
+
+  notificationBarIframeInitData = initData;
+  const { isVaultLocked, theme } = notificationBarIframeInitData;
+  const i18n = getI18n();
+  const resolvedTheme = getResolvedTheme(theme);
 
   if (useComponentBar) {
     document.body.innerHTML = "";
     // Current implementations utilize a require for scss files which creates the need to remove the node.
     document.head.querySelectorAll('link[rel="stylesheet"]').forEach((node) => node.remove());
-    const themeType = getTheme(globalThis, theme);
-
-    // There are other possible passed theme values, but for now, resolve to dark or light
-    const resolvedTheme: Theme = themeType === ThemeTypes.Dark ? ThemeTypes.Dark : ThemeTypes.Light;
 
     sendPlatformMessage({ command: "bgGetDecryptedCiphers" }, (cipherData) => {
       // @TODO use context to avoid prop drilling
@@ -105,77 +112,71 @@ function initNotificationBar(message: NotificationBarWindowMessage) {
         document.body,
       );
     });
-  }
+  } else {
+    setNotificationBarTheme();
 
-  setNotificationBarTheme();
+    (document.getElementById("logo") as HTMLImageElement).src = isVaultLocked
+      ? chrome.runtime.getURL("images/icon38_locked.png")
+      : chrome.runtime.getURL("images/icon38.png");
 
-  (document.getElementById("logo") as HTMLImageElement).src = isVaultLocked
-    ? chrome.runtime.getURL("images/icon38_locked.png")
-    : chrome.runtime.getURL("images/icon38.png");
+    setupLogoLink(i18n);
 
-  setupLogoLink(i18n);
+    // i18n for "Add" template
+    const addTemplate = document.getElementById("template-add") as HTMLTemplateElement;
 
-  // i18n for "Add" template
-  const addTemplate = document.getElementById("template-add") as HTMLTemplateElement;
+    const neverButton = addTemplate.content.getElementById("never-save");
+    neverButton.textContent = i18n.never;
 
-  const neverButton = addTemplate.content.getElementById("never-save");
-  neverButton.textContent = i18n.never;
+    const selectFolder = addTemplate.content.getElementById("select-folder");
+    selectFolder.hidden = isVaultLocked || removeIndividualVault();
+    selectFolder.setAttribute("aria-label", i18n.folder);
 
-  const selectFolder = addTemplate.content.getElementById("select-folder");
-  selectFolder.hidden = isVaultLocked || removeIndividualVault();
-  selectFolder.setAttribute("aria-label", i18n.folder);
+    const addButton = addTemplate.content.getElementById("add-save");
+    addButton.textContent = i18n.notificationAddSave;
 
-  const addButton = addTemplate.content.getElementById("add-save");
-  addButton.textContent = i18n.notificationAddSave;
+    const addEditButton = addTemplate.content.getElementById("add-edit");
+    // If Remove Individual Vault policy applies, "Add" opens the edit tab, so we hide the Edit button
+    addEditButton.hidden = removeIndividualVault();
+    addEditButton.textContent = i18n.notificationEdit;
 
-  const addEditButton = addTemplate.content.getElementById("add-edit");
-  // If Remove Individual Vault policy applies, "Add" opens the edit tab, so we hide the Edit button
-  addEditButton.hidden = removeIndividualVault();
-  addEditButton.textContent = i18n.notificationEdit;
+    addTemplate.content.getElementById("add-text").textContent = i18n.notificationAddDesc;
 
-  addTemplate.content.getElementById("add-text").textContent = i18n.notificationAddDesc;
+    // i18n for "Change" (update password) template
+    const changeTemplate = document.getElementById("template-change") as HTMLTemplateElement;
 
-  // i18n for "Change" (update password) template
-  const changeTemplate = document.getElementById("template-change") as HTMLTemplateElement;
+    const changeButton = changeTemplate.content.getElementById("change-save");
+    changeButton.textContent = i18n.notificationChangeSave;
 
-  const changeButton = changeTemplate.content.getElementById("change-save");
-  changeButton.textContent = i18n.notificationChangeSave;
+    const changeEditButton = changeTemplate.content.getElementById("change-edit");
+    changeEditButton.textContent = i18n.notificationEdit;
 
-  const changeEditButton = changeTemplate.content.getElementById("change-edit");
-  changeEditButton.textContent = i18n.notificationEdit;
+    changeTemplate.content.getElementById("change-text").textContent = i18n.notificationChangeDesc;
 
-  changeTemplate.content.getElementById("change-text").textContent = i18n.notificationChangeDesc;
+    // i18n for "Unlock" (unlock extension) template
+    const unlockTemplate = document.getElementById("template-unlock") as HTMLTemplateElement;
 
-  // i18n for "Unlock" (unlock extension) template
-  const unlockTemplate = document.getElementById("template-unlock") as HTMLTemplateElement;
+    const unlockButton = unlockTemplate.content.getElementById("unlock-vault");
+    unlockButton.textContent = i18n.notificationUnlock;
 
-  const unlockButton = unlockTemplate.content.getElementById("unlock-vault");
-  unlockButton.textContent = i18n.notificationUnlock;
+    unlockTemplate.content.getElementById("unlock-text").textContent = i18n.notificationUnlockDesc;
 
-  unlockTemplate.content.getElementById("unlock-text").textContent = i18n.notificationUnlockDesc;
+    // i18n for body content
+    const closeButton = document.getElementById("close-button");
+    closeButton.title = i18n.close;
 
-  // i18n for body content
-  const closeButton = document.getElementById("close-button");
-  closeButton.title = i18n.close;
+    const notificationType = initData.type;
+    if (notificationType === "add") {
+      handleTypeAdd();
+    } else if (notificationType === "change") {
+      handleTypeChange();
+    } else if (notificationType === "unlock") {
+      handleTypeUnlock();
+    }
 
-  const notificationType = initData.type;
-  if (notificationType === "add") {
-    handleTypeAdd();
-  } else if (notificationType === "change") {
-    handleTypeChange();
-  } else if (notificationType === "unlock") {
-    handleTypeUnlock();
-  }
+    closeButton.addEventListener("click", handleCloseNotification);
 
-  closeButton.addEventListener("click", handleCloseNotification);
-
-  globalThis.addEventListener("resize", adjustHeight);
-  adjustHeight();
-  function handleCloseNotification(e: Event) {
-    e.preventDefault();
-    sendPlatformMessage({
-      command: "bgCloseNotificationBar",
-    });
+    globalThis.addEventListener("resize", adjustHeight);
+    adjustHeight();
   }
   function handleEditOrUpdateAction(e: Event) {
     const notificationType = initData.type;
@@ -183,6 +184,12 @@ function initNotificationBar(message: NotificationBarWindowMessage) {
     notificationType === "add" ? sendSaveCipherMessage(true) : sendSaveCipherMessage(false);
   }
 }
+function handleCloseNotification(e: Event) {
+  e.preventDefault();
+  sendPlatformMessage({
+    command: "bgCloseNotificationBar",
+  });
+}
 
 function handleSaveAction(e: Event) {
   e.preventDefault();
@@ -282,6 +289,27 @@ function handleSaveCipherAttemptCompletedMessage(message: NotificationBarWindowM
   );
 }
 
+function handleSaveCipherConfirmation(message: NotificationBarWindowMessage) {
+  const { theme, type } = notificationBarIframeInitData;
+  const { error } = message;
+  const i18n = getI18n();
+  const resolvedTheme = getResolvedTheme(theme);
+
+  globalThis.setTimeout(() => sendPlatformMessage({ command: "bgCloseNotificationBar" }), 5000);
+
+  return render(
+    NotificationConfirmationContainer({
+      ...notificationBarIframeInitData,
+      type: type as NotificationType,
+      theme: resolvedTheme,
+      handleCloseNotification,
+      i18n,
+      error,
+    }),
+    document.body,
+  );
+}
+
 function handleTypeUnlock() {
   setContent(document.getElementById("template-unlock") as HTMLTemplateElement);
 
@@ -395,6 +423,14 @@ function getTheme(globalThis: any, theme: NotificationBarIframeInitData["theme"]
   return theme;
 }
 
+function getResolvedTheme(theme: Theme) {
+  const themeType = getTheme(globalThis, theme);
+
+  // There are other possible passed theme values, but for now, resolve to dark or light
+  const resolvedTheme: Theme = themeType === ThemeTypes.Dark ? ThemeTypes.Dark : ThemeTypes.Light;
+  return resolvedTheme;
+}
+
 function setNotificationBarTheme() {
   const theme = getTheme(globalThis, notificationBarIframeInitData.theme);
 

From b9ebf0704a413a32c9a34b4c37e1e8726f433631 Mon Sep 17 00:00:00 2001
From: Shane Melton <smelton@bitwarden.com>
Date: Wed, 26 Feb 2025 13:24:35 -0800
Subject: [PATCH 13/47] [PM-14426] At-risk password Getting Started Carousel
 (#13383)

* [PM-14426] Add hideIcon input to simple dialog component

* [PM-14426] Introduce dark-image-source.directive.ts

* [PM-14426] Tweaks to the Vault Carousel component
- Create a Carousel NgModule so that the carousel component and carousel slide component are exported
- Update barrel files
- Adjust min height calculation logic to wait for ;hidden slides to finish rendering before calculating height

* [PM-14426] Introduce at risk password getting started carousel component and images

* [PM-14426] Refactor at-risk-password-page.service.ts to use the same state definition for banner and carousel dismissal

* [PM-14426] Open the getting started carousel on page load

* [PM-14426] Add tests

* [PM-14426] Use booleanAttribute

* [PM-14426] Fix failing type checking
---
 apps/browser/src/_locales/en/messages.json    |  30 +++++++++
 .../generate_password.dark.png                | Bin 0 -> 33421 bytes
 .../generate_password.light.png               | Bin 0 -> 33116 bytes
 .../review_at-risk_logins.dark.png            | Bin 0 -> 28260 bytes
 .../review_at-risk_logins.light.png           | Bin 0 -> 27051 bytes
 .../update_login.dark.png                     | Bin 0 -> 25466 bytes
 .../update_login.light.png                    | Bin 0 -> 25759 bytes
 .../at-risk-carousel-dialog.component.html    |  54 +++++++++++++++
 .../at-risk-carousel-dialog.component.ts      |  46 +++++++++++++
 .../at-risk-password-page.service.ts          |  33 ++++++++--
 .../at-risk-passwords.component.spec.ts       |  34 +++++++++-
 .../at-risk-passwords.component.ts            |  29 +++++++-
 .../src/platform/state/state-definitions.ts   |   1 +
 .../simple-dialog.component.html              |  10 +--
 .../simple-dialog/simple-dialog.component.ts  |   7 +-
 .../simple-dialog/simple-dialog.stories.ts    |  20 +++++-
 .../carousel/carousel.component.html          |   2 +-
 .../components/carousel/carousel.component.ts |  22 +++----
 .../components/carousel/carousel.module.ts    |  10 +++
 libs/vault/src/components/carousel/index.ts   |   2 +-
 .../components/dark-image-source.directive.ts |  62 ++++++++++++++++++
 libs/vault/src/index.ts                       |   2 +
 22 files changed, 334 insertions(+), 30 deletions(-)
 create mode 100644 apps/browser/src/images/at-risk-password-carousel/generate_password.dark.png
 create mode 100644 apps/browser/src/images/at-risk-password-carousel/generate_password.light.png
 create mode 100644 apps/browser/src/images/at-risk-password-carousel/review_at-risk_logins.dark.png
 create mode 100644 apps/browser/src/images/at-risk-password-carousel/review_at-risk_logins.light.png
 create mode 100644 apps/browser/src/images/at-risk-password-carousel/update_login.dark.png
 create mode 100644 apps/browser/src/images/at-risk-password-carousel/update_login.light.png
 create mode 100644 apps/browser/src/vault/popup/components/at-risk-carousel-dialog/at-risk-carousel-dialog.component.html
 create mode 100644 apps/browser/src/vault/popup/components/at-risk-carousel-dialog/at-risk-carousel-dialog.component.ts
 create mode 100644 libs/vault/src/components/carousel/carousel.module.ts
 create mode 100644 libs/vault/src/components/dark-image-source.directive.ts

diff --git a/apps/browser/src/_locales/en/messages.json b/apps/browser/src/_locales/en/messages.json
index ea9e62916a2..ce73bd99d36 100644
--- a/apps/browser/src/_locales/en/messages.json
+++ b/apps/browser/src/_locales/en/messages.json
@@ -2486,6 +2486,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
diff --git a/apps/browser/src/images/at-risk-password-carousel/generate_password.dark.png b/apps/browser/src/images/at-risk-password-carousel/generate_password.dark.png
new file mode 100644
index 0000000000000000000000000000000000000000..8d0fbbdec560915a2f816c5c8f57599ca8008cb1
GIT binary patch
literal 33421
zcmdS>S6I`{6F80rL6Da!s3;wzi1gk;L`0grf^<Sqdhb;_DuU9bHw#5t=p_U~ksg|q
z1PBm%50Or2`3K(bITz>VcXgiMIai-2yR*BqGqclnHqrmSRHyof@gD#HK&A2GnH~T@
zYzY9|P`pJ-XfZ!zk_7-FUTZv4dF@YxnWd=ZHVT-;wLs1Ev}OZqO&t|!tGS+KrG0BZ
zBH4ej9LB<2WBu*}rKea1;GRYDO`f-g>D;LgD5<0C-XhqonzL<gJreg2=<bjCGyg5j
z-TEPsN#_WAxDCe$@d!no#epg|^UNTpViN`RohbI&Y4JIhJ;p~O6yxQ5HeXMGODc}$
z&_}LR*<M4kyoyK5N1(^`3Kw)n&aypsT|rd^G7c+P4Qc|~fO}tr&sm0`DWSvLq1})Q
zx7nt{(|6d$73v1fxj~Hx@NZp~i{X}ihI`<~5h4P7n<ol%vgl_-|7DOl%wfK6uTQIZ
z;Rd0jk}tq-CAHjaPT7fFN*_?aR@Tz0F@N)Fjk@Dm{Dm1>*?UoiXmVps0h?`?8@Q@m
zp)j*{)eWG+?id$Son>&;y)i4)ao?PJhu;v_Ro<6W|9d^&<wNp6r4^Wfqd8Ef)CK}3
zUC{Skc;+rYO@sW^@Fxt>8A5X&9j<=se~3f>NWQWI7#<ya?gU?NP-Of=u!^x5AnSF`
zg&ElueEP(Pp1j(#xX5_slfd)m{N(Bx?y9Fji5s+6y{m_RQ(ep~7<pIixflFbHx^rO
z2VHNxBwM17i|tk>`^(c{oxz!_HbDC30SoW;Q5379dkgGeX_f3Rhdxl^tDdrysCd*-
zC&X{Yqv!WtzH7wEz}WD4;eUMv$<)d|2L-43Wkf%ZD6YT}IzS3TM3~}5E%chq0E8-`
zfz%S_znXWw$+o7yL-?FM;X#_Kg)J{w8Zgm7Gy9NRSEIMEBV+0pqxXyyT86LjLQJG~
zU{KXvE&<X1tym+t=FInxU)+DcN;?>Yrxt@e{`a$@Bd50OdR+Gtz?CoqtT+HykYS0m
zVOQ;KFK)FFJ^)KD63eTv2;B{ltM7esqWf3hFYf`ASKsGP{~P}B|IYC0LBXn}IMl-B
z(C~S-d?<E*rVpy?1NF;WBy3?%#`C1|?D81vEggJOy3$Ha7P1atw+k6Ic}LM;?OQ=&
zhF=eD=~VQ??y~>@lM0t-X|Q?lMU65yEpbA50Y#h8IW%<m;#~N=TK=eUiJ1Ts6vr&P
zt+c;^-v;CN@tXj4X*0j<%Clfsjq~%Z&?(@77QRM)^ViQS*z9Gwd7N;N2kxZa4ZR3p
z=haGnuj&LN5bga;dde0tptnzt#By})^E^QwI=OBoZ;=3cy9iAcXCFX6h8X|=d)cGO
zrT$KHK*Hw_G;PaZ1p0Kth#(tbclu(2wmsyT0n3&P#FZ2ldtwAJA6e_j!^x5XWZADc
zsf9gn8TJAsL=r|0$!$4b0Yp7x26$HeCA#m@L<DG);KeF+5j~+!wPn6$ZSQOcnI#RY
ze;a}S2eO{amBeAp0zm-Z`8FB?d7k89L$NOjvm2iPwy!q?0G!So99GBydfN#Dk)fBZ
zas<?r&?l!L+5g%`3(rsumvsbeUf{5x%NxPnMAlY()$Esl@E5QAmj7}Pkg{a4fGC{|
z6ya-#!^{QL06czmO8cP8aRL&?$jhlby|bI_{Qn~|`HaVzU-tgc|2P&l9t1p|(v>F=
za+Jh!vEIzhL!DKAdq{RocIVg6IA6l#`-!$ucy!(+c{@Xx08Y^kBRG>J8*t3Gvj)P$
zcidXeCkPtDnKdb0>-6K;HtiE|su)0@?o-PNxAKCJe;<6NW=Iaj;x|K0z%;cdJmtw&
zJF&7r&&`(0VSK4PLA;2=vITwqI|8yMF#?~i&P3&{|Gzjp|94OB|JPR!yHaP}D*sp2
z)BkCcs2MtW+q2!Bn-xKk@=G&mO*zn)em!~KAFpt)gys5gf0K6~ZkWvpy}0RzY;bi~
z4qRuAia~oJ<~js3mi%%SEG}r~fTR{zVkd=YXgz&!T&IjD2~Ric0BnD#IFH(~2|X6v
zS;xo|jxZoh;YInR5&nE>CrkP=8a0qwLcXX4+Funrsb+1#Lw7FaTbuTdeUB%<M-dbl
zAndTt3i-gbN5if$c{nIs9%mx_2$cL!QX2lk?`vr55l**p(9yxMEq_%@>Q`V8_hb`>
z-w3L1ctiLK9j2vp7U;}pq2~PaQrJ02soBA)BbAfl#{sTd5){SOgbKc>Y5mXKJBt+G
zPjuS<O@juu@*sCSsahWhssWBhThCUThSQwqvnufE?>75-u91r6MXpNY8{$)tn@_>B
z+zxZLwSS4ypA8KMPYol7TQ#m72y1olpMuW`Nncj7L_OvR>Ph)1!e}C%?YzC=MeUV+
zv({|7rIDm?_`~Q@wPET?%^mH7fXb=YR_zIlOBEs)Odp4W{w12+5zjSKRyycyxpFR^
zz?^?HFX>JPMa$e%0@Prh(<pj3TyZO*qDLp~`xXDP2KB5}NC-_~YX7sX|8L{y?Dgm(
z58tEgCG0=v)!&2PL!XDAAq3GL1ZY5I>Mx?Jnf}iv*o2m_g|IK#A=7+2)mrH7BjDd9
zA?f2ed>Hg#md*Qk?l|ms(0`MO?G=I`kKprK*|4=c$43pYKW{=vED5VTdHzz_r2#%Q
z#L^=>5dZ&a%*hG*4p7+%z8v@2*>nPX?fd^$tMG9<=|aktv0QrsmeDK<-u^pfANEYj
z1T)#M{K5a9^cmP6lF_jE8e9Bt)6}dAi=G~r0mH5>&%+w!{@3aXy%0+K{2Jhk4JKn=
zRln95*30$Skl~dl5fx*{*`tBMc%9HC5#{T>vp=K@TNxR^QZZaO@A=%QocPcA5#ww}
z)**xcxa0>joHxFkbprhf1g3sgvMg2oZ^qT>Vf4CGKY`>B_#AF^`JK__t|ayUtM_>(
zhwE#>bP`Z83{<Uf&BV?BoUsQ<(}h)8XDu6Sz-5cWy|gCqO8e&RYd`I(iyyz_uM$rJ
z+7nhwjhwEi`%mXtZ*J-W8+LSV!<9g3umbUurUf{NNs`vw_rFbdEA9O$MYuRuj_JyG
z0e4YYO<RRK*D`djn&)mT|39dFw#fqQWscZ=Q>`S&ODnbzH`#g5m>@Kvk=<bpdH>oS
zOn^MTbvB<l{$3;bcSGypV)d#PYmxn5wbqKd|A;97Ape-pqkU>USXy>?+H%|^eZJ@<
zUo;guhHlgfxoEfrL-a|J5oE}c<Au)TJEgy8Ee|O4^DB@xX)p+7+v$r@nhmdyhyT%0
zAYDxG{DS7I4mmXQ_G67oQ9<M6wwJ4XME4O4*XUG+aVcJ0X1V$pogcNj7hz=!yqaLg
z?<HiL&tr5)mfipJY1<-_zHKZvm>V8#B!!Me2!1xLi2aXr0y5-3Tu=5wjtOVymzTD%
z7F|Hl^3S|{gcI?94AFWLQ4Fs*X@u^@S8QlEatu-xAha&uTK%v0+1P{@fTvG-SvcHC
z>Dm_v<K}8lC3)LRK`eT8#Q)DHMc@<twRX5x2#2+QB`wL=U_~L#!97A(WMT)&zm)qK
za^7i0Hfvi$P*U-%O${MI9mQ(|9}ED%O;?qYx3M;_p<HWB2>#j}s?|_=&T9yMtwDow
zf>tRud;BgB8D_2r4@zHZT%5dDT!YXb|4VTd4lJ)<Det~v#~YRMFf~BEd;aXYV&T2*
z^Sr=Fl<&CjH4bc^v6nw6gp2b+&r0(=$aMUE48C0;7Qwchb%dT`nuznBO;o=j?;uPU
zreOcqXMoEg*Bly(8CHH}0r$Ju62n}~2x<cg`KPjaemwfe@9)C9*(>98=+uLe8*5o!
z3&|<F@~7HJlZBpox(FfHH6tn>X9c`cN^?40bvtato`TSz&L_@WarC~e!!|Ds%fR-*
zuF~(%A$YJ`%J8tvalwicDozQJQ+1qTlL;3zYe+HM>C;JHr6WvxKkN1T>>vci4CE}N
zUGeNgg<!>C3JC~=|BM%bq^5<c1t<!qolW@QE4M;(zyU6z5u&Yx2=@a#9o*|rtc~!$
z$b{iLjLub$tC7uJEG@xB*Jgms#n*p77Vm~rpiW;7R5BPd&_#J%xD`c%;I9xw>EKRV
z)jK}<W=i}Wn;OBG6QEsV8f<lN2O@kCa4r8<v+vGAj??fPASj!nw=QnRVi?s{>~qn&
z*XTZ0fe+TTOwHOR7AbZ5;HT5NpFcJ`CG4LfzlIA%<pg!(#$&FG+rxxQVA8_h+?2Mh
zEYLaq@kt`v2bDC1b;{=cgwk9?v{5h;Up%~On+1PeBUG9)dG{`g>VbM|Jd46S^_*Yn
z*&Ka*Bimfl7>n2TmE#Mr3|2fGr{5X*NdqB14%G!O56bJr8jTh4Q&!g&EGQuH5Hb)a
zoUsx{?OmT)?bKvdk9B`1?EgXD1L<&OG~2qHuw-Ztzu+~dovMdqStN`@6W^yCEAW`w
ziSrU{@2h$uW22%b!{>L_B7DEw<z6WG9pQw1QS~es!f3#<ieuMK6NYJLM;<>-MgHWY
z1)hQ_yFe*9xjBpdUXy1Q5`}qUWa$3tLh-CQ?Q475;WB+Zq{oO8!)th{w11#~jl=1*
z@Aw~^550d-@m}g|Ugn3>{rmg5$H^;bDD2Ef|H9y+h~HAv0?%uKY=cV~42a%>O8}fW
zg@KT2)}^CdM9ol02yKu?<>60t)<?wG5z|t@W*={V=;*Th7Q$txGg-Hydlkrm+}2gR
zcz@Q;5(?BYAIE#};1-qxjt@f}%PMD_T08Hh6?;-{|60ni`H8~x>`+Ej6d9FBvnjbt
zw-Z7>KxKQbMe+Rr`;}?)O!ktRy#2*JMkQNe+!+|JKS-k=E$8{w24LHB`VYvB6U3C=
zM>?(q(%V1mjXZ9$%MIwhV*jLnSAShVK&;XR9T#%v9q1tDpjNGEwY1c;TS~pGn@XtE
zGa^iocj~64j$D5w)<`5aKvj%2_o!@be3<+yJ`Fp6LCXVtKOW7SXLxj%KKj{SyB+if
zALvkDY&IoGG0i-S!<HfJ?rQ5oVR|#2f%MMY{`M)3KAugeROSkSW%Z_8Q?5^kPpj6T
z)d<JEW^FcXN8u;mvdX}1VFsyJ&ON4Y%1vJGl@jrn-T?xA*6CQb4ytb5sO+J>&V1mK
zC|61t8<2*TwMD`e_|Lz5%+=W{<>nvnVaQT#?sa}kb)tLkQ;<C4(E&cK!c1OkBjtM1
z?Q|<Y?Hm~EYuSu%56jAm(GSUc+&$ExmTH?$wt@2V)%i_Vep!Mr%H~)9d;6cIzp!aq
z$e0vtKu$*;ozMHRWo|gnr>8xaqsZ+g&dhrR*tQ#`Jva6-X|WnZv70T1%2gr;!FRtT
z-t<V|sdQXZtr}ZaXk)x0S@`A_{&MSVa}S-xUiN9OL2%<mhv<umKJe^;h%5R(uT%iW
z`SP6%MowAuiC1Ef;P5>!6P|@%j_fX`eLS~ntlr;_yrP~K=l$r%{-e1Pn!SmdlXhds
zH7>Z4r3cfH|8~V@-j$N6oR8>^>hmvM4??&~GOWgbqnV@(REJ(E?#kCeYc)Gt_}6SA
zI<VVcC{hy@&cYzJ?5qCsHm4z1)5CwJk2@GF;hP>ke0w(CS|P{ds+eZAqLV6VIcSf-
z_-2n^I~H)Y2w`mILSZJEk|;(5(oHoLM{LVRRtK^Tx|V%7$Njp}mz}Sk>Ax@WXg_`I
zU>_lq?GR&+a_csEe6@~1B&T!ueTCc6)0Lb%9m^e)9KRbmP)e4rqX#0rG3%QR1ehzJ
zAiD7g+z@%GhFmp!A?q3^+@o!=Fsg)=>I>u5LYA^82g#4wo}F9V))C*x&Bw_nS&^@C
zqj^4ofjPgJ!v47idO#3HK9)gRpv=e0BdTjn>sWHHbnW%^UbHx2jmKk;&12lZRxZ06
zY~1sa?G>Z=;hVk1ct&u~2&=RuefoG-;#3=`G!iovRAT#u=Tqd=-Cr0vjGRjY*;Pui
zvND2wVBEbcWBq4*r!%RKe6IV;YV8h=j=O~hpVY=E6Me63)!tv0czFr()0iQy5LwbU
zCWtUe4e1|}6%RJA1F(WuJuj33bF+J2PT>@cOp3lYM2ezJH6FJTRtV#!tCh_@AR3Fa
z#PF8K-+Ltv5zBoPBe3+bd2B@YGSwjJT94V%PV{I$Yd2E2F`3;?kT@uPGwpM2^tJk=
z0>-=#d;ql1Z%E0Ed9*IVEc3s!wfQDdbmJcvQuSZShvfnZ5}%yLgBOjy4SY;D(pIVs
zRPGD;#nvlH73>?_=8Ug!e73bWaVi=7oc(Hm0I@hpN^qBMQ%FjD@LJI#Nk|U)g;=5u
zmGLVwkdDMwwn=fagG1a^Qc@uN$C5*a_CwKdCkyHxiXr(EIvgVGW`!iNnAv#5l}u0!
z6@g0j>?ipzeI>t8b!_`v%96d!;90OA9X1NhiX}h*EFl{2WI&3aZq$0)aWU~uJ`qsQ
zpzfS0lQHpG`R5?Oi2EwiNY`J8XzX_yPia1n?<V@Z_+G@ew}O-xCGg23RCw_H3)*YU
zZ@cUu0y3~?OTYTwsqFveM3>#3IwYd^NH8c$7+0CNT1_C@H{s5EU6#nlMi;PJHsfT$
zSvyv7Ya?P?BV*`3^M4xoHJu=-*(_{PDh6D<Jo+z(>&JAb-w@|4cG8?RZLuq+0JQQS
znUYgSy1qE1c!d@g*MXktCAw@U_%H@ib@aD_H6oreU!xRlXkg&eh5hNhucR4$e<JE8
zmY_<g>t}5ryq6WHW+KcKR`7adNyLP94A^#~cp7Ye7H)$gc{QocGu?O1emZjS?nQos
z(Vu1{eNb1pi2|*-!#Y`vdKH*;%`Enc4VD&#G?QHCkDb~g5N;dB-$XRz7r()w3jFTX
z0}=O?D+~*5pLt&)ovQYO##ofRzocQ*ggxjjtHI2?{AyOzc9Q!f&!=MFED6;sZJGK4
z_*s&?IXjk&CzfvOi2!BK!AjwTxxyENkm@p`QgJrY2e<Y0>0__?>oSV^WpAS-;B4{x
z)WD841s~&Yn|%D!pOazgm}o4lEQDEG<K43>Bo`)RrEBr26=&fS#G+f1ZThwn<!ZCf
z;b8I~_NT#9$UXD$D;y2^N{slNS{Frs1sSs$K8uHDa;)A{wa)mc^oytzy=&62a)qM^
z858@IvBtiG|Jl>TT!GE*d=;a(yD}zrDgtb2{564K{sfV$bhR;EeIZ<ZkcL7$R*OdG
zuANSU%KhLrQhQP$bxq#aiY>2eZ-?)W8m;rh_wjtvGJCt}Pf8YDG(Odx(XSf{nXNP5
z|6C$B01@VDOWJMEYs^@v)f8aiFH2YGYeDMyYRH&Qyyw~fj)-_gObVEMRFvl%BOg4x
zbBc38U*yXBuU8UFK^vX7TQ}U8MP3Bql*tPvaBrY1Z!UK7SIiGhlf6|fgw4Tq(k8Yl
zcT`Y10V+SIDnHVtUxn!qql*LBDefw+xe5-mdP*%W^%}g^s#ccXVddNUNGC}wjx&uK
zr7wPd-dtnAZ`zPphB>9hQh-9EiC1rbAv5gxS7oW=v~}8esGCaa>`mMtZ4G6c>6BIp
z1H4D)E5(4_+R)MrA>t|s3Bg4v?SON{0q=eb!w?wgd=I>bE(mzKbDgS4e`Vk@p^!7~
ziTn0=0Al%VWq!%jVXQgTiS$t5ER0VcP;+s0#bKFovYz2~^YvKfoo?Ky7mKRQ8PBJB
zxy0~vB1@0SOZL%cx~G~%fD!d9R>UAJ>Mm$DFE*2DHS?w@6i~*x1z+C5?(C~QsZU*g
z+b8G$SLA{bFfe#T203aHZn}!ThymYp$MA6JLE09V@AmZWCx&Cc)oyiE4@DUJeXGHe
z4Lc;s2x~msZ9>92azb~eT+yG8!7~L)1zx5Qr(o;_O(PTRK(Yb9ila9KOq!p@@dE(k
zKi+@PDIgGSTVC!>PWVsOPgB0YALNVK5w{SMsHmojDTkw0WXo!b&*CSJA!Y2;igMox
zFV|FO9ddRZd~wde0`Qi-sGX$-gcY0mJl5faiG3?!ZIsa)OT+wY;DJf=!ueSBSChXr
zs*dG6{k*_smM3vDiQT!5%Rf2P?X-sh!jE5Pydg>;-+-{JbsEc<7VqXsnRt7qgt<VV
zUGqY<j;e5>jbc90qBq^6mWy(RG)ZG8olFMc(NM$J@T*vzU5B153Fcc7h=Wz*ic0A2
z%+zi2<Zj7gO(uE3yPh+?P)gHx`TI4hsjrT<s%;Sipv*o^uPG+jxuo=0%<=tDw@v9@
zzZX=09eds}S>X=fE$4lmxR9O|JG6~Hw=KuiOFMnMbj5w4+#eAD=@auTt#n;zca6Xb
zO(TW3w9|Byis1FrBy6U>*1#!Tyn*j_Q#4Wo=?lReK@rOhMF@=PfO1_P96K89kgL?a
zKO{aU9pyZHBCdKo0dtu;R4nE53x;RQfu~%8F>7wwa(MG0{z<L~e}_>#zyB<+vYs+H
z`DA0?KSsg&K^WBoh1lJ;!emona#-P?ZELZFO6I>Q=AU|Re$Bpr>NsTGRC+nPveS?E
z*TK;^c+x?)N2PULF8TWY0iQ29*~%5CNG9=1W^ajNO?use&dkup(ndMz=(e0aCY#nB
z6q^m3Q0Q7%@NNwHlEFv0;5cah7(TDQD!B4Iq5_6J>17M?EVOheTVVi7&H;(iwR!U%
zR67UP%>{4i97T_Zh`O9Ne_wgN>V><TmmYu~D%hTMF^SWWG3g<2uEa;M2OA%BP?F(B
zsV!VFac%=0_Dpt}mP<iPz(a(V6}Zlf&<bkkfEPphnh4}XUenOwAD@b4bKI#k?B}s~
zb<Xzjf#9%dio6zL>~8A?_!Ppb3x#R94tVz!I9t}FKQs2>|Lq&~(>}eDi%EKUhCyJ9
zQ6!kT0bTpk;-L;H;|?_JD}8i!(8oDoa%9s1OR~HjkY($TQ{|=et-cRKJxb?uDmqVW
zpc-$#erHgqp2Mhh)CRz%nh6P_bXouO=SPV&&1)`ON&YGbG+D@!OQfUc%9%}YuUpQ_
z50ACDl8@aMw~m9O&Ji389#%rF2`ic0fLt4>L-{doEk{vPHm_i#)|_i7@S**>&g1VZ
zdN*bdc_i=eW!XR}H!4aQW^2xU`~JlpfuQ~)O*tz(sF9__owe%iF+{OI>9(J0uYwIe
z?b{qe!9g$stc#N`-|k*{;Z$<!NV0^P@CnH&ni(9Me&)3Fkr`QLGRz-1bYqpFC`(vd
z?sStIyW~v!Y7y3W6WHDUv{2G=B^2Jn=zUWqLp2XJ@02R<U>Fc}2sKJ!0E)TEiWE_=
z2KvQ%k8#N2KKQZV3n{}6Zm1v%%8Y<TE98DF;84(D*oz!4{e48C{Zrv>=h!~S6r$(e
zqTk^hlBLxGjGa9yFCb-P@g#K>yUk0V$ujb0d{TJy_Dme+>al9W6k>t>AlwXh>!sQ6
z%*Jx_gK2Cu(n=weg8{22b?W-|3*@|7p@sxBQQg8nDZONqZ0bJcw;fbR`Vba2!4rOX
z{u7;j$^vY4nTD0adEhp}frsMzB>#w^nP9c8rx^Zt8=T7xPO9eP&?Uo$+!7Z&_*>cf
zpqNRk4SPbbrThU;I<wQV!kYqwi@Al(Ww12HIy44Zy!|lv3{qx>(?%XWcG?ILq)f7r
zJ#0+OEE1?05VxT503g(1(mubRr8WoyYF3_Q(H5@eJofWNCm%0*7WKS0aT^#2v~sqe
zs$9DZl*%AYS6>*FW$#Fh+PKxmv+$^B^q#kCpkHBZlEb~uOP)`%MJY4(!8&1xlIU;d
z*?p~GdF#^)k~epmjHAIA_KK-_6J1vzgFNFce#oN)pE(~7TC$<Emi@t<#fAYS&BLQY
z5IM0Y>b+(kHsN!Xe{13j1|`f*TeqJY(0j1!30E=^`kWE!vvx8V=_ttcD`CS1R?PS`
zBebM1HOL6`O#!|KS4)%9A79Z0zBm$Wt(2Up4uRHt1X(>%N<I||03NA962>-cAl4a}
z=9QYGeWT#>y}*p+4(D}I4p>4Og~=38aWy;q9vNip#?6-X__gF|p(cf<+0rcTtt<;r
ze+hWaVUS|Uv>7~aTo94}I^b^co+*p8kk*h{95I3$>mR!1pTE-UDr{nl1CKYQ1xyD^
z)RoEUn!yG3zh3Gbonhq00Yy$NJ5Wov3uEFRn}?Teg10j1!<#OB&$6s>HcUOOpko&l
ziQoF5Ece>ilfqFd&>VV7T2QHC-SZ%Y3aHeQcx&LddN8#40r9|>Q^^47mt~?F%?qPA
z4$m(S>Kg|n>OM-vw+5hBAe>&7!ZT$h7nj(w0K7m(UbdyaBtvoJiLH$=Vub|Jz_OTJ
zITQXeTKLB@r)s?iI>$t|PmBG>K2nLOw4m?t*K-(*(J%mQad41R2`>~}jZjz0YWg>N
z%?;^ct~#nFtY@w0J3-kGv@?nFRdmt|t1}J>P;^B+LfNOTqz(7qtOl=vv7;0`1q|Up
zYYX2N@Wf>@C&MqzGq%GCv3_4Zr<(&+zpy9!N1%6Be}krd|6r8zAseQZ?P=Tb!L7hl
zKG=P%Q$1h!huNJyXi<t$3xuO~^`Tm(G(Vpzu;-yk9^JpCC->iW)rA4!rmjCj@6Opr
zJ4G(-jTnKq?Ofa+<!zWYc$AxL%Fv<9k`DQ$c}|a7PSUyHBDLEad%eD?xL&u!fTIZo
zvp{{D>Aejlv3!lK>e8gt=31C6r%L5T5z;aEY_xEBO!yRGHde!kh!oFKvV`;r0cswa
z8O3}f=lyPEx(P14@3~veIB~OsELmkTVF;R~GBc1rJOT^YRr_l0Pg&fTgt-fvsW>8`
zC1X>~Z0OH%FyMZtfqc}w@FTCB4SutCB<q$~&Ma?~MOp9KN9!QyY3A_FVd#;U8IPTY
z3_F8@FAjQRH+@@t?8fW6plnUvQ-?*<n8QbC56ee7g;5d>F~XZJ`;Yj+iMc+|GO4Bc
zf2%K|QnySZtf0b&6JJesFXtu(BxMjR+e6-)=K4(H7-L=?%B_HxCJfayy+_+wMJ}Ak
z2K@B#a=L8;)S5&))Yk2<f(5DU(A1NfZ8{NmbaF82^3ufBz2A>=YN)tc^q^2RXkc3V
zfHZ={DDQGP3VxY1YWgHXm@jHC_ktJoaxU5S*UAA~YxDWGW0H~J&yFv|2re;gb)q+2
z+VaVPad)M!vJm3w_NbvvS#lY@Z5As@r`3}5dgU}2z%%U6ovB?7HLOyR98S|K<$JJk
zYRW;lC&TOb!yOOw&7K7M>XuJQ$;$#L<E*>UV%)p^U7e2Io}bB3EWTAi?EYYKE&&#R
z`Jm|;`<T;M+4t~{k;8v2I)T#)4I3F-NW)ac#&l7YHCkUBJo5v8VW@3t=lyDhBk<`+
z@QV<r#WQfv-+R93RI4F@vqFTsJv)0(MPu0@y}xO7oJ%U?P)rw6Fa6q@$w$)1P&FQI
zlRA^KuQ97!Wfg|8oYm?mR8}fDmLA9)$)_CB-O5|5wFOrXqipA@n|A{%CF%E|D`(4I
zfy@CDx~&or&~z}r!5K4|y{FfkM=i2;@v~z?+)d}d>1*Cg2io#6H3g|APYV#2N1MCo
zq)IuZUQ};OpTwF;+Zk%;co_4lQqsG>H@S_fvt*Q?tlgLOGwH7+Eu$l|IAv@%G7Ca#
z_Oa9i{NtXX<Gd30#oW5LT`kMK&nlpN8+m)exYI8$MF1Hnsc(8`)L|+~-m0`bpqi+w
zELvjm8F|tlA@!q03-R<p&K)e_V&>P!xAzS#7Jbs+HvBOa2sIM?KI+l=adeqORs4I2
ze^5!CR5>|PqW<H<yN@O@dOUUMyZ5J%WnO}Vf%?yqi++JKZJ>j8Q=n~~WH81R*`obW
zdW9=;!Eq8@dvE{C@u9U~G5NCt>8X|Vrup1@Z1><FyV>sD164=uk33)gguOH%|7y$6
z<jW!`Zldcc$c105LK$kE{m~FKoeIU)9%9@w8Q9MMFpB83-6qwOI$N+leFpm^mi#tX
zR%TCE71XfgUHtgj579)&7~12S3>%BFOsQU?r+Otl!Eq9OPnq2heJbZDmm5&dZ{>!*
zp4TuuRTbV|eDd@qptLyJ7}NI<_KC^Us2=F#`%O~Eyi~#|uj9n8F9hY+4#`{<FQ&LS
zDeT=$3-!a^{9{VfjWU4$IXpG3I;*y=F&kVHgrrB;Bo3)6HRKL{=m&(xW!Y7mADuw4
zYVT(2^jEFOrczczfIX2MJ@+9_Y<7F&2OEK3vQi}_3|W<zD69DQzYcslI+;py?$#{$
z86U}wqtZmz<c%@O9r<-i&K0BWkqZhd21n5xl8J^v#Fbjj!E1a>a)s-G<6qV+du7s^
zsQW{cxAUq8saZ=hm-{`;*DpCkp{Dls$z6lu-JAWA!3#RfhTIE}@b^@DSDdNRKa$SD
zfXYsu8Y0w_cj}|xj6@4T7R9KX)W4QoFiwM&?;SrJ<GC65BOx+QYWCO8Gg#^NwwrFC
zXF}zJW^dB~mon;Y*(4bAC{Aw2p7mJ2_|!gl2-Au~3{g~`+;FHfDKdPgQqG{{Ggg#h
z={4Pl+OY$M+cndaOBHLCWc-vYAMW2qH`K!`cz1;Mh43TcaXqwX42H2eU<ZfIXn{EQ
zn_~H^0wOm~cp@luMr_vEq2j@z>Rt!cQm(^%<vf8%3%{jtQ+8RY{8balybuS^T$|L^
zTuTAxmyN>qP5fuy26-IgZKT{kXEjV8P8u+=(7;9FJ<%wAMOM1?7xljb@?B%7s>+Dc
zo!vI{5}Q=M^PNg=*`n(wtX|G^s2r)v`W5ysDJ(q|Ds0*;r6k>~Jy5%&uM;7RVy`-F
zG@MM=-aOnUB#p!JB$O$WJ?@kjv+L#T7XWbzWPXra`kpr+%Pg%1q_5>xV`|G=PmF}O
z27eT(m^s(@2?=J|gUebStlavdwRUzisg^h;XKPXB@(+q$zLq03nf&vv9`<T~R6gPJ
z=G@sDlzsD|4#XPt&}7K-)A25NT7WOllh{SE9?HD6+?~ygJ*6kV@DC_U=D~~!P1@zG
z^@LzsTGp7!M_$jo9^;w()CyN>c)(UVobkl{Nlj}&<jJ9<1|9knYT%;YYSgrgy8XLE
zY1ORsnu*(Vkg@6AK1st8zM^^s(@iHnx62KK&^Jl$B=o)w;We^cp02!UE_8A80giHH
zvJRcRBYQ6g((Kr7iMrxvCqlI?YFNU#UwkU<UK*PJQChSA{1f&TxG?sxZ17kj{jTX*
zK_AZ|6gr&|U^@7n`DCrdj1RHcVUhYr>chAMbXws>)^=~J|4cE*1-m!%uZjEo?|_<d
za1bJ>rAG0-o20v|Unt@7_A4?*0PaXi5g#x8+4GgGTg`mqN4H)X-N4-<hb3swmn=cc
zv0YC1`1YC-)Yb7W8?pDuhQn|B$$(8<iCeB``%FrQvTHxDN*b#j=H?C+=$~W7tYx*V
z_zf|djWj2-f66}8l|{!6bBsC8Kqt#mKEJF_84oOo$c0t?F;sO!XnM^x+C<E?nNRaX
zM{n;1mV<m$GZl79!Zp6IYzLR-3NR6JXZ!)l6b0-jdY*cpH6%|I$ljaKvG(4q8SK16
zW@yU7CLL?$Qr}X?3AfXIUrfTIItBe$W5M3jN3;BdUoz9TrGOL~OUxrnK8#AUDPKP^
zkdikqiB6DonJJc;`u!Z=ZPK+O(y-DXImgKwS_Ti45+2=+b|!7AGk5c#dX*7o8)r2d
zcpRDKce&dYyxFbI97IJPq_@vnLg~w6LXyHvZ!I9Dc(h4X^gWWoNSd(~!N{bw`sR2T
zrt))zxuBe~w$&l%p<ZT0&vIiyUNV|vONd%Kio|k1_2-Fsi{awFCTM>`sZ=&^^%>Np
z6IJZ??@3+$QfU`)IfdYF`2F`?DI)b7--|On-k`xJ6P5P_kWyZR1liZaf<fBg<hgwF
zzBhmCAgWd4v%M2Df`<A%B{7Z(dSsgy(&*7Z7xc|xFGwW=bE)j@>CZ_Map9a~-jID8
z;Rs2c=DRdMGF0E4l}N1&Mi!=^`FK+uHh#FQ?Q)m^ysXk%-O6fWN18^m$AhS<=FYOH
z7!gg;Go~pyhZbb2)xL$D((?H{V=+C($?VoI{@$e#X*TuDO=^3@Iuayl^XzCrYi{>)
zzQfq5xG7b|!K;Jgf!NZwiu0gxnsToPI%AzD=c3QfGwLXBELMx^>NnKQ=}IMK4=<uQ
zQ5GL39_-s@GN%=oybTKeUap<0b3Z6U=}o!sC!KK{r_Sj*&?)0mn9js&w&xkNKym6P
zH4)N&x|QSMu5;{da~CmLhMmr+W3V&u%&p01WY6^uD#J9ZY9R36x=4~O1uKt_9UN2a
z6)>Iwu8gKfRerz~d0Pm*A;L8CTR>e-pbgHMEPy2x9OOpGT)M&#<5Vq9O!0Nx7b&*5
z9N(5coye-Jyp`tjU7h6bXCXmEt*pzO>hOUwowTTJRK2f77SXWY(Gr*HmYS2%$H!Uu
zS=+&KAqFx!#x?c$LbDm#-4g@8`l$dT(0n?Vp#NFG;OvFWSdosHBwWFTom)^%Z|e^a
z%_tKcA!#3%m2u?N6iON?b$sAZ?%LnXc@kX1RmA8yWJ2}M;(^$zsdH~g^)0T(XySjT
zUe<i6X-sWOLcJKAEHhE7xyK{zEXFP;PMsci*Ot_wzAA;L#z)%%?j=xJ)<dN4+qEM1
zZTk5OAjv?E;ufs3SQlv-<5Boben(58_2dUZWi9LyIU$q;t681(RdnQ0xvqY*cF!-%
z4QL&8r^SX%cHZ~Zr-(jZ1~~$-Cf+we)7!uLHIKTQ;`;<tp3U6xO|2TUhUEXQz8tDL
z6)-6Uh5(O5Q$yE1V?BB#hp46CZfPquTY^6OoUF9(QgJ;!t%qE#HmQu?r3o2;`9<ec
zm5?*aS<*~{SC@UFw!KP{7=LyhVvIr*v+|N{8nDk#0@w%)VQTXQj(6uJW31EoC!Ak(
z4ffe7@=SUSnMx1e-KFBxfGCZp+gK@f1#@*hCk1InR-W*@GqUX#%UYxR!ck}yK9SSb
zVZLAPm|k6A&S}d|u?T3Yu4VZ}-D?h8wd^7qbj)g-`W(pe#RU6zqg@$B{E$Tr+R2N|
zp8i;L3ZhaBupfD&v3c@UhC>tCJ{p7NEW82rOwg`ri6Zs$>}cTKouJO<tCRC+a?ogK
zov!Np+QL2}g;NzWUhd#{apW=BO&Lxr9QrufP%~(u1_5V7{-S!&&+cR7e|jvz(CUF`
z6!Mr7IG!RR#%e-piGFOOHl}g7{t(CoA>Z_qrN?_@frH_dhgbgIqQdQ4ojpm&mZKC`
zM)IJK=c_XJ*PEj4Fz^2C2c`*wKQM|7%ZR(91O5!PQu+_Z=EJfwcGt#h+h>+c6>u<)
zRz9C0lTrZcaTYN1kb6b3r@G2QPbJ@ZE0!AemGsTgBrx_fgA_guU70A&wq~0}^YYTD
zC=2@!;78+Q)~^uq=3hiioktfXhClKSD7=i-J-<~ke96q&9Lqa*7k><;f*BS9mqq!6
zS{Lcd*;lRDE(eD~cr$&Ksh`3bbK~O9JqF)qXdWHUp#omr1yLT&uGE?wO2}+L|BaR3
zACkAo=5CdTwIzNIAeXQPTHrV0Q^K1SQdg3L?Nh6w7GWB6<A>$SRG!Y?DihBfn$P#3
zXQ{1CBZ0^!;m{z4)`27L75OScMS;pO+{AHeX<7gm#}N$5cb@+I#Zv^GOA+na0v`9D
z=5Y^}j#|XQo8b$$1N#e{rCW+C=LSuDE+<4!K;Efa{-{R~8C{IHN9u3by#BEo)lkvw
zJU{W=+3(dzo4<&vmp;x9Qyg>4OkQL5j$C+6bUg%Lp)VcXp4<#BEzD1BkVe>IlDT^#
z{T2ImtK868E7>)s9`%M(FM&OzKqWIN!*>t;ANCEZLUUIdu1c=FW%+8jo}*q2F$BJh
zjqL5(<Xw$ijWVF`?1QsFB&NeN-0HrK$#6<PI3{u$*>+c83_ApFuTL_3R;sLK?zJ`-
zGArfey&V8%_%)qfpiLh-y@UAhQ(GLflWx8}MgQwOB@8hajeL3RVL6Jl(^ld~m#Y}0
zi21ENJ!AvDws^80UC9jaDL85uf>OISO;c#F<f&uZc(b1NV&}vIJi~F@{d;{MI%`8-
z?J-GC)DGz)^Dyy=nqI<KH}AqnxJ&R#Ui}5q3un{P{~<4lLd7A%CTpzwEY4ZngcWj&
z^{MOTBn1E$*H|x@qGuu=HdS5Bu)Vw2C)VRP2mSb`av$HzW^p%v0r@4z!)ww1vWa^6
zhj)wpm@9_3V5MmW&081ash~OAn_#mAl}S6s#NG#19Hrkb@<q-&P6wzUpo8yABzL3|
zHm8v*G8vqGf!iV9P#R;a$3tHIBQ(?6GMDBv+LAnHx{hrN92%8+#9Hv6MJrPzOmR88
zhH*DQ%^p%tmn@;9u(Tf|fSN!CxdP$cfqXTz>OF-HJ&CcLXBl7nWUQ*0#koJ#8j3#~
zT-PHq%s8EqNAHIG^<eYi^a?<R*~n2F-=84mul&aMHmz>+KA6{iL;qi&&RIo`dXI0g
zpUTS}Eh%)ezvZnwI}(VBmgK+q^lVZzDa(5^CxEGIGXdY=3G7Db24Xh2U-M4gtd5Gc
z{EK-=D(^i^FL;w;`PoQG|7uLKt&8X4x>@{6G`FLzq|1elmY4E9ox>c|9$c#FT$PO`
zB0<dTCkZgR@Z)r=Tk3AO9)nknKwg=&yt^NIkDThpNAp{7(U+%WQ{L-OiE&``!|;w~
zE3Uz(h%5<lB)X)v1wO)LwHGo|QHo9f&Ty`pS?u^x-+|6Xf8dx({T20_DmqF(mUz9h
z@b#>s1RGYphj+;=J<x+fQYHfedG!0a^atscbCQ*Taq(w+hdJ~s4e$UP`>l^Noze`}
zz_sj|r$@w004I#Qd_eEoOveZb6VJ!JLc_ApI*Qoe3_m)91Ny2-%TCP{k(<9uY@L&S
z<g%A>@fOP1r*m5w=j~DNJ{G#nXAJ61myjJXWrnmR2<Qg~ryX$d^ZqiS9y*d=euDPn
z;NDN6DE_`*L0UQsI&6vAdC?6Q8l$HA7F8XthP>%sr_5{yQb2u{)!`g98vD8QMdP06
z#?l|Zq&%OCSPtY$8vC=;f4Yc6OiO3owlAj`X7XP%pxMf@QhidGShW2S;jiGPUs0{n
zzqY>sw}jDr47Fo%4+6E53iVXoO1=)7@=BTp?@wfDp9Xy*l#5zIUg}HA?AF@o|K)=#
zdMl3v4C#d|ZXnLQ92JMjoxcC`#5KoMs-JN|+0hZmP(}Xs@n4Knhk{hrc8R95j}-(~
z5H#H;N)78b<azL=MJ}7>@>BJLw+p~KCXm;!4cDH3dG0(UN%7;VR=zCt@%C9k1*Feu
z&@1?Sv-MbabAz?<n7SdOcec1OxFWj}`BtEEB8gaKMq7h=eXKjAUqv>x5Ar7Y_v3>7
za6`73fD|3ZpQ4T>mlh4+CfmoZO8IaYE3exiqA35lO)n9s=FYT|yr-y`_w1&WY5bw|
zN9HtT3m&trmN~zfsF-6Hm&eV9E1m<@^vSTKz}vZUhTT11>P|7hePAiNto)I)9ByLA
zXiIcBHg%d>_M-6h)O!CV)IPt@Iy?JukyFZeT`p_Zsp~40BAZ*j{!8Vekn^-W+;Mbc
zzx33`7JC^>*hG7pQ}wt}o`&7)VHICV%aS3S@}DnpK$)iZ2Fq>C44QmjAS9Mm->rt6
zC3L>Sat}J|SW%CM_Udz;J;O|P>ibUXf?t(rXF-h+eU%hcv(II>xAuEIa13v9z{fB}
z+o_C+Ko)VtzA;z-VL-B({uQqEbEr3Uo<dBe9Ba9Tt>a%DTc14!<RQ2Mb{$*IY4rp4
z^UH2-ZNLp^Xruz9<8FJpM5Nm=p8jC9FAs3h6Mp{JCcoq~s&<Sml0{eTFg8A-%Nh$C
zobHr>c{LdZ-zNgx=VWEIn*R3&lS(FIw^gr>xFC^Es`kO_#?=Zpy@xLsD=Lpl|9Q|{
zOf)vIp_5j~+(QJfCoS7Jo;WX9GE&u-E3(M*IXJCLb^MvPq(W6{r+bU!UqVqnUA&sK
zAo1$+M`wnhU5|$SpFJr=OSP~~3ZR)olDqw11Eunx{5aje)?zP>-()_TZq;#(pCMc|
zO6pK$sbp*&Gkc`R;l4f&Gl0&=QhDnY$1psmry;GWv&bY3Tn|@f74dnHMJR6COJRH`
zWR&Ur;xeVL)bK{t>xi$htbsNY5nRlx4(fLbE`D!5fm<sNRIO^+AW5qF3>PDbGD?p#
zU;5y{qlc1$CrR3`nD|l#i?xNG?Efyfb8PfzOgGQBe|)$rvT~Z}6@fm#Cy?ewxjiK+
zX%(jF`J5{vocwiflbSUz9mR6L{}#3`Hu(M4;_n8`T<YGh9wPB68Vq{I+MGDmcq+L_
zC$DnQ=EdK-#5&OKt?d%#&g9i7EsZQWdyoi=wed@PxnJuo$GW67xz?#)Nd#5Uq8e7&
zCPj9HS9Qrw^nI)?znse_^==96{0^~%xrR(yKOKMco%Ly1zbaZ&QJ1ZfXz}syCbo16
z;-x_Z<)1j>+i>oaq?OMp49L$GEO8c|dr2H*&i_ifB)m@f4I>l_NEwftly2e;8Y>6Q
z)ENU=o;uTsceWeFWzg1?5q&oL8c%iuWqptPL{kv0e)%_<8m_a`c2$n>K;ql4i-ADO
zf2ar#TNC5=on9mHnHM52+HMDxoL6*H>)cS54{;AsF|IeERdWQ?4W_=gN{kdP#+i<L
zWQxe6WE+_u8FceiMVg@fzA-Kz9zkcQK-0SOH}6Zi)JmalhUxSey50r;7Sf#?xBaA|
z1>t<50&3BrntToXY3RhI_17Q~CaJeonaEHjcB^*WKYuh{YhG>a_n-#Zotq-eCQpc*
z164?$mHUe>h2d6#@>S)SfAmKfe4Z*hwiRYj+5u_G42yo`mFbxktfv|cwWp1{zL>W;
zJ2$rR%~fM2p(WG-Fg<jPn5<R%!h2A@HpgI~7V8i*nd_mnr`7Qa-(xMG{l5M**HB!@
z$z?K-6r^XyEomf%C0y6*6-Kd*zJHavVIYh~_FFO}LmQL6hOgQXipTw?Gu1Qu;OPa@
zK>@p&y>PdLP|w(t#P|@;Dta?q=WjWYt@{)M*6O-Q-xXvyAE74F_u1Buf9!xcb7(<7
z@n;*#4<D@PwWmpJC1(}{&`{Dn3!ayrGc2k?dZd@UUZ5FYdeN&)K5qSB84F{;vV1jG
zp?lnW{|;d<kYuKQx6rMwm8Jb*`JwBY1>}=aUEHRVQUmSa#>(`|&`9%A76t!&W+vwa
zE}_4X0-sbEPwP2%e+8v(gbf4`(*KuEphKnMIBzGl8xJ3>@lO<KCNY&2J~^By={xRk
z<#70|PpGA6OHd*d{8+xq?-ojN5`m});<*6u7DH`QUK4pg)~$P~*nskfN7Wu#-87$R
zg{@_&(<=?4j}C3>UbQ0~6Eq2R@&cU27n@sp9Lv)Kh!_q2ycw|HV%C~;kb_E%E<^Gy
z{vG_?XGWM?W#?a4qwJ~LwyRSJ7nwi6V$NdeoezP+@oE&X{6eiv)&A<+{zL?|^K<a%
z<A|xK!)~(vM>|OO=g1cusMdradiNA0zFZ}p*UgYVssgbaUfd~qS4NifZAKh%>a7kQ
ztbp0y!zN^NN6Q6L=p}){y+-;YMcn%dM}up5?|f%TMC&M@Qp=pRdN@gjjA=@qKlR%o
zltg7^lITyfDXD=I^Z7tQ7vnxTwXfz5_}|cLLS$iok@gn)BfJqJ<vW^{Q)4bpUFQ7l
z)s$_{N5AE$S^|`p7`rlF{N*-4@oljLNoL$>HEtCmOU;r09ZAtnD2g@aA-qsYjk7U5
zy7_L9A8yJ6c@TUkiG-N<`sDKH>yL6<e?R<kXp`5ClWTrZ^cZ}Rso)OjlO~UH2r(}D
zmS_A?voiJ{*y(7e6Dgq-EX;;WMJp(nizp4F#mzU%ot_B3w<oObfiapgb%;*-?l5Rn
z^5+dd^`q>X#HSCwsR1)Q;oMbSHihXD%e4*<vkvg^SI2d^?P)UwxXCDV7A0(%y*iOt
zhEOQ$oKJ|PYuddaQb|l>QvQkeRIYA}g^Y@)EBNt`@?Z{L8rHJo-%6U#D@t2pmema&
zzwQ-H1QiCiby#ZAyDc+z4LvPsftJ9cNI`Vg4teFCWnc~Yl`&n^?37YKU7rF$qVMIH
z^P3o5dicz8BSA^DIvTO*Ga{`=`vDVSeLlIhp4I)CO#`W3b+!03^Ia#r(ApSe{dZMl
zmWBk8dfXe;Toc+lVqnYDtTw+IGEh>TdP%pP%GDFLe-D#KokSr!qp%%4Vjk?2lYmAN
zkI7B1O&VcIulkhaTE|g#&+m2JXEDj{-XJ_fa;7NLr-0;or5=y=YG$%BZFy{FZ{153
z?7arO5$G@Xk|yPb44=VJ4Jk+rl%Y(hU$Z4-ED`s*!c&@$OY-K7$Ye}W-WyQmbTwKY
zWa4fkNa~ZhJ)?idGp0YueG(YcO1ZN)Z?f1=0}Evh=d6)r+LFO-F-@ByITy;I!R^Qu
zw$qdOGRY$B6vme0L(;s{p{JHSL9ws$5@|iQPn_o3pt02uG31ewcfoY)=csR*>Ver9
zl=k05brepl-~Td&D*QN9*TgrqqXp^nW?!{`Qs@7nsY_JwB(q@96~xXy<<{SN%<>42
zY28RIaH3JTXELle_Q)?|TZY5aGWE{o#C=C(;tw{HgwGL#CrGg?A@49g(t0~YmUow#
zg^_krCYhvfm|oHI^!RRs(DBYDteBT%Z7W?QA^aS)8v9-hPCTTiy_3w~oL7;Zd`zgh
ztkQmB0&WnwWtMOI$>~8*bmP*mZ=uNPq_8bwY=D{A=X_=oZlaj;<eoCW<u+<rj<Z7c
zTf||wKGD~%u2W7jvO^Y!SRu9<7i&RpVDh>@Sc^Lc^pm_JknjwLXIs2xKqdeLBNlxp
z{?Uj2=%v)t%M4m*l8yc0k%E<EHlbLp9BIA%PZ^c$<TP=PGe5bz8}tIa2O$AgQysPV
zW4|532rq&BI&!_X*5cU$dlfzL7}q)r?{)Q^$)Y?DknBR|{GnA|z;w&{yvp(XD|HB#
z83h(h3D$FZWrJIr@>{mH)IW*4`@S13PqC4$fM9{cg<N*hsZFE<?eu#urM70Zr|g#K
z_hA&dX+Qu^`1kQgDA?T}%nhqd4MWYb78fItJ8sH*-%y9k$t(NN_^BP3`)FUeSYnoo
zx{Dt#n3=wwHP{(v9!E|<Z&I;-kKu`hgs5rILtxyLrvjAl4yz0WQ8Qc2cU?S=U2B@;
z3fwD1rNu)(KxCMn-6xm8N|tZzv5*N2ho=w5>`77dJlkncyORl?*V-}e&H4O&`G(V4
zoK>m!uUCgPL-bCnq>|&GRmooxu6=k{O<O&~54RbbZMje6Dh_ka-4#zF-5~E^7hMqH
zra6D?EPuP9JV1Vbw`Z0K3q{Q~FP&HecqD(-@9#7drSC-5Z1<FM^Zp#aRPL<HYxMvp
zTPu9SB~05wzeL`s%o)TcSz03i+w<*?f4xx(CYfw&PZ0}O@6^B<PA#qK-POh2HHq^5
zp6%l01Hk6$c>MCuc#?`7+=<l+taYo8cgD^yZ_{(kPn$M=4iEIhvw#HgM7>eW$;;-v
z8Dtm_!#D>$CZ4qqb<KT6;c4euKJq4~osO_IhlH?)20%lu(=bUKmuK=Dw#v%>%8>1Q
z>e=6)Q&PbWBGh_tnI8epnBLid!z*JB_Bq>TfEAu2SJG2VtHh6BqdDhg42^CU_^OOZ
zk>Zu4`K=wRIENO$Y6Ph>I`_Qnfa-PeYME+h9Rrg}J^cPz%h%tp^~bZ<J=Au3`=tgQ
z1kz=~?p8N@9v{uOKV0#W9db~HSEE-nA2cr`LrcBRF2^<J3)+zkzB${Mo&|_4f++fi
zo-L5Uk)b>7WHWwosKjQXs#im^#}qah*oWa6=kmMb`!kp`WlV11o+ueRjc3hXl3!4T
zj{?2t{)@{#51rHbxxXtH;(2-f2uc1Pm6kubO-KA@FU}VXwC0*;qOANgJlcXd)q=}3
z)G981|3G+WsL?$@glV8FY?rrqBBM(kc_SV6DdBny4TS$*INiBdH2K+aV3@SolRan6
zHI)jsd}A}$%uN8l(e-uart)ESp8LC@0FwuwTK;xu*;04B4B0E*!zPxSnPD-3CI7U=
zIcxArPZWNAI|mrZy)Wg6X8MVNN}Qz^FuUe6pWPt1tmv-DoTHDzhaf@`L!`0*zF+5~
zZjPrZ?&Q0RIz%@o(3B-z!^K#L$e1}u19MDc<Orcw4ARA&r?c>;^t`9nRcuh;d6B&0
zqRyrTAhmuDCKn2U+vEhF)rB@DINg#Jg6nAF%w{FZT;()A^T;AFGXc(11uAY&4`<!e
zaOHMhJ=t}ekf8skz3+-@GHBODQ4tF$s7MnFf^?-y3!)$*O+e{YI)q+A3!w-oC@4q^
zO^QKUKzdCmDpEoxA+*q2fB>N;gq+}i_E~40n|-@44i_vI-()f~-^|<Qd7pPl9_5f*
z5^bxT5w^JHUXhy5vjqJNKs?Kh^f;gH>&}rTCS~PfQyms*rr@-BA9YDTENO?D0NF-p
z3T4Yu3y#AY1MJ3f{1kUp4h>07zqF+()_UO_<+3h*YsUfOAc9x-i;X9%jMBHhvbK+o
zJ(JbmwPPB($Z6aM<{r1BqQOT(9nmQFcp!H5mfY%(3Z2y9D`m;UlGJX(M1x+sUj{kC
zfs&dYea3<#SUn9%%NwsHg#x5k*aSPmC9=seZ=|%&l^^?DdbCo}KO#JJ&ZhWISV}NX
zL6-i8p3eO@j}eA9gCjpY2C~7L5<P5Xn2fjz(S`hYGpeXdVdKq8vwmi7@0X{=R`T8{
zjM_)z$csxsG_VqQg?OjSUX4$;LlWxqMD(#kfX+k^q>iUo0;YcD#}qQSy6nx%eL;b!
zGfd(WboTey?gwt^N`2u<t_d(PcvL!bJ^sFPXsr^Z%2X&}-d;-bo1WJ*nAoZKGmf<c
zszkV$)v3Q*nxq4ZqvDh#6arHri{O&@-kDeB{27wYcfc~4WCGWYv8Y3<%-n1pskDD(
zuXA}+cy<eUls_ia=jN01`ZBuTqzHa-w!(F5$(;sWp9?NEJ8)hK>d{8iB=Mef-~PL_
zd0S4u%RILwB@(J>>3{f+XL5rOf@wBLEW_t7j%cIw=&}54r;d||VJ`D%zMrP^X}$S;
zYgXwO`tMVZXb8H&0hy@|;Lz_n158{xA3;lF`_A}`Z<&**o<81Jv%(@@AmeDH<xX|n
zA6RBZG}J-SIf0ciBm5_U>6U<)sN2CHX5u*Ao%`AgEHH`Xb?KW*b|>c_vsN_z3?~%E
zL|RF~ulJj_TM;dR3^w`sRC%i86;``sOcEsFegOIgpI!g%cZyKQs3}ak-6HTe?}cKC
zI}OXqiaEvGyiuNErTIUlENM9_x8Z^%@<Y|I?n-H(l$2Eg!D+wy%e2eNpTJS8iY(WL
z%~Y*RpA#Bd6gToEx{+hGHqZ)z*_r6cM;)2-ewn+cmk@)B>+TbtrW7MFh5M|tV$ZAT
zOz8KJxHltk#X7H65`#k|s=(G#f!gHEqez`_U{L<L)+oLC6=368`fdYPsB*J*a>_QQ
z=yd8athR<xjmbE(OXWr)YXQ(kwtlgnSyTM}-sF|{D2~uh)n^$q#WfuxneD%;K3cN8
z9<QiO=Kf>ne|81;AS~JT==GqmE;(wliFhEz*iu#FO3pyByRKuHJAvng73Hg9`9}H?
z=AKXZmelHh-e0njb$9!NFjwcR&yl%`;jMjs?PIk~gpb6p;ONpW>C4UM>3{lrNTqy#
z?G=$TGE~?Xm$n*I*&mU8pP>^m{q_O-lEV+R4XRt(=VyRQ8%)|p|1%JO!B9(ALTo=A
zAu0zhdjI!0pY5-gwfk>n2ZfCcu#&I7vi4oCt+KgKovF^|?Cbf@)gr{|fAF}x>K0|0
zUf%xeKDxZ{K}$ZWXS_h?v?f;jrQ5+@)pu?ZX=RsNY`N88Pgg3F#^5J#b1MrMu(jv@
zqmG6pF4=htpG~!m#DdJ3tla~fjqE8RMf`js-8xiXC*3JTFRCE{-9wfwJRIZ{9~@2{
z6SMLj0G6c}9Zs7R3YqupQh8b58j2VZb<-8W;;Op5HZfebH$$)c*0g(k7kNtm%ja^c
zB-<L)ARNA}-P!e9bT0VQv+yhRp;hxwcVciMhKEK_x*oZfa<u&lU2z1!MzqH-!#~i0
z&fewcl+XTtS1hv59&aopb()Q`IhE8%m8Yp?L$<lXiz-2Pcr2?r+WEga9hNy}MN^Q2
zY-pCcWrQ#>rG*bZnP9?FI`HN2#iy?46<XSMxY1?U=SNz414~8mmH@*mFv{dRU;(^E
zzovPOxgraGl(+G-VNJZG<97#29+Z44mABJ>XcCvL5CXe|I9`95=I=4CD}f@g8Fuvq
zs4+DX;KNYx!n;J1Y6t%Gbe?TRmIKOs9&<|CjWPuywsWi|lRr~eDP%sn9eRVl1?Dg-
zK+wFs$lngBRspw$-zfnO#wpmPMIlVET8&zSZ6Go&!MVZjIKZJ1ywCF^yfi6R|8hf=
z*+X5a=9|3!33QsymHE_;DuB7(-2H0HXUnQtai{p$(zhbBoA@`TLNwi3OK#J}I-6D3
zXKL!hIx{8n`b|a=$Ck-ve_iDL3s(|2t_M95W#5)eC7*!d7r{*po{yT>F0Jqj5C=GJ
zA5Ibu4Uq(N%()$K6yKyVa|1ZCqyS-}6kzErSg@;e-bEdAJi4o-{dj;f5yoTC+MmOd
zRMuH%X_)1SHj^@DzUAwahB%(*FW&l{4^)3>A06=H&#mHc(NbSD?6ZKH4k?6joHt;<
z(qg*Te?w@(Q^?NJrHi?YONORZ-Ld>%p)?*aC}Zk{bQ7DXZtCk#Y+6?w`nzV74%1zb
zVnV*k-}9h-HtZ58k-Q)T*haRl;xV;gs$U+Fk`GHR`A}0o`)Dz@G&b&3^2>@G@LSjj
z-Dpea6kR#noYx(=)IFB3Bd1c+5Mp$R7k5r_114#h`Sb;EMvtma=vVs7JNYmtliav#
z#=R$52>JzyhdRY5Qj2?2>9Ki5j|;n`aM$CvFUcFbY2TlRD8`vrWNUcjxAvjr<17n5
z$QAEPxHl29k}8NQ>}KHYDv5}FK+v|p280XpRyLFvAXM%2riiST+b1J6#In}8Gl(e>
znyy?Rt?<Wxl`-uFchWM^vi|ViOoS9<kt@WFqmSrAQE+EJqwk8s(KgbQcIaxU&)6^9
zyGm-TztRqGQ-dqjy`%_qwE|vhS<=5^m7SaNk<n(hE4RDj;Z1(jOvu75rJeHez#Tsj
zjcK5M(gA?Xc+TLA_6(1@)YJgh>)xHN$ulK5=@-H;y%(f~kk*Q&jXs05EAMyVO(fpB
zi)uDrNukqnZUaIdvcC{_46JL_qS#_3m%rMX<ByXg$RWL0h)Z=<b~w<c@e^9`yg7bM
zu`s9M08yT{;T^{%DiPr~>HpblOJAtka5g7T`=$21FzlOxH>h*pYcyB_Gq`pezqV+E
zSKna-tf9WrNNbeM|12DMOm86lqIuvU?KOFEzKsTMV~$#NOm@mw&ROXfb&y@*JFen!
zBx`eJ)^nD=FJK>JG+R_}{5mzOJS2Ix8Sc<{!5cVLKNc&%U1fZ{kbItw;#R+<RJYW;
z4JnK$*YBHrGlh-oj2v~fJk(kEof1g;a8G|pOzWG9;9scpxzxckykoy!xhT>C019Y|
z*ey+Qu6F@}<#);MX~`h*?8m>!O<fh9sHJmSnBVA^-Cl4t<8-vU#tYWJcd7&Ms;70F
z1Pfbhgkwu&wEo<QUs{iDNESG<^jWsz4pwj3sZZ1qae-BdjZ%I0>O1??LtzN7whu!H
zSjO|N!9J}D!3zTV37a<PW4ou}V)gagGBU?Xo%Wp!A)BQYdq<IMi0TsA#M_z`e1lw9
zTVV6;93@Zs)il!uNPPD1^;AdASY+*=^)#I8iF<2qw|L&rB2LQMkCuAR;rPbs1)+#1
z(Z|NKGZKx$Kzi1V85{PFM!Ulix3;r(_CF(T1>Uhw7gP*+3~s$oG4pvfN@V5{q`veP
ztk-v6hkiW8rwpBHCOGrmCqt(meAawl(dXpxT?$@fuR;z(CEnL_eht{0**{n4FGX9T
zDy6}uS>D^S`7O8y73N|A9qvh#ZOKvePAA8=u~4ANr(omuK;_-Xy%n-z*le6Xfw`-r
zLdm7#lSH<EPctcpp&M+G;1s+%JY<?Zva?edl4y>jxhgUsE<&&W?9a}9+~mt(iFdqX
zD=u-uOf=#JV@^2D@W>*HJGasS-4JfUH=7I!rwa84FyQ9FQ*5-X!3%~a`t$~>6{2L7
z_dJK~#S`hro)W1dVdzC~>N?G*W8@6|?UxF4(osD0_p&GpS<Vq3O5aV4H(;dK3)za^
zABlID-#GH&QyIVHDZXbWNT)x>teGwhhZSZ?2aP}QD_`&mV7j%Um2B+}d-3+F{JM!W
zX8grAr)^2A_;SOtgDL%ou~5yLW?sP+(&S#<4Q88%VvO&r`Y=*L%E@RI^~9DXE`ZrN
ztFn-ToC?@#Wus21lA*Lt#>B^iwh#QwB)AOJq^4L~sWM|<iF};7(8N1RZiBB7e`2-V
zaa4y0=Stg6KU!eZ^Aw%*ryr(<nIRUIML1$<{IFz*$6-7}vJ<OHK)z7j3bFe9hbwl|
z1DuE^WRdY>|I{ZgiFo|@cQzAoEyD|e>W!4?{LYzJCV+{>djly`E&XRsQTJDV7B?Qr
zuVQ%cj&V0(xj61K>>Os;+ZyCBEJt|`u=1Jf_NWYCG%(SNoq_FH=aO_05`EJ)9lv>T
zA++lRhzBUbtFwN4(U$P~^z{HOm)=?HON+i1Y7$Qc=o2WL5OQl~BDB~UiN3wI#3V^R
zl!;fG(z<slS=#ukiFAFyooah=rOu`Y#FRr#ml#Kv%4lAUfRasgK8-xDoc+3VVN_ZA
zO*9K7E}YJFn<w2rA}rORzog`DAo$Vghd-fV!9QhR6a_XvP6Sw+BRurHJIqf%yu+56
zY$o}VZtqpvf-C8_Y3lpAueZww#{|;9DIa622+v$vcsnD{3F}D+x5gv*AP(Fvt|EW6
zz8FKrUY2HS^&zR8wdaT?272xHsgi#aS~N~OOlJMdaoKeTGFXi{XhygigNjSHhD}Ns
zSiw9CQUc6+8uw-RCC>*f|H#8bZ3?TQHzcvJ=xn*&DyzU!r^Lg{w3K{u;JSk6o|W^9
zr?=>g<U$g>5FZ;?i&E4z9?P36(0L~c=Duff|LXvT(TCd^)5F4F@5HizPtj)t_Ua7(
zqs)S7yLZrOH1lr&>>D{}YsS;*x?tJy^g>#{bj@E7E?Z<jKlc_5y~609Z*SzN#}r@*
zosY|Od>$TQOuKz~QhUad^Qz?Hw>6;}Jr@CbfQ!d{<$#H6y5yymnv^H5%`WnG$dqq?
z&smS{7<9!pe;80rmpzVWr3rU28R>kO>kECALR7--mrx#p9R94^`0=`agrF&2iuVpP
zop8GIgr)miA)KUQNtR!5?-^^@S#!m&-msbWwR?tfPYk}5N#sbb%Md?Whhe{}%kdQ!
zEWFhsK{O?7FO@s7Ur92P#Gn0%)_Y&4o(6U!6ECq(JbocV?a*onSdsajUF$Uc^O3#!
z^)hzxq&=RG=3tcXu5>bo#3UQ+3;2#y=>}0x!>*FUgyWsl^mp(d-c*i+=2y_&mqh`E
zl$QgKe%V6rpxEyhMt#1mIn=)|i?vnZ_EMllyjjm!s#18sm4*YaQ<Hu^(^az*9p@-t
zJ6-Oqie2M_?FkJfoj=d+@kV|S^aU2Zv=#)W1UuG9aMQ27cV{rB-99~Xd*B-NfRXKW
z(K*c|N`M?J7Tfx%>?rTyT#iEW@w443LclmQo-NWk|Hifra^GT~c7yP?e}~0r+?pn(
z>9K$OKFSnc7D~^`LQg`pVPBxn8Czx-4!amp2j&U3&m)RccLIVpe|UUsGE_RU60&iO
zxwL%5&?ndE?O}I^(n_1xsmwE0V`Um~jPicIGOAS_mk)dLl$s__wZQD7vo3^-rvxTs
z<p<}z9QtB&C7E{ZTgU#E8}+>GRDFMI%0k?JmO97Ev-k;pSZXq6{`A_%C4_k0kjT)b
z=J8US(8=cJ$)3%g4*TL$tX^BfQcTi?DielkE(&WtLnN85vsGwkb>dUkK*!Ggzd>FD
zBE%$`2HUh&VA<)aN!W#8<#BrUZb^K}n2_T?=ut}(4bn-b5CwY12uu#+a~<Fi!J=7y
z;Xx0uhE>MSDPkE_-82<JZ#R8^VLB58uI-8PC&pzikhdF}#9EWjIk3FwoD+{c0)rZ}
zgLka=Bh4G}eI+tZUjE~TaM6x^7O_LDrC4_(_nd}H2k>&5X8TPmI_XjvcTVN?N4}Gq
z8G^b>i!AhyFw6APsqm(QGBESsPdk&JV+9%i^is2F)@G@hBT5_{-&_uCHhe8*Rd{S|
z4&+lANP3`b!6QdkX{N%U#jGXrLi5j5!l82lbNv&C>8-70t5J7SQfwFWA>%KL{W1Nn
z4idukxuZHy8N#*Lhhvg|mheJkh!&SuDHbT1Fe(Q(@%{)Lnw%uh&;pRNG)uD3&hlZW
z#e@8n+#@n(DN6|x+C}_q%f<3e{ZlPdg)o)(aiWcC#vNTf^w80j7TERgskMxcp^p$_
zt%ipJi9gC{dDhI<Ne&aA%~^lVpC8?I;hlSumA}$&Nx>4nvYEy2PqZd~jK(z`=SeVE
znP6!A7Orc7xg75fb6oMPp=Yxt*sqB=S@1EkeKniV!3!D0<w+ScIpv}aFNRn1Yn{Dc
z`1dz5(3t%-7W|Z<H_qk7cbHeQ3NOpMm7~VLA$ME%f4kQUr;S<s4WZ^#_6a50`g}Py
zX8EDMd7n3E1_@X?B1sJPc$7?Qboz%{Qr8G)!;+@*b-gqXNJ{{{eNOsNt-=>b^hbI#
zHKSHul7WyXj+Z`HOCy{0gyspWD*5IL7rYAIf**kpvT1UVh8JO&e*)!lQ*uig5A?bI
zP?7S>MhNr^sS)E;a<NnUN9$l@8S)oOBRzeC7L%huFByomVoYqsOQIwl6F^_-ht;%h
z6@1|+moV%a`l+Mi99ioo(1FC`k@vH|AQF^rrV98dI_leU1}h#=+&wkv%AGR3NV2<g
z$fF))d=zC+A&N8saKuDm{jIN>^xDZX843KX2sfiL{Y}}SBtTkjqMbt>8Ka`&h|=*D
z&v*H11qX-yk{4@8>`Q-2DKYBb-h8_HJmE5(<CdZrd00hP>EU=d9Ny9?WAe9#F}G9>
zn2YU{WTLyh$j-}27h0lnUF`QfB#|E;V3oKnOB|I{maOclW_+9Mv@EqOn2WHST7q_;
zp_BeoYyk*9;XbL5RIj_*RJDy1KTn(~mXZKVefG{!pR^Mi3QL`nTEs6#uN?8ym1pGR
zUSmQ>q>1_E0#m2xj2;Y}Mc6+A3L>hEtp}P2&?m(kVmC%U4ln>i>x#-(UOT`%>B?na
z_^GeV-8a6_{q8zL{MRy#SN8N0oxGz-C>GjK&qf5i5gTD=GG&eADHiHnHSigUtx+;^
zQ#MLgf2@aPR&P0FRr&LjLB@@#glUaG2K01RIcG&K#maHMB?flf?oQ0-lpZazIiHd(
z%<$I0^Md+0>vQF4FFvJwjNdIvK~{}i)77i(CX4&s0Mm$CE|#+QcQ?(ad$yRcMgueY
zIar0C8K1MNVa<en5jMO}W17`^5ncjUrcrSjT>xlG;M_b$nVQ0rJ^8fXvmP$+^-1m|
zUjEja!iW1@o#FkQm9}(r5`wwNL|ab2f}Gf){>B62VX(TA8VBhVboH6c2U}OEw?>T5
zh5s>#)IB&A4X%%AgvvC+sjkF!t_V?~ZpoeNmJSl?r9HnqPG~sjZs-afY$x9E7<tn2
zoA<ns93c5+%T=Xb)nu(Ju0dLy!I45kC+&=UxY_nBid!xaN3qCW-qi;QQkIg+TqREJ
zh14!XQ=!if{*h(?KlDVw&x`Fw99s|gTfx%xCcNS}%Gv+EjHQSB0U&{4Cw*yjrXvCV
z{W%XOQyK(4q%COM#5I3R>b3;!S?GOh*7Xq#mDEJG;oy`EGZ<JM{F*N8(gIvJboqUK
zIOtyozhAqZWn5-3JHX#;vzxZF(5n8?tz1JJ@m~Aw!>GKaf9zP2(5_;+>7t18=~*QA
z*=vcyTpU1=rx~9;X}2L*>qE@HX$f*j1(5q?CK0d@KvGrNH^y0EV8tir``XTJT*@c(
z)#W}ct$I1sLi$h@Xn;e)Q2K362Q`|@2d#l3;G_%AZC(5S=z8pOR_6Gr#p$=TJ41}#
z@swFen5X>>e;jHrBB0j5RKyZ1*sk6$!c6P2<*iFm{mx6A47;pB)-riz&*RM}L+i1g
z6}+ehjRfdTL}8@*;|oK~Wf{Hyh8V21B$gO|?<GR!n?%BT!)v>xzcf+^S|U2P!1B7!
zKc*MGhu1A4_-bwFb#A=_w`_m9QGp8o(WEZ4f^xau_K)@G%Wv+FlJvQluUAxei_jn5
z%!Oc?55DyoTAvpGb1FToW==Tpo(ad@6ULm_5=3rUBiG6<QrpU#o9_=vkT1;m?$$Zu
zD-7pzhabEZF)UTrJ(-AAt1lDDRHc3yytE`0t)g)2rj(V$c|(({O&f}zPMF9;zgvl}
zfhEpVx;QuLO~z{m#tq+mOT*uGi!w$JN~dpi(SVKrIC`?znGMdpt!X!Wm3Dpaa4??>
z@Fq4nO_;viV^h*R4P|6S`!>2{mHjK0Gm;+|*KW4GnYgmYkgmDlmEg<5#7!+$*C3oU
z5zhM|@b(CL{heWCF@2;5*Nj3$^xEl%jk&;vLwg^5|C|~VI=&W&s!_d9YaM!hJWj45
z<Y+ii$LE~!Zny8cp@gJ2{+{wJrEI(H%SpaBe({}cW&%!He2M3leXRr_Ew7&}_Y*{o
ztIO%~XG($nX&Ic#f~4CU&}7B|t+&w+SntvpcKVMkw~*o&U%rwzpn&IFgYcL*S-<~K
z{*~p`@)#<GOd}fGjxC{IrVJS$$B>$Rrr*@2T>Nv%1$sLnDkSvrdQ-n+jdsrrH0dZp
z-o3Cu-ue5vwFflsk~U^x*U1JHH(2vpsOqBxkVS`q-_R^SCrFC@YWhnq=azFWYH+_R
z_Kh6bfvX>qOv=ftOC8z%G2<2Y$0zR6KHmc4#Vqq@1qV`&5In&hif#?80<IxOlIvFs
z9Og8dX!hbI;I!R64E(x39%U&^|LD$#$F}V(?@o4NK>xHx;$mktnHx8S)4X!#Rmh;=
zKmo2s-#M}UAfO|)P4;gMb1K;F(DrT|PrbZ5`8g#RUz0bf-q<JnAGS9j*UH`37U}8p
zoS+ag{*AP^{5c~qmglS%xAEom+dT#}P?J&l`S0h?wbjho;=oI_6E(D(Fdlj8{RJTw
zbAsHi@cys4=t<UiZqd9oan!$;=zAYCn~-CcF#lVYW24CxNp9_`ZgeRKIX`?T6H_i>
zl=*qeR<m}s=_*WG_=L!=@I}oBtMt-glTVSrp0cttCOYsl)?)A>)0g~8;{*Q==t2I|
z`CfMd2#1_ARc`wT&E}o<0Cz5qdp?nkm%FL)Ng#vmpW+`u{T3?5J|0<Ij(IEPL8E8x
zt>9a$a!~9zS*=kcai3ukTwM;(Z}f~20&Xc_^8oCc%g6|nS7p<DgW!;o$<X^*GgEP~
z1v*{KSQAw{1B89)tSx&TumM=dZhTdAXrz@7xNr{qkH-zb+aCyAz_km7VVDhQ(Kex1
ziAH&1$R>8buJ2KF#1)-`hi-qX4|D!LreoF0AGdv4VxcYSg9W_CiSfNj9r)_2@h2Di
zs(07G7j66|cL_e{izC*#90Rue$Ab2%0~WuKxC{HV=L&+=R>^v}FDCZf2Tk=t;$ZM&
z8K8LwPQrGQiK2-E`GTXRcF3~<*gm!o$UX29sdoSKZUWR2L(IX8e0OPtp+QA!z9P>s
z0POzcSL$(}?lBozjF%Vgf{?*W52#-uU67RDLR5se^3IrfB@fyibjD?DyT9tmC5az8
zd|e{vyJ>W5>#rQL4TY+TKd0%f`qCRfb|GP%ReowOU7_%&^C)pm`G-E-yn1CTM`OqV
z(5=7rvUl=fL^$$W6ct*XX2M)Z?{?IHH@>kncJ@tohPk%9YnSl2cou9ql`o{Pe$O3f
zK~x+UKPo{i$-^|<IdSz`b6~ltUch1Djs&i9M31PU2<r8<c<>n09Cs080V%}j5#xEt
zj^OVh*B7$4bq))TI?8m91*nDl8F@#2hR1o|HP<9j+v$SWc*+KzUk^Scxhq`pj%!W%
z>t9~d=>{Cs{?jQN^Xp!tdAchH@Xz8slX5Bjmo9FAdY3;8HFbR^W>&E4JKHi)%(?>9
zDRy4jn2Kj5#xWb9#4bRh!3B74ltbI;D{MQjJ=X=l_L8R}-UbCpYK+O9S0k><8DlZQ
zv!0k%F)4R~9)k=|N#Q}z1x&Nf<CH0#wguu$$dylEUEbuM=NG4%)uI_X9h><PYC4jU
z-XB;$YlOH|9s&GIV?pb?Kx!0j$#h&&>djF}P<GBy<8tH43nR;){62YiRHp^Vw&msA
zV2Qq+-kA(IN<8F3a=GPo$A!tAS9WZnQVf;$3z0(QW$$I=69n}V<>c#A#0q1zWP3w5
z<`Ll0y#eKriq8YDSDuauhi@1SFwKICUx840hkWF}w?2biZp}DA_hZpqgE$8rY1Jj4
zy`6qx)r#|}i`jb;TZ3cHj^^maP`2LU<};HF{N`=L%0fpW<g9q6=Udx1;1mt0)Qkx+
z7SnXyg04#Za5NBv0aQhiLlu*LF)VEA?kW!a?wAj1Ys?-|ST`To<4X5hSY1H@QINUa
zYua<+^<xgG+I;3J)pE(1v2w`z(I7u-m(u@!-TJhb-QJCKxA+*5v+UG_yFt3jqdj6`
zzZCxXj+-LJ7dYx@EUi3@e1pni_BtHb_65i?5ORUZy*DBp2Ro5F@Vv0VhX?8L1sTG%
z7caUr*EhRs1C+zRcriOMJxpx7cJ0r%mfsA=n^#^p8>SLI>;rKoV{j;PSbP|~8gt+=
zV}7NIFFEIjP6NQ$rz&O?+jwtxXG$vCngHX0tyR<_I)CG}m~Zz+x|B>MTSR!8KR4u2
zX)0x@1x*K!gw!9K1$BlK@XgDc_QrT$9so$y+4RP`ENO2HRN8%(;x!pZY5@82bbk~6
zHQuAia}*W$#~uO47Bo-Z@^k7j*dMT5$|DS~JOdcT-A(nzvrZxOUeOkWc9#FMKG}^&
zYJ}fx%aP_?R$|V6v3nm^SJq4cSzvHtUO+}7(50n`SthrZAt@L8g4_E;m+=?C=yRTx
z;MR#8=Qd9su2g*4_F_=i$}UlrXq<guu1XOwWJ~rZR4@oFnGIEmn<ZNX;M;7LMz}WD
zJC#$AV6i;eD}g~z2h{n_4l!gu!nY+~2)bR#kf6Q<2%0WrzB|xaM&k>~!(wI??<q`6
z$Jhr}9<SXg1k|mt*C-BJ;-3_KFmI9=;@>M<d}qaEHRaZwiv^h=G4<0=c}Hu5%L6kf
z+16{S$M4oXe&q7)yw3Yxzc%4qOlBIS@-$v)w{U!8yP;}#Kb4Y?EoA8~BQog-?^f9(
znY7>eWq#KNpft_OnO5z-9qAvNZ*mGyv$hEjsDOiyc}MbUhcXG1q2ck8<Sd<%GSMmE
z_S5b!BFw$@ToGblXqM@#H<_tZ%$)WGA1uncb&5SW>~R@iv+Vgrpb@rsuIXI*OvNAC
zejC%g(`K(c#u+|&$jOtfJe!&Oy!UwRnN4;bSkKmZh(2J9)F`ubp8}x>MG(kU5trcY
za=UTS;@XQV(1=WL(YmDq29keTlWges5J<Twib$&55+^Orvvbu!1K3&{B)Zqqzq^SP
zg#6*J`6NNWH~b_g#bd~}0c&y?%Al|sCCqAaIY_lqBqO#ao4G*5tgbX1*&EC^c4JRw
z1^P%H*qpVFxaNMZvaa=mpcy+{pm?tlm5o-vx2w42mva;yJ5Sp^)a5eouMpf3ZB@FE
zE@A~C_7X{uMzL$6!c==D7dQE9>#naWFLDa5zM0`ym69?iRdR}qOYRivmPAY((^#9w
znyb@_(!MKlq&hV)0Sb-f*)}vq0~MjZ55Wq^Z__)PdGY#0Ay`wg$se@1<}Du)hoi#-
z`Noj$D&J`q9Jg2yPW&*AkX55dPR88_qz58Bh9D4J5SW}uIMl{SAUl=+?z?s)?6lV#
z-MaSkr$F4@vi=b5HP%+iMGD;Y2Hv#Rtwn)`G7Qi=9w+D@x6^c;0JT^5SjOeh-3bzQ
z**rpPTHZlVYffuuv=f!^l*d%neYZR6uQ=Vsq26fvM~35V+H+<DhZo1(9jz=hWfKfs
zp|Oh#@TUMRT&vCBQ!*j0XuDK9<3@x_a-VF9@Q=<z9r7_#Yt0HNSjxIFwanfWw#cfq
zLCS*n^@>w>r;>@H_>v(VauzLLq}V7bkSE<QA$uu^WRYD1q#ahOLbv*1wiEjUYTP#A
zoans;$ni?%WEQ~ewG#LlcJxU$CiZPa#d5WounOz1+l}h@=G8KHSI$YR8BUZ>$hPHV
z-ONDVdyTF6_Rhu&s<Q#BR@a2zhk!`U+94##8l<V=IEFNmJBM1fwWUT`ZnQ@uY%C<+
zlc_5pnU1_%n=C{%mud%ZE3S7z<C;I2dor;a(XsDZ{%fCM+_gm-)Tz43-96LpH0#u!
zc8Pq84Wfh3L`!bD_;PL{eACAaRQE}lg&zatHN35Iju;>UR5*l3E0}o!(xo6kZ4Jsi
zQBYyD3@&n<CHIDopQW#8^UX>5&zCEza2fVWAIV`054!1uZ|!Rs<{wv9TQ`Kn_9iTL
zt+VY%l)@bU@Hzp8@<%={&KBib4$Es-Jd{hB*euM1rx{9Ud2D_}<TYL?uw<57dETu{
zH~{#5Bew3J1*OMq%7b^X{@PnAHQzuKKY8?fFv@KfMyzBG@!YN*C1?xh?GNPSE@!FD
z#8{0V%s2SL-7_19)dg85=sZ@yPJh410s?NdjwllqVJc}W>+T=Xx{A#%TDTr}lOzba
zR*D#t#o$U@mmfKn)R;Sst3*KSYxZgI);yYQiKvgpJv$W3);s2=sVUrAkf*?frB^Ct
zQanGib*O*JyAu{ayhpgRe6DAYyJ~}7tQg{Ys3$adYa&LS&{)Tw>oy!{VRtHh?QP<^
z75Socw(~LC$q?mIIBN&0+kExvvFYm=^fmC%E@MG8j$pQWW%Ag3ud)y+dZ3laYWC=`
zL^kSLFM|e;Xd`0Iv>O|&b6}jEI(4?YKiG6&OCCI1``c93Y)<qbD>v(nZeRBZL&{=G
zy%o5AxfTm9r%bM3+U#m)7b{T2yC!>gNyooxd<rRljt$7Bvov!iXbqrW*H$9b_-TF0
z5&-W828%x|Ncr}x#>KU-E%@%in(g-+_Ka=SPThWi*}1gE_&@51&?A;rdc-h(``~AY
z-g8v<?rb1NRM-BpChVt_xt8!lEORiZ_IrkH=DT+CPSmpLmzA~^v!-+gF>H$b)CNhE
zeEa&DD24?Os`I+LeFGZAI|`PaN&|1o$4uMWr`#9a%<Nt>!*`q|W^(24{#un!ex#Va
zIX+9k^vO{60~ga$ArG^s)1maQj+zVmM)^smrbPGkizp5tw`mXC8TFV9aI+2h7x{B+
z%^R=mm)sLUOrWjjCE3rp-GgEhE4%SyNQo)K2%MB1nXfhzq|8!<Cg4phc-)2%lU>1Y
zHbeiJpS2b+8hGIQQNbc>i0Ki96wpPTO`#rhm$<tVmQX1^3!gXH&sk$fLaWE!q#M;N
z3*<z;t&bF&)>UiN70C$;KC+MB8G4z2Bec_Dmi}pzO~+ZR8gcmPdL|yHdyyC*-#zR_
zUhZe1>})sZ=FvS@%C{IMomomxH1BA|>~oa|AIV?vW+*z382in?Y>=i^T6UMzytO0x
zSh9vGZYwM=E0ZE(PL7dah(sj0AR2rh3h|A12tO;=v?p0r<dT~A_zlPZV2ExhqA3=T
z0WWk=B6feB5eH|pR3Unoj%174kc=xs^s@zUg26#p^W2i_>p1o!GsSu~)Ii(!WD(NU
zuhd1UF39_B9#o%f7t$Q&m~|rH29qIdD6!F7d(rQNy483t0%n0vuEVEamnYd=Hmae2
z<g%L^M;)2EwB9G#7vV5qGufVZ4=O`8D`!41u=ca($o3a`Jf#KL&|@GvW_A8{%Pb5g
zO2q8w#4hQoFdU+fz?J$8p6*B0Bt-JE_$%qM`d@RMApb@#_>%wpI8u2D`&!J9DllkQ
zbK_QB9=$O|9!g+5J}2R1Z*3_yyV9d%36cKU9G+)UXW=8;d=X<usege#Sb*-@Kq?f~
zM{!vS2XZ`Xm65a?=bSBo{ySCJE+*J=lkAf`RgIJwvuq!^x^ZzgI>uh<!@fiFlLxit
zS5Y0R<B8k2V-uaj+A@8bAW+)kSWqGfFF;t6A=yT?Q)hp}Ev_iiRms>kY2bs`;^S=2
zna<gz^Dd@-zSl@69H*DaFwq%<aZ10fwKNmR8^_cO%nxMYxjyxS*PrLwkG73xdq7=D
zdB^ghNb)NQ9Wv(y2PVlx+>eo9fUbDN>2YDp{$#*|`%~2ys}EfP0Npe(#~c0C$@j9d
zC2*w-I!m)G<HvQiIMWcP%~5HHqju5mK;ZV4|6v=wr$^|p)7l3~Qk<1ED(#M$BB{O;
zVUl`?jX^Jlw+g?-_qahIJAqe4vME}sGqVv^U+UU6TOm+amwl|g1lB1x;PBu{<|y()
zW3O4=aVGPgmV0*`GX$Dx`PSOZU;4b#{O%dUvNHII@s&k8HMBxRUC4_dH#M637ERpt
zJOnMaqvH1gQ(34A6`{836a%)h{@*3p3~7V>-8lG`pqX0*H$zF;BuvBz)rCH-tI61+
z2V|^-%<Y?K3~1Ugqj$Tv24r?K_W~3M!yp~w-dx{&UwtG5w(zk4G(%SXa=d|dn8mR|
zk_ZP)ndL6e3POSgjuGgp#1&Kix?Crd8GU>KUY?xQ(akAhN%<1DJ0W0^g0O)icE=x~
zz7c+w6)cYLV&URT<HSq$Nl>coY#?bkWY!#1UvRV^l1$tD$p3s?<HRE+!f0Yp9_?MA
z*@dKtWRhR6Hg6`H&zfD;>OH@tHy6Gzdi07W_3njeS;iasA7m9r{M<4K9Pr#sZIY>*
z{w4o2dxnxj+z4{r4)mCX8u*i#`rW2Mdm`SLFsrd9`$N>0?G|HU<{f94of~(5^y(;c
z0ueuYD?$f8q|GsOqx$A1r^BSZglPNi!bBWLkN0FZM8OqD2LJ0)?w=!-?MgeQ5{$IJ
zm9p#343`CwrB?6|^QhMklWk5jeW7I!jHO-CFXGOBBX6MXCi7I6z=<-yw1f^cT^0p2
zvV(TCY?33^KL?bgNGZI(50IgTj41Yfk_k4R#VG}YOJ>g~FmzE({+ZbYNA3nRuQj>x
z2t<)qsy7ldy9P|VT~_I9Cg}Gt%-F4h>wUeus?@sTxO}2aSQ6&&8p(e<fLOO1AdwB<
zmrLose0}}lE_d?E?1D)ICllU&eIxQ${8DB|;EHMQh}ixZw|MaEKuNY)ao=HK8M>p_
z5jul!XAUl<Y$z<mZ1dzE6=d}RbWUUxj-tT-l{!qsF4gxeC?S64PA<m$kk%5?lYGBg
zl*;($xZ;!{j20^pr;BCKugqKv9@dr$o>D>j=9_{4zA=79Vt(83p~tV7dgH^&5^L|b
zxb2{VLEozg`)oYZ8my;7bqM7<&GT?lp)si3jAn|J?&l&4_w9|N0;+0FtJe*J<kEcQ
zcg;1gH4_~-ntZjCY`G8Tmj-3D^l%dE{<7U#EQE&rPs4;N8P8e5i7pLN%1-53P|5&d
znjTQi^>vR6nk^7)6s=~NZt<RoZCo(5d>c3XPHR=8jUWo-^O0E~ArC)lr^j(_f3c&3
zrHfhwc-F9DUynTT?S1_Q3gQnlG;&!)k%ySyu7}v89M+fgj=t`j5+!kL$1hVpPP^V2
z;(mM#_mB4D9+H(P8+O;`HlvY3pg>~;OzGQ;#u&c==@vQj@{GkY9hI>{x~A{NepPew
z{FQJ>-sRz4&^6V^$>6JCX$p7-bYsBlYdp%Ql(ouT`~!Anj_|P-^kuX)o%5;*lX;MF
zdrG+dDha_|S#}7Jd9%%{R|Qd9Rng^{n6zaF2g%}BPE4unkTjaSzz}@nwt2+dalt3f
zO8HSV&X5<t*{k$3ctl=QYT4@u>o@T^zEoa&lmbY}u~Ng2YRKPn<}r{(%NtL^C3XLT
z8?D|EI=biNH$)E`tn#(bw~E(q;LyAE!$kN>BRWU%>fw)X-?bn5-7@b6GT*2abx#R2
z9mA|rcY=FW8A3asj<RNEN>AO`3M;Bs!a9NX)vcEaZak80iMqZ81pzejZ+qMx{Zd(3
z_5PM)=6ArHS)Y2I3v#oQ`8OU5xK(kByf-k6H)ms#D?_X5>>O@BT2Klp%d-Eou>SN!
zU=X5-ewp2=ftlM%0cO-_+LW1*pyqC*h#{Elgh9y9lgBXB02;<qy!2GD<W<lktZeXR
z-*cqj7>SsOBqe}5o_7Oui+nq@UF+m>_YfBFX~oK;nV^AFT{0Ti*(Ut4vxmQct&US-
z;XL_7tx4-mfZOb}Y2+Q>+FV~Nu^59K_+rwrS@4tiTDxFO)ekBwioZUy$Dxf@$YYpD
zgd;`_RkAVkR?TLupmgwSD!SXfz(vU|*;^b!Y(~`xn}E)x(}#@8RwL@CXLt2^(fWxQ
zu<E8(x$T({1)8|pm&6PF?7KFi=!k<hSaez8b^#eF6bj1oc9YTaxSIKFP(d=}L>pkd
zPj-F!{sU^OgZZZSi6cStklI~!d24KpMAuzrDqiDr&nG`RLU>RXP3UV-c7oM+X7^`5
z-EjZ9O_--FR@>YBS`nP1ciL>ghR$rKwgI)zZ*4ds)w0Jk?<(|<?vFJF=r8stfaO=S
zd+HC%WCKSS3UU<}O`3qBMl!0+uLJL1G*qp;+w-XO_#FkjyDy8W7nx&CH0NVekiv_b
zs0GsX?+yY@gUT5(=1n}miT(7c-jfXR{^oxO)yW-^<T%Ci(PWi6<h54PW+HW*HAiQI
zh;lE-R~*?YBIl34b+50LGmEAgn$@hv#*=_-u9Y4jjf|?8>DtkYX{!N&<{0G9^ZVnA
z-hNrAYlYiaMRh6>MHt#b{8xyl;0TmVb>zG;KyVVXF`H@w^M>4lNN0iEDlWIE3;+aE
znAb1V$QxjSW?Z&f>tBReIs?r6d`YYK*4y5uC@H+EW$qgB8A>i(o)B1fn9cmz?0sY4
zL)nW7#Scp3qBjc@Rn2aOJFSIvMdIA4ey-hcdeg`8o1q0r84E<46#oUvH<6y1it&Jz
zni8c^6WB%~(5JFR7>Y%ic8^ty=;Ir}VY7I8i-VAZwBh|>q<po9>RY5FZU_x9-lg;&
zc>CepEnBX))>rw?79&C1B@c2FpA%F6nbP{la|Cro%*sCpf?BoBBdYHL(Evw>e2J}H
zDhKm97&BO%s{FEkO4#>d+;7f~Tbfl@esjVfv^@wKJL(BX6RMe>?9w95e~)`#TUX#R
zO<=>VwJuP5i<zLnCtd@}dEN!0gZ%9W(<7j7<wQnEWjg8bfHFPLA>zI|pCtDlU*m3p
zS8~GAdtqu;O!gM5JxoUz+#ou2A$klY!wtpB3deEwmYUi)xw`sa;@3L~>X{G7U0N7r
z9RH0vsukWmc&LujoQM-o`>$Z-IBhO)B6<DN$wsagrutEf_dW#11a6Ri`ez%fT)Y~3
z*}Q)1&+^!cFBE>-m51SM(L<0X%g`_RjLCX^dD|l}iCw<z;PwFMVL2`@evVKc2_7T8
zEX~`9K*HIH4K8SXL*+FK+<FAi8T)q6f4EU3!p>bMkH4prC7PeG8u1~b+QpnVA0ae#
z%gyWFw?l+IE#dR#@ksTpvh1DXiE0sW-}V@xk^yL$y$mhQFqs+-Ho@5>S662i%Rrri
z;?DkG+isk&lAg7l9dKC2MCbN?n1sqaq3QT-Y_bHqCAsdCD3i{@?!@zOT>d54Q9anw
z|KSgq_VurORfuM;5tUNHdkAP1RKs+7gv+ND1(J64EGTW?NPM}&-8(|88lu@(wSa~T
z%jF9moqYw`4}T7C!<fIW1QaY8YF|ZO1;!%i2S4Ld#-g@%W`Y|wCa_NF3%9nx#p4F+
zgjJ~f5w}DV^;cw=1nS)b>Lkt~CFS3aipHG?mH+gie8?Q4L2hhV<b-qx4=st}h2IM_
zROm-4*Q&n?4Srmz0MFXznO<GTx7Q$0y{v@!m1U(HgvYy8+>r=;<z!4}u(`*+({{44
z;coo-WElm|dfPj|WLo-B^~6w!nsXqTGF4m2_q#j4dlIPQeODtmo(AS|b+Xjpu8J0h
zl#8(9^UJC0qe^-VMeyCPCI%^W`ol-GWBN8j!I{S+6F(`_U=hE>no{aT{n+*WxEil;
zEbn~?D%{2i7iTj3GujG{XgpIV{x!9!n|jx@?q97PI-}PY4QX{NXg{$r|8Gf1x|18L
z|GqZmzXE*!Q_4gCclB4#Se?xEe`sy%|37%T|5G^iKZO<l`?87uBR4J3b4qdTWTVmH
z-C~3Ou>Pw_)e=bDh!b(s_=!8YSEfTJi5+p9#^l!h1Ln}7u@aWJ*_hJ*)Z%K9BTlX3
zw&!)@DTODekglYx)U*sot2G5uSj$AxP*f*9M1tI?&7cV{H5xK(CI;zo^3PD;8Sqx)
zcI~B>tkJz+*FQ4+JKT6%JQ}~C!yc+G@hi!>9OwJ5Y4yTn(%{jnTW$lGA7}p^_Uc+Y
zeDXdfe)m+h)k%}`#i_Dt%eD@}hO7$#V{p9Y{qKYI0fdb@LQrj%i{&_rPL<twvL#I5
z1eZWp()Lnwq1Np%?O>sF>mmbB$n?ydj>0aY?K*P)<T+g>al>$<5$}%RLN-ZBt+%T2
zj3VdWO%5t-Jv}MKLznuSOrRc@Ql)qQpy4`Pfjcd`XRJ>iJY;1=Oks9mApNy~JqxFp
z14hHT#FOflbl*^o(H9Myh_tNFy(CKFWe<{UpL~IT!-2c1ZpPe63p#X&y1nBN3dDXb
zw2)R49E|JA#{H{^RE|~OJ7}Z0SthpcsoC>ZTlXnYddLQd<?MeIwnl+`VHnTxth(7a
z`HfVk^JQuD5ATPi2922?Xm0f=fi6v);H9iO1D49f%(mEwXDm<(=+JXEs#`lRZ`Ul`
z7aEwBjVwT(Ado`O@<u#Rn&T0zsiPqL7qu;clSs;sj$@yxZ`~y7skZ$~Rkf;8t|y~a
MSJhU5KeY<~U*O>s{r~^~

literal 0
HcmV?d00001

diff --git a/apps/browser/src/images/at-risk-password-carousel/generate_password.light.png b/apps/browser/src/images/at-risk-password-carousel/generate_password.light.png
new file mode 100644
index 0000000000000000000000000000000000000000..4e46ce2adc34b6aa93d3226453961e45056e33ee
GIT binary patch
literal 33116
zcmdSAXH=706et)3K`vFfibzMA(z|p-5h6`cnv~FyF1>~z3W!LJQbJQedhekHM1;_L
z=tX)jp(P~n67S59d2801`7vv~H^08*oPEx>&)I!{dq=&{QK$Lm-ah~UfCi}XR388!
zwFCgJDc&F_jF_D;%K`xJ?gO7be&tWHJ4ZRmV*p;fdRd<qv6sh47W2d}N9Wd$_SCyk
z+rPB9ikZ+Kc((fP-hav&kgfVBhv6ybvzyvKZJt_Zl1W;RX}x{CE+(<Vd;iizErZgu
z&T2EFA#`ZYTV~E1ae_b;$r&KLwqDIOp0&8Q7@Xllj(_aGuCIG(fRJ0q>DcCR#4ex6
z`znEtEG<JGN*{XJ*jW7AY2OkR0U;m?7?S8nS$o(0v_ly^2bV=dXpQTx_6^I-FrlgW
z-C7!9WqeuFegg;XgLGN=W)i}J(9}C%nM{e~KEAum@_=5_ayWb;FM^6N)29D#=kV=b
z@(T!LR>h?R;L^314~c6dP65P+7xB)9YzG%H%JVBvn*8=d_AdRWjI0?D-Nb2tXUDg#
zcXq?GB9etP%%8Ds(4e!HfQ8vbc`^`j`o$e)^ep&rQGUj6Pc~r8!I@Ol(ev*94CJ~t
zEfJ}26Igz65U|m8yuc+aC0Hyo2tgbMNE(fb2;L0^j;B6#C(;EVTK5K1HA-huiIez&
z!ZUI&MI2+Yr#OjIT02pz!?U^<QL@j$ZKqxD5j^MD2*aTPCI}G=Lnng`GE3kHjZLOA
z5g35}7xAWRKye>czM@SJ&5Jx-3?U_srzG*6mYN+lKgr&p3`j(U?q)ILGXLVDHHuwr
zI=!p|Cys^cU0f#uQ}LEx*K}&joOchIC;kWAQMI5-BD2)1*<ty+oAF(}V|FOyO~?)6
zES390&+SO+|MTB|XohZ<!bh!RuK!?PREmk*OR;;OB~Anmy?$HWYmoKV;j9-8@xSF`
zn(U4IY}TgJUw?0+VraypjW_|Ia#JL^OZ-vu0YFWBzE%bN1rg!|5O)quq7NmWKt=OL
z8{q-?#zSUFd=A~ZCQ5w1q5NOE9O)_1;j38NHS0gRkOsj);!?WU77}nIfY7PRt#73L
zzdPupMC7&t*3?9T%Vdw^rN{w|g431Gx-Ryg$zB@;FS$dBJSxaq{%Gy`T5{|a(={<b
zhLjh{WXu9C2rYwx2o&N8oS->a^i`nGIqrhVYiIB>h!kKh@seZ`<#uj(E0}OS8uYxi
zR)8TM3FwE83F5#<1k-#<%VF9T3ZRnQ_Y}YjZoSb;xJ}(K(ZshT8;Pkm+FGAwi2wlf
z70ze#++vIXZ?%0=QFyUWZ^o4+;a*j_1;k~XNQk2q`}24r4GQirhh0-)>{9{w5*fUp
zWAYoIG5d^UazdR=g0RF#;}^*{fk5`q;XGyl;4^`a-vsRKS^kn~qj8?XGLp6GHvw+U
zq}DT>Bvg0<3^=7GQc?8hZ-`gQ|1pANSDqyT1q=@lN&$whx6rl4;_0r4Ec$m$;=i$6
z?KAY1P^~2Zz_D|?tGSKkdGd7ts~Cd`y)FbVl43x?`i8JV60UUqV;S-rpkhS41ixB~
zpr2v{_EHJjJ?wgMasAs%B7&P#zgdL|Oo|`zP_~K1n_xeYZX~_wDpRaX<&?RET%mCN
zK7KHB-CZ#P&}M>tq&`~h;QF^{dtm@WoMLN7@GjOp)pQR>L15S<T3{a!xWm!+#<ya7
zaX>XU{l(rK9re|oj46A-=huWCh=e~n3nLt}8S8Mx3WNi^=d~yZ2O%&uk$`{YsWJBd
zkJ9kJRu=!ie>+hzePjLKO5yy^hpd|ItJrN?>$@$pCt8nRW<wv?T=Y+LoiY*miOPAm
z=-pKFA;1e4Z3tVAfH2c#Y*yF^4#%1YSxeY(4`Js7LcWk$5Ml429LtSe=MOcVDS!1*
zlUwR9pBy5lGRHy)q7K*~FT5>(QS02l*;OW{Ii+>olKpD>)aszNKVbK(dYPoV|M)$0
zPrpEaUdP7<!h+CnU(}PJzB#%*DI-WwK74H;V<70(hYY;tcAvhK1WC$Ru=#m7-_iOl
z7jw^v>cqdy-u7qmXhX?sOD&H23M>cN1($;mw$4B8xu~*_F^Tq(6I5}JhGzYjc*6*K
z3t*W5?Cg$Vbkiyu7J~bNiYSllxd2Va&T3gAQ*A~We*PoB|0RI6{ee1r!JjR7Pm&<L
z;J(SZ0h)UIIsZnbBZ4)D%Z`iC()2`q31GdC+DJ}6>BGTo1wo&p(1GlQvj=l?m}L}8
zHS8%tp8-_VfsCAU+8RfX1f>W{smzFE5-4KfN|*t7C)@JZC;e$?A&l?MHOfGOkG%~4
zTD3WzjwdE`%5@8W*VOGltlHS_dq`Z<sP4z~`co=B(vbLi!2gZ86ED9I$xn+Jlz)h6
zTAi5rYe==2|6iKBBqGXyjLOwv@LGCrh^1Srd;KO%J5or-D5IVe!wCIOPBgb0@zLd2
zJ-+uMob5~3vmj%Zo`1PrB~l}P)NaOifJy6rRz%;=SP1JxI|k%DGGx)ePV8?bgDyV6
zccxv*N1yyP-F+3c#pDbQLSOc+8;x^_X#8(ttpBgFvk~u8-0(EZ&c&R7;kPFfWqSiW
zSOUiiwbYe8L8H`56#tILDp`kberjTSNMV^qYwjj0``7RI_Qc{mom87~7C*#Ry*iw)
zS&pzqKYx$B`PW%tJ^Fc{cIT<Yuimn$JHdEm`p|x=zjPbobT*>tgIrEY*^A8uFSvQF
z%J_Y;fOHg3aHAuUm8XO^hQ=nSI8?eUNI49^cOu)*=6!l3sMjL@O2|e^PTZrn!(kQG
zA{UP<_LKVt^Ex!z#6bVii~{KTat7QkeA%<S26Nw+G(f+{+y@ZNiJXR0+C2D(Gf(JN
zusQB4`}Kt&)Pu+u7gGN@Q!45i0e=F~5!ZFP6HYPM$94xkBVxscco^4zXYEirFOK9X
z++_Tjq<)tAQY4T&<?w|@DXMEQIH~>kKmUxC*Kwg-ZvVha)H^hl7bpeUxu{ENVw+|N
z28ERu56q}cV;<PJ5`9`$hxZkZV;_Lf4l1Q9V|_GF+!L1rHAMO5f4By6(0roR#oB5=
zEIpZa5^g$;>KSZ4>i)X+n@Z+pun_%!DDma;?tJpf%&_HQiQL`hfqWNhEveQqP9_VG
zls9|yp_cF-l|c<d)lCN9OOT>d-F|v8e&?%<Vrp(m`F)aPG9QPGhIvb?|H!3y9AQ){
zRzBP8X<KSI7o-Yfu^=d=H=dKXw(by>S!Uw5&Dc0LE2Z<_Pr3#Y`D-oM?}mu<S7;oJ
z-}w)nb=x+3%G_MT5=!6-XOuKysnXvGOL7gN2_6R}XXE>)>A5CWADe~W!MKmUO*ng0
zOc1wbvK}4R?7>8r2P$BUu9f>`1Zvn>Mx6e4rxN_7yIhM~_h1~vd;5R(fCWFMid>!v
z{B@%RbLUZ^uCGYDT?4$ch#F?d+)ufN57O*AKH?mYy5N~V_-uz+PTQZeBTNFkQRZ}e
z{p{}Z{-GvL1Q)Jl2Sc$MSKhn{B=XO<rZTvf!{zxoqfpDc>>&2gjF6pn;^LVMf~!l=
zB5a%D-Y50ZfSpIzDlQXzb3}qJ-(k>R!WZwRTAc@oFW8`kKT|%*RzF(LZ?UeO^4}Qg
zrF_KDGJm;v>_AOg$sZu7SL<RNMsyaxF}obp5@ZUx?zwvz3wrIGlud9~xjmIGYPXNp
z{S<4uST0(HY}LpJuy<0uZ_1s5O`*=-+dHT-P+~2J>p%DUSJ#z&6XqOMCtKdK)>+&S
z>?)B~S9S;wSh`7ZkBAYK=0jDtR=;}qQ6B3L78(aS=T`4kq&~r~PHFh_o3%s5Wu^k=
zm3N02LT*So`tnPG<f7*FCA~;eCb5%BUYn@8G?9g>QQ}_4W{Hyfbh?m;sfwp*tWFY4
zp(eLJ&Jpa#8g^-+#q>;HfEd%%s9^nEA9<$+Y>FPpEl*0>_xBVWRqIIxi^Q(JGx^6}
z4v?0XCZX#RG_o^||1wqYjtB^32NGg=f<2YK`*f}Cwm{#O0Y&P2qjK@yWD(74rT%x{
zOhMFYo`wm#@{(47J5;uVlyM1DEkSWavQ#uour&85*x;uX=!+$`rK}|wLls+HBQe9v
zGtg<G5e3YN-lb0DaKSgeN8b}=KwfpcODYpf<B=Gr+N-o$Jjv;rlRTy<w{WC2um8;w
zeDJ*b4?qr2+?&ev>}5~{B&eTZ#t-HyKl008|MAgAT&BjQqAebF{Js*WJj*gn?pQrx
z=3(#D#<oy5r+_uS84RpANv9cn{#QBx(Kh>|7k$ceSKS8-`DhfaqHTsry|2%Mf|0?T
znm|Drfm$olQLie_Og6VMcE#5F5ZBem6tMdcYle14;`zFBtyj9)7gEe}Oh;Tb5?7G5
z!SgJ`DL6Q;ztd{~ZBj_G4F>SC1!Zrbd6>`nviurMq*J2Qh%6oGK2`M&gIs4*YBp5n
z2oOf?Df=IL<fne8{q@f(>Sxw=-2Af#zMaa7pVR$z_{q&Kk?XD;e`9jFXJHlVF8=nH
zxI)Ds^lRY+3afw^BN+AYKGlR@OYAG#`#ZC>@(|%&4PXuNro5rvH%I0^)VVI0xJA6V
zs*Sp3F!}@mw`M;P0iX?!2Qt(Ebs_yu|H)ZqrJMHUd13x3jGNAS=Q64Yg6{&4BDT1s
zJnJT_{oF78S0Dcs@X)>2UT^hC>)fwG7&IS77BsZhFGF~k=xt7B`=0Usnja6H`szmE
zl9nbQoitEF)F0o1ypuVRA0ElzK+`=!O=W{K9QIcQ9&PE8Cl;MrpyOh4m)~-WM2s~v
zCFT1b8vl_EVBw2%y+wQBelOwnV`GqWXP^P;TBJFdH33Lv(5~HJ<f^#fRNVL9wLggn
z7Tc3bS!?%eqO4QTA{L2KlXBfleB)?#w&GNirrAYHX`uY}^Pg5WACx-D@kJ!n0@Jp`
z!jFk=(vY*`&}yBpmjwIoT2kq=Qc7!gY$#?*HxWW~dP0>1u04$UnO!q#^zRh+$KQER
zj^7Jn<}F3L-&eJgS+%fygzp#f5fSGv8cfFX4S?tz6u7DWs6H>^j_!U`8kKwbSB9G&
zWl8|&JK%8cf_uM!O23Y`KtA$SQr2=*T);<nG|~-Z^YqFtXo+vUe5l_yv#vHCO<Q4o
z(n_h2NBQU4TSMO?5Wyr8=E3&Rx4Eg0tiQgwFD%aadv6?4Ae)^fRaqQ(Gj!@S<NIem
z0uTTzBJIQ?`ttbEh?I4u*jF(UDN8C2c8bs3L<g!(>ti)c#O8|fRn^l?m9}@N`@c!j
zq@4&cIw5r+o$mynwf~5uGD-aPhWAg{0EMM=(fEzFzmt~LOlzp~sk@fa+wXVT*Blgg
zoJA*k|4XOzu`xfL`ofG2fF&pmD6jiH&!(IFH@qsHun>?!;sM(g6|QnyF`*ZlyDnHR
zCeevj+Eil~#T(aC{CL1cfEj}5BdoWLk8ihX4<(F+GWi|Y;oY-tc?im|uGgbWo&)I!
zK;I&{UT!UXRf-+?CKv=3zR+5zV#5ZGlMR=-j0_XmSb_^a7MIS5GklBWdv&mi3ONCa
zz&N&Ei?oasUjHk6!rO~q<4E$bfk+!x(5g*Dz~IH0TA_>y{oGd*ohOvUmq4s%+BKu9
zWW2L!GJ-oCIUTU$;$<@=Dao6;^sD8>T{hrcBR!eZmlnLm*Q1Xlk3%YcjE<f?t|zTf
z;YfRmi1?fQOSuj_uzmk9%|gjJ>hAhgp7y_Zt&da5pVSo#D7VK|`t&Z{ujFQk%v12k
zN9Jh0pW*G@<<+nXZ3b=kV_rb?@ge{#MVJM&*rhQ&zipH>Gn6~EZtz1>&G48@e_J;Y
z8+%6LW#pai{%?n|B>}Fjqyj0G$ma<C#dR1_$=dR1vG+HLV#&8nfA$K`s+h_6U?T1*
zw>>5{i*ICdiHtY*lYW0_A2zzFeqFnKWJm%)%%zB$W@ksGp{@Cst#ZB>%CUVo$)?P{
zaUJxZ=q;#iX378Y^ex>t{P_s~^V*Y_;YZKBwTYMPn<=SGG>rB!1NO$pB$}B4s4I_e
ziM+=aMn0{S)|vge){B47gO`clzJx#OfA<Eu->DWaC2(6TgRbq<ZSxX;r*^^yp;J~A
zW&;$~hH<;K2oMcJQ3@y3pMTG9mRl75hs4#_qc;UtTPW}7N6L3BSt=ZF)a>Un5xGco
z<~Xzud4C-X$}gZ(<fZzva!mmCpGM#*8tL>Gn%Cl|3S0@E2M<DOg97zP*UE{>8bCEC
zd?jvo+1jN%;Y8SD=hft|hd$us6D~^if-9oF550`eK7zuz$@w7@z;4EmG$UsPBxz<G
z<;qbq#AzlQkqc5LI{e+X@-M?kneMPhpm&0NV_`(<R^QjIO)y_B&WrSzkQQ@|P5H5U
zaM_<foOAa(TAN<TBwxDm#~q^QltNSa;9BWUxB?~urwh7bjKi-t@_tsbgpMY-?BspR
z=lvTtAtXZ{!ftL^n8|(dEWf&c0+P>YU_@R7CVaSm^T$`HZ>K&L(c&M2CYJcY*-jN(
zs)a8E+f@2qemNtR82cM>O7Kvof9k?GV>C_JD^$2>nb|jvPs~x#0Kq8RLJU#O*uU7}
zQ8sE%`lrnM-}t!O_K2I|_k?_3x+lKn{+gf|<wQK!=Z>|2_^U=r=}*rqxoEqce>MLD
zQyLp52rOejj;Z`UArCO^b*6Zhx;s<P7l$e{caBxs(jXP|`9h@yHQS>j*Gr03>H$TM
z*wXXfqpm{zQBeOd5!nMHsGRJoDb8A}l(t&b+?zT(zE9fBGATyQxF7bnOzV|g+*(gg
zaTp*UOIo@=ps%d{^0$0nlGPNW=g#>b2;wI|bM8X<{HB+tuTrj=<t^#)W`?(^j}Q~(
zG(~?VqbRXM)@5iCW47QzCCfk-fTdX$?$}|Dq4NXDWPkm<)jVeJY;6!En@&p%o7()h
z$~Nv_d39`GwOi8T04DVLkIPlc`}x3s8I=k8<NII^0I`rPrh^b=eV1_E<DU1oA5N_!
z`Tu1v@cFk~saLR&7u3IYIstWDc^Ziu<YwTHHv@+$wCLT0nuX%_yfVv8r9_>LPI&cr
zLuq9Xl{1q3dXg_Wm}T4uKIsRw0HZR=kWWw*L0zdVo*Dk@*3VFZJom%w_P4s`MmGUk
zM)#+0%gd<qOViBw^`|0Q9h=}6-&@w!g0k+BgLI8TPQ%q%-bl07&8B<zIT2GO&@R9W
zyNgrSwY{J{f<Q{%<ij^Mhd$78?%26->^J^*hau@VC4Mt|Y*S#<^Q-l}-dkbX&%(-z
z_h%i;njItInAW)%gdZWxl87iqv`7S8_S`pu$uv7@A5j35Owrc?Dh!U6UoBSo`sv<#
zyjsc4M17U4d_Lizb@p=jEc@Y;@)u#{NHgDEX|F>gLJr6Z&C{NSLmm^u%^SY}k6d8B
z001l@ms!vAdzJ;7?tRH83sHit5Mj>V?7C~2P0+;m=H$k{$7+4d0e<stUuV;Fs>svE
ze$Md1&?Tzu5E3gxl9il=tdmtI3AQX^OmSMjxu6Kg;{;0WATjdJ8Z>AB&;$(xvO6t>
zRL~O8MhIq6;~w<B$yeU=cQe4*#qUa#o)oM@IO`K|5x69+CgkPqX*cLj+DyH&W1j1G
zl!@t#?JaS4(<($=&uDNyg1##>T&Ya(j;Rh~-~#j{nKq@lBi;XJWlZbns^>eCSI09w
zzs+=<e$MtqcG^(3CZbl*??YAvH%@O?Lw!dEpDR=Mt*wF5Bzkivw!;RM<&L}(-`w9^
zKj~Z5q30o)NMhg946AR1NnmC*=P{Q0%%^29X~k|p8K(A|FIuK3D`uZ+>bN1i24?!U
zA*;3$!c3^0oMfEiZq35cw!1hVD`Y2(_ellXBl_OA>8v<8ALKn-xGi<P?q#QgKw3k~
zrIC)<zQTI_J)!08%ic|-^v!+ct65xFt{c<JpC{zAZdhg*E~)Q|vGsU-5f>-FTZEy*
z52#;lWG^)qX66N-MuRS$c72&^-CO?{bgjqL(}*140%$NRS)kWJVlulv(tF3dD!Wh}
zM3i&+MPtAfg>t%rl2e1Ql9U<W1mD#kk;s`<$g9(QXh6_5le<%}SgF(lUEirLI9zP&
zF2`u#oFiYHPkP$Eq>t)d6C-_#XZTFEWxZ=H&R6RO_Wzob+lI_zX55SMF?wA)9;b>e
z?8x;KmF^Hsk|SzY!knMcIB?}2gkCK`QwHN_Sv6hJpukc6k}@Za4VGPNmMq{D_{z>|
zCcNmLm{Z%s46iA=zOM_jdYD!+b3&*t3@qXVH$F??*rAfy6*XFb7mHg(j(u>Qk#!*E
zChj$?sBYoeaT>c0D|@H%3*b!5SpJnb{D$*uo5Q4qM@>gRpXy%V+0Q>>#ty7CK_$9S
z!7Rb`0!+#WEhAyWXD33~pUJI>IAr*s{9u6Tu7hi7SY~-#$PPot0_N$e-^!UCwyIVA
zI^FUBBIA@B?M})Dw@lm}s-a8LS{6ba#;$Nx#LmfF`8T)~g{?HYnx0t91q=U@L+3B#
zYPm7#T)?*7H1hBhperc}*O|oEtbX{(G^w1P+GY{R@~l6-b}v-x!ly&oWKZvL^j(9H
zV}%8;eQ>EZ`nE_AQuLcfoOV_DXRJA8Al{X0w4CbcDj1(Z(8N6LgGjk#*PvY=8JL{!
zf^(z$HvWxioq1X&dkyc!Gv?K6nsH_egR;o8kt^z>ya>I*@?;QmlEOfqom}RpRz_|5
z(MXR)*T4_qW7k3Y9a2DqP$6f~5;L77yMGQa(ccXBwd?)6$yJo1Sc%Y#yRhuG3Hbxr
zVJu_dDQ$K<G*#(wPiKYMzj2Mr4;dZxs~181=c5yT#`U(0vz{d4{ZM=Ub2)55e?aIT
zksM`&k1C_3KAMy9(FiqASbC31ILCtSD8tmPr2|f7rVd*<N93f<V@&XM+}oG^YmH0N
z_k4y0-bIr=GeC=sj<kQtxGFVeXPPhrcS|PBR=Ux@cvA)HzFY>qncC&u_Hmw=?VV2C
z^`go!3?b--H&|77FGcXw<#NdkaBB6aw^lG{8t1Gn+L7DxV92)V^F!V5KF+<q=8Lyr
zZgZ{Nqgp-Y{im=ANnM4d@c;nte(%wEY5q{<R?^H~0Zm&jc~6nkEpwl~)3g%|LS*}~
zWJ`O6ViV_mgw)pBr-^aTcRzlzs>o_LGcr3uzLFa)ePFJ`d}ojMX^G7vxEDUs45sMY
z0sG(Iwy(1nQ@7>@d?N#)?Ibv!$0U<kD_vZWSv>%UB{J;hU*eX3K&v5LraCasB|X2N
zC%P+qY>*w%g20ytzeM;93R^0&k^>SME+w(r$QqvmAMc6JJ&3jhyDxSleCK+8zE2(}
zn3;vI%}6s>_3{te$)?TPEnpAsBh^X@oP1Y73dqh#m+D3i-8GQN{v)&q`aYwl_S)6n
zQU-+b(aFAs(7Ik4C|&{b!%xN{X|=RN#f$<}b%ndUzD{1BHmg?8*l1b>9tZ82x;H98
zf@AzfA1g8cQ)7n-rfM0$ZBoIRIJGf2yJSy(sgYCkW@|%*!wJJHFWCp0Rf6Bahiglx
z6L!<{W`#{2_j|whLRsQ$;j0ZxXE{gCFMoW_^2ZemkVf;aj)^>}YO(N}77;m@<aq;K
zt?uQza2Tg4Xd3Tl!Dr+KXV^RhhT6CMv0GX$g7lS{=B+efH?so@cIur`C62+%T44{E
zgQozxby;8HeBLQ}Eq|f9G8T@Lah-h=ib0Qb8y#QuP`Jc?B99Dt_A6Y;aL}kesHCtR
zC1|P!JTTyGAF@L!=>?iQwUiMOnuTN_nAUy-l?-h@L}gQv@~3M1l)hKJk;Kc}97sx?
zush%cY-d}BhNezZVB@Xs;H@f60n&$?%u67$Z6#VXCzz^4+hpPW(A;Vavh%mvfI^;M
zNr$#Mj!G0B+HeX9fqOEoo|r~F4&9^R8g(DR{U!%hvDsY~*Cm+EZuz`PQ<6%Bq?U)n
zAcb~wnLdfhnB>jw@Fq!Zs4^tTOrqJ8eHv0!m!`ZRu6vnr5;J9f6l0<ec7+C(?|DH>
zB&K*9fv$6M)iTn87_bSbs!X+4_#%C$nqXTLkzSOIjB=f=8Leixo+^Xg=<njYB3b)!
zEoUniRl84sf;-1jj<7qPXNp&gA!S^abztc6z5(lco~(9SNk`);wmj`&;DYP}O5=&O
zawFFugrWG@uNh@~6ziaEs%?{*OfX0!ne3OgbB)Ve?u+448S~_l`vHPoq>xLTr%aLA
zqzzn{@$-dIe8?ec7A^s2Yg+V*<3;uyXU#SzopA%FCB<J3(vAmd#%zB@Y`<#WnD9t2
z^15@DO=-RUGGawwh8c5D_`!jG0od`N_Pd^PIZ$KtDdnE(<CMO^N6Rt&Tvs22z&DG!
z)qa{r_%RE~nndcHdsdA-)*WpXVXkf}4aDYPIVHb~7~5W|+i^puc?1+aB1QO*JLmJ-
z)C_OK`G**P7%;{tVFn6L_-DG^=X3XioiA~{om!(9R2H+tWpS8#7Q3X(6y(^KVfk3V
zu?OVfnIPkoft1GB?0e~Z(f^T2{%2e`ygP;=sB((DFvdk6&Ge5_k(<*wn2`0KM&7>=
z?YY24s2I@y0R^L^1d;-h+IX|<)i9~2lDe<<QP-*D9zj*qbkC@6w`Z4u?|i@KfRHXn
z9tyUIoq4R+dcbf~twA{<>we8?9_B)f<~)zTc=yLIZeb7ski;)L$C|ClH5!dOjjqTb
ztgf3*Z&1F)vBqV<rX1H}W_{1jeWRL<wuh$=-*7(w6<X&lSE|;NiW=-{fQ=L%bSp6j
zYs1)-w5_fRWS4CgH1kB_o{)SkwW7Li<@sWXR`>gsbw?t@+Qh{^@=BFY$1!jPq#?z_
zX8^Xwt7;3GGMKisQfnvbpY!<w1$LoreG|_qk!>i+@f!B-i8=U0NWRt8KdBH!5x)g<
zT8>fPr_jMG({aM(T90Dfr$x3mR({HrvW{*S#Uf_UJ`dODMh(e16E66>YwP%S<T+MM
z;t<)HCu!&WUh=x@^E$Z2Y0b`u9-lAnXxk<kmmc3ghh4IRc+2~?uc|WQEQ0kyJ~ydJ
znUCYv3eg#Bz@iED3B3*SFhraNq9M6>*}$NGsusm4Qx!`~jd@#LKk!?Y?YwIzuS+6m
z)Zt%9D$hB4y_r_fjri91ZBELXkZ0EltPXhE$GK7Ro}}ilX^=H8qP*oovXyCJ^R0$k
zpI#lF=&w>sS)$jU!WEg88nyK|o=}SA(oJx;C$qe=I2wpd{HD1#Z-(E^Ksp~8TR=%a
zK;FhLz*kBflJa=6sHCFJ9=a@$_MSRUH~Lh$gsOtbx})4@ZEvW%8)me)r-capmi*k9
zqtFAiU`XR-j9E7G-e@{BWfykWL}12%e9hCJm!IxiR|2bZJVKs09queVLK?>!lAI<*
zvWtz@3~le+E3Z5AVW2+a07u`Mj$)v`%{lXe-9h!DiHsqziG5D={ra$aOIyGmotR~Q
zDG*eHnV&secW)h?O^K<06YdtVse+t;JJgj}l*Z{cWJvqWJEoc}X_;2)4@wE-HHT6U
z$uFx7U!#bGQoql3W=y^YXG?VE#6VvcJI>qIwNEBe|KgHAO_o@Db%!*CYw1}5{QFsp
zlI`<-?_0D@;vJ-7FZt}lv9EzYV}LN$o*GqcCMj7Cma|r&wcdT%+2#XTina3IeV|hi
z6GW>i_#9WlfZ{9MPrfHR^&BlMuN18jR<V?2CfWnk*O}B7iTGv6CqI2Jf8txzuKXt|
z{+WEck#}17eW2@vz_Z{kgy?+D;X#|jEU&7}U^RTEplN-1zWr;otbE)IDPt}+Osj5K
z%0~L+IA7MO1zY=axr(%A`tj@HzV+Yj`~<`22H!OuxPZ>qCPyEJ4`5F}iMdPPnCU{6
zJpp#jKZW%zpK_;Jer?3JSJg_Mo~_C!lBrI7EvZhXi}MnPEVHcNv4-86op$;7J@+1V
zZDPAB>AG}|)ob(@^3%YDLy2b*VK>2j#m|TIy2=AwtH5crQl7<rE*Z90&N*h@@60aJ
zui)zaQVV5n58redfS0@sQ*t7&%1jkSnImNiP^GVvwC}f=grMFB^-U}t?*+bfw=<%l
z{I%k~`MDCd=6`pE^kG+kkf8!!D(!u~f{|4E&TkI4B{FE+(q9XgPbaXj6u#I^9(x9C
zlMqI*r?Lw4k((IN?H_mVN4a*$E9HX;L4KEd)-su)=eP6iB@&y9fj_bF!KdZ!(@Mh%
z{ns3`IT;&5*8Mjjb{CdYl0(`s$j0JRT^oH*J+S~l-EX)?qI^rv+SSV<NbG{_{E^7<
zdYWi1Qf=kYM5*lL*wwu6dVT)agWONH>S-U$?oP+zsWQy0zl2*j1Y*;EmsnLz-}UxQ
z5B-UmU*iHW`*c{1waq}|xm7)LfGGV<kLeGrTsaTXORBmr^K<I8F|)7^Yw*TvKe(R#
z0+d7hYM|fZR1d<2`z4en9fP1ldgwdY&Q{qS$Hc#g7^XLewmgWxn;-Q<^ltT-cLq41
zK{MQpv}G-29O(OovUST%dd3ilC5LN`T7bgC#NfhBp8hmaS;9Q{Z&fU`Rb(s)SP3_Q
zhN7gmU`I|=G&hTfC7DaEi%Kq#UJ~dEedTAW-|gP~_N90!)S_7q)3nm(@Ph=k<vo4N
z7}HM${kHqT=Z7Q6YhAed3o!e$X$!R<EZvwVK2g58+<*KK?ba$0o5#2Huw1@>Hy0#B
z{}#5@P*4eN<wqC7A3M#F&4>a8F0*u8XY*~pYc~Ox^+$7AdVP~#ZFr`q`ri5~`M6*0
zhgSY{Qb|@;-xKKaY)$?q>fh}=SR>0hzQNlyap6y!<1Mx~r|Ze3K=-5#@iJ4fS5sr2
zFKQek-ircLIPulEMa?q5T>CB4j%_ZuQsOtKL}w99ESdXAvPD^?>T=C=l6rMUK~8sI
zicuArlj(Ck6%G@1_Tz_NVw)=wNr9rg*GCYhRl-dS62h_-8;%Ai?3zxf2$Ce%Q~rJ`
z{PC&&C=b5VTPQ`lemdO#BbH1di`T$Z^S$FlmT~l0%Q`P#$mV+vDZ0z>c(WJX*AtJ0
z?tRVBaq81iunO7TUuOpJY!;2rdBZD`EyXvp>Ns63_!+4^tyWN~&9#rOeay458g~>3
zQ2i*lzV8oy^!ucT5_WyO(ni6t?v51{W%O)x`JMJm-cqY)G<de%XTnF@DFFX2;Kz<8
z=4;#ISl#a`^R%sVU$k^DcZ}`o=Y4}l5Q7WuJ03c*lmyp8#|wrWx{jKQS4gs{pebuT
zU%grieg+NIIz>uKxWd{xLY}cBKx{W|;g_AEi-mD@u30UsiOxyYJn~lGkl)QHTDHd=
zwD2(AO<iT`wUx%_ZlAWd#o?Pm?-pHTfG(mTMur!wwyMVw#n1Ep?aGK{2)rGN0k<b%
zjV=9@8}g5*fgOv^iKIWx>28lEa+H-_O)^{5O4GHigf3DT0)225zx&EFny>?W(0$=L
zZRSr(>N9H|>mbm<BrlhC_xeh%yDrYNl7l4Gc4WlQ{YPE*=}oUS<tBO!HuvfHF)kr#
z$A{dt4+39I3Q2)Sw|-MGTyC2i|Mu7bKR&H2>qjWFeVM(Rl8eSmVpbidx3wtzp-C6v
zJERU$o9axs%%aECbJU48(X_47cFRpMa&E4vZ&ODrd!$z`zS3mk^5W`rjiB}}qbX|w
z7N-(~kWA*&PCu&*gC!;}X%ymex8XMa=O^%kFOPn^D>Z;;Y%ek;LeUW&{WTk&R*_0f
zXL)AK%geReWzO8lh*s%ajz23MgeHfSuztDEc8;90MAzw@7bRy5Y$w7hthLH<w;jK1
ze6VTcBDmkuw&;rwJ}rrPquTULE^v#2(hAAj>E(JPvvT`**LTvx-`|h+pDEfkTIM{*
zzW5s3K$)TDtRy8U&7qk#-C&~?PX0jgIo@#eu`DBOEKmym0&4g5wIcjr=8?4-yJnpp
zGh^%M%D#;`>}tsWg?3nZIGc+>d3BN4!P+wac)inzC&cT$3k*Fj`7T0NM0dk~CI5xH
zT-kh0tXSZ|Mt$begpRp{mGT5IuaGooYB1NOM|@h`>Y^6wtw}oLJq#?<gWga_@q@hZ
z=e=9|#p>FVx}v|bCb(xVU=Kd?O-bpaS1CZA?@b%+1-%b`5Gp^gxhC1leY$cfXlV(}
z=1(QxUYHG`Cf*V(fNHU%K7pYE8J;3DmuHUqkPoGNmXh*fF5js)y{>(nWGOiI>hNn?
zFGax+PB=pU)6vXtM8R|2>CVnK23(YBhc7N+>60seRI*C;Y0W+(S<SYSxZh9tGoBr>
zUdY6>wdG9=X3>!%i5VnE3hdIH9R}K_Z_%`VH48hAWcFEFch3<C4ro^L@O5FnK-FOe
z5U#L?kWtzyyax)FX9L=Z7KCIN(Bzrfjme>V3*0;>#uyRJ2VjXGal;Mm`3uc5uioeM
zHnP~jcy;d9X4;x>FPlLFl5IlQ;vUq~kJjJ-ny1d-&yP0G-=3-{=6+Q4m3uFZ%C$y;
zJ9sHC@vd+6JE$YI&)e;ddezc$!{ZiqUJz<SJO-*6e=w_!8y7PMUk>+Be*%A*u&~p8
zcugoR!a_zuE3AsmS9i;oCgp54mNdSZQA-<9<FZhTIEL9SrhfSME!b#1Y*6tI&J6aT
zQX>eWuLhAw&D5T-a$55fb2%0_0PglTyz5pM!Mt1#C=h|Bm+**ILbOMZV;e<}((Li`
zcQ+xcs@hnuNrVuZx=pn`c{U*_+PrWa8gloD53Qi%D|5x=IP035d>9RKy86RW6DQSD
zkhB`S?cRJp>q-~j34(=>Nj}M4aPeT##zqPr%V|ai@jFFu4>9pIe61RNCMq)1q1-wK
z2?=tX`5-*RSE#3zCNwX9bavuV23%AqLhPt&y&NUco5nTW$hELY*s*!FXqfzNct2l$
z;PixoKg)KfOU~150xgV?8VH#;gujXQ&Nzttld!l=iU>?G(K2|Pa?C(wXaB{ywl#)x
zje73(ZA#fsXLBwaI%-;-la}TayZ1!PlLY1--IU#snDK>gTeWTic~+ah(*DL-W-8og
zVtMOtnJ7Ihx7(5x`oy%}GZo#eNkOVu@x$z(Tg`No3a8JD7}cT8q{lP(LZ|PVdfB+n
z(r1>rx!uR#RhnM>W1LqiGN$?f+Qo_9yxJ@6n0}g?<tWLHu1}!;HEr8?Yh$bJNXUj-
zQbGGWxCDv2%9Odf%)n!gy3EmOdEw{V-v263x&^*7oL_U$^~u1HPCp--$eo?>#=9mg
zRs&P(Ola`DKfW&~xHUF+$`5=v?}~mHGTOu|qls%nWi0^nHbr#J<FmUO6Wcd3?o}{s
zIaPg{ppg5RXyZ6X!z-Vcnu+4Q7@bhL_HTxd?`xbV=Mxq0N;5&pEAs02w7zK8U=!&Z
zqcZh&nLgysoV^?<_anx8e09~$&KEs*9~Ore_EHW<{sXhf{Vt-&cN-rTPa3l~_Takd
zwX*fAHT-75PV!Y7RV(f0Zpy!&;$wIVmpl=8nvu_+1ZZCHT8;(%OTTwJS(Dr!3!Xy-
z8DECD8jf4Sj?x+nv&q7J__XEsv8w(1?$W}A+6Naf4a<kU{$si=vo68&dO&MhjCp{z
z&X_0X__4KFT>`D-sx9OXM6UGcqUw^Hbehj#H*&0%Rk8E(*7CubnEaK&jK&&h0?LNc
zUV}{A>}=${Qmvcf6L6Z^QJ6YQ%Y&VEF(it=G^!&AI<l_J)Zz4+LAk^OW`k`lKE%z&
z*~m%QT~-AV??%_Ad03L8a^<t}!)|vj)Up4tZGcamVNmt=BH!T&L#OXbAD4AT*=5Sg
zKsmGr-ZTdVB>g_yq+lD4FCp`1T^-A%7RmZ~zZLECODXf%Ly?|?^=5rP-*Pd6PVTSY
zQ!jHT6o0vqfs*=0yB4s5>$SvhF7BT;;?@J<GOu3b2h>_1S3@@MC)`WwA!Bem{y}M7
zV}r`niHuSMB(2G&rV*5+UD6rb<WUQ*S{ZyCm-b_YXFs^WyCQx7hUN*c-z$q^y|5l@
z>$${5?c?qI>hwJHMPw?0y1$(J8kc}}rb$04Br|&t6gP2-Th|uc^Y~Vt3i2t)^Y%?d
zvIAi?8w>H9&k=<WJ;iPn86<4>d@DhU?@iv+@)2Ql%+a5f;o)<Hzf{tpi4sH{D>{kO
zReiq1&Dcx$;-|h`USf+iB{^)!rvj23kq&8r>rDf_7e2_US<lgv_CbSPn?OQ3YPevx
zd>!PZs1$gpmRCspY5^s2lY(R&qYBM%$RJ-3TkQb%-7;oqp;L>{id=D8YhN5Uw{h~W
zh-uXdbzoMa=l#t=*E=m9XKC~%>Q!ZeaIrrW3`g?VKXbadT(-&xx2K-WErT15GXSm{
z3p<Q$$j(`jxP3&A<Ma-?J2)#*sr0h))oF2&6)z!PN)ql!3U+w)95<xEV`9mC+*>4P
zziszV2Gx$k)~OUkInjf!3m)*&K-d<Mc<+g+u<Ck8I6tE+6!6ULk+c5HnElTfk8T=|
z49C}NFV~EmI?8bNhuC4lCpx$0w>g_d`?Giv%<>ad`M@m?>Z3bv-wQ6@qyB`--hm&m
zn{F<XKiFl|b1xDZc_gUwQhS72jDL*Q|JF#!i;>RW3~1UuxJN;fI(vc;dYv-N1i!fD
zFSYrx(Y1bNz1X?d?v^DIs4DyvPt~bcE9ohAj9dcN19v~Q+%J7E3Qxh<YA>**mZgtv
zcRQ?v^&&JM){>wmxV7GRCWz5Gj@0!7kqBuf-2!2bnM5A`1Psg97@?_W?B^Pp*Isvr
zYnflM!U5-FS&-o2{hn#CR+3LTCix2r5`2hr;@@sQK`nfl4M3q^)$8_Pzf8}1kl%n@
zVfHCw$0eT|z*z_s<bNY>VK#mY{m$_4bV@R4-JNIkneZ&*hyWCPrk_9MFcJ)3lh29p
zsaTP?Jj^b0^qvEBE2TO>l-b930>`9HKRUi1LG{wL!32xRidVl?Or>}kbnWQ%j&XlW
zFE8@sd}jznBUO{5!+j48_Ou<CsNu!!$?-7RLQK_i>2pB9@2=M5=Df`^9y~ofqdmLZ
z@%T=FO(<nX$UM2NzRBpxr-}iY$2GID0jEnNZlBJ7-Zy+SxSL`&%F#YT5pf+Cv6KOY
z;HuYYoF`&6_R2KgPH>+mI=xk-_mb-;)k1Xx)rG}ZevPis=B0mwzWWmC$JpgK&HFfI
zHi2b4_*b5zyQdhBw0-T3D(W2AKRl%Iw9XWHOu-mGZ##@z%Vwi(X5BnQx2o?b4H*S)
zn8&T^R%J+S#9v-g4QS_yZCwM_Ma^ZJJKlm)bA#LAF~at%V9ad3a1-JC=)%CuxsaSQ
z^#Fwd1*B*1TT)+m7v4=y@Cn+77t-JLhuIwqgrQ4jwVHr$KC(ow$fU7}JfqpRbnUxV
zt2bKP>!OUZZHcYUn(=%H(IzA!3gYqz4$M=Y9IS^)NQKm1tKy#644eFns2hA}9V*?^
zshY6ZIml~_LbSMgD)I<@%EUWgC60{%`;*Ngfu8jJbge6LI@ge`8rS#(=%*?XE+7%8
zgR-|$^6=EK+K7G`Mc^n|<<`OlI~Ikj)-0vW&gD4idUt*-J1AW)Ykz6;t{)}kx2N^Y
z1+}8WalhFwmF(83PSY+k2j34#t4_^4Pdyea4HKzjD^To%)@ZD=%^k~mFjVq=HQx7_
z)e@+?;C*@Apcsg6@$8vuzw;>rVxCq#iDsX6U$K^Syfgkz#h36MXZ(1T3;aD9@@llQ
zXjyHV!t3ZVhDyr3*ePSc0ZS#;-#KwA7Q_;5B0Rk!GqXKi`+VcIZkPbP&^$T9BI)}!
zNy-eFhrvX;s3(m1SrKKnt6M=D_di#lD-T8=B|!Da)-V3SVC$<SPxguz@uT71g+G<Q
zMJcgR52f#NyGa#(FT%PRAZ}Ss^w;mxh9ZH*oIuIEAEfMl`MtjiLNJ`8J(Lwg-T>c8
z?6^sCspQZ->g*Eb6f(2kqtK#R5kc2l{&K#S)@$v?j3-=F*3)I9lDc~Eryt18Pv2*D
zdZNL)UoEI;20mXNT`Yfo8B`xdr3Gl?YQpN&Pi1nKZoG#0Z2F1Fly@<aVH2wx=cf6&
zf#r;hq{3a5c->de<;w+ZU1Cg1=51Ii9`GAle{oQ%N%CZ)g*$r<*eMIPv<fj-JBtA?
zY?Uvp80nl+$~=Bw9#O2B*C)aB04hyxtti)@XAwrME{)Hwi8ww!F13nD!d?7aI(fwk
zWE)u}<EnL07J(W@V3IK=*G(Q!s$<8w9;>r^%K^OZ&#RO{swII3Jgj2-fp2s-TWZV?
z{*cRkFFLxk`_s;!Cf!)*s*Kqjgypqv*s*UrU(o<mAf=|e7UX{LAF*WC`V73t;g#|t
z!yWT{HfwCRy?niHI`@(EsMTr0GbuAxx?ggvp)n=T%)(sh)vtpHEej3WP2A^4&WMrY
z6G`QCsSv(HZgX#KC$Oecjxrxoegl0C@Mb2JuT1w=GEg;|uK92%p;ptJ;N77<0Y!Ox
zhfvey8g##0E__o<A_U?CLu|E;x@<n^)KgMP%k*7*P-_87$qEsIvCb0wk-BC5iZD$-
zokN`McH+O2fhr)Trj3^!u!{Qh!#suenXC+2*w5xccvQxrTdqh7D<2IYR2o?uWgE9A
zU@9O@MLFQI+`->lbh9gvx*}V|c!jRHq>H9H%dq{mkq@?LGM2)UP(KLXby;uzF;1ct
z#!T6Yo8}q*y4cIEX3?$S<ETKRl}x=M07l>*=kd@ptA$B0^}&b*yGeEMB_DhhzxES%
z(n@cfh>f>XAm3dmihNatkX%BKLtiCQm5Q_*y}7il@$Hi?Y)>SS?Lvm}_tV<7*<*>V
zJYo)MccxW(r8UQF06`}r9`mk(!ZEjJ?ON_qXq9U?`WB>d3}7Ewf@xa`l^~pBAwpul
zivy-^O&v`9Q?$Z?V{43kvmBXi!5XQ<?-K|8M127pR1l7}nxtOZMnNe{y^)n6_Ae&X
zuU<Zd0M?XV%@WvUw2)`nUpUIs$6J1zR19@pW@PE82u;iGZ1&L+nlSZaF!@*;ok1vz
z@luPMF(6dOSuQn@OgcehD-~X}8?Gp_ugpQcMR|{xmB=hxx<9`#`1+_<o1uv%_-_Zr
zp+OwqRYW%qjO)9kxkhMJ4eiwH$xm3#jypOVrK2880bQPhz)>`f86TdM&c2|RE{=M1
zNBlf-`e7kF(UI@{iL1p_0cB3#=(wMfBcaUQ$ZnCx7G{Jyt!AvXClrHzqnv@Qf9#+Y
zb;u-?A!shtJKr^l=#7MkC|HMM+RE7`M*Bw9$bS(EEje5d?LXy(%iYYn2=EhKE2FT^
z*eA`Su&yI~0ABRDdU6F*&J5@Mm}q_ZIS#CRHyBv0RA>S_ZsT}7#>9SM@gSy!%tzli
zE@a@7?ew;x5Fzf_l`(}h47$uHI=Ho-6)xh=2jr~G^$!SSY}9e%zhFvVmD`Xa^dJo=
zIGT(6z7BP6N^VBC<KVfuh+MwX_#SQg92JRQ1m)IE)sXm#wMh4_<3|3s0(=j-U3Bz~
z0Jq;xZQP=Xq>l@9$C*QXjlT`RnpMWfi;(+03*!s(j=Y@hX?><3iYo$5G~>MU50Fxm
zgrbZD91t*Z@><L>BR9N^Gw8mKbITDxAV~J8Dm(dFNhX>3>-ufujMH?tepHE+l3B^3
zv(kzscPcF*(fPM-dxNGBU$m{yxiY<z-V3n|u{ZAUCTOe;+qd`4pVUAjYW={rY4@hP
zq7)XZwiRQpAGP&eHE-&k<+`ClWpBEQiO!Uq;I~W(-(MyOMg8Je7z5|cZ9+?PATg|-
zIIpfVbQzUM_H*)Qh5tss*Vvp{P}jSuz1mOd1?)^AY&Xk-L4e100a`qZAEOf{>>mP}
z2rU3>xIyK6)U9jsu@eQhZ2F}k^^(fLZ{2T^8O}{j5xU1Zu7Trau^(@DIGw)_nuaqF
z8c$nJk1jf#J!5KI{k2y>%B~AjrS~cb{Zt8PGuZRfvwK1hrNsIKtbX@-YTUzOiVAjN
zUysqAfcT=__;A|RPg<Xxk5D{-nYHUyWTphJPa@V^I4>j{DtXfIq8yL-YPCESz1M)-
z+D6?znPWYUo;EEDBTAM70(Hpm$^K6ue5_Sd7qq}fYhCW1{Bg&Yec)Q-b|Z6`e?Sax
zIAKFW<Vi9F%x#ia4zJdD%KKn$P|gFKsQ2QsvAZ0f2&i1ZAN~k8{UW0#c<Dp>AZQmv
z-Mk~MNe#}ACe$%L;TBSEDX1@(vZ7)NMw-KH7V3EjJPWDnWN9N56<Ug!hwL&8cu`iA
zJzAgAIp8XN$G!Q?DBKCrI40vN?xeChxjT2ea14#~lD{-MR1NTCEzjNbrb(&Bw!kV{
zd6(mz+?ftUavcwN9#5Fl<$>#R>7S?BV$Qx>4H=BbIkzGe2-S_)z3*M8vV*%ms3sl7
zU+IB*2}7z8YYEJ2=EWq?Z3W0ql`v{d${{lSAvT!in&Ub;#QL{(+xLsl!(<+rs*ep>
zp7#wijNWJ!KF8UtiSO_A^Z#w>|DEphv$2^j#Vly5bx)tvcOq&#0%bgNG-z>vQHPd<
znQzfSPAlwn>OG%Fl5GX;CRaSsVagvg;%ZteXQ9w)nMnQzHh)4Wt{psakB2uB(i-jx
zl8(*_pT<06n1hk;)`)2if|MF>aT^B^n!9-8@NLiM38_}|fY558Lf61aGoSeg9WpCV
zp@9B+Ke_Tvj;gC{T$VRkQT7vK^8*9eKj5~tLEVM~+_u3JUvu*VA7tvF)4#z{9$iO?
zs=xy&$V|OEq2|?6TBGgOKd*D8H%Ae8n*nD>>*`1-gz@FZYkjvWnU;v1#$!3<0pY`(
z8meU1-8Di}08Ds>v5)=ZlumJPAcOb}393fvm00XQt-l?sO=T`Wd>;RL*`&b4|DtH*
zVu8)yL!<3vb1-<q4AK#^mKn6)3j#IymdZMz6YS9k`=3EU(5VKG_at{_CQ9kjsFZOD
zOCe1i>ApS4wVIc@(tuE8_X|Z&a31u>6o-qL)6d*N6ecUE=8N}}HLoPMDn_4&3Fz!y
z240-~$4&L@PyaAsL$$TaXJt<sM8F7w-yIdHno1Kn8t-T&$GwQ{UkHqx!X9+|IO7&=
zI;oq1DhJ@y+2P%Q=v_qX=5a9OEBGb-2a>jxmFefNSvL=Va^DC-%Ci%SnU<}9pi1d(
z%VCG$or@oLUid1Yrf$*Z?mV&_wp?tMevx_;KV6wkUeff~m{45%fz1z2X>CwNT{xfQ
z(ZI`8ytGGgmSiEn*;!1J_r&Rz_W_TTg(qha!4`54*1OJF?X~PHdClzlr7XwE`>q_X
zSc1_lYR`B~C1gRmvj;SUavtc~(94kF0Pxi*Uq6FPNJq)!fqNe;`O<qch`pJ=l;<WN
z%h}em-bE<Dz=@(%8QUGH#f)2E?ULO;7pnGnB47J;U+Js`v&_5wtS-`pvC?<<p4Vl-
zI?SWHb!$Pe;pB8io-q`uU=Ha(L0{WFa7c1VPDbqfSlg+;nlP5?S-9$B?4u)e>#$v-
zRxm~V%8r>Q&gC+Z8QAE&-W8oX7KWYBGf%Df2`XxTI`24bmnFJs!6;eVK2e}s-3vRT
z*xQNJ+};cbHw9EkbWE=QUFuoqi)?bOurj+<TbAG2FBc-IKV~yZS%$=*%(|d&yYDg>
z5Ym#B@$!t?NHtuY`9)+n*r*U|QexVlVljGjsEirKSsR8iz(bQbT+GC^+B%ICGjZF{
z_k>OXrO9-kk;W*x*)zoY6JW(Eg=N#;1)tXyoLzi7F33O>5ahpof31<(tvj=m;kxA+
zE$Md=(8<@8Lp^m?$LT6?*D21g%V)X}p`ZugeHT_{p7_oFRcU@^*E5oo*TSh?9;6ku
z&J(;B1$+7DRmrVm-r*%3SEre0Yf@f6&LX!@H9J<55g=teDpAGdRcerBL!2`9>(y#=
z-S#|0oQ}G;bKXkD_gsG7x-oArg~J8v0gEA><9eK8R-J)IvOk(r$raReO|eZ4K@|?B
zyymbc6@f=k(+EgzM~xq~J?K4KB!8*ri3dH`UVsMEx3c~CF0y{Q@5I5&<Q=U2UWBs2
z_CUGNx9r|%Z<cW0a^uomz&7qIQ(o`D0JZa~`?Lku$k!*e5aO9#w{puLnKgTOwmSzK
zCuhMx+xOijUq~AHpD(HRaeKS=M$kl$Qs~r0kKGZHq-0Um)@yn?(E$RV{^PY&aYuX2
z02_*buI_}u0SvqAf~GV<iOE8g8~gCH`ISSE*<tcp<F>mb1g+d^W^&5bvISXfN5!>Z
zPS#91lpoOPGxL@!AMrt~CYpEhBV{-&TpF{HL!6#s$v7J4E~Q7!4SyPFy}O7_cQQ&2
zFU3!j7XE$V_PIB!CF%&a<j^IA@GRv+1*3wU^D)~?HL9o(aY8_PSiyt<zNF3lAML$m
zRFu)%=sk#nh=77f3rdO7-AK1cOC#M#OAd+x(%m85U6KPTozmSkz|g}mOr62!|D5x_
zYn{($op-JG)6G5Xb<Z_>-+S+CU-7#pBWl>;IjENMbPKBn`AbHIL(O)4pQ9R17%rjp
zki8)`R#|_>WHOGiew!vO*Z;Vct42PKMKf_aZGT;rIAv17xSnhwq|Qm7YFZP`0-12k
zH0Ch!_z3lPBq0vcCk=n!Ml~<&M5a*Z7JrA^fS5q^=_GS%P=5VvvE$-<`mJ;9FqEze
zRjv@;3p-EWZuosd3q;m62}v?_le*(tO!@8=auNH;`a0qAl@T4P0Cw@sYJATeE<$sS
zEMvyT?z!`@_J?4tK(DaDPWSC|lmK|1ky#}t*ZYqLMOIxCULL6@d2nhtHky6<^Pu4@
zeRz~G*TY;Z=hjsp@Yayu8MV<>n6-vl&-t+4<g-oWlfEh==yOEuZ(_zT!hd$UCY=KQ
zc)i$t7-JRTS~>^4+{YE964-aoz4lQmoZxr%{xp{&QOuUk$$9{uM_c{<syg>XfEg#5
zsLQJT>z&sk;X}C{ocJG&mPFnvE_RXtx!^+Yaf@$$f8F27XtYth={8WLTQDX2BNzxT
zuVKMS6W+Qs<I8<EJ7O;0cJ=PYTRHeWdF}Aw+Vu@onJA54w(<p{Wu>1)Vn<-i-+gMM
zn+U_wO7L93;(~eVdQA1LTE=<TdIQjc<wNFU0=5fxoE;cW^4v~Sp-sT`0$-Sr(>@8F
zXDXen+8E6Jg6R*Q<ppzpC^ivxKnI&z6EX)I9u9r!c}~QN$P*IRHDt6AtrFS_hRW}A
z_7(FulpSb|I+A{hN7agPc9q+Czr^2fi+t(3_Uv81#Jjn<;6SOsntZ$w4R>zkN5zia
zf=*dY57q2PqtzpxA09>tfd<XRNxK&pWy?m(3A-BG)>V%NT_nS;9fw9gUP0zR6kB7&
zOOo+)md^LwWs8qrsKiht7(}lV?ssj64xQc{#>7gp+LQjYkKl;kUVQ5?w9{9K<j7uE
zEv0^4cJ`{%cI`o9C}H1&!o1up=L?ZlqezwVgg|vNYaOEVlK#tjgN9imLbfKe#Q4ag
zrQ@F_62L!TGG>&P6Oqz@$jK)oa8vt?x9g;W(Xm6epC<LEL6gQ}{Dn3{PQ>cxurOT4
z*88&rG|l*&yw<HPHiw(Yi=dWiS~Yy<AfmL(ymlcPA@z*jXqEHlOB=&xa0j$_qv;aU
zp?t<KtO@bse3!Ey1vD|?2W%?W-jq;i&@ah4r5oHVcKorwiv~}WG#nduTBp2L#ghKO
zt67D>yktfP+D$Y*MvuTrxFl*2Fq_18GGtoXXDZ}MbtX8&M#Dd^y<-zc^yiNN_UusI
z<zc&;^@&z_!fWJUThu&3(yD=(@K-%cxSJ`-E;hI%fVYB3^~>ka?PJ(H9cFvJKaDn}
zlyM^b{1=;qGv>~sjSCLM<c4f<4MMZOHy3XPe($b;5UWG56J=7|Wqo+i{vG{Ax5xq-
zK>_v57ti9HJd|x6$12fBYoHtb^L|7<;V;CRN4!DM-~R0Jg~dAmw~`WYpWf3iGp>@%
z6u)6sIP;yb<-NPu^oAN-4P_9pFLT9^fTlzF9A8Q}@y8)38?nkB9KZc2*X<@7&UCn)
zTK_OO;nJ$k<kMgJZJc6t6X4<R$Tbo*Ugp`AN2k#=!O9NTKDJ97azkI3`X7PZ57?U6
zwwOzsl?DFrPi+jJKG14^{W<0GqQ20e8bXs|1IPwqxQv#XU4QLHrB(!)O&Sw)J0(8<
zd{p~Ju&nP^BW_1#9=hWOZgGDS+f2u2ntQnXqwd9trjCn(9hn=Yt5SKlu(=7zFTc7O
ztoQv$xjDamk)MbEeZA)&CyQZ{VFB~Wc(SRctM#TLLL~yph;@r|cK;<Gh%0hI-$l~y
zJp$@ENu^IbtBbnpY+eMRA3H%q#2lpPUp>zZlTPk@lS1eZ$w3@@<@!sPGQFykp;#xa
z%|czZ5aFhiupVmn=~N8av7!Q<PMImdK|kgM2|gYnl>k^1-WHAS1;4!(IaThVQ0UTN
z!d?D;I)p=m%Swh*TPzcz2Wk-d&OlLX3Laf!MzLHinz&y$=yXsidJebghpY)|EPv8I
z4}f)IoX}wBJ(eaA=?}UOWFGuXJ;u6;E6N~N3ZtvgD98nYIXI4*eQA$oYsjG`LD9YH
z1n<M3m%1L-y=~Bp!?+c!{yoMDF+tBhjqhY4?^Pe5cSn%Q+@O8~>1Cc((-d_f;Kdu1
z?0GY{EprJ%AAkq9wqpIE17|q_&4Lw!6F9v-5u2<_pjUvYruP`}j`^fWDUgjLtX5$?
zFOpL^0dL+dP6qYo^4^&q7dZ+#2V4oP<}Ch}S;`df0d-gc8eA57xZUMBqo26QRJP-n
zE7Y8Pm+;(=SL%1SMP25z)q;#HmFN|V@z`;eveF9=&_|?P;0-5of_^);=xP0{)1*wY
zxs_AshBrcv)Jos_)wH^A(cosIGEwSXb1l3=_M@Mu_QB};1YI%6qoP63);upe-;ygP
z#z2f+C@kkDLkqHC>UHs(*pqXV&SwQSzRN1<rdivpK2*;vWB>rD7k$v-{pr3v7rwv}
zE+1!2Ka5M~u8Avn&yThi=^KX2Lr@&xBXQlha5=Jq{m!f`2;C$L<ZG+{B8iqZ+mg0J
z15;UFshFA8me-E@Xok>&bTWj}+&vyl(&&T$DXrB`FpQ+o1h-NgwX6gwqN#i}9O{l+
zYwU_&;))n~Q9WAoS@jRafzT=cU=}dZDtOWKJjH6Dp(&a)E80l)g@BLx7a}l--+^5y
zy?<@QA()90>o)70R*Sr3r70?3Fr!I;WX^=DM7x?)<yI;xKL`Fg-IZGroiX60ut@vz
z`z>7lVjwr*6;Y^*l4Fk*5c6Fl;M03XfuO3Uq@qre;du*8Mqyp*9%&SKv8q3`X6eW9
ztmv?-u7JjL6@zD@6`0X|L0~B>Y07<SXMdy4G6T2u&Ks#RCR*hp)r`-kpv1d+=b+CJ
ze3lhZKGI*_T!Co**S-TDv1J0`$J~b<uYrm4muh|RgAhIqL)+?Srsm)In*yNMrU^NQ
zTJr~s_2qZjGn@@e6Cb~CKSuR$uaSR-HIBae==c5}&y5B0QV7IGHLt(yy#(>CEegpQ
z6$otKwm^?dx|R82BeXNbF{3S=jAcFXggyiVPNCvu_M#u;@?##^KVTD(EEu>{oUs|~
zSlCJM&9Rx7NOk+eo*7U$CLEH;C6_W{0z+9Q;QU?v7)M=~d;JHi|J`cVDh~Bb>L?GX
z%`22Rk`ClTOfwrG;SM%q68LZ~LePgiF>*}Es5j#eqeYYt1#6@_Dt9yC%-zfNXHSFh
zgIQk)S$4HD4#vD95W@npUez;%o)55AZPddet!V8%<Was3-NmKzPvg@w9al#xoYgrC
zGwUt?{6IMQyS5J0hp@9QyasZrYrYQQQn6`tJYG%?=p&vEFi0tHQ=VnajOTb_wL|qt
zk-uj$@Vh7Ixe<cd6n&n$yFgmRGCUi#|KzgZW<Xh6vW#FD5z+~9x(K63zbnaj7IZ30
zKZs~mzG!dz`aIDtf#;ptBG9qRibiF$@NR@3jX?H^X0vOq3!ZY>H@|fWdUw;M_`B+B
z6&+^`ClV<{69MaN8})TE_iVHXS$gJ8Yu1XK7mf7WoxmR5Gi!^<YXON{Jy-=-1<!_@
zv{ZSPUo0h#PBD(*VfSS6y|<b-^DN7e9n{sD*c4UP71%JI8N3f%>NXX7vu%Oe->X#0
zXw3H7^b0}%+-%8pev6rhoinH%JD5@J&)F(Afo{g~38vccaMDJRPao7PMB~^D%D1>!
z*f~l#0l9q596FdN;|VX8bU4O-hH$F_YiV3Mc+z8#aJE%e<_qsWa6$jxV!-z95Uh}8
ztk^rXCxzk#xUV$GNTyjfak1mu3-vb;?|A1+j~YoyEMkxb&t{TBtNB8>$#gM>4bMDw
z?KE2aIsv<<RX?MgRa@vXR}6$ktizhut{}*|%QI^E4B_LIo6f@Y0%q$2UwYrQfyJFi
z1YO&^5wtWiLQ_nRi|M~<cuIn<<C#LL?|uOPl;KyrTRZ(kz)(3q+Bzg(G3}US7i%5c
zx(j`V4U^txT|G_w=*hzt#x!cjn^sTM7(<z3SCsqa<{Hp<b-=UW&1)6B{5M5vWlnZA
z5&g_h$A3kqth@|N_M1?{=mNTZ>H?bZfpRQ~Ykq0$G<X1k_M?rt8N?heb~_fbqwcX#
z%r~>_TN{{hDE}~bRB)2wHY#|mB5k%qB6a@!V$n>JqqQ5R-JzipglN=$%aeGX7@P%M
z-7M)gV<&Y|E>@wE>=sOK{LLM369F2Lvc#=V1zi?3O)b^t*?I5VE@UMgjgxe+sz)%6
zqMhoA27|9r<HqSn7YS;X+6=h)>KeIMnY7tClIr%kcxGX=Fb^ABtsL~sGVu6Y(H|jo
zB?jF&T7v<%jY_gvqL7;Y#6A7hMhW|v`vBEMeqS2lsz<6+B-vQasW)!8T*Ck#dLWot
z>9mBbt)O}=b!|qX`nIr{CF+eMI9_bto7;vi81DHir5v?^$c0-ZK-Cj%v|{~m(wgL>
ziLOq%&{I7CH8UnwX-%hdv>Dep?;QA{cQbt&(GR9z$C1~?q#d13f8>!e2@I37*Gv};
zHtNpx53`xJnwO40O1|#dkzvZP%VZCkR$`H!tJOPgX8#;fgv(3Nm(b--KKf*?+Tbw2
zmHJuhrMB;Rr21ZVwymf*5(3IeA|mMS!lZLC8Av(fy{lt9oMH|-8m)1>G$OV8UTClx
zHm*wQiu|3qnxm%rrIX(Of=1!3EWXjL?Izlx!K#v*CU^xkVTub-)y{bLn;;V#K6<Wk
zAf2xMaylQ+>DA<?*WO=hIrX@PzO_VIaSjR>8c=<noz!bVLEcLr)-TpQQsy<!lvIA;
zWbe*gqx|BIs>48G@yK}0&j9tGxhcfmObr{v$)lqza}&}j5PX}EcmYeR%&Af0oi)v^
z5DtE+kWFFfF9EIzIwyh8dy?sbq*JtKqwiXhep&>Wm?qjp0MR9>#EyT42y_ZlMg$?3
zVLWNmSCzZ^N@UWiE}TkNzY(jKF-#NnO(uf(6T6I4rfs5MNH516wG^hPJ1jY^aS`0H
zzQMj4^ooM=NtrHsQ!HRnrFPY#I{e@wIUkXF{cF*mLz&bzTfxk^BX@XA81>LLFf5>;
zVe~PAn`Pec4p&s%6`3m6m}zUP=-;8+lRA9sq+^?A5EL{k)M}RmP^)K@93MV^T5rGA
zhjg2yU?-GGD12xDNqRfMAYd+fYBz~dRZ1X4NPr!&Sqe-$adVs<`y>g}h0V%DqxL0&
zu3azFUpP;RmqGtF`8dw03BLECSE@=wF0dz)eqyF#Y{;nd$@R~HAGf%?4%E2gL+3Qy
zHYNK=?bocux4!FyIi~xFFf)IDcMlmMkw$@jtx$z%k`zG+HPCByD(GHfM)OivqFRlz
zwwy^0YuTt_yF)roa8W;=n&#>!h3Z1oPzq8TeOMG^HXW?~wo1+9aAt=+{0*6YP=V4r
z2D&rFzm~z@R>^qr-jihtff#`7f!$8-L?HXT!pas@w@W+98;bgiGoM;><6uhWzF5Y}
zYN<q!nY5*<AIO{@`%NiGQ}NEQ6gA^%B2Jq#fMt{yWB2$=AE(kyL?E=h@M;)OpHvB<
z&TWm#!CE)r&8c11geFUD2oxduTqBENq&PhFJm1wqr*4$CD3s$8z8ARNQCM7s{WWEy
z^?{#jT0Ke@(0#4(LfgkdrKM2A{!uZ2s+P`}cnv8w8K`@*WrgK?Ucbo<m@zQpev$Fi
zOc*(#j&g#h)xzT)i_t5JiYcpy++f_Pug3gKgcg~ow@Md0>QbP+Rp0=9tco;O6H}`3
z&G*Ze4$lj%Lu;T>$>;t}N?V3~CfVW#T@@LYDxoUv(K~#C8-p+Fx#m#{4F*z0EF&i*
z_6rOnSH6vbeT64;rHfp3=%2Z&88j;N4Uf`8r#XjhGx%+j3aMo>^3A*<`#cOaT^{=A
zpMz&uHi5cdXH6fD$C_tO=pA0f9K~(8Xg1`a{>7b0<@#rfF_*f9;0<^#kRQ0pzmz`u
zl~Ser!<wTZE{oIXw`Z8)nguKsWzNj(a*t}}t|o~~z}3>)?sUSymJ~uR{-xYaNHp19
zbHBnAEnb}=kh+q26@F^<B8e5vuy+g74(Q>LiO_0#fWi%-3V@}lU@@<JEtM&Kq2`9&
zVK@vYpWaECl!i*m=?Pe$O`R}xX4yDyT~%_5=||#oIVUr25teD_p-L<bn9_W3J~opI
z@wj_3@gc^#22tQSUv~K+2?p1Co{BIjKzv!a{;|X(!?h?nPp;hkty%@&EQqN!&JSx=
z9+{dT9Q^w7^Bg!efD0Zq8ub#lTCj7;xgTKUwXK1-irCv;)3gk>Z>GxcdU>TCRU+`r
z{*euCxhC8G&Yi_shrw&ZW^f)$;1{PU+4Sm%fGBTeGMNRvdUTOgYLt9RVLk|TrS*n=
zyrz9affcuK+F=%g&x@B;4R6FrK@lNf;3F@BiHJ2XBVnb)H|?&fB0mw^Q;CwXdXq<|
zlN!u5Cu2k3i3$s6)%r*h)k1H?2-W{#&G;_%`m;d-!!bq=C)xXPeAQzJQkLUBJmdzb
z#v5<;pJn~^B~qQkXl7(FqMWh<xx5WWij>Kwx~xoQBN;oZ;nWWc%x{A8B5#A6jCBU(
zXGKymKdu@`1ETq6W1Y2h^>Jsn$2xXkD`hH445%C@JaNs`FQ%NO*~MY5n5v=i9L%am
zVwbIVoDG<7+8bC~q;>}kx>+V4yh@<vCiqjhJ2)$;{Lwly<3>QAROfKLJOUN9!irpb
zIX<;m`2B#u)LVXG&x@Xmpd1Z%J}E<*P!+;YTR_ZULYB|zaa~5|uoDovsBUO5fC;xc
z7tZd1#lK~c)UyLgvj*#ajmKSo7J8;~Aq!AV$<#6}$=0AJ!P|IpX%9&SXJg%qW&5+U
zOr!yMk=xZ!I(ms0t?QHarGf66EFl81ViV<2icB)24`Je2tI|>*pW&oEgQ;HN@@4-r
zO^m$6T(!&NDNyM<=xlzoqOEcgX9JTIXSRIU7?fnN-vgbs%&~sgx|}y1>|Xfod@vnH
z47*3Lh~`$+UHf|XgZGWDl~nxVq-y}GP3zQpFbH_5U-NNt0^vj^P0;n#iYqC2IEa;Q
zGB105I3f6;kHp3OPQ@jQ`s08>o(*hnD$D3o9CPr4qG&F|uF=t6_-lDR&qM_?H_W-L
zoR~KR?AhM+0)jMd9df&db*G%{<f6a@z-535!zf7$vE#31h?*;9rICaZXCq|}fKWQ)
z(V|U0=7j!)Coy5SfH#{?EW#$-akf$&Z$C$YMYfDN@ICX%Jom#pMO+KQQz_Kk_TKG4
zMZMP@3Vnxun$8#wc+7N86>UN8cBAq-bN@FEDfW!#Luv7}WB_*EwN`}Ld4E{7S@Mh%
z(K$7zJ+!zVu97nxHsh!{%dUCz-QHWguKK_e@DzV?Vrh<`8^8c{%?0Y9KS|!gK%BAm
z`x%25F`vl-2oOJc0fdD=PW+<Z?=>(S^rYVVE)4kbBa`5nmrjFpJq}=>G&58(B4Q5?
z1$AC&@H!Qe?CePE9qz=EKP_XAFqw&zGzb5FL1(>sOa@319(-r#EP2Z!osbf=n}o8*
ztNW&P=1SC`WC%Obr3Q_V{KV?=SrJxVa#?sE9u7P-zfyKj@INLbdCw78e)*=~YmgI5
zC2B53iaV$7ZwH4XWBo1f!Sb4nTc#$&2!v!@r)VEzZ9H`iOgy1h97!yp2~T8~{ZBgK
zX^t|y1UHtgIDiQ;dk$5w_0kCUm?R^rS51&OEfB=jMi;z;Tix5|d`D&dp83^^$9N!|
zPLkkPvn2B4sRwC5HgL5S4~xec()z0y&&S|_u6Bq?>s)V4IZQmB3znBR8t1<sneCte
zNYlk)U9o1D+{=qL$dy=Vlc{|4T!w(-h-PLie?L9YDPf2X`<(MH9KJSNJWw_|yM+vH
z<-R<!D{^JwHku@_F1*V7jS=L^kMPXd;&CD>@YwJGKQQ@~MMmO!&a(^}V|%knUICP~
z*bo;LL#o~40#*WitRHs*Xx|m>PNdIn8C-^ixcpEOIhpf-G7Ii|K9y?`<vGMvsJaFG
zaLZ19^)CuC9W-(~^SfG`r=qF6KemZ%h{6@*@!6rU1Tg)r85_bnRslas@;mTGW}OE?
zgBQ||tLOWD??nfVm!T|ZYkdb9jhnP~HjL#XRIn`p5~NFgU)@X>v^t8O*@kfSkG<3F
zMF{E!&UuLeJZ^l!i`Dt%kFo9E#LCZb?YC@Z)Lhv!?7HBaznaR+UAbi`bw8{nTJ2C`
zr~kAdDP&5!J`>csFx6gxP3*s5XZ7GoC&5Y-Y*0{7z00v)IIKCl{mu-dc*O<b-}Tat
zm@a9nxG;EBVaoXE7W`xr;$fXzC^xMUne|Ap|AR@^gxAX07dxF-eoeZRU$KsLKpLI$
zO*H$UseAH?mHde0mVn45Js<Hrzg4>0<U`h5s!(_3dFYRNgU7NV9AUi7S4HhwuGpE<
zn7}XokNl*TBgGg8H<lo5`V#qybygjVb!wcaK}4GWBNqt;M$?z~)RXhn`Bj6Kn3xU|
z#$s_<CX;E!YN)25^G~tQf5YcTTQmPX4~diNWxP((H6m<2^+XJFX;bKk{V#w>-Zvk9
zbWi9^A%k9~DDUJ$ez@sf^PnkN1a<nO+pY-mc%|z^^uE$RXrblK97bX!W;K#Md?)ok
zR3n*6cRH3iOvt4f^l^5SEB8m-W_PDIq%nhKFZFF@3wQsa<9O<pNSxm8g}fUS+}*9G
zln#_6w$eB%ADas%Ct1nD{1?=Tk6}oL#g&#j5Jm6r%4*V$7t+ydoNEy>2E!q|XR2#?
zD=lC@lfActpOt?n;wcs+rt-RbQwu_Y%cJqxY>Rn(@0N;=Ei3TI_H*i)L&qgTS6c6h
z()65HCw2JkV01fCJq#%o;lh$cV#zC*Xyv&TNMn4bUhB4;71IAh*STt~C1cI58v!KX
zII~_TP<Ve*=@*Zyn|vslZ$|*U9tmG9f!#g|u+oGmlYnoP8@_HK$RC^<-K%@UAQ>LQ
z25v7AQWn0n>@-Z}dVQysPR!>&%@514F5jJm!HH{SAy4%*zrTNq%j5HMf7T4&#%I*L
zGm@~!n!Y{PBe1qHzs>)UI<cI=bSX)5dBgOCZIN-uR?j!q^!;GlJL+URt}ZTPm-1W=
z-7?P75JyL1(`3-q_SniG{cRT<FSPsQE;JY1@7812_#MAJWC}eQs=*`*B_5<!&Z_z-
zzRF;@vS+U~wUtgv?sQ5wBD`AvEyaz1!C3FyzLY6<S`{!Q_|FD&>3>?Z8VD-=eoP}~
z4K<bLCNC=Brw9Z^@#(!^!~5{Glb~A$A_8fXyrgnWyiArMbsGp}zJEJ6+IsNJ{Bwgu
zeRI5-4Na$QMN)5?@z}?5_fWq&oWA!_CVXU1nh2jaKxWE~9nR8afmqXZj}fUH%H+4a
zz2II(ldss@s<&6N1YIda`7cnR)n~lTHmYH-cJfNg(U7)VrhE2VaxL<eMc@>uwUDUP
zbAQTNrMIoAVzf=5VzfL&FD?1M$ngMncKhV3?Zoy`%O&q5cYdYQCM?fCil{u{RdOZU
zrunsNhOuQ_<HyK^Jx%ocuNm~Ayd^%mTz9ya9&=R>z;cnJqs*A&d8iI)IQ02FW~_X*
zI`cMR_|IycDDC9!fz|BY^*~(KN7^+dn(2NV>G>Dwa<gi6!zr0L;T@GPH5VT>+EIxv
zhyRY?_BbsM38nFBT{zq3w2iu5{jlInc>T*Vs7iuMp}|gP(z(IAq8m3ba7sK}Ud6A4
zRoAKC`q=L%c|QQ4Csb;fWu;Vy`+*{)fvz?n-2mj>B=QL=Z3ENR$Sk=!7C>B$YW@dL
zTD_4<#B@rXM*f?+M!b8nC)qiuv>!?Rq^AEZw@v-{pU*a7@hT>3sQZ;d0_G_+a`HPr
zRJ_)Wnw`=OIvvdQs*Lk)B71%H$i=+h7$!b#7f5l7w`T@ECz(^XyN2Ws@l~WpX7w-d
zM=x?rZ%5r=ceU!Yyr0)D<~L(;>+*8tyJgp(k+7M)thp$*z>-Fyj)mCiL@Ney0T)@c
zf$crHjkWMs&%#oADN9(UgZc)8wgT6vG+xxIMMpTU$EcqQF}emK)_hEdcb7gL4jaLW
zocGo?H4(Xg8>r^J3I>2bSUz-&r~d_QapizGI}JWA+1O4s;2V;)F6rltS|64)(!xm&
zo#|8O+&<zB4?oJNStosmX2a@rNtnq^P3&Juz#-6u!d3Z7KcsQzLMtr!>QDtFF;MIp
zQX7zMMOJaRG*c3hf?a&bf?g2Ad^3W76V-;+j9SNr<<>D;j*l)F)(ZO{<5?~|iC&40
zxbs>}xz6ZYjQXmJQ^$%hd~VnGEV9UqWq9o}R#Bap0&E+xB?I-50i}++uBROV=cUx-
zSa^42!_e-%9U0wqZ17nBQ#D6Ps7cI3ee1;rZAk;>Ym2L|;mtffLb2g=*4>n2msxLk
zXUu5EcLk1m8Q{WkLf@MOwse{)^L#{fPM9?z($P@`^&`Z1pCNXjI!U->^Sc|)>0`s)
zY=~oIDD3-08((pkIQe1Zxdyxhd;b2{2blRCsoJrrIefTB=BW5|>TC7p_%1F~H{PqW
z(2La3_zwDN^22IVJo6NyN~9qNjU9NKwmDSwOM{i7R?VPIMnesaF7k+Y`zU&lYga7S
zV~zun(3zQc;<QgU&sD!Mxs{wTv65XHFyR(UcpN*Vk9T0coANHPMr!YHfx>xdX`Zcg
z73Vc4vBuTgw2Os#kOzfu+g?rou?G}B@B|@U=ZCZxi8RewoA^7Fw*FYjb$rr~3qr#Z
zz^}FDb5+-UScH-pl?~ebe(C*vW#-AXi!Yu0hOdx!uJ@e$lh&rutH0e#V`B%?_Xd|V
zE}L5rDHX<ykQ~^wH;*48W76PNqh$0V@RE0*D)uEN^ndnC-#c_a2PVGdI{so_GSaD8
z)|dJGOGN~Ti869a{7qy%SO;Z_h06gvyn{DD9uBq>0!HVtWWl}IZ8H(idco6)Bi*Ar
zcI8fWY)ue++LNlffW)Ov=(&H~$DvR(BxCL4kj}bCTkrvHDp3FLr;{+^FE@V*O28c{
zx%_IU=KHHNS|HnqkYHeC?eK>^J&oVFX}~w(>Yo-?rb^t1!xcCZMR`T>n>Onti@%wX
zjM$*50)LIb#J1k@nF;y*((Db|HV(ME+q3i>xif=*5g<mL=xXF+DtqxGNVt|rv5L&+
z@e1K1jN6K*>{LaNl(_nk)K2cX*$Byw)TxPfKru1)4#YnMTFrd1=haEHvi>S?)JBxH
zl$!ek-;3hdf`GOw0nA$Up*)~?=d&j5{mRXsR~lEeG(UTruhi71j`Mt#c8{*zn#qWx
zc<NgC4sqXmd3m=bj#0t5^*aj+cNmfBn{RgMvg$F{7pZ9PPt?|K%}g8i3$6(K>O%WB
z%}5u%yFjX;L)KQl)S4|Ny2BM*<#n_slz;~)p?8rf5i{+rKdi-`DDjCn!P%yzJ+R_j
z=DELx>-~Kjz8x}ir)B7SQw_g%IBWmpIduVX@rJW$uhcw^1aLJd4HLsQTVpadAxSR6
zTJ>=%uGDjq?|}UYzR&YcV6>?ohVQto=9LDx;~jbh7L|t#1OBhca@-gR;Bf!K)E?~&
zurZ@&!sS!+b@1E3Ca}aN!s>%ZQ7Z@aGvu8Qx;?*|kO#m|26LUu?Qpq`gePGQfr6Y4
zzs|QhU(KU?SZt-VlO%z~P=mg%G$2ovjNmHbvkbL}S%t`_Hjoiiq~zTW2tqHMO~8T~
z-<wN+TSuI29scWHo2Se>P%fvxH|g+jfN%CLtBkfA@8scZ(q4}N*J{AwS{<R5X)L&n
zceQ75MM)Fdn7t-ARv)Snuuv(i3Q_<4HHfvgqX?Y5#}@Ho&*$jM>)7+&tg4-ah@vBg
z!M-E$Q#1PwlW`MJWU7K)O5m`Yjd4|!Xf)HWQcCXMa#2yNh`rMIw6bB2T}SNTK2Kj`
z-aHmB(kNhmL$h6>jBkodV^_AWif@!>UP<yfbp`>bM9!-ZZQM1fb8(^E%N;IGLz(5I
zR_tt@Zp`KOtP`-Xsd*gZNS|cA{T$Jm8$RV-jXo2rzV0l(DB8=r+Md}KlEL@i+kfm^
zF={q&)U>_x_ps$a&JdQZnSWFO4=E=L6s#HhuEJFToFGzrEfroyl+htb;jdVG{(MAA
zSl{{gB*7bqV)7xws|+hjGD-8pwX#Kxd?z4m&R|78&a~@2ho6%gM7oPVd%fCPU+<F?
zr9j}nxp1OB_YSQ-BmQZv2)j-~8&eG7a}AFd$`s{)q~lHX{ZxM(d6!0$0UjDuy(e|~
z6B~RP3>It=#on(G{HYHzJw6oOuOGd?$!}?KQ#C2gU|&x8?S$d3&$N?9gAd_Rhdg@l
zr69|vu;SfdO)-+9JK1{KncV~h;!-mp2&UKt;k-6lu>k$f`ElaGGf(v-*QuA(Zv8Ht
zo^gY_yqM1JlWW%XZX7L4wTmSrmth4?$e~>qbB<djY1l@x42?tS@wDH(Vk(~(TDBn`
zYj$oV8X9)eAoUmv+FWg7N5!D3QFOX7lgcR?Ohthryr0Rwb_t)gWb*Vl)3v2hx+Tm~
zC^Q=%1jd}708{@hi8Qj<fk#Lw!hME;+fEe&=*)Y&S3Vakp$i^Tlw`QccCw(7y%MgT
z)O}|xe|VXoqn^$*hy3%RaaU|oNDDtem7aWRgizyKIj;N;&X3~L)M8tb2RA>+QY*d<
zgYs;o$4d#GB>h}Q_J|l*n-K~q-_QBf;meh?^sVAO{(*lHnbx|M1AUTUw5e^KSWR8o
zl4)O*$K=%bMekpq>ijpEE_;9-tj7phrYwTLh4hJP$B$YhF0!s^Rr-!sKI$h)U*6zO
zD@ve{yrjeRXMm6x^WvA>&f0}Aq7tN*=Sw4y8?-<PZD*ch$7lxOhX4D;siWR-p)3p=
zW<lToJv!P*+YZ;Mo%6_2DDlIU@T)n`Z>Cej<{fi4KT_2nLFmXZ&>@@e<$`L>8a!zI
zbBiu*5u8-f`(<Ii&)rD?b#?99JJJg&rA~`I2kS@%>KWQ65!s@dWR{Ty+UDCaTFrcj
zdqe45mL1@QIYwA_<y$~+cHGa)m5w-@iw{xycCS<anh=Xgn|wOFv+36hn|{s^@P#-~
zXw4hEQjBabTKkwP@0vS7Fbh1Qy?>DyzxuRKm{l7pk%-arRYoOxw{cFj7sUHC`UFj7
zrn&|7rzFSY9|ycbi(exgeWm8I+M_jnS5<TQj?p>C{l|Xi|BodPt0MtXC&D{sD4Me9
z%wu{@Nex|`6m$-zO<>})<xcZajwv>Zf2O+c2^DbzZXK#n`!Kn~lwV5CY@9WXzB{4h
zm3BTyN!z0ol0RjC@gpnW?c%4O_9&(bNUT_xs&!dD9VHsV|8i~_xLlT_j}k+l9EN<!
zNu6+eA>QdJ(e|x4z=DsZJgvnu{q@O2S$gRWk*x&vR(9!>J_-t9FA?qe+GTcRsp*Rs
zQn4%%f9MfnQUfQ@8%<rMWvP93;4Q!RMK1d?%UauYAJ-Fg5(X23wa6aMI3L7~7qA_N
zA4(W<InD%eANww?mQBf;yhBrfkcZA{|E(KgT#_;7B2mkM6V*l~c*7(=>#2rt8v^i#
za|Mz?bAg=?yN@1Jm)~o^gqo^ivOS3J9>?f5{4Q492~Zr^>xZjp4qVXnyzUIbLPvh}
z-Fyp}z1+K4G13q!7ny`B{_2kZ(<=L6=$<jXc!c*aY&aMCMG}w?p&=-Bb8LLGaQXF#
zE~llAnxcAv&UU$}5L#N?dv6Azz6Y?nqbO%N&C_gQ;*bAhU6T(H;C4D3`?XJs2MpOp
zhoWOZt_pC`*FnE^j%EF%-l^&>21N(;=Y(VPiLX+A20SInHir1@SbBII{Gpz&i3V}b
z`0wy$ay6aJS)xU;JHG~8=yup8fzO6OdC0v)?Ilf2v8jSKaq&^tql1$o`gZGO;WbF)
zDxP_-Nv0>`EWWW9rmx2`aYYmAdJUqFYE->9%{2fW);+5}J9)4;2O*~I7s%v^dF?Y4
zKdhZ6d_N6owKXog!oSn`c^QYV*PGp@!PuH>D!n2-2OR+ZVK9tQtCP}2r?6ibA7yo4
zdJbJ!WWi*HHJj)zJ@yJACpCWPD1R5)rf60Cq3vI+&k#PB-+ys>tejsTu09h-p$1yH
zYXkGuLVP1|DO8J2Y^(>;x}kDM>gngM|55yJ^_`mHZOB!x-}mW1`2hgyc8m?^;I2V2
zGKVb&7cM@1*D{bB7blHCoby3Ey(hST42O~Mrwk46n)H@1Ho3)&jqRisia#Dvq_(Px
z&pHxhh913o6X>p5LVqA^pOyIGOxPXEB<r@1Wi24|hw|!VKashx9(MQ`6wTw-dkGQW
z_sGF4&9Ih~`?|VMc+WKi%F{<x%=$q189{8{%TRBxRN=Ol-X1OK?XgVb(VgwaT>xc}
zQO=qYosR5M`2uenA^{XAOW~qRVKsAbr3(9!XPg2F;^Qt#<k<n8@xDW&eDjd0QX24@
zOdxhk1L_Td=;aRf4x~&UJxzbNE<6xs9sULMm$j3yJ0OU=2$x@K|G_=uym390Le~YQ
z4{JUCz@@C_j*nU|>>LIeD=s0oU3)b~yGk|UD7lVI0J^_^`=ak|M1&-%!i*1j`LRWt
zkAFm>{;926>(4%ir{}oe4abfYqZ*du#Xw`@G)-NolQR316uubM!>WUp&Bwz}ZiqVH
z=C6}~7j48Fe}6!M+{;)rvv3tb!Zm=RS{Ls`E39K9D*&A}y9m>5wD(Q=W=sapjJ1qw
zszu-qed#hi^yXsDz!;VZC!zGo+$Jd>=Kc5bmLQj4nF0NjLm-|cOpy*2qnPYU+jO*Q
zDYaj}H0Y}yIBSqo4xRYWNz^TKZwWYxr{^toip$#x1QUT@OX`~}FVj6osMSuCV9tP2
z51xrE&rJp{0IT;D>F+kcF23t)%w>DuJcm)51?WZm$r2U0S!<Y@>HmgwGagYzOF(-j
zI~39G_h#F_Uu?<q)GXLe|DBL{R*D;f$};63FL8vuq05|P6A@(b%pZYKLlI;5Lfu-N
zuhR@A2a{nUKzRL0S;!BxdZ#H8d<ZoV9q6s|d9EcPWi9VrdfH`4pBl3fbB;_NPH3pE
zhmiRm{;6i|G>KS?ILGW7)xS5t-KTHQb-jKC|E^v=SeiH*GU4M{OP-;S8^ZN>2}}3>
zB=zw;gdNHx6@K%LfzmVGbFW;gEQzGhd-cdw6klo!IEGGelhhvh9Mt*pC@-YbW8H_i
zc>~wGZmN$Q-y3Frbi9uKJZr|Y5u(3MZ`S}PT%mK9GHR)0!DOLLl`CWGS-3F^;)l4Y
z*_ikAaw{Po(B4o`*Rp+Rv%D`I7|yf$dBFs<;Y=zlvQ6gR;_(rY6!cs8P&xPgaytKU
zz9QPBe?Gft{?pX?zCAY7znt*ry4bPu5In0T$O~SKq!G|a0@@m=yu|eOvti)*x2JkO
zGc=>m--1o)XWjBwG`+Tw<`th-*2aR~%<iqLUUm`Whj0D7?07lSD_wNlkO%89<7r;0
z40!9q00r$mVK2Cn-g`+ehL7I#UzHa1XO#L()grvl73$MBFV-V>OhTzGsYHVbE?}id
z)gb7>wc4h&L&?TzR=gN{`jS^(*8>jNuBNp$$ht$1KNsr{D-j2c)i2tY<0d!u=MrWg
zq1J@@I_JZ6wZCj<f`baBGP$yIG+gPx*#ickvAv<gp0tTU?JAEZ=ksw<3gY8zt|qL4
zPb;d7KdW)gw4qVZNd6jpzL)jm&Q5DU8!wa<QreM?9paALwG7Uyjh+#|?E=+SWc#J$
z4l+fv!f;nHx`E~7(EdjHfIV#xFw(V)uXk*cYq3Yo;|2pz%CF+Ay^bsH;EO>LX&)Jn
z@n1~po92|}KiUU_=Z5fy|6-mFyOx-%&CtC<{S1&P58}8qU4i{N9J-sD=OBuPWscNH
zjeD>B>C<tc*b|EO`Ngy2tb;IG<!5xweV9!d4fBV);t`J>6L57%pv0`MUN~eq>%h|A
zr9<azS3E1OHZ*I#?XvRcVz-&wh4|JOvE(HSuQAnkkXBc!bCQRjrOru`I4_l2v<32#
z;iQo-K1R|tSFgj@8t`RI%p*?P#hP{7Wiw9SngmtNw?cf7<K-emV`hnPswPea`hoJf
z&r+^i<rz{KfL_zXV^Q`Nd-}bvk3_>~oI#qy%zc=*z9x7i)d$tOc0sb^sJV)_)q}S6
z<GW!a86ouzIrZa<<5b$9n$Wl6J&B4(-rU4h6qXKGB$g^ud_-@zv0`INPjop_f83r8
z_Si6^yRqkHQf4OXnC6Z{d%Y@I9|MJP{k2gwz^s*GHNtpDTAMBo;+XfVLgV3T5~L)G
zO+QBLWV*B3rkAqDS9ZnofY8@BXc;%FOyuX%o!QG41yxXP@dsx=EhSUFzNm`|UDlX3
zSVmSr`D{GTRuzSh?=OU!-7|%3@gp~G@z>y!ZT$A_<oT~xMlhdOSK#==ezfV$M>Kxk
z0aOR=d?K+`<7%1ZCH-%0cpVgm?Qqv~qXJEI131m#C8od?Z=T^*BdwR``kW7+E^bQr
z@XW8B*q``Q<-c6kXxKj9y&u@Zxk<vM;?`o0wK*r9u*>zFY&Yy=3rCQoS2D!7oabSq
z$xnqktsewdANWVN$gVeBz+Do@ca{eBarJulwl4X4Ao^J*jzRO&+5Hz_LLmAM-wYDQ
z>j$K^l?dasD3{cRe#(NphatSCIGVNFTwY?5Fq*jq$jo&QSjkJwRnzuX5@vnxC8ogy
zEg->xG8_mP2Bwah0#aVuie3tRx>+XnOAQ<r`x!0z=34CCzK=p#rrwIrvah;nRkot7
zZ<Jex$=A0Jy@vIgVlo1JX!E@I25+h|YuZj0)~dzcPoJ2b4S=TuTadyME_$d?U7?zS
zA-Ng;@|3azpD!S1wVmvtiTba_QVwQm7*XOAF0cL&7LeJub2Ctu9~Ddbt-(a<p#4^D
z+V{U|VZ+P}>p;cw><@h3)lhEDRO<r0uSV<uPxbTx!{1~D(G1s}7HaX`D=`tUj3c$J
zqmR0|P?9*bqn_@Dv(f&KchK}n%LRqvO@^dSii|NPd`o})dKW5WKic-FF{9&I#?{L_
zXEULy;;HJkkL5<i6FmXbqUDC6-xf6vXHz=_DY2R?^{q$_R4*~3QmSyFG5<U;)})nr
z6)+6qtIF`I+3O@k*wCct0Bm~C_S=Q>LS#&&FMP_|?BQYtiSYZ7pSl;i0wj6xN<?%y
zuH_0pvi}Cv2Cv9W0Y&Bc+WEb6K5s2PY;q6-`#QA|DU2Qp59<q^<k_oZ2`~-n&6X>B
z{cJ$=UX>=ob;Vr|QuA-7122*PQNMsQh%2|5fNw*8wCb2}xy|;2-|Nm-Jg~Ae^g4;n
zNG-n5^@?jeS(-b1pu0lA!(TPD6E_}}rZ>Z@JGxey=w)XTvlz4W%)Em5r|w#XpH!o9
z!E7u@EwOYdHlZK<Fj|~JPl6cr7F)LZIZ*vrRL_KgpG{~hpet={8+1EHJFxOq5)KM%
z578S|yQPGjyQ&PUW0xQLNL}>KR2@&#l1tft*DHQ_>t+M|AiryVd;Pz%^x^-<iY))X
z>o)%X!ed{n|4q5j+qdoivg+9XhXxLhMNs3`7YpeALi0yc4RGs@1Q4?G?tYfG%0Ky6
z?63Pvg!*N7_ed|vf8GAd;KSHH%1ooaEjS2xZ+^ymv9f>GzXcs8Sw`Geu*KHoP7D0I
ze1R86ODgdpfB)p)tTvaHtAiguf2}VW7lSKEfpNWcTLRuc@(9@{g$ogMUqMXHc=~W}
zKMnp?w|0aPyZto5CcMws;<hC~n_T`c`6QCt*U3yR!L4%MA9I=v{U<Lsc|yQ%Jab&c
zizf5imfY57%O^|gs&Z(AnD;R%=KChaKeurApU|FJT>Ki*Q{S7W&zQWx5L8KA+&?*X
zKTv8*(2b(LVBFaNi3fF`xM5=d_3Zdhts=5Q5{-CyBsC_j=MU^F{uNvTY*F=TIg*H<
zR^+whx1B)dTM;N0>i?9Cj}m;?HCt&4N0+x?E8f=y?&Tzg(ckcc!MDBhL&hm59M1#f
zQQOE;$-|4SgN-c`zKpxsv)0!qK6fiWz&-wZ7s9g<lk_f^Ypt7~flOtRb&~5}H)<tF
z1W_{5bvX2D2oZG26;N}lJN!-=O@}G|T_61?aY}~Oe08hpRh8(zWtiOG_p+a&>4FWE
z8Ei(z6+MQ>KCIi^enkV<jTqSpW-alqDg4RElkJ}Ow4DQTA-NG-*R79Hy|+y+|JH`S
xju|2QownQlo0X)`<ID$EBe`FZh-b2hA!!o_5FZI|LT+0s%fFSYmNEbGKLGtFzA^v+

literal 0
HcmV?d00001

diff --git a/apps/browser/src/images/at-risk-password-carousel/review_at-risk_logins.dark.png b/apps/browser/src/images/at-risk-password-carousel/review_at-risk_logins.dark.png
new file mode 100644
index 0000000000000000000000000000000000000000..47e1d40bd4e9c6815a3326ef8e682422733ce38f
GIT binary patch
literal 28260
zcmdSBWmFwOw=KGXAVEV2u0cX@f;&kdxFoo<f#B|LA-KCk2=4Cg!QEX0Y}|Eod*?gn
z$9v=cx$liP#(BRs-Bn#(UA1b}T64}K_^X^a1}YIM2n52Aln_+_fe^qT5WFA?5^zWB
zikKG!vSN@F{iNgqceH}$p>&o0{5<yk-3^*=6!D9os9#^vvee4K=9Z0@b+|T5P^d<)
zkjj!}YmKIMd~3r>?qT_n%CuAI@tD45b2DDg%9^$2kK=3jX{lnnLYnt*pBt!sUwl5k
zc^v!O6CA4-GyF4|{coD9pyx2v+vMT2MxVdwV}Bp++^A8dq^0ef-KK;%lcw9hBE?D>
zex*l>MY0c%Y=j3o3c}nXyqpda4;$)Og^TvoDZf#@;zTyzrgZ)OgTuk`GItq*J%)^I
zc<T4B_Hmu_IQ#8<@6XC0gd|}XLSa{OTxM7^F9)c`-nqs?nI|dmzJVCtCqLA`V1X47
zT>sg}v3}NWP{m~M!Hw5Z;Tz{Z{e5QY4=V(%?nD!16FG_S%v9u@l|>2LA6p_kA-MlM
zMTC{&6TM+lJEBYaaHF`TJ;OiCUAr^R{+>8oe(D9Rn3ZTmCUanTAoe;TPdCyj_Zvb|
z<Er#FHXN+*C&bUdzak3mFnx02=3i^C3bBm-?#|StTQA~2hNA`8Bq4A+jNr#&!s>&6
zr^I?lhW<dd*JAx?@XPx&@#nwpH@t5=k%=MK6GhwPhqU#jFaK+tK=qrETt<Ft?!GFN
z1-+i4t$J?m+rJV~Y5RckzcDE(DMnA-HfWn4pF7rICIX^JvE#p2IKFu9Eb;mF1RG4B
zB*L;E$+#6zue)Ec8X$eW22>*?*0J@D)_;Q?^fJ;#2<(;f^y*(JOZOZ*Z}7DU>>{Z3
z8oDh{GXVDf&p7JSn|`H_iJ>;lf|Y{w84Ec~ZN5tV=ergCGCKVwHwhVWVPzjJFr=(v
zV1I#1K7tTnzs0XQU_Tv{FIZu}6)14%uwTZ{|0xdrA6UGJgMV=sW4L%p$VTT}m6Mw*
zZKja|^!a8F0*Sq@Q!zE;qcSEQlTcO72l=GCqDt*zh76g^)3-ac5w-w>u*svXOIzC?
z@u~+jp8$cMui0leG}^bwzTY|6Bm=D0U!|AhXFA_E1`wFLOp1=(c!aAP9|V%nx|g0`
zu-^?CgRuJ%faZhE18i;?bb%L3jiKem55ECb;HbV})xP+03rt~W4ZqkJ4yc1!3%f(@
z0+@`?6Bh`i!-ycKjayJ&`wabiMm)d{zB<rXS;-=RoYrqaT!v<CKx<)!8UyHXAbuMU
z(9jT-4;;v+QZ}V$^%v-{^9+uWok0_*)7M3T`LCtEQw(4+WK7p^z@8Wp0t1C0uyX_!
zcx6Q!=mu*-Tbs~-8iO1hz5(7?SyNw+3Yz!bLYTk1_zNs1Fr#d^@e9yl#~Iw=bg%|s
z$^=8|@C2Y#paWAG#}^|?oxq@(<U=4i#i2B4KsRs|UtzU6`t;U<K<n^sUSHi0gFrso
z4U|6n*0s0&fTg{dx<Dw>1s(QqKKSfwuzn^0flj9`;AcY+Du^>1BrHd;t7pKwB@3Gu
zjR#r42eRHRVZH?F|55zP=KNLb9TStbQNn1#k1l<nH^CzH`MeINAj?3I#ZWxlu)N=V
zT;W}eu@)P9bzuk`Xq^rCRHOOH;6M3tB-};1zyfmGJpjR6G015%<t@p7hUEW0_WeJ2
z>HT-tZeMJkx%5D;BxB|n$hL%^_MZ7*qa5AY`H7H(Aj<dC*5n!s0)iXiE75m)2uT49
znJm31I;$HUFt0?xA?SU**H}&PceL&Mg*nk5H+Odw18j)~&@Prv+xB;QEud1zms4sQ
zNh!0GJ6CVr6Mnrg3a*5osNjKt!hd@U1yYNcvJ6YBprF_*2;R?xS8&5yk})+k4(wSl
zw-%JX{pN`4Leg24cBbN$R;Gl97^=MV7=;I5PawPrcnLF&09)qK;dXGD9L=I#fnZ?`
z3C!=#PTHTwO*>qqk(}6Bf~N2_hBAS>piS|yftPwGc7~uS1=<ZX;7$dyz4knRHUuXf
z0-to9`Yu1`C9L9ugq&nN^)6cji%&8F_rG-ynh(jy&d<w}{%x-enp#!p0$d3QEYFv$
z#h@2F%n4^va24eU^CCX!`x+IZ%qb1;e6V4D0Q4|*x+5*OZ0`(sl~S({%CNDs2@oy&
z(Majz+NuNlly&rAEkye-pzMG9gbkjxf<E3i67r6kr?3CEur#Uxi0mIO(SBO|MJ(6@
z#^?7QF(yEb7!)vY=|e?B11A1`fk1E+`0vv7C!T2k#7YgUE{}W+_u1%<HtSC+TjvSb
zdP)mN1(q@hq(+GyN*B!SL=8tx15A=s2=zk?8_)a6xiwlr!B#d_RtjJOSF5V3aw`fX
z@R&=Yy1Mi)E~={7F5LaU^uqr&D=3extK+(`YiQCSB0AVU-7s6IcaEg6b@}J4{S3bw
zN&ilX;g?)x_bwYw`=FgClR@o|co&l#%}hv0`1*0^1%`gQw)W(*hfa#7MtJ+F@pez4
z+rmvC!sO)SJHW)eI2@QX+dh}IS`}i~4breP3_ZGOikDAk?#CS%FzseSi1`sml{q-I
ztJq>_7^Y|qtL=uzo;ZHC)_A5KuGOm^g#SvA;9JzBiGI~VA}U=IiZ`5impBrCcQI&a
zw)#C73Bw@J+-xUY(0Y&@i!25T^#Vq$5|^L}Plb`KJ@1pbwQ}rXA)mR&s@aP&Oka20
zoqXwqVG?x?>ky^kA$F1E^S}?S)bQ|0-PE5!sVUrF5_E378g~b8B#(1Qf^+-w?9T&*
z$>I{d8x@I&#{k<3V#d(nF4dtbR(&p1-#<q#8ziNDsr6D0LERs_Z?-JOTxE#p0Al!X
zojEkL#GtK>OXb5GmWnWcC~Y)2X}-o1ir=a_si4>^wIbMhexD)yNBX&1L~e!?1q5o~
z$@(#uS30vRPLZV2qr#ld%uvQch^a3O-FRn91$43DgU`-)<AIP!kB>qg-LHe|p-{NH
zqm$LBOjYP-qA>+*1Q3|AruP(zOvZ(5_NwL8%hHh2)<O@SAi=xV{vGc21v;zGAbSFC
zL{{ysT+0CN^7|xSnQl2Z_lIrTvFH4jss~P6`phxfJ4FAO^mHmZy22QJTV?E%gOiik
z(FjaaD<Rsy;nL2|^&lT&(;3L@l2xLz*o-u?iG_=qa3>m0)py&hWlxAlHK#2kVdQ*^
z{HY@?Zx87OYoM((XlP_4TD~0mld-Hp>+tZXTYP7M+|o&jlW_(`qgu*XTE)p?ZcJ};
zlq)^DNs;!YK1eIKpg^tdDZPKBXl_?(>p7D}MOxFn9E87ht-Mn;+hD?ZXs+AZk89rj
zn#sqN-Ts^m8(CV;)(h8Ql%{%{rTzX(GN(bxy!L9`Kvlt}po05j97nn(UNggc#u#a%
zL`jX5R{9VEIzcMM^Ss@m^>v?``f4V4(BG+qZf~|O)tiq^CGM9PckS&3@fkYTTRpu?
znvSz2znL5D5=xr(W9>FwN=eE~acLn(N7166L7~;eW$j{6iz8ziP8#(zN<l%{vNpTu
z#>V-jK=Yomko@>RmobF9ebW`fp6Pb)c2Y9yYv0XUcYzv)ie|Wnn%ccY%^=O&P;01{
z3l<B7Moqfo90bE|tCoFdi(FH$j*_f|k3#MXFn_ej74lw(-BtJUDnzsyWVS@w<xcy{
zyfNEXgPPXlc+C@oi2*D;k!2H8t$PJO;cR}7t<<RqJsaz?GQ7F*hH&yO$(VEMXP0J=
zEjNKxY!gbL)8V^w4mifNlz_1+BFyKjdTXh8+#+l`*bgyBZ-38JYBkJ!m1o{oa}+h0
zXm4m_D1FiRjtdca{k_KB<Y}$t-<NmA;%mQlUVX?vsnl)JpzXceuey&Vx3QoJ1MRZP
zp@TCY_X0;gTv&bM%AbB89Ngl$S1{ihmRwEE4#&0U#Evlr_>;-$>Gz=Z7jruGO2^Mb
zfrfMD80S|fyw#|1e<z)KzFg$}p%rrTQ%9VFBbAFWfeU->+bh)ch;(;5NZe~FRC(TQ
zw}o6D?=p2T7uVw9d$B()RX#@xL}7eKr*Kpr$p*X6hV7uUU)?$mts7Lj&jEKCKRvNK
z7##*m2+s>6S#atnuPk!erKvOC?a1LZh=0<{f^7yux_oABwL=UyW!~{0E`n0)B6QU2
z&m2wJS3~bJh6e{<&*Q)iQ@SeJ?Vx2oKX)}*&2*X-x)o~>rH)Fqq?-ybxL=dAMj8t=
zO`PFF5Ag;Df^{Est&ZRLx__^BCI+QW$tE~vvaEm`p)&cPvz(Jo4EZDWwb**EV@zMc
zi8TZ4mG7?S+mc&4C$|H9u9xm(=+BMc-J(5g_BnTvMv{{W_5C9vm;pbalb8rK4ooxm
za&|agd%n_@(CeK3;O!)JOns-z?XA%EJS<O5HpxDJG9;^@klsE<4!UWw8c<NLy_Ywf
znibid7U{rr$gE(B=d3as895(h;5S@b6@+)!LkUE57%Pb%5+ay&bZ$L&cZG~cZwS}d
z)D1wnu~KwT4h~{|cfm_ahmIJ`u3t@+3dfQ|zlR<^h{W4^Q;Gk@!`)4_jN77PrjNRx
z3b!jN`&7c!`aQ2h&;dhjr7#u<6Kgiep9d^%?u*5B@jK)&mAHq(=VW3bWsM3ti*2%Q
zZij-~loJ6qU*SS4>BMFr@<P|q73Jl63~|>Ha(8#q?J>HCx1}Dp0W`bRU)pD9olFJX
zXGsv(JdRsxoSh_8jq5M3uMTtujLgAOQdQe>gV8N51G{{s`%|bi>;?tDxlFY7y}ho8
z@4T0w;(YwgV!~Whar=D}8)_G{3_Bg2B9p7DZvp=teteT_snfKJR6(qbl~)=RS=y{&
zrQuoqcpI4d;`$RPv@&wprFC2Or8jF&u%baE#!S()H{mDKo0A)YPi6rvp0`11!fW(6
z-=Z>Ur$W(o4jYYlogSwf=7jAI8-7YJF$q6*LbipyudCDw^P5xaIPvw!SwT)YIJ*f<
z&jm`yJbDr7$cGY|*tMK0OW$=p^r{=h2@ZYVl6;8EOr%xS{f2#g)!ghJ_S(W_D%OFg
z?__PBd*d`$F4L3^+2SWoTbxRN6V-b??>&S$Dd@C7Wz357VUUcmcr(ang;BGutHjIF
z?JNr9ln23aB>Jt=2_}D0L7>t2h=7eTYSU%?fQ*dP-Dc(HmZIgo60e^-JB#P*&cU6D
z1F9hQz6vc2tZ43_CotGQ^26&P7)Xy}LSxCqpBT%@%M0SBle|Yp>WPSn5!n48reBEN
zp#$AvHZ@Il$z^_>PkfN$vgqK;59GM>BUL*LBL{PJ#!k{Lj46q*fFQ@jEakf)b*k<Z
zr|?y{_O4iqdso_@g8GYf?GsYyg>z<cOnQw{Q-n&V15;9)bA4Nd`YUgs=Z*KkHtyu~
zz1{TGtu-c<UovHM@gk?Xf<jk-OkPwtR!^z3tkEvo;`xMBAF-6OuC`7}#p&^yQpACS
zlQYHq9@HUsNnO`gIdxunp`JWocX6(uUj5sF$01xS(pq}w+k%!l)fQdKy;c6GOFf$L
zxoRg6=Fq_nzccw17G1p7F7a-&=q9k;XxQvT)1^_SCq5KEB;L#nllW7K{JPft{Y*OF
zTM(F*&%;2kmooeJX`PxRgYsC3E@gc=Jr)BsuB>b#%Nm<*#+r-Yo1JRmcLAS)uQL^?
zL55dDe}j+zr)KkWa?o_#AC1S7xCE|BgVb+qBa?b08k~jvxT|37`Pk#9FIQ;5)T;4Z
zN-GE^*A5Qm(p1^5C>s@^<}d{|VUBoDn1*TGq2>r@ca~b<X}=A&S{lvLH8VrRKNCmO
zN7r)f?I}{@`vL8JuGc<1@P96e<4qinsp8FjU5Lfls8ILV&s7;xhB%cVH|xh6snRCL
zJ&gvM56@^(nX6Od@(`JG6?B>Vfvr2GQYEWdEN<zmW&7ly-fVVk1D*<5xG&dwo2gqb
zy|~z&T7!Nwabs~+sj~RW@&~FKx|W8JIA!kEO6FtY-=5=)rvbD{PT#?vmZ8C3GdD`_
zO&6x4Ak3`tso<^t;RAfod~}`7ksx?wvHVI`U0`#JPiABFs<~gwTcvR;$2MJ6T&bHQ
zZ2$fPHJ9hwFdaia#sm@y_*+8SVeCRKJGDZyj;rh_heq=+XG&nP#OWS+C{rqHseuK!
zXIYMCq||17xkr34D_BU=ewX9Kvw)m(H>8hvO=KT7Mi`h0C!7i_1IDZ{tk*u2IsuW;
zT2Og%H$NL;RrDVYAJbcUMtZy+e5RmpT;_e3L9~cY#JIVGiQY_dXAte?oqI?b8!bt|
z(BF%}%gxV)g|%K4KgwwMoGvTWv4=*|Ewu6^+{Bt(T3epBzUbntaA@9G@_RPv+&>g3
zz*p4s+7Av#^6jpm5+yy>q~Px7jX?*TaW4X9!R8G53&V#MbLIQ%k+{<N(!Gy#yO~RT
z_ru_N$Q9B;9o6G=qWPX?Q^Qw!=2SKhO|t@;vfhT)sjY|+U02Tm8-f|gJ-Hv*R!lEq
z-_b5%<QTU{b3DI%%3NrU^7OOIkd(dHaspYl(DhgNNSf)b*(-P4i@Y#3KkkXG&;XHI
zk&_jFG=^;(&eWiO9OGZ#RFslfqWMl|^?27d(=dLfri@BnZ4jy3+!<m&X_=ZzYQZOE
zW?Y*4`_rR=C=|YY`6A+Oscth_qDN72pKBS3)3`>PQOwpYPwil~DdNmbfNAABXtYb<
zn?H^o2qE+ITs9zDG`8qOL=YW*NKVmP?I+5f%%2g&NXlNxAbj!EU+wr_Yt?h;5&JFY
ztrKTWnfoQD{mPUmdHHjlSS{z}N4!#<)wUwW?ViDorRk8}ywX|3x1L^Cf+Y|0Z`%M<
z;qrzzPhS;s5KY@%Ukaqc0<%j4kPU5$VE%H|!CcI*@fz2MZ^<Zvs}d27?^#xsE4Y=w
zs5zfx=JGwE8`{}A;>E(92%=)uT?IC#JCbwt;oR><ixso|%Rk-|TvqP6HB5X?3MjWB
zv!<Rcqvx(iL+Kx{gBN0dubB&#0c?lsBPg^=GS-e-AzzNSoKkVlMuSp0N>~|4L@BlT
z6`fa8oc22sI7`*SRC|LHI2i)DT(2V=)(n)KACH_F!s+9XayJY(J}1>71(=CXgK<dO
zF0bp31WZ-*s@Obt4banO3+nUzKKB))?0>jrkY3c^Z<o#Oblk`Fr+W9%Ol=B`Ke(7W
zDE_m2Bwl>v`Xff^;^%_?%dcM%t-Gfl!b5V-S{$x*Ug7z5CkjP25!TgN*45tldn{|f
zO`B=+q#B8fTvc9FnUr1mO|ZU(V;lrBP|7E4-nGeha`wA2+Xy0dRmn{VAe(m>V9Wdx
z!Y!S+=i^4v(^Z|y9N#Y|V`;w$rZEfj@<(r17kzxPN`157laNwB$_qGutb2hJ)|YjV
zR(G;5WC;D3t6Vy=WZqZu<F34Uqwq;gjnB68gVl#3f8YATBd;b*h6d%Y?c@aSId2g$
zc_$3Um!{~~*w@t9NRn!DtL@^(2?^Rh3q`_3@>iVa3Fm)`v4nq(toSP1LcwV}m9);;
zA!zFI@>0tBrymX*`)}1vWKf6HVx6Hf!8w-iSC!1TKvZ2XqOb7c>*ftFIn}=f>fa`3
znZzALtje$7JOaaOU?tRgA*xniIB2XrpZ?~tmTAeH`c0`m;%Y`f<JTV|f7Qmay|mj;
z@*|guEa5K&hlwg~seHa9M`T56eOJUe0^8VprNoW=a0!3{vIQF$D)YpB--XgO2ntLN
z{BfdBo&s0S_aD3rb!II+MEYL0h?VkqKg#_+d-vH24b^y2ia>@z#fwO)54Gvac=hSa
zok_VYcyHQ=XZ50B4GX<mx-7^-4K*zsujl>69i_Katf!7Gk!PBa_4ocG`}M6Cpbj$)
z$6#@ksamP62?Mma_-MOM#{=T-lf$z}u^VD*3NfD8_f+Wwgle|vcTcw0@(k=nroR2H
z7vX1_;<@Gzk2u&O{-O=|fCV5SA@vaJu}VrxW9LuQT16i_bNT)z1UL+FWZhc?wQpYA
z=0hyIUi~<d4KG*Gq{S<AOH5>cqc6M5WJ10|dLA9Hsy80WTTh|YeqB`&wbspskFyi&
zQKfH32RXfi$l=xEt}d@7-G0JZNLiJo@!_soOCM5F37%hRwYD-cBZ7DoMLe~Y`r{*W
zoAL~A+b*+_2=g&a2+Ua+`A_RX_Y7aLR%%(do0u@7e7pG^6!a_BQB#C=g9VQ3M(5=h
zrf(EQ1Rt{ch=DKR_@0xWD|X55>KfZ?ih6zl7&ZXfg7n7erPos^NM$}~IQB(+KJwqu
z)y31=nE3dLz@{W87K>ank=ui0OxVqDA;2^uYwR?+)Zdr*1EdnU+!xKz<j`aLuYk%=
z3;R@GF7xZ^?mfT<%`Pn9o;6(U_abg`u;+=l1+O(;Jo+Ppc&0WE%;*@j->ZyYH!SU}
zfU>j4XkT~Klv;iJ=rg_)?ihu}8KEuShm4tqlGBf04$2$z#~em!@m`T;bfL1?A!i_`
zr=CIdmm-C)f^fP!aqa7Tx3nBxg8s2g`axhAE*t&at-|&2+BPMbJx?-caVeeKiW~%*
z83${l{YLWZ7)j)$cp-O$me~H<@xkT`{k38u0z&3u&DGJj?nL@j-1ZF|x3w)<auOmD
zZzZ92tGOhD9fbHLmtO%wyWN3UFE>L`)#B0x=NO~uffT{C*Wa#aln~Nk6!&JRBsu!I
z?%;6YPbM)4boi^SZPj9}%Is^`?veO*7JneUm0LTcy=s2>4Ud)vCz@3zF$2mMX&Z@B
z;VI7DE60l+mvM^o`KIE4IWyClgXS^i<SCRVJylKYe&TQC965+(v{U^xrjXmWw5%m{
zPM2XQE0w<@rO8>$J2oSMKDBCla!itAmvc+P5_z6pPSsYH&6h!D&#A}&21vVDZ(V*@
zSu&k+Ahr_`O9dZ`gn*&9q11KBr`zTT4Jx->vi-c7<uSWQ%wX<6T2!P@;puhRcp1pz
znZfB{IzBlz5}pwrid11UXNY(#m{;G-WrCr_`UDlD0^PHyD8WC)H+BaWBc6Q$e1A44
z&I7X50H>;`K${R503aDo{J8leDwD&90`ei<dn2mNU;Q3T?OI~#;`SV5mRct3X0b9;
zWfzwqnx0TVdkut@Y?SkRmIBQ)DRtF?pOou38JJ(XmWU|69-<*jU}h#ddo<ZOFqZf1
zDG6Hf91^(To&KxFptPfhM1?WzOLcx#8IITWgS@#-=>DQ|w|x9)sagD$ZViQ)`qYB`
z<jNFPAzk#*QG9$d9l55L-{V^5bN&266_zfGt0HCQ;{4JaZNL01fS<|bY(Q+T-WDba
zi<kU151kdfzyG?!0A_sh19tU$FM~i=QVbowT9#=cP3Q);%EXnqTc&S+ahC0g@4E{~
z=M-Y?WDcaFghaJGdz(Fc3k6fcO$PUZIqh6vTHi&bPH9%_6)QsN(rpu=*Hh#dk%Y3f
zDR3UXCo}!7JmDGNzNO~X{hk4p#{vRw#e2xfNg|cFxgn*{V-^kDOdr)g8d~09pml@X
zyU&{Jj<IF{(s~fTc1WT@^<8f%Eu#VQ(yic1(~Yv6c1EP%LGN}l^JQ(la*3(QH27_I
zKQD)w4nnX>&*NM1{v+YD*rEz9p9ro}6tiEbfk^bFLT1J5YNh`70&C4)H$g?YLQYTW
z-UMhK=>c75R?<4;rJoOs=2=>6Wd9{EJYP90+1l%Fo_bfj-z6u{9=Va14aCw8c<MHF
z3-krg-vrXbfjS0s7KI$nn<h6a_n|ls81g5?&QSs06hC#=ieewYL`05e>n8n0{RJZQ
zm$we#%1?xleCl$}Zt(u;nZVgH+}*r3OKN`(oWhbYXAYt;5{80-tlTBCQRyLK!1zaK
zfBD!q@RB|w)9<Ho6#+yVd*t3uHn!?sD>k;touxH3+P0Tv`(|c*w9l74?Go8%6PONC
zTZt!4vgi47B`4ZzU@Yj!bAo*d90G`ExxW3P0X=V&Lw<VeizX&Q{?(m7f9;r*(M~Uq
zilC7pW)qJKS6P2Se@-g%gJ}h+IYxqxa7FDnxlMQ0Ok2mCBtoSMw8ZOi%(~?hksL`}
zx#tyGWp>2%yqr%B@vKkpM{)6d5+OSoW~NLgoajVu_2c#v=DV?HH+7wbr=}ih1%((b
z_bYw%rvY4i<#_jpqi%p)_F*s~-o$Trh-@6NE#c-Q3-{K@<oVSoiXbjfWMiP-c)5aV
z#Dl<kd3(hN4N<4YK|4C-Grf}5eCz#)u!wc^1ITk1o_FWHmr};+iJpDxBJZCD8e_Mw
zHD~{{dbg?UYMZV6(9P|HOg7qY`<8or61rJX#$S1Tx3u={7zxziSNHbdV??cO%6ecZ
zxBlnvNk@^sM?Y0C(SrkEA-kt%dW(`Is2YtP{NenZ#c805xI9sk7r#!T&2^p0^>M&>
zWb7h;cc5QonPN_-mS_8@#duZgVshL@jQ-g@Ux}QT9wVQa1}{%8o$^HUmQ3C5=pna&
zLicx8<(ZaNk&95K{5cvb4L`qlRn<{5m0*+vA3xvr<-VJ#nE;iKqUo*MnSbVBY5fZJ
z96iBrkz(~lGF}~N@WQb37)_1;I9<)tw?J<I)&sDQjgjF2cTo~XUPFD6w<S?&X^e>@
ztrc$Z+=d|}9>p4?oSEE9xHrebV9Y|7vB$=kXfn4d1r?P%CB`IL^81cjyY8#GKg;LR
z)Yj+Uw;+Ul&**$P`P@}Hn?OtIx2vvV4b9UiKIAcD%a4-kchOjX9)|`;qHib8b>p9@
z#LXf?;}sMYcP3p=qL-KHVq(nJZjhr)F4uaNmj`0FIdw<5GuiX|;N^0N7rY*EGGo-I
zXeD<>=TFvt?lqsKnC|w+eJ|IlW!3enf0p@U8b&mFe1B<Z6m<45_FU*FbK3Tha2FH5
z$Se=N*qXF@Jntw2m@;aBk<j1UF60B)g5H<}u5*Ie7=fzol$+50+sE-}B0`ckK!8i{
zeY^Fk@%Vrt>|kWRn_odeVL1Bqf|-e3&gk91sHzijJ@x`4uHaeY(X*xj$=X8>h49!d
z^85Q82hw-v%k9sBmsjfiI!>$ZtL6gYFIYOtT68kEiP}G!nOSf^kM!M9dF03VA3T|#
zPaSuOGCL}_D%uyDoYaA|E^iw%ok1o!&de&J<qr@a_6?oTrCOAwPS)ys+xG8JT_a7+
z-8YYs1`X{!O6(i7T(Bn&%;MK2nd2Y9AX_I)aMPWQwRL98jbLKHBXs$EVON9YIq2F6
z(25j6YqT0&vVKA`$=nwo8znH%(WL;?v-<b$nF}?Z*Zt<$c0un9%hQOPj*i13EnH7T
z04s*BWoa<y9qMtGas}3^O*Ug|)pW^^tIPAD7qoXP<fDHk8A8NL{?ZSQMcs+ro?HJZ
zISSTzdvRfHW?7#_nSD2_t3zkW6n_3^O@Pr!96-VOky#zjm0IIQ=tv#?c3`22xq0*S
zbO!5liFqr)h2=I>fR~rNj>4a+F6!G8gAeu&<Ej>_haF8O@;V`R_)vz;!R20hrgVck
zUbqV3rx|%gMT^-Q_{u!x3Mw%aO~)x(8ctqGulmfJs#p_5X>R>8>%%Aus-LE}MBzHd
z)wV0%9&YVvmdALs<8MDS!Clt3H-3tkn+;i^(Eu5sh=-ZtT7-Uk>2_+a``TJzFDusj
z{4DYh#Qm9~)KWwdJM&=<-%#UQ)`AgFf{6^i$IcA*u%qq-2SD15J?^<)WY0{pAJzwR
z`iv7qA>>cVTEg(Y5_Qk&LyuNpUlPomt(_->y{FOusAuyd)g`A7Z*ZObLBND&_|2}h
z(?atV>$h)k)jnk>QrCAmEr&5tYx0tkTyx(^Jsv9Vj7bZ!d>Ok@aM;7l)C%xAv-=~4
zSezeK_?nxx^#QOn#WHB(l3dtb{rX6l;_RzHsVIm?e1#5)pktw^2+Fe@(lCUgC#OdI
zbG)YaD@#+>)oI==>Gi@i9|;lJoVQ`+f?ETWoGf~k%vdSmbt(KV-TP#7%Sg32fKUv@
zG0|KW)YW20ObEo(Yl?vQwl9KP;KZR{GCz2xXgTd$u!mg{&(vI$TH0-jrjzh{vC-q^
zl?<cbjS53+MMDGr^g~@0m-A9bS{>TXG#!mwXnjQI78aP5y*(5``3#KoF(<;Uk_Tg$
ze_A2Vk^GY+L5S(|x5M`|G4Zpsx(yeYrUm8r`FkevC089v9gM&AOxMUU|0tj6QtzAM
zlU2*TCE+N$n9ZW1YFnLLq!*8v9n=)7aBaRXm?r8hzVncto>g&;5jdYP<d)#ro9?E4
z9<vuq3ezpr=^r(ontj33RTxV<+}a7spE_GbF2?+0482r5&#2N8o1$WdUQ365Z##o(
zK4W>)B4hRB<Cy*i#wUTgBJB9?YUM;2U<|YHZOU%{Am@H}t5l<xx*97hW4;@8evafw
z7o<INXv&gvb4#oIh$r#={w5A1dE;FZnaqvGq@yU-O5;ZmgP_A4yt>_&EP=aL+HKrf
z&jm7E*3eo2s*g_5Xgmn{vg-x*jfsi*4uq00V7#$!2vw+D6`)Zz>A@N+?w8GDe}ZGr
zSRBm_D;n?88vCOn8j--lL~W~H#UbHI8+-uY*J<!re=jctKBm2D7Up2fAp4MO8Mx-Q
z{sho}(Xjns`_9{4E-mQ8CFWKQD6d9p+U!N;&|h7rP9F>my~MFhhB+Naf8HjY?r_X~
z0@fe?I_$hOU+icNhlZ1<cC;>f>nU|CKvP@p2gt(F2*|~~%$GUG4kAzd#D;ln31k&7
zS1zRcN6CwMDLq?DqJ8;~mg>b9mzKg_Ib|=qjBp^?Qy4j{2L!OJG|MpP%3<h+yd}Zh
zihE0vwTCp~yn5Ci78ON_V|z0PRcUHwImRfydFl~<N|zCJb}sig*(b-8w+5gckuuFH
zrMByi?#bDmcz}^H5Ec9_B|akTG6!$J-bdwKJ!;|WSS3o_)k##rbKgzA7GrJcAvKy|
zo)C<}nXyXGXS1~wDGZY!QM_33-bZsT!`(Me=%3ZLv<gGhVzlIK0X7vF7`y8(olnXq
z=s`oN@oG!v24$)G#78Dm<^7#vzUXCjJj=7j{XKJ8sU9U$P+;WjpmX~(RiQZ#6HLC5
z9&vkqZE3{+XspT-A3v8UA!3j}oneMgp`dX!nb6IEznz-O2oci#JKB_8HAn=oux=p5
z^mJ_)?=0c{>=QRehtXVB`_%5u)QX41x{_^?ihU2gx_gdN+480b)Dad<WOq01YfR#p
zszbP;_=B{<0;(bTdD4!SXy)Co@PI&l=hP`Xq==Z&d}zb_sr}hu_}$P31wbMa!zWGZ
z;WdrTwQ(1J*U<Cb-jOA{F|K>Q!Q8?ymj&^ECs}G2csQwgsBN9>-(~}WDD7J6RCG9s
z@c3xXnu>P^7dcNj{nVPVyAHyO2wpL=x)|o(3|%~5m!Fqfdv$xTG-8PGkn|0R@buXo
z#fJh6=~I-<2yrXZSuqyWuclU4i@4iGglCi^BObt7Y4~;TS^<?ssH&P0^-v;^g;sg^
zzrn>#g*#j*4g4;z96O!)HjJifvyiZA^L}69gLOz_zLutDG4^u(A2gQ7X$w=wVqmU6
zfvR~|@GW+#umJv~1+C3_>?ty=snEW`LnzbZgkQJ)*U?$e0N-72xi>?*>s4(inIjgU
zIMb}t&t=rCQ-Em_o=ZxD-LW_ZR{e~3#w+pQlZQ;#=@~{6LWaURIECc_P%}w)u9K*|
zrAo0*)ym%S^c*H2SVBlz+qqzgFD}=j23Qr^!a}<9!Q%3vYT*US37a8fs~AXmvjQJq
zbI!r~+l8y8x$Q`0Yd{}U5dhQBAqISynVn#m=?|C<t*yP8EZejBqBu1YX_(8q`&XS%
z#68|D7h>b+_}RbgBf!;5#({SKUcHml&`7DNcb4EV%*mIOw_f`quMDgUe0h=iv??|_
zM#cmHe5Ph#7;1Tghl`e0oYgk^sAl=IG$6ojOTk#F`C6*=>`D|(+ZP3l8Ef)S&1i$e
zrSC*AOA8aVjBa1iNdLC=0KsHJ>t7LqRb_w+Vgj%{V0fU8V7CWmtKaoF6F&f91c-uJ
zfUKOFs2`bC*RBY-2HB9wD{Phq**#JnTUbl}>2(M0`NZz?K7RDxWTLhEg7$k%92X{_
zw29f?=GZ@wX?Ysc`gS4RGf4y7T>q}EeH0U<6|JQ)njU>QOaki=*n1&1@7?!@EW0lt
z2n2#1@D?US8jXrch>ki69OP_u*Fa2FVErfkoLAM^kl|HymU$g-4xgmb*;DW%m&lX|
zsPFT%*XU*~FW;ro9#@>FnpVI|;Xm~k6(|8cB<tLh6$;x*yiSJnA<vR5Qqd%8{S)pU
zX1nwmDtN9t$Lwk0chsc0LYGbHGF+2kPX!4Ja$5^&W{#HzdX+7IEZ*4G+dn!=m~1@3
zffb)^T+j?LZl!6Bjikzv<2P{l6fPb-P0qT>tv)~v(RX2W81w$F+pjf?E{5CN33B(p
zlK(WIrF!x!UX@iuY6yQ|zo~n2`YQvhrhYMak>tXz#4VB|O@PuR5rU8;B|R2{C`L0J
zyB(cUzZNxn5e^#`il!=BS<X3k8XDJ~jtt$(U51}OQNUj8LwJ8mc+o~cvkpxOAux%O
zO|(P0s@pC#yUTumY(M6>9ZvwD9+N88BkDm7k1>&V4kYYLNj=D^erj=Wc7)BfPo?Qz
zN}Q^NN{e0on@}WF44wQ4(zv!&vd+EN%szLfuTnX3zvhjl&?Ya$j+9^BTuB9D_i!X#
zz3KxV2F1>yXzlizD>YZWlQcURk7~a7OEi3T{-XSp#sY-4jb)%N_6pc$^r5_*Op34v
zf-VXDL!fPBrslj1E9sWIHMXP-@_Qj9|0TcOT=eXKRqL?&r_%y~|ABje^6DoDCd2~a
zz4d_^kI$F?LB&0^uOj=YbjsypT6E3`p7+I{=U{ydLdV1$T<`EfM<+^zdJz(g5BX5A
zy(I47(7N-W6FWV}ME+-tS^Ia@;$!K(JkHlN0Ok5|c4<k3AoODwBCGf5ISsAi25kPB
zf6&rNDkw}1k3BrNt-UmOQCUf?1d^7Mqj7<~>ccu`k-pph(f)@YYV{N~fN7A)#{dH1
z)R&|{>BmFre3SZQ`KD&R!T|sEd(lmH1s4rBr2h!|g77{nOtFR8+ZsU;?H%bS5=4$9
zb9Z3!>xzU7zx<rM)W6#<iRK7NZQ~kHz#)NN3A@S3p|~e9AS5O50qRv?HUyI(U8{uJ
zng5p48V4_pEN~YzFK#DQMExPL(-Ur(q@gnfrp)V5xg-(f<kWthUJU356JGxl{JBpK
zY-_xf{$BPHEK(X+@&NndLz%fBG<Fj`oN!_Pgz@v40W7+9n;Ff`ls={a`3>`0KJ3(X
zxWl+`!;q_gE8bXQn?8vF{=YPR)h@BGtAjQH)$viF8*G%;NhEcwKi9qG6KWjyf|))~
z?A+g2(XCrhg6KcDNJ2*kxAZEVyu(Bo_Ms#LR5cWQ5yyFe)ELy^8q*T&%zX0WElF^5
zC>N|b3#AU=2h{O8SWQN<rIHHxn=2tcp2`2qmns`Q|2KGeshNoYLbnFQ$ap-eBA)3r
zwYABK-7_<j<6mh5u~diJTHRj+cmEUrk}y)SYXU8#$%xDWl>GK0B!Nh;Sc|Q?YPh`K
z@lxt3S*}oMRv+5fR;jqI1#BlY3{>g>nWVtQ(Eqp$Y!cE-^#f2(_uN$!v*4WUR^`_(
zVM~ev6JBJl3kXB!I82U8&0++Vjl;(@!#if)+LZr(bf8O3rV8DajSg{jHF~cIWz9<z
z{RpIbFhJer_5Zo>4juMNo=*kqwWj8^ci1R-xRvqJ`9mQP=>Wg^Nbd&8<scx{g(;H3
z&Wrjk&j?tl2%IQ7K|fV`XIGVkNP03JSGUen*ACxszlABI;OA!wOYM}UQq}hN>pt(3
z$h@{5^oe6Kf5pJrnobjLy#%Q}yYq<A{rY}kfftCf>FEj!f86f<zgN#mfttCS<&KAh
zXjGbhdu4H8+){Hk%O`l-XR7U&X3ECaLx;$+?G(d*aTYt&eK-7za=33XMOeu17(;>7
zp&Swt0>E{y%O!4>WdihLZE8%GN3HN$VN0s<LmFGZXDVP|nraD#bPcFaY}lsuM;B$I
z1$5^pOKNINqIHYh38yX#$OgfZ_YpcJ9QA39y3zT`>h9QH`6r8LZ?z^C;Yp$D$jxkQ
zpZj4GjWpuuXON#ct~^6@3}JN-#IW6#7SLbpLX-t8n}AKa6cEg)-xcxmgEQVw*#()v
zM0Fn4wT`Yk(dFJER&1;GHkj}PT9OQOX@B@*k&Nl}01(!`zBHc2YoCnW!E{HO`x}z}
zr!~z?Z<oYFx6)70WtXuPvzD86^cSoR5oLFj9=xdm6-og)ARB^Gj}^Bi(keio#_lm;
z7o=tm*^751)=iY!61?HvY89s$CPV?-kYec8kn*M0Q5~$m0ojC@mus4-wAB!uMam!H
zcSu3^Q#4*qT?JNf1Ks*k{ElxNZZzLd5oHpT_A#GS=rj=vD?IrbzYBlUU?tmH;;ItQ
zUN)(XR!<k`&S1{+0Q}AS_l&@y1ooA`(#TddPOgCgl;ci8JZJS(2VhK3c_Tx^mxsY1
zB-MeDbV{2@i#jY2*uH6?>i8m;35>q{v1Q-grd#o0_-4B_vsnZz4>T(UNCG+p6$pCZ
zI{F-*bCrvqmAEVgdkS3V10o966x6ATXP1ZFSW_u|I+fMfx0&ha02{x)>J@J9*Sg6i
z-hy}f-Tr3$X7>q8K!)Kr26hLq&?$2sJWW&QaK=bqbyztFCbi>6Ph0{gUHpnK9h}jY
zv)kKsfnCs{Yq@HNJRT6e4p(0IkeV|5uIn>PWmIN$e+#_J&CTt_@x;OeGjL*KD50E{
z0WDQ0=jzoppp_zOEBLX128UiYxwr^?<?gOMp!?b?_xf=4%1In|I3r07q{_SUm9}>(
z4{g~Ogw$b`z@%%c(q1Q6t+{D9(IP;X8czkd8EOWqg~yb#yF%+jHtx+8oLy0|)^y|(
zx0BP%_6M!_!<^hn#~RdYfb<!;IiAJmLfec4hIWEe#Im$BCO)0XrY<i}Z1xhaf>bbg
zX5UUFGJR}NCLuL3aWDlpw>!(6!_7mJK5}q(kcd!zVmi$E#2{_SpZ%^F45$+0Kt?z<
z6kU%0I}MM>jWWP^SyslV6lJKli(2U_lc`A1r=&3Jwi&hww4Wi-4H|pPp!>6Wo=gUq
zV8KjPMfN~0{WXs&pn+3r2hETE@W<U1|38-LP-;oe{QzX>fC4A#|G5Ik9WhvPt$L<k
z1JD<}qzBtD2}TRswj?--29D3|_na9RT>%G9Bs3eY$ttXl=I+ZG$<B;P^K4G;R}9L8
zi<fOD8%B$%iu8#39G(bXr?y$|#>Gzsm>>Y3nWEBFgxO+>>EPqJzy8KEy}$#mf&oL<
zZ0wWyB9^s|?LbhSh$Xv+lex=7glVk-VCiBWBP6TQ15x3kd2lk_s(RllDcVdv{e<jm
z{5BBBO2w@NP~ASmkR0Qj(7B-{VVz6P3E67LwYsT%NN#&1Jq^e`l|6s>vA|%p^q22|
ze6f18)%{_nhw2BGvB&B<%7l?&O!uc0OsHC=LzB{QCa{MAN?3HKW*zG&Oa3nMn4B!@
zeL#xSU@>@VS(ug3fVXum7s=1%y>ms=t*2BD@kVzGlg7g*s82N(5L!DuQaKhd)nSQI
z`S!fU#4ti=tLYYYKQHo9AmMAI=G=+$a4MTV#;Rx}3lZiFW~(zkAj9vTv7jWAPxGbJ
z+mmcpQ7fndmY=ec5=YHk0wV1Q5fXf{?&391^n>SSBR%`0=;!=*LJog_Y^>uISQtfM
zyP%HPG#pRN^$X@@dG_IHv3~4n$t)z?^(^^7@2Rme<-@ypl>BMjTR=0gYiFf?m>gTd
z&stRk(j>0SJ|`%9d3JAYuB0h~^?l-C=cst_vs?*!i)^Wh)uNg9tI5BrYu!zeq?@6z
z_?9(d!G4gb*o)~Us%&aKd3^BrR`_;O==tObhPw!2-bbPy2hYX7<g1(qjy3l<0w2F~
zFodBds$@8LF1h%9uHoa<xJAv0{6rpF7D&tl;HId5&&2ePitOy0eQeMz8P?hTs+14L
z943CiECq<4Z1)zEn=WQ+q><}NOndcP=;dlk)Ol+Ls=a%j$g-QZtlKqBm9jYAV~}TK
zchzvRD)IkDN?kwAt*^KID_M;i8^6y^Zm?b>)+$K)hE3;-L}aI~`Xrw8vn4%7nRNMk
zk`HhS-6=@TUtya&r3bJXn$;njnatpQ7R(F$LGMDGv1+YE9sW1B`sPOk0icm_ogS&E
zwX7~}W!c`EMg64$>0036Cn}0ePyAxvjTRI{3JXj+csP7&)2oca+`oDCo&N1~ckhis
z!fO?_57Gb1|0^J!Z_C{r0X_hb-k^esEZ_wJ-fiJE0V`2pk^N#@{zKdyLcB^XmvuQ|
zHR^8raX|hxvEF_UVt+$#0Upw7Ufsh!U&*@4rzbD)ujzGso^8>{PuB9q9%CK`12*8v
zgweropN+w{sCNQL0>>SLsn9ee$-0*kBr>0XkdYv;&QcvW;8BDkZiaRzt1B@RDXs(i
zmdNU}tjcs2ftS&HqTHtJ8=PCg=U-80NvZND0@$;bMd#|g_*yKt=9+bL67My7QCkEt
z?6Y13j#g%fKQ(!+$&=SBFTL1vPvQihi6ahE%Gcu#+8^EN=jQolCDu33&@Pdyy;nIn
zdAo!FV#Ur1;8xSKCWyUrFw<KHhx{%yRUm!y8jz|uYeH+3tr<Jbr$fRI)?8wV`cqLF
zM^KD?XWm=Vpy%N-2xHI~Ag<iAlXhoDUN61~ki!Vt5(Fr=4!U^hviCI(6v%*;8byzG
zQeV7gA?gC`=gD-2hU~4(9DTTWB-2+Fu|dQ+V4sMxxf9QR2<Lu9l_nV%Ef<Df!UGT*
zJP-NtgflfATdQ|{w`19pwVqHA9zAteD-T2cAFy2tdY-8Dpd3%k;uwZ^Mxx=7kaW5j
zVu>F;Fyq)$o%lfI2D0Ih2U2<Jjdw0AjHI1jmA^TI*=$Zec$SHj;#^D#4hNjHUw1u>
zVWJN4&9)sSoN0>tiPQz~Fw8x^^+EyT@wRV!OI~0&2gMsfPvn!{GO{$w>pa{GRZjLD
zO>I|7^`*gsmb0?jn2WXs`xUgO*gSOazxjntA#sG&;wO;4s0Rr-%ymUU>Nq|kVM4|w
zgFAmPnA|7Po;NJ<89Wc!c?xq*SCgBy{M+6wM2i`l-u;nBRt&3W9+dmP3sTI>$o_YN
z6v)cuyd%c4OF-YKI9XCD%EB%eg5~U?ap1(iM*D1mgF}N-rGzHAN4E7t&2VDknex;=
zrkX3ieLz|D#1IO6Gm_?rFs!r;0*Oc#9XOdxG}0t&m*=KLwNtVAL17gkC5a+5)OfxZ
z-{;IXN)f74j=#*#&b|v`!P^I7lCbQo&L%uj3?$!F7W0oNX^Z&G-ZTf-8zFJx`b?~+
zg|eD!WSky_RqAKNLRmMYYNqIhCg@M!?jD=84I<*Pl&rRViSCoI$c+~DTfPA-G>Aal
z)3bG<&2Z+|&yl6bKO)YU%FCBtFvg;h&ZeQp3~yP8Tjf<q!g`d3cb@q$1hPAH_UqGj
zrK2iF`OIX|44^e;%g4U&E~}%A;Qp;+DuJdYpBG7&7JcrkS6iEHEV>tg=&5z@qK<&)
z{VyBqtF&IzxiC;K<eUiyf+q17?=X;vy1EK~?mM=5KpwGmm+H2D_K4h-OmM5rqNXb=
z_kO&8+_T@u(!Ccjzn%P*o0&>1NQ{pG-Y6Sd#H;vFvwFPvi_@m_@_{%UwAZfo?d7HF
zE+%;ypfH8yI$#n$#BXz>jHm>XWafZ76aKxJXC6zY>0Dbvl1uX~pXMO=i5-#{hQj4W
zJf=}IaFX$heklbv@u$FS7G3bpYb<Ge{BReq8oR6Nd?9_6p5r#dj60G8`x4xub5_4-
zq}>keyZd=DG`-G9ZC&!GJGBedz3ZbDsvs7PS3pYJm-YXFxZ{)g{Pfq*4fO>Db^A{p
z=rvYb5Tn~GVLS}=CNFuvWSz^#f+S(X9!O5T<qRY{GW^sK>)+6Koeo+%VU}W7RanZ&
zFJHY7oW2L5nz`76EQ2OikNvTqi%ayg92{m9Q5#z%M4aWmq73@bsO+ul%v(uiHR6xr
zsVXlxzxs;+?wPz+*`{RnvuDPMcDuXii~@Nxv_v=zu}w~7!=;|4JW}PYBl}^Z&f>cu
zVR|rNw|Xw74_tSfiN_z7rnoF?tzy!id%SwDrbfbjMU+h+Ic`l%mTGDjW3q^|_MRZq
z9f4s|D<-(PBVxA;Rjqwm2Fl)f-RHGn^AT1xJ`aI=H&}!bpk6v@s$8kYpaSS@UC@bg
zFbO+tYd%~+J6f*u&c89ZcSf$EhMEZ1-~#yG@+aGhuwe_^AG^fItSl-ickRM&C6E46
z|6e`KAaJa=Ll$<z%8=DDk1%NSOZTVs8liTZ{A=}rk`|MK0TNWo-Cv=8##?S-ZZb{#
zRcitHH{p#)(&gmy8azts=qFcmr+Bw~rb)AdnKO~kcj4R;-NAn6wdJc+PSX=)OE06G
zL=a(VzszDlfii1pSdW|H*2Hc8m1O*U1`=kmCPja?vS_;v5_s<n;`oSLE%6R-al>))
zAW?<jzcdz{{|0oDOO*6aC6^q|qs^I^Opw47_Uzb;GSg~1umnem8lUz71hSng1)rq-
z70!?0&O>N`<$c`YA<4jC-ATmdN6P)fy(n0CSa=o&lFQwI^x}Kb*RMK>YZZfoFiVY0
z-M3wsd=1&x1QW;cKIe~Li<3gnvdOJp&m-fqHprQo6=`uj+tFpHe7=RZpcbSOF^V5e
z7{XUd@|K6oU%c-!DgtBHU0gXMo0xD)-#imp`k7-GJFl^=kraG*yvRmhub?7D(g%{6
zXDu+fQpY;qPU2{6+#9)LQ1fJa=KW30L8P^mcl*^=zHjIk+~EZ$LO2=ZgxfhgQ%C7Q
zyFE9irzUU4Hr~%dCNWu!Mizfx+WyE5MGGv}#kjhHfA|Ft<c_H+^0)9LAD=Vu-r%9G
zD`_B34R(n*Gm&JRBL5wijYYVDDDYK&y`h`>b^#E^Ke|-~u9Z^@Sl0N~JR+gDfx@rm
zVab`o*RRx|w702vdOQHE-S#wsVHE%UNY)VEc;eL+pe!|w_(g8rUUT1vX`jiuvNTM$
zA-!a9)q3~j?e!Tf4CF@24&g6B#^CUGX>#1Po)ZN>O995Zu`EbM^zX#kIrPIN6eIBo
z()nM6bwv6cYKDrbceQzb2e2aoD+lK?n;iPFtkEiXA!IM-nnTN^;q|W1(~Ma5##v`G
zUQ%hG@b9bfIv^b=t^rQZ$sPE_Iy%*%tvf7++`_C*-Snvn$`GoK70@tovuXe-<5~^%
z+;y*7ak1{o08;(<S(U$sBXHDBQy8O!JLq9wXom&Qxv^5GE@#(ngy1$evV=9kWe@kW
z+}x~J<GZjYrZ5~Qr>2-dhqBKZRd3msMd$nk@5UliAwgtK_P!t$x4kmN-9L}C?KeML
zx|&#)3@`|^a)E3aU`(ZUtMCcHnnZ1vCv@vvn)Mb5CBqhtS9P^U{PVy{`gfYK^7jdQ
zX_MLM+*4a!+o_`O(>FLj2#|6Qr9RvYR;Ex*E^L$xeDO)$CmI2cMdluKr0%XMc7!{e
z`l@s#Ffzv(&$19^6d;SHw$%fEKAy0x=DgQSck~k?dRgv~Yz+?_s3b3*Rom~P7C03e
zNC})zAg4OOR^~I)$tS%>wlYCuO!I@CCjJ<=50%z!urHO+ttRYpFwk1pHyzpl(uc%w
zu^s6(O&D|Dm5A_f-`D?G4A$k4i*l?sS|PXrRy`ozKt)VKDRnc|gaCQ;?z<tPwj`%L
znT#JXjeeV8!sLa`7ut!8F=dlq^m8Sfp~?cS+A$ey6wY3M7H!9xi>tS1%#2$A6tid1
zQ95A|ANpuTM^B#s?3mxDLIdY(2=yk`9UqF=>`N1^Djtult!%Vsin9ePuWe~y_`BM+
zef`Q?a`iTSo*?C80Xp}hlou#?1TBk;8sSn0c&;1%nN4<nhQJY8;D`}`K>>`_!1)e2
zDW?8ac>4L_tccO8Z2E-xkbI**A&`9HEOV*PFIa^CySgHiW~D*`lO`P+LqGzZ(p=r2
zRRr0pn{{<whZ6sfyLLnkgHqMGn`~4zBV(~u$-KLBwY{hDs!oH~gO+8OI$i*!_KzjV
zpDIcUsOVtLTjX=gT}08hB=y|Q8`WU)v&WSsUBoXd;pl%9fWaHpDovQGs<cXbsG|Q3
zeiCEo*$)opR8*+#4%5Y!lrUZ>s3|eplm*=LT^Q72*8!)u!==-|9W9z;&Pmja<Ni0U
z3F>GB4#)C(kymtn68|d>tS|~a04$K?u;>BYGKfOxbwv^YNprD||L2@~eto&>YYe6!
zpbWIxwRI)|qv$T~UYA<~|FZ(X0O6Am9Gx73<{<yrr_n3~9;AC5Yu;!EjaP*~V4(JB
z3?SLk)()<3Y+%Tvcn98j4STLe6kT@^7p`Q-qdF(w7>0F&9)?CoCI4KD?1X@3=jLer
z{KB%4f!k>mG&KIGNmGD$Mru_F)*@KfRq<kHc;8J@2>|4w^lE@RhBZ(@E~t8Pv@bV*
zkZ30hQlyQXlhV_x{8#e7+B?svroMIE2M|!26p;=}v4tufDI$W>5v5mY5(0u00qGz`
z5m35<ARU1aklsO>^iC)eiqbnI^m1qLzxO_O?0d$&=iL3_-ZA#az)G^#%35pA_kEt{
zH<Mul&mMYBC@NaylbGhrS(ik2#^1#KXC=*g%vs!X;R~k(ijbe@S(3f<_2w4Rvr}<`
zOX%)9J)^0__V&2osR$1yN21ZJH)||Pac>Q|2!hcdr_3}zH_<=nra#pW$+UroKLjeV
zVeJ?H1{~hPw;97+ebny`@`5%=3FaZ{hAJitFF9Tt-Oe)XPJGU<xyyh%B1!|oKzYz5
zwn&W7Q3h@JDWgC4i6acQxP=Z3Z3beS`GbguaCqq1H|K+q%;|DKYZRxJ&(GFRNJ?sU
z-~BG`&pZH$5-Y;tD=aLG%YFk{CNh6pNxg?ZK<Cru=3tw?K1J($4LlW?uu6cg?9)OF
z#yR0>-o9ax^UKn+6gPMaeL_&aV$?O|mulfE?Oidl9FMFwBwS|7F<2~#LY%`H<^wb_
zZzC*%EUc^&On_$=7X|0|OK|gb-SafweC5^B4A-vGL^C+Lo*aogk>2pv*`pTmCEN-w
z?98+M6=@0dHsLc7CWI>gpwlc+jbVLl={E7iq9f})o!^F1gaU?@Vg<QLg#NfAHtQ%k
z#NF2*mx#MzL5=<Y0Tw4j{R(Tu1K`i&bg!8aI2njILE?TBN(N@;=mtML26`dh<Kx@>
zU*hm&Ex@^fm2d59zMGn5p}=7_Aom8gpG73y34O7)qAXIE>6cel7R-Oy?=`9E$rPYZ
zWPZm{Ck)T2YeuH0XMRlH-Nn|@w466HSImaQCMGIv;4~_;diaxOO#k=*(Bq!VT3?{5
zmrUYRR8|(H!BIhcM-<iio(m=eomG>Zv;q63=~?<lF^2392!o2pH$BsmetxF&h;(l0
zNh(k9Sd>!7Rq#Gj9w}mVMOD$BwoP6X5x-YT$r12z1GEDsF_ChISBHq7$K@~Gj2{(P
zBUmZjSHbHGtAjZz;b=gRf{5SIPZZ5~0}k=y#T^2K&lEbug7_;Nn@Uaz9YX$99<DPU
z$WD4xTM2dS4?~*zApMJaXT+$HkNJekzf<49@#+7_gEHhMwZEIBTwUcM150#|K>`ZE
zH2&yp@u+3MyuoSqKeYG(tK%=y#^yCHE2`#AJeBc_Sln5v7mut)zqXZg_H<17gX_44
z?79A?1weg37anXNrm2Y!R5=;nzCWs5<O6G2XXXi2Ch$MsZBBQZbwf0voEWt$ogMDu
zMzjB1s$A5C@sV!kxM!>_Hxz0>68hF+`a215N{GntL7{?mz<l!Oi4B9p1^I$=b2Cy>
z)IjYP>*cX~o;o<|i^bX(F<k{K+~Y><V^F?jht7`@6p!$C?FtJk%a11ZK)g5*{H*Df
z*L>vUWu8@E@fP4rv=zQtSRSO?YKQMvBnK75mD)!g9|H3Q)gZOv1CLxzYFv-%F7vsd
z{6N~!P9&^%%wUMqBd41&xs1^-S8mE!et%I@MDW4ot^{`4?X6CY%%i6&d~baJ62_)D
z8LOY`*C=QsPaYTb&t5c)xuZs1PMt{fjfCSJ!bljE7b`r7>Ht2$xVSQ%%F0^`e;cy=
zH5%Xp!#3L-lqyg&Xq;LcEh>(TxRCACA*!4Tuk$HxzE{8Ye}JpNr~f{?z0X<qMdMqM
z69AoPX=*+u-0Yj2y#ASm1)xXNx|!nE)}G@*MEi44z^=@j`z|MrqIYCt(A%Hxnnl~p
zy^6!(eJl9PFi*m4tIUC)xN09caHYsW8r?Mi?<KRjzj>bnZxJczXy|grb@E050*;?o
z#xn~g^q?nr0KDIM>3Sq`@vhnbiY<Z0!{Z%B=M-7dy0pa<Sq!NrN7J;zXWi@&VtV%W
z5x8H_FxO50jSAn#tBQ(>_=f|io6j`!_uUQPX2;jae5>++q?UKM{2;xwR(b7oZasK+
z13y)MT+g)zeMQvx&SUA5LRu^6OhXRA%#*Xp$kj^-PuQOS_5x!KAf^C?jd>BLu=Sjd
z(shzFA5Xqg?G_o(4;!&wUJxwfjn_)#%9U|R+ZUc_8hvwi;^Y8c3z+_%)Fwg!2<uai
z@JCrPNa8)H31cmY6<+nhE-)1{v(I6qc0zTQ)5T<rw0*V+!V#~5Gxir5ZT@2*1-jKp
z`#FKBh?4^eM64NH=Vt=nC{{n<=-1;z!h%Sj%DH5wby*{y^Bx>PTPi*f=HfG%@{}lv
zyh2`o!Fg<&z-ND>H-6ves^?W{=aJBSQP1DYll+rW1$^LyS!%9X_<39c#SmoVBaqV4
z<_xN;9oG+Z7z88AVSmYhBEM>~*W18s%1>%@*^>B&qEe(VO#F6F+%2y4C+E~KyKQSp
zYVKdNRP~8cQRYceqkQmKkv6SueXi@~*2k*K!8*p?QaZ+n_E?%{noZq~PFd%F$`Lyb
zwkhI)$_~eMKzg9oW5G>}-xO6#EGk)|j_bwzJgB(yyUoYj&{XCeKhwZeiHMZW+K(SG
z%<3A2xAop>#PaO!sDI!w;@Q$Y)T^LptX`}6s<x)vN4a&_aapwEP0OXxZ{|6Yr9-ur
zs~EDKL&vD-CqXNa0_1Wmcg$a6phbQi-pbwG3*$fygb)AZ#u>_Rotgr=|Ii*tqqhHc
zWUz*rev5K5UV_CP8ZcgaLJn<P|KMY=8yl@cZjayPH%7L<a!}FVzeZc-K1r){;pc1^
z>LrMI_c@(b>JfQG{T|po)`Z+?YkwH~thVsJq}Ti`a61ZTag6Cb@Gx6FZDZtT>TlQK
zoL1&hZi}w#e(SmSTDzA0f{D#ZCx!b`Z6iM9ZfgH=Z83J^&3t0jKF?2OQ~(ebYaiHy
z>$=|fys3z@eM@u*=w6p{F6kGBtSx6&f>)D6+xnKPZwJgor6z3M7O$-k5Y>nOC;B9T
z_(~weN^tB|HoW%Q60#^O$jiu1irKD9M{Lc&r9JP<sG_>MnceUCm!DZyfiPKQyH8T|
ztzfZP4j+s_>Vq4gD#z_e8X}lZF4)EJGd21OiJeq+_F?;i=s4ACdP#}=6l+%(;JB@{
zm>ioeU0n&k6)z<~*r!mur9~YW_RPibI9JO2RDHTuiv})5w)3HRzH1Zn@&)kozRfZ+
z3<>lCGo63X4`xKKSpP%x?0ib9ggP1&efg1TbM1l?dm6esz_rG8uV>OLU+HDP=As0s
z_X{xx=n2q^kUgTRx4ma@alPwZH>>uxmwCk6@Ni=ZG<Ex;t(rpe$eVly8@OFeo~^4|
zs|u&8YFOSPf$5!B)CQ9yu>Fz!yiSV>clWP(dXFTSD;3gO%QCjIZS(U!Y+h3Ba@&<|
zsW1|Ysv~*1>Y{wXR793ERn>a0(iDl*oj|E(1&QjtO#AeyQGv2ZhyT6>2Ag}w<sQH&
zIPbLp&xeBi^nXDgWzzi|Yp%xsE|%uFCe7O(i&gzLcd&3gymmkBSfqU@M{(loWBmCX
zU~vHX|8c#7g6~J!*Ne3EDvIxm<X5$mY55h;YM@f~`6R*~K~4NH&xFcjx>BK>eRkvG
z7-dz&6#EI_Gzd;?FW25EVLez~Bd<A8zJ7V>_xEhHPK=aKR4Tlo+L&*-f%zfS1RyF1
zAu9^%#<_3<Zl>Cl<!aVyctZ#h1|0>!rnJ(#`Q_e~c}BvnVg;~f+hd*l_dUpQF5t58
zZ%SVuT{1@$UmZI~TOgLOkYti3F3>Bw1POn$wlBQo#W2KohkWXM=Jl=X;i&%b1<C`7
z&tl%4dER(HT_;7M35F5J`lm6?94C2=m)1c0u@n0Y48e>jcbEIZDvj~^Y;tA;yIqOj
z9057O7jpRlUDdqKjfj%q=b_~zQg!#xsA03hJBZg>EN%nL3y{P9hMNZxkM{9Rbr@?0
zlLCf|+0fN9kyLiUV^(`B!y7v+12(Ndg9_XGBwo!Cb(QIj3c$u8zq21E*Hy6aguHMr
z^zbGGgq_&#-a}KPl_Zk}ib1O%u`KR0=PF|tM*149<hey%zrFa#zR0jRgWcMRpz~67
z9<ZG#TLsCY#q~6$3-xGF!wSkQ#k)eSO}7SYw9^x$53f&Zbuu0Jl>C!E%cg&=Z@BLn
zQI!!=^hYVn^hL$~-ZJMGDNhVVEcZ$WHIxlQUwCA-vLw`P9Yjv^=b*4ML{cqWp``D|
zy98O2?e|_nU6X{6bc(szr<<`cbMMM|q!heXQqHj|XSX7jcW=$9G87Wor?%3O2ipXr
zt4Qgze@xqmP(@ttzWa+)9~|w$N<}Ziz%@^dWoTH=1(oL11jD48K)Ijj0n*;BTeld;
z;2r)^R^$YJLwt4~i9e2|Hw|MLyxCJ8)38-KH8?nsJ`oXYJuew(C1wcNn7>#DdZo=t
zdFij1p?e0&wxx&ZW26yluzKdzoz5!@GD!%z>8&+`xrp;$8_IH1Tqe?xAD5G^9k?Br
z3FjbEh`(8bv#Moz^}05Y2epMn?MishFK*|qKb>f$z-2`V?4%46SSN-X*_=g!6TPz$
z!Mh6X8!at}X2%(ow-Ctt8&*9x%kmCNIBy8qp}n76yB8rEY0lfOEGoJ}P8*L8qa47(
zfVl>hjp|!c-++AR%j3UgsPEp7wfjX*(zi5dJq>*?P2|O0$@;vQGIJW5*vj;#B)7e5
z75}?HF~YZptX=!7%mDD<l2g{t+}%BTyE7HmH|#C%(Zk15T?q5Ar~{zQ`bFnel?iwF
zSO$T?aIu+yG3|Bz;XLNC-=i`!-Vu)`Hp?avLOB|Y(LoV?=bw%-(&w-|3Q%>}>mMI4
z-A>mFY-`7Sj1X|pPeUhBkT4+G(_5#I+_2D$Q;`@VREEx_@Oa4Ar>X%)H{kZS*r;kn
zbXbMQ351JnNK;q`<YZ~9K~_@qR%FX||EPzoE*S-oTR{49taNl3O}F&|PN<RVGHv^b
zg?y;ByCbz?n(%%T1zx9FA9`CEwr9gYU%pYBT0I}<ZlZwA&6t2fAe_{HM;9au9J&8L
zgD&8?yed^!>Rb}UTul`!Rp-1A^q9yV6s4;FO>Duep+n6S(r(n4BgL8)y0IhF8A#16
z(fW!NyL{j!<MmV9j^@kyQ;^4G!|S}aD_?=t2pfLo*1END5$(3p3<LF-8FX-i2)aUU
zemhx>hwO=v@T&jv&%=vVvtSz0UY$3-7xa$HElmH#U97#(FV)vSFJI~|j^U5j&N~u{
zen;!P+~Z8<BRvMEp_dT8622?Bv`f&q5((8se|TsuTO2}xE*EVdLWU{qnQeetZY@<S
z&h0h7QLYfHROwwk2D&6BFp54bKT7L6Zea?c>gH^JcwK==n_14=C-Hco{hf{e)Qfdb
zj%qI*7rSI1cC+mF=XcqC^*Aqkc!y~pzuiePk#PG}hyZ>aNP#~^?FMl{D*vr}ebtkj
z_o<)z?|$#6TA_pLN8KRUWgVE87?co@nP{}#JAw06pRRl<$TMFZf6h?nA|z%34=Hl&
zVw(wuSmCi$Q>_j+R&}ESk18q9Aty;DMT8LF`@<S0bVDy@&A;Zu7;5>Bvt?Ug1dJ_X
zq#YDTJiaF+gP^-lR`Fb!z+$R^;&U`Tce#INggbjg6+&?5u?Y5fP@~5?ds6`tDqtt|
zu6Zhqpk{&&t>dk(LS)Y@W;J0y2}rum`j!_AY0?93D&%&LJj$*qI9l%The|S@$0rDn
zao(CXU)~Ce__hDQo`0ObO8~<lT~xyFz+ok|GbQYhLKgNpLXzKr>RXo`(OBMS4@DY>
zZ*%;Rhqrvufn_OckhohK($qRh8PIizfEPhj+|Y=}GJ~|4WQ^6ds+!5v8MA*MKfZK`
zhvYovtExf@$CQ@B<sW<Xel&iVy&2kiOhvCBgWoRF;|-zxYs8WHtXyDv<rj^wa(7?W
zTt-Xq=bm8-?ELrGeVcoSZY~OpZbJvB!Yo63S}l5z;F0cZ7{kuPrXH81?0NhBBEw1L
zI>tA>W)xb{<4T|Wz@Ek$v^a4k_~q(#n?ipg0+!yX$@h8${%aAmiw+kM_X)KfcJd;;
zX#ZJhmO^7>PcsJ-jPqDa?$I7qM)!0U0!(S^QGco2pZzKOmUc%IlaaLZ-oyKAU2TbW
z>f&9ymTV7iEUjC{<{I~6rKEfG`gO(eV9hS&wK~^$P(MMg=OU4!<7Ih_(FN{@RPGDi
zDQ^?d>%eR!B1%XRr`_d0KHoxeuaCM~E&oIX6^}x7#r={E_yJT7M&n%I0$i8Yu~g&0
zL}a71n>G~&q2w^X<u;6f-I#>;j|*hE2o@=;g>bIF>C-C&mpKYYwwKopnB=^VYqeYi
z=&J>;|3(RW4xJvSKWfw|nCr24xSgdZM+9*w^*Y@7#MYsN_&NeOWa8}nF#cZ3%jG^p
z*8fC1_<UDCrO2j0@xMqr=$K@1@!4}Ixl()HRA6dYs*dP(ROiO5$vQ1B`BR?cf)h4f
z2qaZL>&nvDNBKDU-P3jR(GAQA)sTo$0tVRqEP*}iYCyc2@*vG2P7|TB#fT(L*r<+=
z{tGp3^DAT1@ahJpM>R-+og<t5`}$4O9qPHJdUXp{cL5FNgODdnzBDK8_I!wzvt1u>
zT(RYN628mu+2|&eo3vlyN2WC>XYB-zJ?oH>{C=y_TXkJ<!%bLdO{&+zTgt8Si}ojH
zme`nIOD@r#nJ<_d@DwAynxO+b_=5DwdfH>#Kat{FeE|km(MIHHq4ke`tOsK!CbdT%
z(49Dpuh-b+8nb!XzUK4zf`8dkA3Uz6!VV4Y@%<iL(kUjkKRR|wQ)joSx~h6jDcHH#
z({o1VBIIs$%~rx^IrwXC+k^ocS1H+xCEm*Fzp?4B7UFryOb!H7c1qt0lZP>KTkMGi
zD|ErH^u3Lj`MpqneBE1<c9^KQFOyc5{K<6h-Hf3JcC^g7B^t@|py*|NR5I9_FSC5n
z+z&aRA%?bVTTat@$g;H6uRMMZ*oL^<=k_%@KRNdxbv*8!HYbV-RyOiDFSIBlXM>KC
z^7lVkW1$-&zukdC{Q(C7tli7-=-eq*H9#bA&dU^<0FaoI`ILqhqYSw;<CusYqSRtR
z;l`^|98iq)_AQq*t!NRZ>1Q1~j81@i@R6be<&XFSK3G`RtJqFwuqsi?(rPwC=yoOC
zo)NHqFJW=6wJ($TfM6R(Isya)8E+`}{{%irGq9`F9rLC~gvFI$H;U%ff(#EW(Wsot
zY`f|_L~yc^jO$?Gc4g4=3d=`Ffygmp%Q>FS{bbO`?%P;hm*frjD%f@R60iZ{{{wy?
zFQ+=EK`B6N#4O2#G9NVWSB*Osk*u-r6xMxpTtEChrQOU8Sr=3W00@o6|2Y8RmZ^xy
zSdxiA1@gtt5y{Vacxvhk(5`HXD!pn$s{-XHL=U<Noxr>_xk|JA8ka8r*tDkY<4eS&
ze|7YV#iyA&@=f4Nx6j1~8MG~Ir@lLKRi@+s$+8fk#<rbX^EnMvDxM}`eK1$gl3N~w
zQguhpPP3sIw7{~Ls4`CJa;0@lOm(BNnMvU4mWo@4I6kUaPn@5VQJecSFBa>vrOAcY
z$(!vfKe~oqIEtM=i5>W5oVBFuyo0JdUF?5>jB>=x1Xv0^=P>+_NCL!Y5n=tve;Y|4
z3ofx@%Z;H>vZqXqwo;M~+!J}mMuT2q1FsgcrWehix_Wghm!W`8*lxMa7dHdrdd*j_
z&@Xt~LVMA+!c#VIfA^9@4ua1%lVr~Hj){+}Z;*D8^C_}Vq<q-n<u1>5mmg!Jj7&R(
z;!gk5D^^(eVGrRyI0((&r!+F+z1QLW*Iv#b14P#(Oz3v7>LQscZkKAnBxSj8V^?sK
z{$qhtU(*<CN#KhmnqlsO#NDJ_rMKjhbdVs>9&7t7Ihy@ixP9u12f=rD;H~Bq=8})~
z*^_VzQ=b}nF=Aq8RK;y%c;m5Sa5rtHijuJC17nLPLN32%ccWEBP^ydig>~h>wx}Lc
zVoOfeoQP*`OUP&*(61kLTDI_!ohAK&%J2XLGq{PISw=ifaymcOKRk%|EXB)1mH6H|
z<daO%<2jY($cJ9G6P~cejUcb%!Lma%!vnUHo;_8sRMklJ9p$`P)vmbeYEL{<d&ciV
zo+Ut){|zl~oo*c3YG8UEouL!^=~suxt9?uVsH3%u&ny;c<vE6(XlI}O@Z|8^7quAP
zX^Q^s+T(tdpg(Sx{lmHz8>gdWpqwTNWcknus(R*@a6FaOg~j(5)2$wQYwmTdI8UJN
zkI}iVBy+Oq_OkC+OslI@0~j-njY;R8QA9DHVyJcMQ!u7J+}Zg-FmpdTwi_U9pYenf
zQpcP?`vGItmj*_=5<>M|djg}VsHzq@xjJ97!l~cT9~QsN6y|j4uZaJH-PMEEtlf@L
zD|qZ<5ZR3wBL7kcED^Y*>I!ckKK-F@vqt#!wx4t>;qQJ5AhYa(cguv{RZctV?#A@-
z?dD5xx#rP(xCLu>USq6167m%GxhAJCExnWZ=A^W-SQIh7JmaNf$OTFK6^5EAi=(C_
z_c_V%_?<Z<nh--p<S3R<H`H6l+9`9-gdjf3`tWy)i_S+lZ8FHD%$$2udXXNl6Q2uh
zp_d?_n6IWLDx))ImF>4YyC&lPwaO?pgR}0zFt7dl{UV93P<Im+V{wfr-l~gM9kHL?
z`}<klNuS;rdz*bVZ`m<<zk*1R+(@E;V>O~C5*zwl(Wb1FD*!?y1}q_JATh+HE`3b!
zt1P@C+(td%4$RFHpoLl#^@}{GyYHmeAXF1^Vu9Lu(}M1w%Ja(FBI_6GFG$=O&j79#
zk|}2pKiWFZ5>-4N#p8Ir%IcafPDv_JxcL#Q%n3#Gkl{QmGnd|6uBVr~r~|We=|(f(
zO}#TQmH4Q;UKev;hnQu-_|fvZM>1q{qc@p{U-aV%FlUI}0)gouhk7lEJ7bng#!2E&
z$$h=B80U_{v<K%LNTsIj?Cqn}JuyT#Mb!LVYr6U9O+N>(>0e>1wEA=wjn7yeZ-T}9
zFM#yVIYyw+fk46>tK4h;`XnLGnq%!4%x<eUoTOe!i<ly$b<ZA~>{<U)eaY3w+Coyw
zOlh2=4qJa{**3$z-*-{84djv&#r|j-pp)YQx<!+tHw0q}F}|vx;Un?#M7N7-aoIAA
z>?drpR?3RY7MuL@hA1QL1;lIdrvt`f5fndrH!?ipV6z=xr<DbQ&`;^VgJEN34#a6@
z;TI*j?Tm~^HwL8@203z^2af_=dH9K+gBxVo0swkvEL3Ej&mvL<93T;n8)@X_n{lp&
zZ*AoeIynOh6#5A-Tsv9`0A)N^b9c+lrilKgzvKhpZ_mWb;0isQqU5<-LGW!`n8^8x
z<4I1On#7=LtPiG<P0T78xe55|K{$DAMa_V^Ze!jxVW{Ar>=|GArEP|m$0vVI?Zq~l
z{@wS`Ycuj77D-QG1^|-nNjcZ>{0WJWrKQ^Ln}IxA-$`X$REMBo;ebDikfO8Q$RBUU
z*r#lGlTgSbT4mej$AT8XKNr?3%yrd24%C)^w*4B5(7o9ai-^WaTQWNTGG_*`rvlKp
z9&lzXLddnWKbd<c#RwGZeEr|}G6b`3E&<ZM?vx=p)@82MhQn4^XpkvRB5kY$#hm}a
zI_2+23GsCTQiw8jFcY)0vo|i>M;(h=j=^RBa0+C7%D-(H|F&iP+m-<)n4r({uUQHy
zl9Ls78TWa2JGt6?gU{|WNa5UvPn?R3KS2i%X#4S7WUp)@iHM0Ka0Um+l@_8MuC_06
zICmVFOUJizctpL5sydOwy@V9bVoz>;t;ozA<w!F5v;8$mc8_H^#c=$gFM0bE66e@}
zP|~pWOqn0_k(o->CWWmK<8E(=zzp_8NhTgx5-7uNkC@|J31DG~2+7>l-~(9XDIB-b
z5BUCr$ZAC&(W8n}njBNyA1GaX=8@hv)i+#8mFCt2q@SD_sZ761vVMh$o$PS=nJAOg
zYDV%cUeiBYfNP4K{$u+u)yk`T9q1{(VqsB{XX@?t^wACKfA-grb>CKQ)c{H4Gs?77
z3E)Z|U=f94sm(v@jD<8!ewN<c*_HEZyfda=Tqbn<mhx=xsrojsKddJ)Kg39^I)}8I
zRBzw-vyNH$`v;%EGG)+b;cTy7uH*)$WMjVdH=Hz>P*70Bo+YBM^cu5R(ThFz7J5p^
zUkA*A5%g>)+PGu8(zl4&lXbVvi)|$J;k>6$&a}Yh)>NK0j(a#lsJreoKpRm-g_)Vx
zQhBP`DNMZ?o6=3B#rVY>kOeOUaofaghs^5)+}>M$a}Mch&p~qZ)YhS3^1PWMX_%0%
z#KO~>v!9W;Up1OovMWIG8%j{jp;K^SA|duCmW_to$nV6bsd)Z?C29?c`#42;wfp(^
HO#S}{P0z*)

literal 0
HcmV?d00001

diff --git a/apps/browser/src/images/at-risk-password-carousel/review_at-risk_logins.light.png b/apps/browser/src/images/at-risk-password-carousel/review_at-risk_logins.light.png
new file mode 100644
index 0000000000000000000000000000000000000000..a248f04c978f945b5d623b16906bdce723f3350e
GIT binary patch
literal 27051
zcmeEubx>SQ-{k;-Ai+aOAV>&=;1b*k?g{P#!QEYhO9BCcTkzmExJz(%cN+$GXYb^B
zzunrZZ@0E;x3+ex-oM~>_wC!=x9?BRIX$7D<RviCiO@kH5T=x*s3Hi2qz3{a@}r^v
zCEDl2+#rydy_Bf1vMa*=B8IEVdFtWg;ZUqL+E*cRZNDc>rf*(oG9ecgqs#J+7pOlD
z%if|^?Vgrag{98%q~y=g7{F2rUMr-!n?=1!<IW4489GxQsn-0JvyXtOEF=|Ri;eQJ
zCw5`@=Aj*(H#ybtu<UZqqWIpMe>l#Nde&nfqe9@?+h-Xp^yODxUf!?ry7f~U8rDJy
zcWDpNJ|uocas(J6Fi;Swfl<<~?~|f%Wk;9(h_i{3nu>~wf=xtZ!vr=*_Ec!&^36)j
zlu7z?c;llgAu)xTqWT}qFPuOy4Bf>=>`$xkZhm}2<o`;jq*PD(og+kypp{6Am-LM*
z0#MVc@%1Nxn+7ye{BA$WQ^~@@!c0wJw~&8Ki4oqTuYl_B0(neFFqsrPz0q$QQ}e^d
ztV-TZl6FFPbxNs3Hl&hzGc{<ddKmk>$sdK;ihB>b=N=U&0<V9mEKE*bnq;Kq|FR5u
z^iEIV5*_|fkf`+!Cw+aSgt#HLCNy{fx%pSf1XbNDGmD`HfirZH+6;?kQ{E>)jjw*8
z0)`{_6;Hx?BfFjsKaCAuGyIMfzvqq@*=f@%GfcjT8N?Jhf0wIPh=23@pcS28Dbzxk
ztvHyU<`x;=8i(#YRpXVC1Ty0JjT9KUsE~IP_wPtL6@@irZjmmia}mYQG2l(ta!b*T
zY4u2SPNe>6Ap#~Ccv2=re(wFxwFJ3s>b3vH-wB4a3>AI*Oamc<KV9f9httJVfQtO9
z{XZ>LA|>6zvU3OU;Qb0|pFgRWQF3>$m-%N%YBXP4i-Zhhv?AfvptWKbGG_QcLJI^q
zt?++Z-#qzSV2g_I41WFkBM1rpH~9bI>g>?SsuZ)BWy^=~y+s#g`80DjV5h8*&Aw$d
zS_>Fe6fh|G3I0r*C9#PHs@3>ao>MI0DegZN&eUY)2Q-u<ogQcweYol3e!>DO*=zt^
zBs2I#ft$+*m0N(7Iq4nh`!T%4EFr+}k_+;kzoPZMpDwLQJOWnq*BjYFebCCg=2z|d
zYVa*G!Bh+$crfmlM*wjii-E@3!2wLbPLLLPDN+ln4P`={@hRT|UU|Ui*qk+r1A?!X
ztAH=mrmEW72MpZaKAPWim-*svsmfl#3t%g@?KJ-at)K{?>cMxF9`hb1dMg7TSt}M9
zKMin)zdp`WP|cAiC@YT`1bP+-LTP32ti*l^RDo(!w~=NNKDz<?ggIfa=ov63pdlTl
zF9OK-jqGbdaZoEJ&=X@ChcM6@MakPOALL6649M#S|HI#hZN@7QfNYV5pEB=5o3AJe
z^nkCX(ZU!^k)=@qYNhgILAL89EQ#O4O$45SBRh-@UqwWa^=ddMw`KBXPp%T^hJ41v
zCPnTX!?*Ctn2cEmqsyiinAd)(O~Tvsw0=!H&;g#Qr5OyD?0WFfrH=``%*bFe2YiN<
zWLCTreT1tRzQoszzWFhEM4K&3Gw-x&T7V@bciYip)FGCie*>yHF#=VZ;S|oOSm|8!
zuVzu_harGgJ`h39?0X?-C;4?``tJ!r)2B}V>}1a4K^!dj^4Rhs{#_=n01(_hgRtHJ
z3j>Ty1XT}yxq|cWYWO<*uP)2j6Fk(A?A+{xaPO38ydS=G0_5=9Me9A>v%BjZUBVqT
z9-&h*k>t`+#I0;vIe9sn8FYH^4-n-0HD?FSQD``|_;jc8yCYHG9B)0U!Dq>Oknz*f
zvx(=l+CZaL<dIJt6j_{#j?PY6`b9D190A$rdas~QfZYHhCmky~-GfX#GdtX4RbdH;
ze~v)^r%&rG>$pdME>I6zd-s-MGNAl}6^U|3`_cVc9t85dm%<bN!Xri<4vPk!;dhRt
zm!{)dalejA6YqZmRID)bBTt{}yURy7coMgs1x}q%1Es#5qYm~TXSkc6>1pm#{_WvF
zZz?cnG~&1CCH+q8cUe3R_|3G5W@cO3{IkH`g+fH8{%MHE#hb`Cdrj+WW<xWM1%JBB
zn8Udtn06x>l)EWA<pnP~h_g<uq;?qW<V2u<%RqDS6TUt9<T}*c%}-v)d*Zf2ZvH3}
z0A;Pj(RJusk)XJbS8!j@NRe2m*DT5S3U0SRAO$HoxgorS?U?XtGDQTq6>p@P<Ox>j
z;t)N2%KX=vu1MuexiTJJOQiHU&jAg5sj1fM8nJ2h{yKrya73vY|D9{li+?_a6|r7*
z*$hPZXvp70mnXD8`RlyUqP{8Nj6Z1}pPi*)U|<-VnlipI|M1}h6&;<-*qCb_0?4)@
zC>M)ceVks)Wuh-C=>@lIqnNW=DhHU?PzU=kNjc^1bscoe{tqNdQ89%fUV-k1MSu8{
z-nSz&V^eQQ<C0_F^zM#ih*a3Ei@V+K*KD?aMXGQ))a7>C{W&o?DW#zB7_Z_#(-Za9
zXst6;QCpinUe`T;Acb2=;IeMGcc$C`utJm(K_%%{MRDI-1m86j><(_za#HJbMfOHl
z&|Ghwet{Xdstty!nwdj?<Zj95^Udhp&yHSJSrp-11R^VK%xQ?Rj-ng)X6IMwM57@L
z7)+IdnMzw8>g)EFTfkpdqh%PQEK2Ict((qOHOln9X6NMrYZFqsGE!BQIi=0Hh_1OA
z|Gk<qP<5xT5>d@QHH4ZN(@^CpQT7*wR3~nl*s1P5ECY8blqbxQQb8b99UX>Y{>zji
zjY{zdQhwTFHm6<X>j4vix7Y$#zpeqZ)ftCUx(&{cCe+PmBLll}*fOMmKdwmI6ZOzK
zr~jNRRh5>rDwM6D)vsZAA3I-6zO`NO5*YT~>(*-PMcQG($HpS98hIjO;y+T{+}ste
z$6wrbGJ*}ezP$o=5~FPGO4UXjtI{#zM>8?Yj;*&RbGaQ}!h6In+V8wYL8mVTQOef4
zBm37Q1sN6ijsqx@unub1BX~Dj?rR?3<>bHvqs+_TFip3k<9*{0ls1gfk%F0U7~QSk
zOqhpBZ@Yplj^G<#w{Pi)30OlT93oba<N8F_tY11&-L?`<454E=YbrWAi;7w<(n(2L
zIZaJUbG$rHLZgzRDKs<^Sy`F7>o=stQSf;Xu3}W{y=#pl^W6yuje0v=hACb3)vGOm
zag{DwY2vro!yJ_`$IZgLg@9qVJYm+EcY3_POm-IGOcwNMMhn#~2&$@a>1oUAmOJv}
zC3vx+Mg1-d?F-0r^OIco!o|uvrSp2LRb{2~zCq&=0>*Eu9jaP{#X-d$Ydqj0%(uWC
z$Pg1s&Tk4^Zs_t$O9`10_}nV)Zd)E3&<w2AJWhU2c&bzDEG{Ct$jHe>t(6BVDsxGL
zT49jQqoG5~*u5gQ0^Ja99kPoV2i}~VDy1}c(+K(m*nV86A%-4}U%<_1q&MZXj!UXZ
zdpwWp(J#+krSxc@n>-&p&cf@X?AQ6+!dEA#R=E83djS&@Y0p7NtR#?(*wXT>O2f&M
zLNss)x0eFcLk8&~zW7(^A-Ai<t|0wmH^G|zD`@_j%JTJ)%f|fjL$#v^Gx?5t73Z?2
z5)Uu0+)D@IVo#FWANX!eW2&PQfU)fTQu!IQlm%-d^?1<vV7d+_y-9c;G4Pz66q4#R
zdKYScq+WS9&m>S*g4R>DDYhoIpQ;lri>ilq(u#zgAQh}z<92Gy?XdN2!L|c)?M3|-
ztaX(LA8%ETq1ePw*}K_H<_V~Dgf<|kRP6L!-(}q3#TirRD&`I8?b#%Lc5b!U!@c08
zl(%)zK-%Z`x-pgr-zt-zxNbyA7)}<btPu)cwPA0JN{|uM{LVKTjGs2+U2Dr?M+E7X
zA74rs{fTt$Y2;qtn7<r&-YSK?{Gs1+tN5_3n4k*L<*hHb<z`>($>O26+MV&AFoF`)
zSk3!_LK_^{^lA!o93)W9xLGjvonG>*50Co|Xkf{2v8t0*meOe&_|7x#3hhk^emlPe
zAFqe)Csou!!A8c$NpYQ#UV8@7@9QsQp4zmMInriE<N<Nom{+rP{VnI1{(ZY-Fvaso
z{d-zG2~MkKpG`6<es=OwK^K3M3p4|CinWi_PZ@O^xiSx%j=P8llM2Ea>m~85<{)M#
z*TX&nne4h&R#x_~;+nqW^=_)q@|+wPcm7TDK*)!+IO5gpIKj7y5t@4_?8RiRqPm=H
zOO2Qy()@5<+Mgj39CX)wa$@gxe?GnWopb32U{Qo<X=yjoJPx8pvr-EYpFe+|AeV9O
zT3Ar9F{uV-?{+x;Lx_D{dGq0N$)l7~8kWfM)dy1Jf)1*k3}TSj3{;~vf-;Q1V#l5y
zxm>ftkQwxdIoCT71v&UyYu<%}?<g`4@Apgu=MPUcDvf(1eeMkMi;8~wJZ$^KMMvX>
z5@PBO^PPUnpW;8CP-3-P>+}Y<Ky#BR>QmKp-NYU)A0L*ZQHx%k#9u@J9<xUCctF1L
zz#^2O6~sAuncd78&)+-<>223hM|xorj7=8jcDg0y<m4o}{Fo<rFD3AB9Ep8(9u$P)
zcG62dID#<`_=6k>WCFryE<{I9|Ff}?ueYx+T8Lb)tFxxMx-aUj#DJaUe6`%eNqmc>
zj!x>e+kKi*e_WzhuXx03?iDW!BkMLlWIQxX8(!x<=I*uZFr8RLADWgFd}7c+*1nEH
z(JTWUSptK@_BZ@iE82^cpSNlcQlyRRtk+#6A36u4tuS9A&<{b*kDz(!5m&eD@4vrf
z`O<SZUt^PgxBPhPBUhWutnc?MSas5Qe~v1KS|Kjd`z%Yu`w=>xCl^bv_;?lhxO3In
zz35SxpL7*+fOHWhlLw?Wp(Ukt`)zXefBs}8xTC6#e|>$6#om|xU=UUK)E=jmuWJxN
zRwP>f34~5gq<3&IwyR6r?gM|<)>aRSjw$>8e$BG8V}hj0xjqW#m87+N+|O9~=OA1B
zhMV)syb_Zm6zxGe73N%W3S-AX)$CQ7oV*4fWm9u=^Umc$f=ZKgFV&Qv$%BFc-hg?Q
z0JU1_F1ZT57)+PE@`FKzuoiz^2dWjQV{B2F`PFi{pZ&fAmiODPNm5c$c4ei~*x15#
zg`<;`nD%`I|K)<i$%;RAU#;EHSvTQ#QY!YUs9@dN`JOvIAct}5MF;aZKO7!5e#8?i
zBm$i1#>`*Oo%$j<IrZIov5-0kmEc<FH+SAh{@eKG;ltZCqau^jH>qR!DrN8(puyTm
zr-~S-bxo9-OuT_iRYD^8)lU|qzUOvXm&-oO0cEBW)6@Me_wy~ioGsUKc77$V#;V!p
zaGFZX$ib{**Wl+Mmr+pe_+|<z@AAah8z!6IaZXcGj!LI1vCsIM|6t@Meclks=N=t9
z6j%{-Ca_#TjKpo#_IuIErP1JA{H)v7X9x{8T^hd%yvZwUyRnUEyLTaN4T?&N*{<{+
zyC7RalIDzCT85_C*%<X=<;6PB@W$F^`<|m5b91dtpOQs}8YYi%boINBcob@yZ)BGn
zAaClCO!Do@JT9%>E*D*lxH7Gd9mZ^*2J9G*)#pQ$SjWbTmmlm-4vdJJe|sa?CKvO%
zb5=2=uP(H(lv)W`&ULdXBlizVal%IS`T<KRyGfVuFp&CK_6I^oQOA(7%sV1Ij}zsZ
zvf9~ZOD8~f-6Juuf>m?VhV4!6bJam+*dND$$3W6`e6=1Kt`sItm>`#EVXlDQDAp0*
z><wDsnDhQ^QItZ|{Mo5YxcPB!$a~t1%Al9Q2&r1gdd5**wMBE5a0XIrd#yCTNlmvc
zZC!mE?Da+<Z1AR)Zw^Pt4_*EB-9=4Htm)>)M$fR%gM(c|`omeCam=<U+(fQH;I36s
zTa-6b!gM~PS@)0Fko6KKC~E9Q2_1>{ZPi`x{=LAoKDq)!i}}d8i6&IN>TcJ2k{Qzg
z#-WT6o!so=qB1!iw1b$E*fo>*!DK_h=O#uJHpF}A=-5)Unk3*=zu<A$gvVgjKe63q
zrYTitIA{1_1mPgZUx|?>`Qs*ruf=`Fn&s_k&d^=7>0;3R{Tx=+plvThlnNtc?%1{m
zWt6AY{|#}koPR@5sXzOH&OtQ2sqnY*{rMUh7Z(?0!K`FrADGrMUTN)in#V@B;6r($
z?aTa&3+GBk>!B3xH8vgmTz_r|g>!v|6kzdXEG&{8#jbhYIG?fi_DIGo>{-$fDd`n}
zK`X`$0z3Ddr9~5o;GL$|5LJmnji?}|Wd7@tFA9fK^hC{$4C-uecfs?XqO{JJ51!WY
zNodZe#*r{Bh39BZ%M9}o{k(^h=ZkS;-PsIw?j9l}G1V$_9inF}v&*I3wQjd|r!SL}
zcyFy;MjP=e<(ZOHKi?kjIz0E(a{uOr1hGaTld0`4?!J$3vIIWQTmFO9*I;_n+oG|m
zZ)!h}F@{AceE-Y<t4Tdt54=00_5ids0w8K+wOQi3E`7Wy{p~GJ=O2oy$H5Ps_G&*v
z1PQTWO+ymcmE}{|EMB6Pc$>jyY!5D*nFg6xsfmajNj;qNxP!dqL(r(TidwT)Z8s}s
zMMz_2P4?<iw=r>`P3bRAovglVbG3-ZE!iLY)|mLM%&w1e$YSyXVIoO&@mRACCJ$h=
z7YTVXy&HvV*l}*vKQ>vaFo8X*X!kn%R^}%@HJ!cKo-%-*7ItWzHGS)ZPr-JIXE0q5
z+_<Hbexp2r0C){6M367x{>=(RHhoR@Tt-Bmd2!r=tMA=*vP^b_#;V?VUtif*ngkRU
zo%CFPew55{Vv(mI&kQ?q-{wj~%&%2Mu+T@p=RHLSx1F)<oJlqfe*KsbR0=o{yPj_1
z?~^dPL1%<0=6Q7W*oxa`E|C;PKI4E{d4y0gP<VNkM5Hvt@g`$h+Z~#NS6om)ivVg3
zCrX|(n&`n@3+Ve5$Bs!khq4{uM2wXnq$j>GoNTJOXJ6@|K)|W4@_U+t<lt5pQ-AIY
zVF}4+e>u~uF?LIg?bw9ApFzJ1c7wdfiOw(BlrbmG^V^0>=*^5qn&ooZRJ8E?sfEnd
z$1^Bbi*#FRz*m36<?rJo<~5c<sz;7iI@jMmp4JBh{TVsR8D6)-kTyC<vD<Qcc3FGQ
z5=j=r5dL<CjrT>a!Yi7?gJOKj7YOuS@+n+zMu`Ny8(jw>X5*Ba?Cd}!=S!Gsz57!N
zKjqcBu98Q|N8I`vH9oVQk=qYS&qd}C`iHB9OR&&i5(Tv*Gh=eJLE7<&nAtXVc-}AS
z&0#6?yccb;DWgreZvvvfada^LFmKl%)e!V%IUTZG2A_;#za|Sv#F<w~v2WX|LZq;d
zc%i4ehqK<;56(|J&#=Hq{E-*ySS5{6hk~|9E5zuhbjt>oTyG2}-X9iAjg?;~CMJHq
zAIMkA1CT2w9_8`9nUR3psiEe`)7Jtt*n~uuG6P9@4oc*MN8!vd1p94dyVCe!(j7}_
zOOdJ}md=xA@0%tep}32==%jvj2lWq^A4XWr-=jA-xm*O4k_HA1wWUck3DnZ&Mb772
zA)Ymx3Cr@)>alR7e1`G!^RKbfbR=j_&k;3{T7W=zv<pWl)S|3=B6%-Ro)#s|eNg1c
z@sXTxQmf7=;K_hh%Bt*C2>TfJaEKLuLRQ;#6oGwevkKHKCfef)53jftAT|BzbL5bT
zVE23ba|<b7j-nQIJQvpwq);(r`mVXTIZ92Q%tZ?}Q*n=l4mWE6LglD;eviAQxoZAC
zLpUdY^UmSx8q2I#{BNY0(5W|vg3-44m>zp~tza@f9E(;AEJp`Hp0m^6e!=ykir4-=
zpAf>!CnhF-Um{qTo8y&^R#}g#9w2`81ptY*P2-&N)H9gj$L<48kDc*$)2ZyhgFqF0
z|8BfOsh{;&{kh$*tWy*AQ!j_UXJT`HW?}oqe{m<@tHbLUVr{<v=s+Zpx<vdeR2cX`
zii+r=J0T@bD*%{a|A#;=Bwn-<t&)M4R}0`VGNt}-i>R7>5##izK9r%OGiJ@`Mqzta
zO&CWUPz~CJblAeG9Y-XO$|6S2jimF4FK!py2RhsqqMoc^<Qx`C{Yi<WA_Dd<n=d<?
zsG4|5Ny&@SS3{E5xNlQlEn|Ru<K@y*mTi!XtQ3fU^Q?=nUbM5q`ipioOj}3M!M3e-
z(eeTlP3=EX7U#)a$07RWvBjg$o|x^`;8v2hMEoQRD~TbNC(g%zqeZ3$BthimsKCp&
z-;m_?=BwA)b^!uKU8T>T-;C1I(BJ|{&(4Y2wIXzcCv`>2-@N|<JD8xAjqeF|@W}jk
zmme6M5sQ1N?5+2^EbnN2p)AnWZ!7nMjsu=M;xm1ubYzT_fz?L40bP=QniM<kHFw%w
zi_}CSTwg4ACw5#4mmA$GT?glFS{O!Y>FEIysL?dDntY09-0ycAx$CJBCTfS7k9JdY
zpK{h-I6eSJ>|I`uCFfxi-QaP1ehfCTToSlq8XPq4!^lgzZ$%-dBXe)C&gpi(hD7;w
zW+J{YP|B5!GToo8lvwh*)EO>98sD9+wwkBZ{JYg`{X_rE8Z*Qx`Quq@F;5oBD7v@w
zr!QE46v~E#;m-+dixL}{etK<g+TBlFNQKK5VtSj=q-qhRQgt&I&-mf%2-aNv3k5JN
zLlen^(@LNwO_uX#gkiSl5iBM-b(G1m+rOFP#+AAPg?{xnVBznsPpLF{AO`z$Rcizm
zQ$??)mW<MYYz9D-nChKXqpm9p<`Q><4vYvE!hW|2iKtV?GT*1=O&=V%EM_8bFh<na
zCX>%YXt$MBSP}#TZ?xxDWztPB!A-*E5VwPKMGkJkH7AX>;Zl^X4BChrCrsaqoZVKl
zP|k)q*FO+M;V-zYU-s6?9&4X<V=y(6r>3T^IrFeSZVNuvJ$p*P4DwZjJ{Q&DRXWy9
z<=R~JFg`CNH&cN<#QLyhEp{NY+;%<=ZE6k8o6h9Rd5cV!HZ|J$%owmM;gOh!KdUm*
zl55$Ppi@h)yT!y0V5{A=gE|xu6i8}O%IRSg=rwUk&YSEQOixSr2rTV|&9iTc0WS!d
zrHjpQV`D?o!NEaU(B))9>N?NohT83HRN~Lz!zTE_NL`5-fd6tD8v)q%hyoKFA5YN3
z>meVe1i7~Y9CK4_>70WBbbm^;a<<&*q@+zIm@Z)6q@R>@_2)_DIF^5;nn)H(<?+;U
zkUZhUo0q^h-fMRrPAJcwwJw6BcsLS$3I^*uRrNN@Sg0;@9N`#>?cYi`vJiZMzrjJq
z5zCfZ<T`+!NzeehX_9xJmv0idS)%f+Ln0`9+27Oi0}j&#t@l!=JDyA4G<jSm8N9}_
z8kCh<-A4f(l_00TTy7BG32?A-a6c)b-pPoi%Ar1Sj(w+nH8y&<dQlz5iTS<FV1_*a
znk|CK2gHt-fv*=Qt}MWf1D1UIY{jUI)rcyTY@g0m$sXBEEiwd#3**3(rRMpOIzG<l
zvjv(*unFRbQu~eb(aR!~Wu^sD&S+x50Qx6e*GqZd!@x2S0F~Rkft7ONqey%wqO#6R
z7GqK`Ykj?L>-lh+4&ddDdl$$#6>Ac_gP{;52Cst4&Ifac7Ge&vR}l2PHi=7IEqfV_
z_6w}>k>5xn@L0R7+x#7d=5P)QxsHK~_RoFO-zv^8A(0Y!?2IYkFYQID-E59f7Bi18
zM+PGWaRMz!-xF()D!rG5Vw*;~51)AOY*s0^YQF*C*cbO~$b`Lv_RGfhdGe{zYinQ3
zY;59J-!m}80?5($9TcU(<uI=0I=LkZjw=Mc#X;@)iuBZQEL#e2;PDLJwlR=uC+@i^
z!h&ANF?$MUE5%s8m;7#VBik7=?)Z?2$|;`PH+R{3XocJ*4Y4I=oVSmyMFy!)c4>?1
z?Z@eLv&~^>x6f?_r;)i-Ns$M|jlP|{sX56Kcct2Agm9!{T^*18s*@=#n_gQ};<ZM%
z(}AQiDw#OROdz-H-JLAl)LOoYo0!D(87)^mM+G=H!4VG8Vn1l8QzotK1w^1uR$Bon
zW1QiK$Se-z*q#!J`Rs~tkd9@2b5bvcM5J!jsX}C>CQg^p_UVhw&R+22IT-uq91Z_n
zPXdbp%H7RsN3aoqURKzyw(D1Y&_%`6)%=>w>r%4dG_6DUym=zN`HTvP%CI4rpP$+n
z$&Wk{)UI7|mLPeC7rGJ_t4iLqQ8gHBq-a;|ss9GnvH+w#DfC*^1G3MG^7FY5Ey7<g
zM1${l)wT?*V7E(`&D2cIS6^o4XKU@U>a^{9sZK^juoL@c&Y;Io-emw!C<3=Eee3iA
z5KpQXx$>#BE(><ST*ZZjTIMi$DJ6%(I*?>z5pJR)TfGoE#tHHfEhZRTS0$UKUP+yy
z!rUpIqj5UPVko1x+2*jmQx!Nu$7Z<;`f0PU`qkbHF9Y!fb^QUf`St+gwu*DfRpj9)
zSTG?nPcGSb?ylNqSzt#%gDB*n@l?L<YAxJoZ>IbtaoAJ5`SJd+pUL|egWGN`KooX$
zynfR1F#X8-<};GMzJ3OGoQ?NsG7AQH7Y2T;cVkSMSXz2>=wtiIT%hQ!Cj#S`d#)T7
zDK}%orK*;X!eYze8|EJk)~WIY107pK0-Qo39r5y<uT4=yymc;7<}3DHmz{vj2ESCj
z$=k-}yuV<fo&RM!uEhEIx&8HKeE(>cM2Gi%lmuziq31TQ*ZM2~dkyGnjPAY3weoAZ
z-?yRS=db^h!b2|Fy$S35<2w3=0)Tyf+<BV#C>hEh@H9@6f+&-p!5%f@Ws~Xi^Y2J;
zmd-lZ8{`ONyF-+aPt$ngZ3Ju>;+rGt6YZB~%@YphtEdd4Gnz`1=BKIxv${(>dd$vY
zZM?=I$yD<=ScvK={HFsS><^nRv98XUe6IUXV$$!j4;_k4#XeMcJwDubq{aPa2%a07
zSzKf|J{nJdm?$!EP}K4AzsBSRUDA<inWhfduA$qQo9_NdK6v=<=;)Lj1+z}#3&}A1
zBf}Yjl}gF|k|~fWCkA_53F)N!QJvB{9)MH9{9TDCMGD?0F-YDzB7H3nu$Bw2hq_@e
zdF$qD<Iqk3AMzH?+GVQWp{QF8BBmrQsoyOKD7r7;|I7qx{Q5%QHL;pp;CjT;0a1Z2
z^U^frW;SLz8TU*L>vP+LFo}#!qP1VOT6=sm^?B3vj+zPDLNIy)5@hgjx3DxW0%2~=
z@qRLm-(z5oF~_1_;5byFXQ|2KY11MY0OE`pW&%f?^n7k>eCW!v_kYy8r~^CzSMe9Z
zM^r>zMejO?<XObyGQcKoT&oqBik*E8t0ZQeS79l3O_T|U!CU-D7F=S{0Gndfuq)+6
zd`ZCExga5U^Z7%YEjiEDz0Y0b<LG5wMBXyQEap|ceknFa4nc0D=f+$6jIDvhx8>De
z{)7d<sr-~&3yXII+dT%u`>$<(AT<gjL3AC#%uPGpx)|Ua(uvDVtR>sq`cgx2<bgNE
z#l^;RD~H~f4Q1eI+8F>@H0%t)y)P;K{hL{YgDo3CiUEvkec)HbY^8~exp{&1`{HT>
z0s^U`o!ovN4#Bw$@^VELuY~G%t#2Lao3PeEjR$a6!tt`yXm5vJ3C)22C7v)f#}a@K
zK_Je3#KVi^_~A|Xq_5gnS#;6#q(vqM5<kd|piAUYn4k9me4t!(d^~meFWBgkJFHl^
z8``Zk7+gPp8))?!v-MSsOjkMeOHTs}v0{3_P^+-hu=x{#@)&%~8(zgfjvwm2#n_U^
zVah<pwaZdr)Tv<~QNQRW^^kQwSfG&)n<Uk_Nq{>rYBtaO%+ag?R}0WVu8#s5_$bDr
zFMMOPbm(Uoztai8b3CyfGZ;Q#TZN5!n7A`~QoTh?=zw^Ak{ArO7#(k_bCgp(a%X0e
zl#z*n+dAX7+oI$Afql7gIPD<9@s@NWC2I5)POt{w;$9s@e;l{+F}gYc;n>iIvPu6`
z|8(iLulO0q38E$r{zlz)+J{?zCuirN`+C)AN5QgT?~6)S{q`r77j$%V{hlq=tlmd$
zPg#8)?l5#Ma*_qMx3>Chq4zCkV=|xjb+(=_;ul>QHbK(N@Ij&R$uU%Qv$Kk9xk8Fc
zSNCLhut2BSlb#Q}{53Yu8^xYln~s$7jOfvVb+N!j2&XSgQJBwt9)=%TJlxDsiLi89
zVq;?760UtjOjxQ>Jr%fzDgYcIm&tlu)=BI7JS8vP;2!&*5ckgLh@@$=U>;kMX-_kZ
zqWE%@XAz_PjgAX<*-|lvT=fkNRG;_062o`nP#(-y*XIC5N<of=;fv+eH}#RY4j}mC
zILtqr@J)2yIX{a1_S?5k$jPY+?tzR$#MtE11^8ElA|)~N5S<6vrxP$!@cC^4cDTj@
zuou)*dmPE^7BXvIKAa+3L$9cXAbSPz*3XNR>0tuk>$(T^Q+bTc?yEPxG>g=G$K7P{
zhhB#sNF^8;PP-E{H1FU4z`&IQjq~?4Uk}<O$>lH^E&^m_uecVTlg>;=lCj1=2n>rw
z2M#W#ZsD|AqM(!iCN){odP4yroS(#NwS=43QlEQRF1y`(o^J*dzdzf*p}^ET-5QJ`
z13b)0d8C&tz<nQ?vhU@5e+n>)nQr(RWI<(q{_(2yklh@AjyuJ3ba6P{hs->m#BQ<C
zuzX*#2f*vChxx_Du`C8%J%KN2ePd%|6T{-GC4s;M!{v9bnC_DLB4H<l-3~f9p5xhN
zTJS}xWJ@%>u^JjOtHAimFaA4di^UsLuR8s1gWA~Nn1q+CAR|Ng<m6=IBc!TI%GvqC
z4T;})Fo_BPVADOX`@s>j#)E)Js3o4`^^bU6L2@lR^TBN+rIX??^$cw{s3{HIAoY*y
z6qJ&JU2(VVrkHn*P)WBOh9Ha*5~dm^`g5nF3S0oTKSUU~n6oJDovX6g6ns1t9K5;)
zLYf{RnxT4eP`6E5$&^?^-2eb-ayy!}wiy6DZ(^z<E23`uQmKv`3Zxid`^xcw?sYW7
zH0M3h!fPe}xP$e{iG>D@nxLZoe)MQsM`VD=l&yHetOY>fiQcXm#lac7Fxa5@FaT=+
zTrQrB$V`LEx&4M~c;juG*$27LOmh{e0CT_4-~;<s5yk4JUHwx%-lEt%UN_w`gAPtL
zM>G7D(|EUw50H+JuS4%pfq_vLM?^46aR6#2xL~2xzdq*3aOo6*{uP)FevLgg#z!WR
zDULw_T=@o=TEKo9u3v+uMi$-y1)#=lS&v{!;^C)dxQS+CqluoquYgj3@N6BO93)~M
z9>wY$|8DYE!RNxpmL64v+gp?KlS#EH)l8;&j0$MGV)WIQk_!B!EF}fke%CP^-m7g3
zwgLyG(QU?w7)VAzCU#3T$PQkvYnxd@Lo<&ZYlCuVL14L@p$QjftmxiiPfL#`cuJ`@
zqv<&l6x9Vv!(~J(;_f9&OQW%nNv6%h;=DY0B0An>K}vW>3)}lHg*n-^pP~~>5ff<X
z7~*PNNO0ga2ge7u!JA`Hs^~pW!d6I1Vrnc+!v!gjz=J@cH5P~Zy%j^FF?Hu7TMeMx
zcM(iKt0Ne%9sUTw2lC@32}$b7Hpy*vaivxl!T0A^Y`*#7Otf*3Gq&qZ8@iVR@K#*1
z!)?n8_1!5kV7@B#5jr4---3~hn42r~Kb>TM_d_mK{qGppEDoEA+<bh#|I}!+7`xga
zt;g-VM3AjYGm9^tr=y~xA}33Ciuy*9+Iag{Jav4s+Kcibd{tH}c%Xc!LF3e^IUB%h
z<<??vBNIWYJZ8@bSb)c`AVPUcl`t9Jxu)_gTBe#rvM-vTGUX#CjG50Yd3A3bmGkuW
z4*e_-yaup)a^!37EeGH(kpK9I)72GCKL4oRy#~|RxPjlaSWGx21A_{4SvH0q2j&-Q
z1@_(te==zirNTN!ettReO%oY;)gVLsF8KXfSy}x7B^N`C`85SP7e5+Ck?Rz>Xd_n$
z0<$so+V+^IMrOX~Xbx^OOaXa3$XDfeS$nMR$w>vJhiK5owz16dOjJOLKKZ}&V4e;C
z($iu7f24^-qr}0Hl9OT~yypU59)g3H5PV@m952r#Bb}fJFQ63<<Hhl$!at)qe9fw*
z6=bSDs<r;rQh|_UM)7xi(|EPEM@@*KY(J}99C5oce>frxVCh2hX_RZ>YliVF!%|e-
zCVOXZx4K=OTG$d*ilCKs3{4lP6ynR)*q$}Ze>Ju=YgF(Bm5ByXJuJ3H+%WetP7b~+
zJLSYR3(yQq=6HSw1+L!yQ7|*3i5B}SVtSpmy`+)&>Rm{NAXxD2oIMu>|M$Pb-d25g
z^b%OdS<36}D-K^MM)9Ts&=V*$YkMQ0%)#?jD`Z0IZx0J?MHn(!B%iMjG)BG>CsJAh
zty)!B$HxZh+$&CXKmeIvbPYE@3sknwtZo&jDxmQt#at42(Lwh1Zf~=44<~|be`3+?
z-&PEZJSGZTNuf4~>f)M;do-9pJJ+NjK$y0{ka9)gYjz%<PYaa!a#A`F43Htv2g0SH
zAXhO~wKmTvZB~G811{5|laf-Xn1`tetpv0GYN%Xg3Y@UgzgdMWVe7%2IjA*8G3H2n
z=`@lnb{_)2M?t#F!HrD06;%(o@Fhf!E_*r(7)$bhsj~nH)<<NxN>}J3r2$JI8Xy-1
zOf|);Jn~$)z*##hBVPn-imiW&q{==!R}72PCTdY7Z*Uq*W4faO2x29@t?TQwS*)^u
zJ~!##97o@nJE0IhL1n9koQDK&8XExy+c(~9=VrFceD><rprWu~$+N`XVa(_*fu1Hg
z+D3q>S|G?}GQ~7DHxA3p{NQJwKju_Ai5Iw`3tb<q&Ma1vszQlhtQRMnq&ZKO_*X%U
zN6zJFRs5TMTCT=V_1Y+_SSEv@{-mfiR-1aQR~$)W@+(UIjFO3tymZcac|}KpZZrbm
zOW+I8D#PZ=|0o^XcqE;3ebra_)nfGy4^b_8Tu8P2HoM5XN)g~jjiOc18mxr#7p#$4
z1l9ha>XC}TRiC;zjIIoIIRna#zMnL4=gY1`0IzNf#<}exi4P?Md~6U1P_-=_U=viG
ztgO!u;$Zp_W@f0A6HcpLAeR$d4n+s1Cy;x81Y(NeCuLzZqRw~nubpl=#l#I|Jk%=h
zwpM%yspZI=QhyS7DlTOIxBMEANl1H01e3D>)Gj3*os#(0rg}VIZ;u{19mr=)dK!Cr
zk42?)EtB5u>LBq6)3g4#{q9X@RfC+xnwoX0b%8#Q+$c6Mi}gfM_10%t#mCoG54DnQ
z>SnvYV>h+B!eU;;mHZG>BE#i0wK@FZFA<r%g6u*|-%}$mD~{g@y6VeFdI8r2<nB7n
zx98{X#wPDa;u}*&{P!v*nQBm%_`p%sTuk1^JvJ6zvvx^Iv+&ZgORMsG1OThpJj!kG
zVIa|2tN<9QlPV@%@vD!r^mRt{ZVFD0=RM!2JS>4A7SZO7Z(EJI03VHnxxA#BOHJ!N
zMC`1m9A8n%LlM;4?>G{q+T0Z}R3ZPfG<Oq+CGU{N%f`qgr#HT(a<XxIh2#nIRkUie
zxjF2~lG3R@Nh~ucEeF=5dS@E^3X-9M&LJ<}xZ?o>$l<;P?)3o=`DKqI6vUUF64Rbg
zDZWM-upr4#K<|^O5&}fAac~illIm6FCeCs0VR<a}KwRLd^ngdCbOI+%>k6;tb>{xa
zJcQ(UWt0d3R628Yo0W^sGF%|;d7GAq$OQ$U)WpHYbN<?@Ow|=@U}RycEsnpC8Wo=A
znf|AWpnhYS*`Ius@Ak^h(*itjTUY4vh?Ac@v}rPftn+R?p{<xCLBB+BO?gE#6P!DZ
z90ok>j{RFc9Lm+=BRp%iuP@hFA+sa{weC9}eLXnMA*TOei}W7~p16$H2Vx-qQg|A2
z_0*pWR6F}W72f!lmKpbe=Xg!ifpCQ`ZPskc3))rdo4n(pxSZTix-3qYiGkY+n21cn
z8q%dpmk&>DiFL4zYbXS4RN7Y<f!Run^Mt40Q?kcCiXqsN@#lNFts`i#`DD&MA+&vK
zB{ng7#?+`NMlfK+)$p~{&@dbA?yZF=TpizN7|2xYJ?f5HGkzWlNDchzFo5YrCl5ZM
z6?~N#{}xaJI0N=F*p{~dkO<X*nibjHe@;wHq21{ldZ&SWlV>JNTUt)hrGQ+KI%ikN
z|26L@tsFzs_!o!Dal=Le)c)KJ3BIV$HrwSUk7JkDUf{-WanfXCv@`c~kCcM*>I^Q6
z(vwq|sCq{PIv;)}$NYKtEbvMF2h%I)9TU25gDGenYA+v|Y6A#8<2jZ4d0>?F`EEzj
zL8QxT$V!9nPckM_Orb7hM`R7?)yJ3JsCtaT7!;l+_Pty|oUYpD(qYddjTA^g2bmq5
zj^LaePF@eZ!q@@;<cR`|1=g!(Wk7d%H(b@Qd0}Lui4YE!{J0@a7XbB$=MZ&Sp(kk0
zioppF=W@Gb#RLN~-P*w^lBVRjxMACa<%DSfz1}w<D)8If%1(ANy)arzvCBOnkoDOb
z@|pQEM-a8}Lh}$e$0|gUZ^(8<Ml1_sAa{VhiW+$-a~0VAAX{Q9!3lO%dCcYCJTv6W
zKF%gBFi3RyMqCAg7CEOS4}BrHcn`yJPPO(ffBz&V)?skzlcf9~V=p~Ys}M$E<Y&z)
zeAS<%!@^A^&QJmE{d8gN?@yrC?~p*4^wVi?1|NHmmSLxacBTGOBFFngRUTD_mU=L|
zY{yJJ=A_?7?%|@2$~hoJ0h#0;u@`4+vszWW+5ugTwb8`?l*>3lZmoLwWLJHEq-f$T
z1+ngU@U{w`GkyteHqhL61<c=l$v6V(vsp=Nq6KzOk|MJglrI=Uj`;r*(Swr<2A&8Q
zf02!slUFOO>v_U1A@E6*VDAp58v*KzkB6JTs(3U9!<@%WJWh1}q%9R|uz5l?%S^>5
zTB@%@l=lwquNP9-@b|U`NvCVl-s8EqXjPNMyDSyL8W?gSrL@-0E`oU8SrtNpLw5`+
zTELNZrx)v6EFA1E7mEj(ZdAspx@^Un7wePT@2{%QUY??uE<O{8vyIe>yd{Cn6kxGQ
zAFY!P9slvG9;VglcNKfpawJQM_%b>u?F=TM?~VW>CknRE93Y~lmQP}T_C&1(;$+En
z>9HJdoN$DXiOCbm-!T4KM3A~OAcjG8Wz@FTes=FoWbfXGi-n<6l#sI}h4Ab8YH<L)
zr;xF!b8VgfAbhlUY)YIP1gD;`=2gv>OHfh)qj!Ko@>y`{*E~^(7k!3qbwNB+vnGM_
z7o#I9^WVDe;SR9!v+K!Kh8taRfM@~?LQomZf1K4T?877zCU={oLh0)J<P;mmC?4ZL
z|4BN!4wPIyqE1JzB&>^<A@VlQNXS`#U?xW-(2f>ts$p`!7v)SNeea1p-u-L*?K#I&
zbbX@c1MqeC8!{U<)zVV7d1TRcOFBK3zJuGfXLi!Z3Ao0*$N=FF#4viO-{tmM%{Nf(
zJ{o=MPeQ@7@^@&j$9yVF&iwXZTaJyvxo);8FO0Z|cETbV>(Z+<h}o(fV>;q@+dJUZ
z5>*4nUDiliL|Mg2q{ZyJy9ZH0ka^XFo{3r<gw=F8cWkAAA+!yjoV^J8DcV-Gba|f1
zbFtdCAivAZv`ULZgwD0Ty2MjF!%gR7#}`2Ouzg&OoWtre#C6IS<gsv*&>h(u_XpQ9
zi3DRj@7qt8%PBOxaCpeT9561I%4+8K!C=9{d|2iE$IFW_YD^M$ALFnulDvA?vm8B>
z!U!TApK3w5ZSN9PT|XiP1-;gJnnNr*|5f^F;LatcDspAZCE#u}S1s1ux@%|9KeyH7
z!#W_FOc0eam+w<i&BIj$%v^U+mYreKSOuG5ELoxx6!g@#Rf}KSquvW`v7BD=>{sP-
zLMM8gyg;0UgEh&<%fXhBUsZXy&KIoE*Aa*^k5{<`U3f0};f`X!P|V{fxPB}kbF8c;
z?=p*kB3Z|YNZN+o>WgSizF)9jN<+!x{WHgJL}7k5hpGIlg%TMV4rSY)OR-D(pzF@&
z$)F}109%VhPf)Uc^oSbvQhBZN$?%~^jww3ULGU@XQMNIFYlZ06u42lE7|sOCGd#mm
zXRk8Jwv>MS@f%iRDWc-^aoQxYV8qD(q34HHm}Ulg$pkcLD#LFcy-JgP#_k1SDsSGa
z|Dgr}<j@zAvLxeYiVB2w2YD93c)0EVReO+g-*`wvihs?dKa8PAtr^_-DA_K@wpV_N
z<l}WT{Sism_E+-lXhyn3j)=}4=!MiK_Jc6UK~lyflFcPFD~uIsTfnT8Kq5y|KZX{_
z>p%AoO2c@e)4c%^i#8V{d4Z!vQW%REh3`-zsZ?X$JCVf6MSfV|VVUPWOeGd0v(Eft
zD&(<uof_TXyfZbLJM|!#w>l1OYWwl>33KpW|E*5N7qvVt=+&}e-wf{8rK9uY^0nU;
z1XGVxWI)z`r>AH)^kXtneRMEw|8}e|EKzo+90AjRKX4NzgTa?)pLwC4frJf@ujs9#
zSK=5n=w6_P^wgHrg%aWFBlOl>k)?%Pfen6c$v0f~e^+iW&M{`njazYUx4CVM`XAf9
zKW|eeM+D~RM~zv)FfaI86*PW?!}t254d;?D;{um+rOOoPvambhHz>C|8|j1JCFeNH
zX$G-Aokx*p?T_bkaryW}Z_&&{f58?{9A3Gkn|{l93Y^(&7qt>Da>_;i>@R$@)lY;I
zH2zTQ?iHIaK1)cgyeBYwc$&khK*n}PWq%cbH9YhBoh9;zWE!Rv^9v+m%OcO6{rXta
z`OR^0bi8nMVD_yz?_QWBSE<WmO4nMoDOWN|LGKxT>>JP!qQ+?DO>a~1t-fUl+x^ZU
zVX`TT6CEMX+z-CcEEZFp+_eDL4?OwEYYNlk^C}KD$J|?lTraq@E`H*Pjyh>8Rj_sz
zZy6!MzM0!uPwgQp3&?`!a?Al1Cg;}MiYoiEP9m2T=+<HrdcWS#M@uJo506{8TsByb
zf`|#bwQA*lSZT&O6coIaO(*kW+y?|vl|iLT<m_{Nm+mylDP+g>MJwBCNT;6&B<|}`
zgl-j`Rv?|pI#!KeG{2IU|Aqq+&xG^HcjpqrE_YvREuS9oR~E&b3SI<0FE%&Z?1G#R
za`}uK@*hv{_VW}LJm(8kDEuUEbwXV4y}$YWcJP$Iy~tQPQ^YDNquR0%N_YpcKTm8}
z-m$nJ;BA;rXcBhNc#?I<UIsO&Ldv_Ji3@UD5+Q3?ihS^FoF%BS=$j?x82y`#ii{jN
zxoLcDtlZA#5)*0dGph8U16OT#jm;N_)~}YQHCh~vt)j19%vJ<TaOK?XK{{5}Cvo!I
zEE}B~GscmfP=iW3?CrJh*8-IWcdkZgRsM5YzbCc7=8XRZrUt-n|BKl#XjIuNfnD-I
zt$5FGc0A&bHnAY&K%y?H*GAoSS%S;6sy&~Q)(As$H#L%ihBl%EEgA3#dO~+DZ9TO9
zBnNe^u<Q}FJC0?bq&cYu4q<U?YTV2bGJPOc;FY8E3ojNTK*Lnl^qNp@YtzIychjx9
zEAWObot49ecZaQ*JCui-<eOHnXeD&XyoSw>?%U;*o`g!k({OUc8m9NL1cGyB^4Y28
zP^Bj73$^6i#j@+3Un*Rf0`-wI(OP|Y)h-D^;v_Fm?oC{R_*Fk>jJPwhgUrIgcAu-W
zGE`^vM+8W%V1Q7uGeDy_!fa>EVC<rErTdo(gO~SHbCIh5oR<H4N(wlHyg|A+NkixC
z6c!WlD3|+<1Q!ReW!Ho1cFMEpQP4;rq4%!1YLgqAo7yzh0{?zD-ZgEz1PYhTyWq~R
zIT;%v6qV&oR~eMqVA*AX=Js<e=2@1ptKZzW6$iTCMKwQY?qhhT0uXzwU>@1ye*e<X
ze5$&NgV5_Wak=9CXxYE}Q&e&urwTondMdPld3O9}gVm1z!$AA$i=GTi)Hzq~XoQ#U
zci~&H2?*5YWxWv@3r9S&Z;rHNm<Vf;EZ`vsMYdH4&kqA9zjs%w?Z`E}yLvw)pQsf<
z5TR6nP?<g^ta1|rL*sGtg>vhP%zry0G>9y;X7s)1XXYrfqB`@Lq)BTro2S?26sy~p
z!L$I?HXPzu<3Y9V9}Hh(pAPRozUWnVuNf)JNBY!k7yPs@M=AjQrDtAKlgQHJ$}ix^
zj>HwBcJ{e!@@qbOZRf+{>W4I*hIcPQa{dQQGiTM(znEs;N^EU<xDc}D#z@6_l@u5y
zugauEc2kGeK7tVIXiK`vWbkIRSqv3>>@rfj$8SHkWEAE_+gaWI9FdQX?<J1J2c$3e
z=kQp2NAl%j41^;WOT6XiBZ?;RhE~7=SJFCONUIn}pnH!3t9D;CGXhIRyNKE6vlbS9
zBMoNuN8UQp9gv9J>Au`18#U7_>CR^Jj+|KDVsC!e?q^>cfZUg^ih38>mve;T8PhoJ
zObqrQ$M`0|n37_C7W6oA|KRt~_l7os=eGfHreko)SQia^lQwa=l?6_vvL(~RS*0ts
zvO;Vn1`@1#fYvLLR!`&uP#FzEQ8?$zo3W^<Zs*)#<gv^MP_O+jZK@8T>m%QPoj29#
z9X$DZ`xgWXlA3SexO+%26FXD%AR3w`{Ke15{0WG)J))*WT(XdHfrPO`(9>6KN8KGb
zDMfI+NxdZ_W06PiW6uj~`@!6VPx5HG6b?(P9ctuUm51l6)*J}Wj?fqJpB*6;bKIQ)
zw#>|(sNGj|q%Xc&LEwDkbuMZBYakPar<;b^r^IBf`)7wV#H<|(j{Gyg+-L|qc8l;=
zNr2S9+{7iRsgJbD<sGb<&zBuYBo~!_TbhR|@0&0&!*^Az+<BJ(j}TjPg=;+<n@bM>
z;zR+52HmdG5`jdQ2^m*#&bjukw`On!bMX*HS0hhYOGdza6_K_uSX-<7F8-UrceE9X
zdhyCyQ;4=A$Lx(q-{Iqm0?(BYoqj#q0bueHGEjy10IUPhaj~w-(1D*V9$`Ho2iTZ-
z;4{dBKzU|VvYck#E5}yG@BI$`;S7TqbxtRFZ4H{uz6QE{f*<z`VbKXby>Z}_bT<#n
zS1i-`@I_b)D_yr?zA<kM;QfQnN#A<9VZ(!Oax6!lHQ2D%oMlKM@%mEpp4^A`2rsdU
z-OaRMKx((epM#KY7QFQQ?=fxc{=q&RCRbR8^|g*w4Hq;yK3m#ZQz*Mo%y79SBugAj
zt#}3h6$1+5n%A)sX|puJ=1E2XRHxzI|HpFfTZrkACZG+x%g=b|4c@vc*`1u2W9<EV
z1bYQeKgPv#knUl83Ez@4^m^Hjj-^|lU!mIM*q1@Zss7H_?HPQ$uDt-P<>qGK1jeCb
z?286MgZPtIS@~g9bxHUPz){7w#)5T*sJa}83ElAh=Bw5OS@mr^yFr-M{A?k>1VEQ6
zo#>l=G7>TxW&&Raw%Ke|R5<&92#zhI5P%%&bhVxlYV+z^gVlFoD@Fh{_RmvORsXOB
zAP2L=CdV)u#hg-c@(z0Pr3r1Bbq^h2<O$1M9-EsVFsEDe)HfE9=YLdV{*UJ`o1%Ku
z6zE30wuy2P<YK^-BiYJi2tQ(6B$FR}PfQcjZ6p)wR5w-N3_b6CQSbL3cqGVGtpb^O
z_z-F8-}KqP>9c>+XTX>Lf9nTHvj0t={hL1fH+}Yho<2i-NijJ&$x!8#mz`gyGB?kg
z)08Fh<7GY#O>}H5&D&G^BAGNpL*^d@zJg{suwaXegaS3Y&vAU7m$H6@K}P)->nCS(
zi@EH_Kv=~&$()+I^Az~Wgg3tW@Avmf?2mTr@Ecd;1Cg(%LVHd9UV^~f%HtF@{I$Kx
zP1agmlgdr@mG^e--#SOlXUt)llVwf{+S}n(`u}vnTt%%QH5lwPHo3@PTQf27oQ72E
zy;xw@6HueP7S`e2kZSLcbk=TQ!uYv<B!7*PrY7%Ze(+Y0U)_?mlx#I9j>1=A($iHj
zVj_jy(=DJngp}L)BcQZE2e~F<&5iU;&x~pS4BBJ>Q)fzZ-dR%)!ehVc$n@pwMt>mr
zkfH+<HLu7~t#^MyLt2rlUxJ0QHw^yze#mh9o*_7dZgE0`P9F|aKRrxXouvs?ZUsdG
zzb`cBjCwdWt?)Dl;A%|?K6Xq4YN*ZpO*PzR9G4qXt?O1x4X)D8#>?LUZb(4<tEAMQ
z#8f)&-03f20nF<Qa5A+ojBNjhn?qM`&0!*qZwzU(N!;v!*0MjKRzf}y2WThL^Fn|Q
zT=C+mQuKcb95I*Y^;~&6Kag;3vn+S@@k^05hgM(iMk2d@aPcMO0)UHxxff?BkFXbO
zFhL8lz~PUt#5~W0gDFOwLqu8jLjbY<<=Wa)ACo2ETsp_%vEMsb&CAjzDn%!uTbO$(
z9U~r1`Wx0mgBwoyFS&)f8=XW^T{Z54s`<zi$mxW=E%KCE$_smr29>RX14~w7h@g@j
z5l+YSQkDMF=rtA%M9S#qr%v<!z?r$;MozM(_^={k+|~tIf8a!K1!E~RapxNBv+qJt
zI2}q~;Ws+=$6lDtlEh1S<4S3@MfdS^>4@Dpv?oBKvsiN&f_CRG{2H`i*#T(u+Ua5|
z&f=iol7cOEJdUdabGDl5j_}tvlkB}?pd8;aT<D4&z3v;fX>~;sIVCn$OR-9crgRxj
zmd=}e#3>rIH=;Q`=nNQ@$_o`&n1EkaA_UoH6+Sxq1Nz+l;j~6w;5hs7nG54G1vDSQ
z?Y@qfQgC{)xcpm&#G2VAUD8nwhYh})`*%?}I`C)!)1=}XMW;$Y1yr;*)p7e^9R#w@
zg0(>iK0oc`dqi(ZaVADgAU4y||1Z^@cT`i)g2w|$Qvxc|t0<tf1VvDaA|S<3l-_&q
zAias80aSYLg3=Qry$28xP<ji5t|E}os|1j};rHIY_s-dO&h9_EXY=R1bCb#3$>h#_
zzn|~)K@}q%Vfm){c`gyaWtrudq|lG2`L1Pm4um9Rd_Bzv)yL+HqMNrug)$yIB|82>
z*&GD(V+x-yBnwb@*3;NYxV~?PVS>S!kyFOQ1IJBP`#!zvG39q9iaU63-O?Xl<~O)@
ziySoli&rqnVb7^YxLUbm#w$1<4gnNCInXmU7n$aZl87JKGx2~`kZGc-d;vCf$>h33
zCbjn8QSntAlNQ~Ak9PZXl;?{~`$b@RwJB9k=Z*0_1r36`5uN<lsoeFA#P5uc-YXes
zSY)?xDgIg_67MD_gd-_boI=UOGfhBt0mNqH@aV9Vu(*Vj+83i2ADthEe5PmF^WhBK
zhXm)&9dv%PFWJ2c`2F<>e}Uiyj(8w*rEYM(hQJU-Jp*xuGGPOl5hEtTk&U)DB>2mG
zPjC1cT0BGplg8E?fb2(tsK4=Tt71oTY<&?tR@pBZ<?6`UoRHU5=hv=%`*qNbJN$-(
z8Or0X@-Ua<6H(GM*kIT)qom*ao;<aeHH5{=8lwua25a^XHffPNypLXYRTj|#H2DG>
z@N=_S>Fdw=>{#$v>2>RW2lsY`X05ymzsYIc(LxW|H?`!g(w<i2zskt;ubg)(b<+P_
zU%ae#a6F9D69QNNft8sWp1dw-#($0mz;0zdy}G^F0hJeZfKGy;15GPV(RoKFYjsGJ
z(u#K<<jzcPNFuF;8Va1-7`wrlwBK-gf=8s8wG1MFkNDVn(YQ+DN`h8}0auz5TR!Xw
z39Ncy{qRoQ)+0h$!=~Arv3anOVo4c=`%3{}^ySsP6X&DgHdrek-17R(d7zsq8`YP4
zxvyci`Rfjjj3aJJ1M71SF}V%}RzTXxkxqx$TjbOeVP#js?2L|%23!6GciRkQrp6_`
zyD-Lx*83^p63+CTm+D3yf8`zF%X~rW4&li1RGGXYU<NYA(=pgh(Lua_r7GaXS2r*|
z#V+vpb*aL!n23!W;A?Trx5q{QENnOFz_hbQ*wUKIR&(<Wzgj<JcwA=ohQgk@c~GWR
z&L;KETLT``cTS(Ypb@&C)g{DwR=(IexVR*iue(09Tz1OOv|X~bgAJvTYMqdRB&PNr
zZfurT0;*`<f#;wh2h#RY(@NF<5v$Gn+k<ZDx8=hryX114=KQy2etefngq~W~Ea`pJ
znWKJwvZYhuBBO1CdW~6DX<er;1bC!;kNUz+M4spO4+b5w?t3t!F8H(7gJ1_Z^@E|o
zcRLeRQhlPk&*W6^PFj+4f+GY|`#87LdhY`kdTF;%<&Bf-G?bIm&rgTE!0`HpvRQ`y
z+yG~6t%c*Vf56)MN0;RNHOE1N!?soQ;HAAE;6~(&iLT2yo3enz?`1j`{JIo#g>YO!
z-Q7A)SgskzZ2pD~ks-dMieGTLtW|fS^Lr(NwK=9dE^T;R-sF@VB%3g?*Y1#hzcU?|
z3ePfcEW)@asr5^wDsxnQYR4rfTaal%!Iq8p)hGjL6pAF^v=>>r;c7~%$@V}GgR@`B
zXVaj&f(~1;8eEAF$Rv9O1)Ck9j(^0(O0WWk=8QE`9*bIrj{-Ia!5;9t1%AC$RoSF~
ze3C-7#oS!s6<T9fF}ni`$JA4v1BF@-PmGGZSB$yHuT4>daNr&izsrx9a&J3Fdi#6G
ztip(8YUWH}X?=UCTnk`Wnmcf$8ewd5UyEdQmg`6@w=e?!+O-SC6oBQ6-OTagx}rSC
zVqF;6$HzuRFnr%d09=kuV3sD)?8u<yrMBB6w48jxxB%FtV-{Su$>w%-SdkO{tKF3h
z46m3F91aQQbTfJ)0OXe39<T!V{aF9wG-m_$_QJ^uXz*8Me_yw3B6h0&W-rI=F{Rs2
z+uY~Dh=XHI!;{AaZp@%KV|5AduOF!U-+G`*Wc2c=W~Kyl#JrYI(r>=Lx)!=<H^r?-
zNlpWnUm#7R$TT-xpawIudU|mrxk6ni1vswc&q?Sr^!}NR*hqJHg^F6@_+criKt5Mk
zPB)U$I;h(|d&f|Ta37=FHosZa_3puYo%<~^Qc#C(wi{j)5vUhAN=F`)db7Lt#^$@k
zNqWMQH_j?5>2+;-KH6{f5O_$CzU4;-3f2E#qqEgtd*kz1i}#?M;S$nNA5IVmbwQ%J
zojRW8Xt3l}J4spL{@WzA6|T$PGs!MM=IJs)NQ<G-d60{xQthdrc6+kq%%G&UyHTEQ
z8HH5;_xxujie%B-bRp_u+_ZbrI81nvwj=)MWlBm<qBeBzQMewW40woSZUzD#QOnpo
zg*2yEWqB_t0Ds>84!X!s)n|?u2lC1H?mmjWKCRHfDfM6zLrM3Ubu)}?W;&MkM7nf7
zPb6OZ&pco{%(@&a(@Ieq(it!S0h`k60^&hr>olSoofwj>x;$}WOBZa&+?P>3*z(cQ
za#P>(PLw9bVsiIx2a>+3WoNeG>Fxrb0Gy(_D`)OzgHr_UkQ(yjxq3&@NMQI?QJ@zM
z=CM_{$`~I;Z({I+;QeD#5O*P9N~AH!j$)WuokT;Bh_s%UoNR;82~&O7i&)a)5!w#q
z)bPV=?H!VGnADrut`i&2@S=1}9!i%(AxUTyAA{Wm;D^TOwq-9fn#X2Suw>?DNcRKk
zcdZE^QA2MRYV>c^y{N1$0&8b`ymt?@NZ+&3-4ha<w|@n>JAYS&p9^Pd@i=^ajjq`N
z3$6J&Zch;=wm%hV5NoFNmF^Ly2V4|A8Wo3(6?`BeAE$rrqu;ZD0Td8jqKdb$4wopE
z3OLQXq1=}omc$Mqei|aVDUf7Z<Op?+SaGfMsk=UjYKQ!$J5|e!A7z94kBPon1F~rp
zr&T^_8fPMHFV*avYFBTB>r3Qn#rA@nroB<2y8YYh#k^tVzTXCHri1e@wS6zK^bOiS
zJ}=?-{?F3Z<c?EZJKF=d<8VajQG<5Yp)9T`^Qau6#>Jo8n{zYvO7Kt+4JZ_&Ce$A<
zypeU0-yS;Hm%6sK!g|q5HJ}<F4tO$fdhOIX>dX*^CXIc-rPen>2@Z~8zn|A}TRei=
zsC`wfBz0O--29cmuJ_QCw-ac@>gbeF{StA6&G~a^##{KSkGgd!RkB{y^6?Zc<-`uG
z%mfzu=gF+&<h^-}ne+*~0l~cU2=F3;HY@*Ya$B4{CP~*rZfYsZ-ipSAUt)AHCRIWg
z#$$hRXkR`MnF2?kf>&<QQ>{h8|2?^FA?GW-;`Bb&m&d8?a*XKi7P0rPH(fj413H;D
z8O`jVyZ6b92nrgrJl!mP!PxO~AV9Hs6>HEk!>=>eukGvwDVx_-08_Aj;$b<LKeq$S
zGEd5l#M-`eZZW#jTW6LtT;QBrzY-j>+fdz+dVhcw9S}ZhzcY<5aP|!OjIRvKH3RpS
z$&a_a8b&#Rsv$a*>aga?u`hy!41jokUSImR*8s%j_UNV!>fm(}9BRVm^L$~6h>;K9
zjBNBN{N5tjh5bgHe0h8R=|acl>j)#K(`wNyOKuqm{y&Dn26j5hVMUt`3}62f<!<#y
z%f*hVs<88X`1~!!<<3c1u5S7LX9sM-$XtKB1J)`DdyzNhyDb#r!3dxEYObka=s+L<
zbRP}n#!57O_fhkYCl2Ua7x9~SM(3mTS*-_9I^HNn4zx4tr}Z24@gy9833>S6E4{W=
zR`{PL;i<HGRCNO>GSZ)JF4`4wP;jB(%3#|c$RFTrkz#qM7e`9s4;&Mq)+=^J=#~UT
zq-32EaFQRlVHXyGX;gTvN4c@M(z-FaV57pm8~gF_W66gV>rN}(MWm&#Nh?OhZK?#L
zG}rVJ;`@$VbiA6tfNy7`J3U=MVQ_i~N;lOI&o)Sl{wbVBFIX=TA=wjR2?A{xZbogj
zIK5QAixDs4-v|ifG&Il*;6c5}J4oxNGm|99Owa0W73PWh(KNxK*<Qsj?6P(8s^nvI
zQ_%aJ-+I4{sE@pUM=Kunl0pD^-?41o9QleMjenOo@9jpI*t6SP^3uZ1V@f30%@(`y
z?>7v<XtVk#5_VTva-nenI%U<B!RT$4h1T&(dCSKUu2){V(U0CS>p+H(&na5VuK}T$
zxl>F@#JRT^|FC+^ZpkeDQCZ)K>qL<Cpg<M{*Nl>C(LS%^1{54E3H^CAuuc<*2zc9=
zS3$w;vIVFfK4PN+QZ(4E_b%BNmQvH8Wn-dXlK@q04)ZZ{b!oxChOA4mkNNlpTX7{5
z;di#VMp1Lh`82_EtVY;?&mEps#<l5LwOn6H$)6h0=>_v2V<81=5fz4~1;~h0^u75B
zf0qYA^S`S+uX=Gzl)SN;&Y=c{hBH2>S23JwWOu<|7_-LyX6<J)zqB%XpMOu+l$8(`
z>9AB)>K`SoD8o17HCcF+1g@okwLYk?c@q0z7-Loz+>T1rZK>W~+WpZQJehf`=DOav
zjHuak@mZ)Q15|>|egNgiY&n1;l-o8u!NRGC{&Ti`-S*wjl1~}<0u6JG`O59!26v}P
z?<IjBvO$z?f#hSK0~tiO=M})>lcGs%ru<UpLY!6>Nqx=1`iM>esL4I6d6`z{bWz-o
zzN4R^fgzKHpUvfMkbsq9-UbUVCcCH0Zy&}bV(i}Zo|Ym?!M*dbV4UeT_E*QPlDkIe
zHj3Wzhrk^z&$=oqIyfI~Zm@WnUQ3VeP<YW`<fmM+o#}P;6&x-F+o&}>I_)R|x(oq~
zuvel*;y#7tDM^yK7Ayb?U`h|Y)Bg49^YDpcF(<Sn+?g67?dN)0r~GBO=@nd!BXm1j
zO8SY28jp6HrJA5Q6YHlG#fgA4lUbvd#*6aRoLDhwlVvJ@4*89j`}?&1r{Uq6fI)iU
zf_wb<Z5PkYZjZ^9IxHa&doxsT#vAWdYR)O{yWddG2{x0QaesG}o8Ub&8t|?5S$Oxa
zJ|A1Idi{Tbp@Ec(@bZ~}rKVd#;cJHsF%-oIa|sqKz);}M$#TSNpu1zm5;MH(QEC0*
zHVLAX5LxZ(S0)2e<|7<bl@dM@U7jBbw*zJU=yafNBcMV6yLD>tQjVluq?(O1SV5Z@
z$?>sB);M?yEmus9p`tqDYYacJs6Kp~x_D}0y(1olg=r|Y#vpLE@q}F1sO@@eF@a%~
zKt`ADu{{*vJ$!BZaN6nmEDp!k>o!4BZ?-idhkx#yRsSiIHAC_zU`)RT7}ITkHfHkC
zS=t+J4TJOL`BiAY%#LDR<R4Mw{|n@-b@6b_s#*G2Cmsk$VlX+llXaD|5iTh8b<ez@
z>^-d+ZY*j}bPQoHee2hon3oWpz<g7XADQr{&0EMYng1EttS^11W_O)>e;Y+{dLJ;;
zZt8@PICVAR0uRWg{*2Dg73IOmrpOT-BOcqaIr@ScV_;M7k$1HLpCo=JPTuak$<Xv$
z>EdR>_P6Y*UdG4>z*cf~pjFdGN3lGgVd#fIziYj-UT5`p8xgDKF?3O^Jf>#G+bJDU
zk6|Mbnj{AJ@{f)hUR}L218+XCO3s{NtN#_OYQ4@LmA>yN_!4>9p=7zGxH@b$D#{<T
z7n7+W9H(ErepjRn2)xzZQOEyaE!l7t&x29=7^mLWO1U!a)gCUD{|H3Z3`C5hF1Vg4
z_s2c1$kFi*Om0)Vwqr{ufJf#~nY+IgSuH|RZ&Gl;P=Hk(C8a%L`Rb$DH(>Fz@bZ@c
z==Csl=jLaJj1CTKNfL<7#e#M=1PPh6kVNL3G^uG`U>HfrJ1g{a!i-a|Sj(b@D--u6
z&Op~9huk1s-aS<ruX}*yzrcR?MvwB6L~Q8P%AA(CH9Xf?%k+9|h<Bm(YDty)OJAz_
z4_!Gk4*LRuyR+$)MCU<M1s!wHqk}5~nT9+%N0S$5+y%jAHd-wev9uSXQ9?N);69G+
zjyr+Cva}ZPFU+?V87b%@W&G#ol<g*b{a`QI$UqNIjvxtlTgfr6;l~#M<`5t}VLD3)
zZ!JbNAuBtc2QzP?n8tO!UK?25okl<1WCZpU5Jq7MrO6OT1O)ExccvrP_k96UGhcMo
zsrcw-Ogg>3v=_;X^jpb*0HyJCHRR*p{*JA<ei*sr7U-V1XIDj}Ehc-J>MvqFi!+5#
zQ%_vrtq5WUEzLCd-}LGF<aPS}&lxkeRkkiF%^MrG-2f(WE;7YrZ&)Rwv1dEnw|BGm
zzL`9byZcu?vTLv78lgzIFc1Qw(;;H(!pxK3?zBe`*eTL&$qBNLSu&!P|GOC7ELUa$
zagm;2`pnpu*-e1HWMFTu9xl*<a8xg(mi|NQPF==+1RmcG$VFY$j01MOZsv++l<Fsx
z-5cUTxky^>C&J+WB&m<V*l4?9D6TjliS^eG5XG$f2=S!6*{eD!`4@e6kUE*3j`#cK
zommz7Mz0Ue!;Br|n3&WlrWAst-{jw0$+SpE6l~FMp$gdMVUs_DdivCFbH(z<`D20A
zz+W0*!^T)Wt!EL3#`5EfHsmS{{}9-Z75@#^nq~DT>#4XVU+lM(%Xm+u&e||OQTPm!
zJ!?52Cx#f#``trECZ|6Z5G7@Yam&jI)<42Qd_;{>x>$-@<ChFqTf){Oz=#1l<`(YT
z@wo1I=2HVHN7mM=tBB{&nS=X)xH!PA7}#I!t6aGi1Y(O%=i|ukNzEeCUyu<Jc9R(Z
zBxhffm7eia1P+1xl;n3<dRXIwj2<6aj!mW4{uDGJzJ)0xm9i$luYT)cxmu)N2h7z#
zpo61LYkAFDE&%{{-L2MkaJ69utd^j8a(-M!LgmSmL)%TXZu>q*DKSbMv|e-Sj=U1x
zlWM(~39{8|&oC-}Nvwq{K*X(an5Y<?Xri$J0k{tpl{+W$XVng#4XHDH{Q3fKIuK}H
zQaNntABZ6#UNg_Rfqt$pl5NV<)9*_p=_U=*E1fpZcE5=80|3_)Aw0WGx)GfV`hvOR
z_uq03_~nELdaLxribM?!4c&Y`TcLrKY_c&PQhuR9me%+?-%<spk!bd(Hmsc;C=}YU
z%YNL44D7vk*s1k~yoEGc*abaHf-Kyx4tio@MLIbe1qcIxvjx4sUKW3FfKg6oXy%L7
zSkGh23*u_i#;5yCHnwPLYLaem88G!s4D~c^5I_7Pge%7xTE*O7?cL3eZ_d19wgh_(
zvK_f@+HjgiZC;T0<;f-D9TkZy2UdUwEyFM+BYork`}!ln@XZ8)(3?p3+KjI%Emv7$
z)~YItQ5uA|lUy?{*Xlm8>7jSQCK0i@30Qi7liTBwk>T?*5o=H$9@Zo$g8^apBiugQ
z+KH<Ve&>ma)nwp@M@E2P<l3LsHp=1_MDZIcDcPvH?6|R-5KxA-p=)3>i4%PFew)hl
zsWKMC*h^~#jusv-7z>)UGyzJ3^k1D9G+yC_Kwy<h)&T5RdnJ}bWtkOVrif?ney%$L
z9)f_joH{dQ{lD7!BY{UolZZ@$LhE5G)VqIu0q%ZMp0S%G)Y@m=pSwKZ`jc#)85v-m
z4R~ENo2k53pcHWCQ3T0m?R|LsXnwRLC#<@6UyImPK#`gKvInC{Pv4X7U8ZU#(&E6o
zQ|&5u79$Y2+2FRuzz|~oKX7naof<LxKn;X<9`Jj8(ndVUeZTPoUif6>9CQSJqw+EF
z5J;4P>YVB5zWh!_Z~@Dg_#yOMW1;L{XYx8ERzWG2W-1J4rUpwy(a}?>pc2_-3|r>Z
zT)eDC!&y0a-+804hRJlTa1@OCq_97!Jd>rHc+WsgZC|xHUaaHgQTHLC4*m%Kg242@
zE-BzwOQERa#A<#DeiouT{svoigLoozS>Hh5!R?);1@sl>)g{(UBRysAzimiE(|6v?
z|DJ&$1!4OgiRvA(y5Lzt;n-Usu^PCJWLG(uyCBe@+=rglvKv&WUQ?S=c<`Zl@|q@*
zdIh%Y0b1PaT%#*(-7i7y*9x+3-ETFlP0sq*?(oW%uHx6e{`y-9n*}_jq2wcu`i^x7
zs&ks_X8^pixb0N=x=!}wwH#IkDutR?dZQ%0wqa@A{A4pF2UQ-oiJx$Kp_y04q?Jv5
z6W2r@^#TnYr@xUZ`xTLslQRs$cM^;E#p^8KsFhoi9Rv^>w7Xsh+Fpxqe;>Nb>wP?>
X<WVvjjbV!-mIJ9gQdcOKGY|U@-DM@X

literal 0
HcmV?d00001

diff --git a/apps/browser/src/images/at-risk-password-carousel/update_login.dark.png b/apps/browser/src/images/at-risk-password-carousel/update_login.dark.png
new file mode 100644
index 0000000000000000000000000000000000000000..a04d3e369bac7c459dc091ab03d5d45e3ab03de3
GIT binary patch
literal 25466
zcmd43bx@RV94`tYpdg_VN~3@@C@DyTbnk*LEz&F@or@x%ASKe$y|64u$1bI!Ah~oS
zy>u+G)P3=H=G;5?uY2dtoO5TKLEiVN_Zy#YK77>EQKcYbAR{0kpioy+HXtA%vLqn5
zCUb)Xcw&lUd`duIt)Q-~0P-c=oW7Z2YLj|&*>seTVU}W7w+rLokiT~$UPbR?XsB~!
zS7A)<lT}Vh?5$6s`!V(NB-_oo?VqID&p6**lX@piNk+y^_G+x-!A<JVaY4F8b@|fM
zYnLY(TSXrDgAy!!3y$%EqqElGrFB@ip~=yH>8amV(VuXKfsz&R7o#&OBba@bN!Kcz
zKvgEmwsj~Wa6ox?`)^N7tYvIwIy2>7_?>igv!E`m7z>|t59S*7O4Ues;?6Q|*8(F6
zzOV>=N}RSfa_{)o8I0mjxA-F&a?)1Xw9;*!xDFz^8sgi<atOCh<~Q-bO#9R;Gj#u~
zB%FEEeCHeAt*h76IUD|^_fHdTsAe%=4o%mB>sJ@6Y)!^5W&^T%#ji%lOF5Mlok7>&
zR!b$p6|3Jd^nUZ}FCPZ}J1W=NwUJzj7HfUDh_X@Z*$((+VHdsjzj<uZ+D1kvwZ$aN
zq1WzVD6fWFeoq6IqL^R%Kvc+vr;xZ|akYW4L2&J!h*4{+m?dhO(vI=!nPtAMNoS@I
zY0H2daiuGE-tphJEb6%0eUHGcy(N3`vhU7+kBnaG!f5{>Lj?Ty*P_abHeUYs*xZ7)
z40+8cxZ!GFg1x-v71N+qL<nl_liAPAf7`|hX&V_z7X=RR*kw4r7rGkutB7Q>$w$9o
za~1~wZ(eEh%G8^6o>Qm)RyB_85v=>hQpkD@7%e}8V=^hHvAvoZ66mDI=+A3;_5U~+
z#nP3a5quyf{72(giUe2FLsF<)uO72;T^GLk`QhgO#@FggQw{r9r#rz64=-gLj$fRg
zLTAxI7o!;&%(ZrXEJS(`UJBs7ANb|VwXEEY>88$!iHWmVW@cuR?E2fSz^ms2DUYqs
z6N;aVjEp$;^faAo+z<JyboH&=)bP*Do_e7$0~P1d@(eA*>yfvvJ~o@6gjXCoajS*5
z*1A(1mi8cIF^~KKKuSVGa9O2$ns$a%4;&7^CI3yI5LiYnWMaboLLGC*i<b+BTi6KQ
zmY&t|?NCgYMGVN%h9)J62b>I#ZXCe^|F8rvKAx<1h)T>&OJiusEtR-?z@_Nr6@7W`
zX3YQ&INIJmYzl+3Ygc-c3rJt)>K@($KH!cL5k@;*oCB>N@ovOe7FLkqHl@f%+;WB^
z@?M~VnI0&VH8)R@4=+Hc>fM9K21g&}$QQDW3=aN9Mr+~sGYJ4T$H_B%f#0bO@JZkt
zAf5He4Ek%$dRS^vkY7+U9K6$!HMS|&G#RNb?AcJBd6G+AC=5(@RtHsD&VMw%67@R;
zWo3UHot)15#Mrbycgr5KH=QN0R;8sm@`;HJ4<9Ba=<dk!RTX6g&3x8rE6uTbCnm0g
z>oB&lxftcaN_m=*1^z7*;39Uq;>aE6_V*tz8q*La36BvyV6?{cqh@Nj;|l{mD>8GJ
z?)O?n_jozHyf&+PdwVY&-U~`LboYC_bn1AL+E~2L9Js@Ac@IRPqoMNY-<P?0dEsV4
zY9_>8ru6y~2@od_0-3X^4|iA-M!#Bbj8%&Jy;;cSVzBZT<fY+pqp;gd;x&VR287{c
zG!=_KIRBkcbnN=vd9t=(F5O$0_%^`*8z2w}Z+Is?oxG0BZHX4<N**ga*sqDX9h(A6
zIp0RIR&eO4IR5<}3LVVn;VCsFGXvxb6*)vXi4IDq51%+EVd(I)mT$@HADNk1MtW^z
zIGQXQ{}v^dz#fYV=(BpE!Xn84*2>5CS0i`~8OYyA<-#qtgFDy4-wqKPM5_&bL&udc
zhy~$4eF1ZaafWeZ?196;Hkw6dP4KhG6kc=v&ODxv3qOZxos0CuUjYo}evlSZ{MI4o
zsn>2g#XvPFgxzo~^{I!^>oNCf$<cDN1=uHRva*qQ2ge0G&dG4=W07@+I5Zr#5f*+$
zMZMQFtsr7<4%YxaLVjAPyjk(VGlRH~X>W>o-ZF}pMG5$ZG2eh8RlToyvH$VX<fpj;
zhmZ%0jSuO_5MGL++I{@W{*)!%mS32qYfrT;$gCo>cwb2+frf=gv-9-+K}uvCFWp3X
ziQboq@a}Q$?*xTi#vuDOEOxKdJglCuzBGL8UWca%S;3v>cPXzHFDPVU@GXSj;`klq
zB)xIwBo6Tin6DX^JFR#3?kF&H4urZ7iC6!22Q6u~73wjXNR~6u4GSwL3ZDm7PYxMg
zsV4WUFmYP<dclTZO@(lwhV4}G)3t}c$FBQwW4()I(Cwe8(M<I1Ll?4uT2B<Wu-vc&
z#8X9Q`|Qzl<7Sx5j?j=>3Wc@_c!_(;?V<X7xBiXEX21RHwGS?iF7Ti~f93zd$Q$dQ
zp9Fq+PjU0>pE`0r4t!dEhmO+9#c|7?Jp=&gFCmIkjJLv+2xT1C-wBwAFL4GA4-Fk_
zKb}%w?>#`78s5M_fq%>h2~PWVV7%TnQ(EV0MrxW!&Sc%1JSygykju~O65{|B5Gl%t
zQ-l4am>9}#TKc^MQ!O!Ky?_7*U1V*oIIL>Pv>&QBdFEz)d)gMt#w>B|O2$6w(K`2K
zQjj38Jt?2E)n=H{^9_WC(I$WlsXT^d4BIqEbLPZoh^wwZ?6=p>9~ElD$w2V<yUy&%
zXAEYFsqbz8M|v;_X3<L<!U;RV_z|aF#NdoV?eyFC(V$I(evEn+m29m>%iB+a59#|R
z5hit%jV$2Bzrosi|9HU8;6~Shw)_>1$Kw@-g}_nI8@IZ>K%kB&HVIS(3I*-=;=Tok
z6k3y!h}W5GQi$cggA`V?Xw?bSvlw*VKXQ6kCl9biLk(0zRKRx@s3!(*@T-dkNd`8!
zM3U*3T+6)nxsVb2%<=2(4fEpeNXPgr0kb1}<F<d?<WwG}gbXUtpxcK5B8}WOZV|N+
zzK4cDAkOFbnwMfB`iWXCc^at+QHQ%^fZQsOS-7LQ{+r5`V0(i*I1NiLK8Q_*{3e|o
z=aYv{*4n%<B*jUmOStY4eZ87i0=IPkkJI;fE&KgT-Kbrm(EIMV(n@#8<w}}jz1KP&
zV+o)b6e%$&QM@net6qJjaQttJ=Y|cd;V&j~73&LGV-B8#8ZtzfoRDE`R=+XT6-}#M
zFA|q>N5n2Bk^)S4MS}(rDy)&|%7K0jG?vB}mr7Gx4s8l2rw6Zp^Gxkk>-a1v#6(%6
z`-17e#nqg=^cveY=RIyGy#trbH6l!Jniq;YvXr>Z-I{%L^3ULND+~`0hY#jw(`3G5
z5aSeLM1hBiFjS$#aMPPQ@k2N;IJzv7QTDl+Eff1cz}0(~^6o`ruHti5)re^2id=X}
z&_n3*ZIxtcH`j`I)JJMCE-LSd)<4Zq0D}|52We(bHKn9g=~~~>*2J3|EswsmdYBWP
z)v@0CxA@lG)+^rjtC1qr%H0wl(ZA(64(zgv=s7=a5=f?LfA>F!P(xQWjgKq)R7#I6
z<9^%KQ<3Dm`7*@B#Pkwch+M%ofu8~apV@o}jj6Gi>FFVJ{Vi?xKb`xU^L)My)6);B
zV)EV^vjD^N6x*Fz-wX&V4HsL+F-ny8z7ZH(HXlulDoF?}Vq1nmIsSP(tsjUdzeh;;
z_lC{cEa&wEnf{|G!E^rl<T1dbAO)2@*GMkt_Jlyv1WNv+H#hxyupZN!8gtE4M`Aw1
zghvv~i{HHNH}b3YO&7~Fe}4B5YTvyXP!QBv=zQ$lljwF_Ui`~!wB4-9`w&)+10`^2
z*Tzd7&;2GEv4u`lx4q$<@|KN};PT}H(CkZgzE_;Iz4QErNv+H2oC5xMVv(}6yX%e5
z23(6+>4ljYN;`GXzGI%(qOHcFal=%U!kw45UEsu{sqY2NKQOqd0U_R4Re~d^xdRcC
zvd8FjF`i4t<7JKd0L$_tw1JwVgTvY-gnc7U$<_o6UOtK+3GDgm_bX(lK+LwyEt!12
zJfdOjE|mKp{@?jhEoKSxvbVZk(V3)*l=1I=HzoG<SDhO%59_J-m8Qtwz<B*h^D5TP
zlI<V|FFZu*&SLsJGaWFtw{EDCS(wzhRGOBSv)q%FmU=!j5zKw!>PZD)|GR`JnJ<42
zY>B@%`Hb5)3I4q|6Sz30tgY~gY!*VExW4jUF@+a#mrHBoGE?e4R@85g=2G&&gIEYk
znc+xPKHZe=+!?c(<fNY{H*y8RY(k$$RCL%?iw5#{XvNNV&Z9h9R=~0<n>mTyNxKSg
zQ(`_q@lDCB;fe(S2!tUJ0!dW!*yJX3;KP3qo|5nKN;*wJ)v2YtDPRYm_cDR^E`6(L
zk6`nN1K@QfX_9%SX-HcCEV~WuDvQhSb~B{+;0a9k%KE<h^SU85a0Cr46O(k#_;)&R
zUXUzLU<Rz`xu%zvdcKCPo3%ADvo<l4!(B3BA?>HP%)R3ZkJl(dwzga@J$!;t80zkG
zhqv(Xuu?-8Y_4Ea-S5s{60ay(txYj+Zdw8Y&B^sUeQd^UZSjj0H*4DD(In@ntIohl
z#bEg}*IdqcMPK0%?lbOZ6cS(8k7#2krHZZk`)KMt8`5G@9LW6;>X_YPf4XNnVIl}t
zOyBdt&*sBOw}){cLr#zAe*&ur@=}8k#jqiW0xo%QhgGWkaxaXI4aNf8p$F$Ri;*Qs
zAUGS~m*o@A8u~Km5Eu@_0dtz|WlCmFrrvS$%&~W1@LQjpPT1qHra92_npz}+dBp;q
z=J}e>QOerX(Bmc1l?$RcF#!=+Lm%d-`_1}jVkmV_+wouK*Sq$)#s(r5y)Vlo9k3RX
zZpDLNdd$so`wPV&Z94_s)71{4faA;lXxJ$1u@}g+=@3T<<^@;KJg6D)5QiSnuF}lB
z^Ze5=HTRVHKNWCrnSrVoC2hCVJNnNkj#={^9w#C}PCbG$3)$awWNt;my`x!SaW)#@
z5;t1y&A%SB&F!YtleN(G5bs@hxC3TctHZiN0DX7#K<Pi&{~$TL)F**x=~BJXv?kGn
z2^Z3aona%mUOw(WK)Ycmw0pWaesO=l9{TB8Jlwn^l`=(uxlYmCjTgb|Hqq=?Y;BC=
zn@ZI0%#12zNqz87;BFw2dAJ&GS(RhvlU+1X^T_s5ie#P2S2;Vhlv?Gf&!tM*jlcGo
zfhbH`f~P|k`Z(UJ7`OZ-xA+g!2^lyZHJn=UHr%j+`)3@6d0h;3fU1{EQ`(dB2=11@
zbI`DWN2eNwAqU`Pj$PI}(P5tK{9qiP1*1&S|5!oV+qvr1l46P!hpp1v^-YTx+s3G&
zUExHexu=_c*-7LbFmb}~1X79G{)6v|WEL^kUP!(Ne12xnvxz@XwT6-Pv049wXR-Ry
zz(B&H_Y1id9Axu%FTJ)9`gmJ#zYW<}t=Z>X@v4x3&e@Tj>~UMg5~NK!><;>?+YQX~
z-nNC|m3i@#MvA=00?GfaB&uBsDmF;`{Y4pZqM@2W$%@C9Dc7a-eSuqI1@9Ho?Yp#;
zl^7OL-Vipab>^)P7bG)ma|z!%u339CG=VIhWFq}10JkyO)i0!2Z8Z#U)3yuBi0mg}
zV@mT&FgX*`$z%wsPic|G;`>r1xr?h$hX?di(*2y^(2BGo>ru}x;pve9$X)e+w#^_<
z><65hTP+BetA4mxN7YjtSx`~176tdWX-X=4vD$DaGqTtV1m}2~)(iR7#{=FU%AFCT
z8`zB)eHVSW{+}&)FG?`XkYTVg;y%5z%fnN|iH5nOSer$ID!;(Zt>$;`;PyGR?7&fY
z&}n?bs0w`YUW5i<3FHTOew0M4alc+Ws8WS&Gy*8Ob?72}dhC92q*3#iR%Kpgy=kaR
zro_?F5kFcU<}f{K-y-<WNU1!Z=K~XG4>hob4^@k6Bnl$3$Ob{^`y#d{a!~>Mf3-^H
zpM%JQ2HfctCG-l}fD{7FZLha{-^HXDC8BjY8#wG8pf!ql1gyAc1{JB#{4`!0w+$4w
zj*UqQJPD*7OuzGAWH2y3{@4*w6QM|;xw&L)^pf4cUcF{nlkk5Smc;1VO6$&vKdDtD
zqU1LRq1^croc|q9eqNJ;hHTidPuA|k;i)Q1m0|%re&oH17@{9-S!K)YXjmv3qd{$0
zpa~X27?aoj_A%{<R!oo4ykd%)q_(svpb*90-i%#9NZU!hIWI@&LU0$6KDf^}l{-^X
zS{f_%fycLj%oGk!j`8XU_sXjsHI@>c2XItPSR0|yZf*ftIT#Y@o4na6Aj-7UZE-1n
z8zVBz><+k#!8_`-{xsh`2hFV<2jjcL>B-EnF2(DtB3wbE8g;=4z1cYK|1)k^3GL4J
zlKu*$0fO;)m(_T@I|*2Da>Mm<Yx{1Utd3Lpkb|BfHD<uWb9+W6m{x;TT1twa5imn0
zjj}<X9LsO#!;?qk>0S-<efSqGw%emdlLXT5*7YU7`xz}U>u79#aYVAe6~+4K+tZKN
zdM9d}&NNbVO5UYhGlXtRUM{XSlv);6&;(yN;&X#l*Bipgd=wg=p>F3Gvg>wu{iFBI
z&tG^VN~R900?N?ky@ID>5r{9-#~oR|M?a>MUXwjbvwdM<vF#f8Roy<)G3l|XI=Q*d
zk9T2@%%K3mxb4&0YaB2?-;Jqx=V$sK`Z+<NHP#nc?$VNyT7z7Nh|As3bm;F`nC*{N
zZ4uB718`|>?iBf}6X^GWfS{(+LdIGXUEOa+ph}Xfv`dIXMM<P_4$|p9CE{k&hBfOq
zpO%GNe8i55drPjS#s>kpJRuI#Nxar@Uy2%UCvGyow8mly)}g6~>ci##c_i0Bf7<x8
z6gGx_xYpL8a6R7N&pILt)g#^|>FCOxew{v?^*J3z8srNvk9d_-hF^Q>=l3I<C#t*$
z)t)pGv9>-hy3OtRPlB)I5EjkM>rSN65v1nb1l;ddZg;~{)ATKaVsFBNm@7nzQzd(e
zD%!djnas$@ILDL~dlD8Dycvck0`Gt{T}ylo2VnRK2wwm5n+XUW|FaeZ@>>5WPe6V5
z3XTW}zQ4a(?0@m=gsujUmHSuQvRxKmS)BiW9P584N&fG9mxvO?H#RkuRpnt0HyrB9
zw_Mh@uulL=ebRzL5nvE#Vr-)FqSFA#C0>J=K*~xSijFGBCnhJa5|Sr*!bZk&GYkw|
z{;cZ=8tPWPJ<!@jrFF#S6uO7p3<_{O#CMg#HKW#L+<90`OdN{Wl0KeOH~MqKlG{OB
zyUF>yaTHON*8!|0>@Ug^5QKB8by&dXQogz_{3X9v2i0o)Qd6@E;9Ry_JzF6sJEpL&
z0*htf<MLEc{;h8qZES9?a}2;Yx21Hg>wc$mK%}#oEa5HAAE>z0H&-$Jv8b)d#US|w
z<os0|jq;aUVaU<Zva9do=uSgFp8BqyAh1>(lEYy?!9Gt8$VtNpA^^o*`0!4v-ocRD
zLQNv_N_;<;HZ@I}2W-;9oReQ)7p6gJGfGq}1LL!A9C)i~9hPxjyB9eT!#sIjbCuBM
zro_HRH8~`6(h}ZM(PlikI)A;r%nKi%WX{{bBh6u<LY6C|!y3Ko?L6zEu1ugbkc%e<
z&f9!o8*t}#tKJugNm@xTFp;KGW)nJ-g8cD0oFF`R=*wJKDzL*ZEklfsCIhgmf#$VY
z3SgYPHz47}^63X98~|%V{*G)#pL`ynhzBMq{i6_b26ILd2XOcdLFBb7&J6aWi>5!n
z2L@CX$-ER&1eU#J;Y0t=ktblIo4%QTu6$*0{-0;d6G_-sbYQ0?-qT_hwYv-Jh`6%Z
ziUG9uX5D5Tm8>(c)CX2tVKyrCK|>#n>G9`Ok-|v{lqJBYkO2h(qCI(qB0bty!q))`
z(q7@y|1~jxmy(T;F6+>RF(zTgx7o}`zzGe!Cj;{OY6M<FOfjj9g@C4W%R(?g-;SQI
z+xv*iI=0P^Oif8`RBG_NB6|RgjuZBo^3R(-o?hSB)3tESTS^}_hqg4HdY}GXk+uHC
z^e-e<OKA$;ZMo>=YbH4C(SPBRz2i0Sw{o1-QvH`!X*mVR6oue)R#Kl@r$r-?bvQ<G
z&R0^=waxvHy9Xa-igP5SYXF<JFMRkk9k|YX;h{=fLEaaTe2MA{-r}Q+usm+OXp$JG
zn7Nq>1YP&Udrn6z#niUnIZ!|TGS@nw-j#h6Wqe+h;XYwObv$E}g&s7A^h$@Q7pyEW
z*Ii`8sN`fKTCND%+jKcfmN<i>)R7r%HS6opGKZ-fIU`#zv%zpPpPuB?Bm1G*R;s|o
zyLpFodY$e+9f~I2way+bC()T~O}F^RRQ48Cn9kA%{w1^W4-VY*xYRmkV83=R#0tY|
zg>qudkBLsbMIf|u;cIa_tuDCWNZ0y&I_$E~EcEk^?c_XL<m-Whj5+HG>0ig6&JS}U
z$e;AD_QdWqQlaRCPJWR_1`C6L(+K(XiO{2!>$LkifulT$N+_@Mp@!*9>`(h0p)Nc=
zu^CCWvuhzE`pj{OUoSTY_d)BuF;aUw7wepX6jT5|?x+#%U{F3K%;$M#Z`PT^=WiNY
ztAtWeyxwDO72QFxiLNp`>Q&ACdT3xy_c_mptM%Z+cIRZ95lnZhe(5Knf-o(yD40#G
zm34C~K$7iVd+!b$E@G#1q!d_w5ggW$40jHDrj*?e6j9jT(xBhbDx(;+2^i4@y3ZCU
z_(>_>du9FH6>K4?ns?mMBiz`fS%1%BcdnOPzXC)8YbW>UVR&fxeD{D~i(gOjxwReE
zYrcL4spYcAS4^fsrUis1?~zkibrlZk#F#0Axtrp0{jCP;k$?5%WKY*Tq|iH}!UDhS
z^u9dv&m?A5m7!YrI#ST)FB$02TE3D%GJy)+3?MzvG$DWAp4&p`LXkplwa`fgixiya
zlLPc!{@M>2m69=>xNLnHY{Kg6x=A==A<m^v2OlJ+&V9Jd_(Ox11Cim?7b=+*kmi5S
zypwVGx-yYVSi8k^&}2wkbFgt|kAFq`-)o;s-><nd>R2bcc|2%0-U5=EA=epxOQ)%6
zvvX~=Evj`?$0YA02D)qeQA9#CeLH+E`Sv6Yv^`{bXy)|p(R?vA9&(H8Qr_|Lyzd_x
zxsxajY9*klb}OnQW$~|v^}L-4Ld`Y%__4;WUp6ea%z7Q6I$V;!Zaq=O_o*f$k}&?N
zgA|SFCXmykivh2EDO+MeuX+z#9ac$u<6*8q3+PTvK(V!VXMXI$`Z_+=;T#`56LcQY
zeBLpPbC?@BrNmb&jHY9E$t76hwOs6u(eZQV%w7!;-5SxJG+rOZ17GYBvy4SGbH`_s
zEwvM0lGsPQAz`r+@ZVjks1+q&{Hvj%nt62ix1fz_57Dy}Y~vt`ZXwO3XrXCm%EO<v
zs(%638cH?kidr$Ng^3tU!`3n-=2sE}Scp~51^RK<v-rAED=ALz<{27_Pu>ME+wDDj
z_DkCJ*lsQ6T<CWCX5+fj{J_3aEOO+yK|WEP(^>Dh@%YIIe(4_JEqMiUiAVix*n*|m
zy`yV*d$u@9d_)eR_BKQ6WtT7Y8bmIOY1gH^=}))Z`K}d$T*GHPCb)1i4gRC*+6e7!
z_T0;r1=34Xq7qOYtk~M1xZhHz?rHj|JGaX&T2Oi#SLlBxS`4DE-H~pPg2CTf`?l~m
zh={g=IoSd)%~&DyNo!EIK6)8B*F%yPi>5=9_|7jn$1D275t@P*t=XsSynjq@-(L2V
zBRSgpC>1Pon5ttk2ptY$0;hU8sTzEI7*ZfD>l1*JP>CI-m~C?S75Rz_CS-6^4yl6;
z*d&!<*(G_;QaZQf=!QseNso~kc3)kwKrNfZ5Az}R8=pok%LsrVcU9Ze33)Np&yOQX
z0Sm+tN#Zfve2D$EL%T?#mQ3}yA1CCYu+4Om5Rsy>&=^KME5jOjY9~HqBhB!7?d;_1
ztCY3PMCYweEkVuEbl!SpGgsgE7Lx1w>7Sm9-Em9y@Ka8?|2x})d{Cr;VozU)V{MG=
z<AfofJY~&nLO^qPT5bMLHi2F-<`wSf0cHWSAT|W;Jrv6j@@JY3lKUcLhU+^|KZsEV
zrOZ^gC*)K#P>T<FDz_U40$%PNmC(!_k{AVsY}3zNWoxWG(X%MQg|@t2i6Lpc!gz0!
zPv;lp)~oRu^OZ<6$|k(DF2U&VD2(L$e5dYk=uXpNuw~P7cl_x6B*$n?E>C{_*cKCM
zI`Gqm{;XUh$@SNw6hfHJLF8e<&A2o=dfHwLq5#tedOKu&T;qhcIq_5>VI+?@LB?;J
zCGV}^Uk>d{PD7e!91l>zI88%&4+TtIm7n!uR1QT}6<T&%ycEmulR)PFfh20bISOAV
zbK_EmGPuw6yW(*d9}o(w@l!Zfdn>JLRa3ShY{)Qd8|498(M(JZ1PPA9!%dXd39xZ;
zI;MD>e7R50&(>~lCqL19hAUEtwfe<}tW2Kcc!=TX)Z_K$HlzOe{q;ad#~n09>XbRm
ze^S8bxCObc-`aoDepGNRW@~?5H1I>?%v=!rLg%Q;488x+#oK;76UCJ7mI-W$8??GO
z@<Z8dMa`tf!uMj1_Z?jkY0(!I?VFfNeq8U$bym$yB083P5tG3y-+qTT3Hn?%S#Klg
zf&=@5mXTCU7FiEWDFe$6?v*IsZ`PtX3w^7bOe@wSJ_=fkCga{Z$=uow51@F@S1`Zw
zb@ge%e#5D19T=IoV~rp0GlMqJGzT(wECeBYK(Tqfu($N+s&S!y)O`M_TAK{kPlNRP
zq8qcIS^uD_cIhaM4{BhL6&*hC`1Uvu{-|-F5|~(+9H{Sz9eec<wy%s52=Iam{Oy8&
zBkJsGtV&2mtg=v8zH>qa^Sz=WvrW><9X35}_AM+qc~8)a2MKXSQW86<ul{gHF|3y1
z86Uqr)@bLf<9_SMi;{?<PuRnHAL~=-Dsw)z_I)4HXQm_ew@p^#8$A<eia=aBVykb*
z=94Ej=RN7H=0gUr)swuopo&UG$>!^<r3tKfn;Ft|tAWt6naMk7UCv|ETV!%}q4V8l
zv6=gV-<j*1TY67_&g+9;ixu2()hg}ebIi!jl#}{7=cgNKKh6?tj>RFcpq*_!aqzx#
z*epT+Lb1esQLwjOg{hnJME4-n8(f|PA8zoKVGo|CJ}hl=WjzpSH@<jGd|Uo+{c~D<
z0|DMxG6=nL*~fkYf#GUyij69V_DYV5_!4R24&#2J+p~SPh?iWsF59E!=iXhgTK%4f
z;UW}|;o4pk>i}+qUW=LuqKaZ5aEwFpywb-ki&oro;N&?wMKKGIQh@>_lu(VAG+q`l
zh0Z3?sxtI>E<Pa4ozW!`?%DMp24d}c_Obqys}vc@ip&?DpXPg0<|msEKHBkX)H5Ku
zyS(vGuC0yrV+KyF>uWBUq374s_d+Dt--(WSek_<{pvcS7tGC@qQbhDrKQyw~ry!zn
zqd=*eiz>^QXm^e$(d#z(xR?M(a(k!{Y~od<{Aw`Eh268SK6`n*Z<VGa^ob6O73O>1
z@_4pc-^x0|Gim!pG33kr1y@v;>o}p_FsJQvPJ29V9QIvy;;1?aM)QC0Wir*=0&U@c
z%$>gOcPiwpB0#QHTcuvOh;M1^OQJ<TCG9q$x}Z}2h&77O3d2quIzvwW`2lwxcxWkH
zkK;~tHo}sU3iUJ5G90XBY3}&swJUSYYY?S712}nJD=Nn0D9q4FAQl+ll~HQ^%x1iQ
zJ0C*zC9<(5jHmiF-`Vj~IRA6)bdNVr!5WEW#SX<T=cx<t@MgsI&uxnrepe6IJ4xMc
z7RoKeKL_U}A%AWEy(k_%)KoIH8%k%JKR*;NWA&X~>j^`uG_&;H0QU}xt=_wd(AVZP
z9xc*P-=3Y;c0M-aIQaQ)M)dQX(~H@>ljqL>*GBD&Cs9mxF^p|q!Q<HJ{9)JYkoX=p
z<;&G-I;BSlq-36J8|?T?pV)(jB&dzxEMtwM+wrhdOUB+xno$B@dB(mT`_Ikw!t9b7
z&y$p3qZ{ppo2Dk7GTUD1VA@Yu<<xCLbI?6jtZV1qtqa>JzdlrG@K&u+KXgRB?s88d
zU{6ICtaS}ciSxaUjtspJZ;*&T@X;Fn^P>ngc{#Ps6wn?05bGQD2XK`3T5J56p}5<j
zai$k{dvJ1#Nw*4DUr!0jzUr47+FfoW8*Z8%*)($Adz|Q)KM3aVnBGwc)u(ttBj`Ck
zPjc4^0xMo=m+m{yrey>-wVN^Fo+~v5;opcci;g}?4K8S5FCXuFJDWaZp{<6KR(CL}
zYzr`LXO`4|b|BG>h^0U-kc%((@4plwe?It_ZtZq!$TNGES1duM?HJ3&0w$gFkBu3Q
z^%WOeIi$w=M9W&&%zQQUy7qgRqzF`rZAQZ-GPFv;`k_yzFBv|C@eyF3i4QFgKBUbQ
zEVTakkmh~XBdHkc*<<l;S}}U{I+YOklX>yO25QsM6<%4#3Aa7Q*eFxid(QC|{GM67
zdO<v)Jt3TCL>Z=Jy0kPh&wZvd@IFt1I=aGowPs%LHzfmp{`a!vF576n&z$$rxs7id
z9aC(bR<{$Sh1mJ!faq#bA?J(;BQMOKOz3>FmrNQYlz{qX;Kkj&I7Y)34uLJ{5_ee!
z84rmTlZQ)QfI3+U_mwy63Sj=__vLrKY|?z62eEb>xx#Vw4Rq)%5x-j^1*gZ6y0F03
zqxPfd^-n3fjnV$5!@GLJmBra!287U`U-=qc^A4YrW2|$RDNbCF+sfwx_pxGhxNz{$
z>|VkH^GW@KrnGX1a}MKg5zz6Q1DW$bsNe%>`b>#~b;j|$Yb1+rA(1OhX^+1YYlkeo
zWuhdhW_i%Ol0-71&zK@rLeeqryi*Dz^Dh#_o?R@#B=CD3)$R_y<xMPgp3!$fC0!iV
ze?Cl2J@vmGP?#gAh9L;;%;~-de;V%My5n!K8N0mNJm0@_EIh+LdeYHm+Sdn4&YQeL
z+0NK}Du~T^QRinL2bn4*H{TH}ZmT;CV^Ej&71O`jQjRnIC?$vzZ|_5ZoK|vqf2V?8
zk-s%}YO~BEOP)z7p%Qf(@OVztC^<^quuhJCeh{bw4%;w8iXZnRcV^x48av1|9yRl@
zj3TN_^@@FYxe30TP%yL2Srh*@U|$Vp?a8?6o#NbvdW;DZ>I|!}<Sav@1-DNR6M?iu
z9I2qz_i6v}0bF?LwOm+!Ls@Ubc~JYjf+6~V%2eR<w7i;y(?rZQEs$_CUz8UqDqVF(
z+#X}h9C0!5+W&-sgO8tt^%3m$9zt&CNS%zb3>QQ(CsMLgkPEY&k6SDkGSLt9hAIYj
z91Xo|so8!e5GwwaLV~p4dWj^SD8{R8K7RiBaE7zYPJhRYSD<a{dD-b>xO7f=A42KI
zpfz)$HI>}a)&{xq0xO(VRC^<D#zVLB$<$~F$;kXVrjgyu+&4~&?-kq`{&oY83+2nU
zIGeIN>*N@d%<U&>cNDzSEH`y9p(v?y^p#R>7RR7ZO^L4cV$3~^#w;-0(hpY3&?D8-
zZs9L{>)@;8czCK&JGW4>QY8hkov_zn*K(~`#pUq)^q;BP_1>Ze6!s&2g*CbR^qO9Z
zqDpyzBVjqAccIl%FAey;r#~rH;?P@g!-*{35fV2U%f~;=rk$Kem`c*7WaiD=ZG0;;
zb4{vHpkawpPQGV{WZU28jiiEE9nUlSSjVt(SgsC;h;Ts8So@(zn{qNEIKIgvMPS(M
z?mM>{P$-d%>X5q7y}^#7PXCt2t*xE9D-?1rZSpHf)NW?Ff6VoQ(oD)9#E3bMHsa?p
zg=B0}-e8J6-nrPK8^QXCV>{L*>&!aGJ@jCr4y3D$>kv-=C{(dPw)OyeGiM>T=|TQV
zBX3Dtr)F$y0CfGBCfg8I+mU18+WI~#-G6h{udMrxt9S`yeRhWSH<qb*k`7m=cLWw^
z?9UUv-jRIaZ6|#`8YYYy$Q{Mg1|_T9=%xT9>k)nh_FI^A^kF=l=;aWbIK5{B<aK5_
z`3otA{7<hTDU-=vgUlAnxbFiC`E9R<@NuBz4E1D93h_L6=tT%uuGQPwYxQW^g_S6h
zGy2Q`osmAF^Zieb0Z1eU5r2Qp9MYIY&oB9^Kilj`wQ;R+i}|>s7@jj@d4oiG`cj{H
zUGQ?Kpd+|fC9Dw?>kvmGU&8AOkV5gO{<82VD&F;5{fdDk=+I~`>mx#=kTCz9(hwS|
zgi!i~9V(V^%DtA}R94*W5zxk&6R!a0`Iagws%UlJ;h5}Ai{_1PfiyP)zb6cc2wDyU
zitGFO=WnVD|7NTN39l<8l5{Hds8V6P>>tAlSC}2~pXAg|hZ65gJQ`@-z~9=|q!<xt
z(8b4kSlb4CZJ0fQq@j=o?%R&G7{|uC&*FOyYIxPm9;XMx3qC5!VG>|kF~<sI$%l^V
zmFGt)jq+JopFv{T%f}7J-;}|c{(PT|?S?Je5mg4hBc5o<*Nv{}3u$4>GP+(SA{p&V
z^=r}khD_wz@Sfc9FA^``+($E+g`Z~K&Mb_a2OMC({E*wms>)%=xxYKvAj6$E>X-Rq
zHBQC-^CQtb*X^@KzA6-vyOfl7hFLJ{780s$j$xPs+$;}$!(&Uxsn^<dgr{DgnhsdQ
z9UL0ZoEuFV+p1h#8~-&`cpiDxmLIVuQx&2RYb<i3i=5nMUcK5Xw=j_G`K@94=2?up
zE8XiouF!z<)rO32or04^aXKo<gz<fow8Gu+NjvWH$Sl@&ym`c$`7FL6;FiIFXW5*4
z)2yLn6oh=WIKlJ|31YrNYABtQo4?I1f5ly}DF*v($|;mu{Ef|u#ldeDqR3x`(TvR)
ze?FR$G_u#$z44Fo&;2TXIFH#2<a(bzATFwDuKv69C4<25CF*Ypp+&@K`+MXgdMBZF
zfklsjX657}Yl<1x7F@dFr{Lj-*s(zhE)Nx=m)c<RnNj~3jy2|^;z>65DOes4b~~-z
z3q<X`{-NDUyUkOycH@J8klmhyl3`cqX-2{6B)sK!V^3R!k^TDdp!<>TW4VYZZDE=M
ze*vyF|8HVIzI|J?18B(!&o#6s)XHtNvw3Jnpn0V8g@h*6=q=f>9*})FtB!8<8l`mZ
z%yjX9o^J+heVnB_HfN`pd9qs?;KEv=V=x@ziOCUTe%6e3FP6ZB%zu!kp?!5j6GC83
z_JEqGj*>ljm~xa@*zCB=c9V$UwMGy3xA=S<wB&vIP%*|@ig9GWj{c;`q0&7fXAZ~x
zsYHqU8&FSp^|_n6kVn+fE)yP=Om4xSNfJjTkkexAVz><||KOWv@25D@_;kKynpL~9
zDChX7^9Rv3)yyrW@{%sBRQyk~k7VXq=H%-3qK0brN>tx}g$WDDv-YM5!>H1o&|hmq
z(=UFP8q&{`%cGUW$OiD-=TQH-wun;+GFA(V6^R>UEidz1497k7_^(eO1;@N+5ut`o
z=S$rdTP;06fXmXLqAZ@F`c`Yzk1J1%Vh4|22N4TS*HYg5BxcDi6;@Be&p-K-2_lhQ
zb6shZRun=ZvG-BTQr_wfV>M-jlp&XuYZ==)DrUk{_U_rVqU`F^lC{>nfj?YouFao*
z+O8{<5fTY=v}~UE(c7HGtUjbVAIx%$+hT2T%K0NoPvEW>u;*MV<su!CA11UrJIC;|
z5dtR96TeIPoR^;2-$P;8*>?JM1lhevojbgi3aOylLH7Wzg2^VX-!!tJLqE+oO9^R6
zv}FeILP1(MpFgug>zM)2-vT}y7upZN%x9B<yQCyy%QpsFkIQKo-xK{3nCK_U<98s`
zI-oLR=bv1Ah9{L9`q@c9O<$MwHQjuAYVdE1h<O<-Z%Wn;pVE!GLHIg?faKFR4iaJ2
zbRYAJwOFbKajnZa+Ga8<EKrYVwSPr%l}rZF3Ji^WX)pHqH0`N`z&*IStiVA9U445k
zf215TRnGH~-uIC<^d*qoy^s<rtO3&W96$|1-}CdcfBkObR{v7>1Z;QyW#<WA{cGL$
ze_oULzt<7|-&HjJzs*hrv<#2;uUZqis+RreV?E`(0hE7=%7dF>K>3G&jN*S3Tev{2
zdY)-%-hM?_EpYO?PWJXYI(PYbfHIjBnT3-P@~UD*(=zU{%*7i51k%87|NkHah#{nz
zmyfRsi{&jXE3VkvdvoaoRCDsNYipI~r$>|Ma=~>h_E1iB`G%!@Cbx4mv!OMu`3~^$
z+;sjTFBceLpA4;QT`iKmJiYIHe*)B-_T*`iX;??N8BjA@1%ts58=ElJb}8wj`-4Ei
z<f)ON;bsJILnOo?M<SyW=rF$OC!i=903?{*_~dF`6$Vm=XYYrA{bKBU0QCo23Z<eW
zL<JQ^x9+p4zSsw<Z2i*A`q96rfyS@JkeQ`{YaoD}DYNYH5`}p{_{5~Q!U{ZKYK2tT
zUl(R0h4cO^#9aq}qj%&091tRYQDBXG#buv%^=Y<f*+^3sfWp48p5N1jynhAy|7+Rm
ze}%XKO!)jbI50yy_1SMOai-Tb3yz3JcvoX%qw`8H*JPCs5;|Qw?JXu|VgU4Hk9`k)
z^iruqxwO2bHj?b(yN#o6K-1<p##Xy2?W(*>$SoVulkVEd()4SYMSOO-C*97=%WFi^
zD~<hR0%8JP>M}+QpB|ri^i6p52~>?XBlT16We}*8)p~zo_85xy9*W=J7_+|Uy7cF6
zN;h#{f{Pt40-Yw^LM^t?&499gu#wTkkb{V`#sa8g=Mw^f)4fZT=?vU;ImC8%Bl3W1
zFvlcF$TA~%`K5Oo@phHF`P}E8$w}x^8lBU0eV@48Pd3y&tqjqTLLJ%fl<6;>T%X!h
zUZMojB_=((Giz998^4RY&b;Pk`k&T1O{^5!g9XzS?c%(Q)CzT-s_W28%F-v%ohF-O
zIZDR7O+IyF7Dmmlj%F_7ptI<1GN6NPKlX*?@UU3;lz&hU?__0AI-wd1F_Q0c$-{di
zSK`=0$OPT774SM#27f^31O@yGbHhimH7ev>6Mq*9CwLx-;%84c&yS)Z)J`rAHG%0e
zcI7>pGM)b!<1Rui+VZQ$kAUuUor*LpZ+Ah&#ZJok;aj<}^64-U75zly!&s@bokUgm
z`<iMF9|*6WBNmI@Y$g}1jx{~gcY@B^$+f_ur%%$w-k0Ag5cZx=^>D7F{|@48!X>3|
zcGmG%O5ScIc^Hzj`o)nTprcZC@&~<{aBk$Np7+)S^yvKX=rBT+wN6pkV<bmQ`j3dV
zs_8{CJ))_pn}9|fj4D4pY%y6FDly-IK;;?(INQi&i7PdG(_QUQUWIaEyIp-}*3QGi
z*TyVq$>}nEYY0{HOVqWm|IH9IHZ+9ht)0_<wceJ#%rF8c&e~*HqulCtRv(_P`<)CA
zk6=Xnw`c9K^Iw5`PbUS>xnyKc5j6!r2xtVg#m<uG(Nc%8HGQy^`=?9WBajvJIf<H6
zK(gF9$WUL`Zz0F~!f(44w>~n_SmPuxD<vf@Fw4NDRS_P3Gl`};hxASv9Nr}xG_JZ)
zZ8-bNU26Tn5VejP15nDjS}Rj=iBHgwVeK;s%{P(WXOqZ4=tRS;;N?#PSR94&%i6%A
zOD2bD6DwmFjzM~%tcqe60G*p+-hb|${*ep(Q>rFVG2nKfA2BHx{Pzx@5Nn3q!<w3f
zTf4=@#T8hFk#WMX)gITE&ROSj#^YTzJu|I%_sM3&j`Zj&&$Xv}m8C2|LxIGk-Q^Pe
z;<>;FpunkC+!D0iv{CUiV!~c(??cDN0_><xoZ;t4jM(=gbZ|2vH$P+_CuDv+(Hs=Z
zihi*jrd6U4l_^4I1%Iz?BUk?d0Ici&qvJ*6=`+4l+1qt>+cnzhwPWa@253rl_jI#O
z`jPvNbZKYH{5|Q@14989=Wn;Nha4uXx@RJ1cx>Jay;f)6*dLYK)KwkwC@C+ms2$?5
z{bU*PKJ|&;=Zpp73htKUrJ%!3IT@?F3_mB|JzSogoIRvVe`<Za?TErpFr4l$=uR5;
zq3r{XwrZ++C5L-qqp6|2N0}bI6-&snYB8WnUSG_|%FZwAsc@aFTU8MKecSt2wbG~e
znbM;($6u#+P7(mQo?#4#!W;ZpC00v;;fGWaWo7((cIy((hjLqvj<uc5bNQIxj|9IR
zHSga_m#l0Pcb;%&lz`SiCw(A>7?&0UBQrA_(rDySXxhYDU#d)ZTDr+*(&TnE{l(s1
zNVf(0FBo|yE*X-ToIFlCbINksGK&v(&bWQ#J6zw0_g8u*CAByEgG}C5)NG@J9yYXf
zx!}*>V)=b2Wuf<U^f;hXW+(kr)uw9ssukvrG9y20pqpp<Fwnnja*m(#{-&8_YO5=B
z8a2zG2S8YOF5NyjF>wTKx1F5@9jpJ*c(h#?`Qay{2W5r>>^v!9V_r2G!c_fKn2?`k
zg4|g*Af1r=7VE_?&WlDQr%#KcydeL{k5cau6T7j*%e|+tSm8x_CxF#YSISz{Pej1n
z2DDj+o0G}<$5<Ix<JZTZ%K=L}k?fz*cHb3N8vW5hw;EyM8zCr|F76^s5C&XHsiA}&
zl=NuHDEHdSqyWvNAJmj$&aR}}{jWRu=G?~;iTh;;W+yMN6KIdDd%MB~$*&TvJ-7#X
z%vV=;y&taYNj>3b1~{kALnukMa50`!?y`r0=*`-SIY9!Z?^$=81z;@MXME2pl`>a~
zpG9Py>@VN)%d8WS9sm2yVZnbAGvo3rYt#t+ihwMFmnK#g#pybXY;*^ULk*x^S?hLd
z!Ll3c2*fwd-YnOmul@F6uLj<Iym;IrEegX-7wND#%^nvmY_iIVN(K0nl#msQg{@fZ
z$SMV2X}~=Rm#@rCJH^#2<CWIQsIxAoBwZo&K_pCOjmhu(vr=a1pMSG?$DEKT#T(s3
zUNWY*iPEV$dBUg8Gl4Dp^AB}bkoe0P5xYrUq}(t$E2-+mnT3$_&r84Z;po!pmi_kL
zzYF2?t;@_(Grhs<THOT_zDI9k94>N5U!qr~be^II$TJNQ)KizgNLrXtnNGi00Y`zL
ziYoQ-qMu8{g5c!z)T@)Bkr5Y7mnM&2`^<jF&!RN#R3ijnYs4cwOL|V4Q9fB{d+jD~
zhLCpmjmoIASS%#sEe+EpZZIrK^yu6jWfp+(@ZOB>Ghz2#ED^X+Ju+1a?kB#j7LrqV
zf$$5;K=?jw85UYeG&Vjd>R9R1_RD<gVLL9;hq8Ac^!yH7%mIx4^=;7scxfp@s>ff9
zDcjN5PPM3}x^~P($g`w_Bc$D9qtbP!iIwinK83bb8LNqnK)_+aG}A<et~ivnad4|p
zrcer5xVMBIdm=XU*v21ydI|KTk0y|(g%_{fqpdgt+PZIM(`~Oky8wDUF#E8V@!}yp
zUuC5Xc|a6~)|6=;1l-RTu-N7u@C(eln&%prgDdF0+@BlzA-!z@)!Z_F%DvHiRQ7ac
z`_KMp&_|Lp_%)TAS)*R-hLfHH)g6{g>r`@nK*wcp%eNsDuz}?1SD(zeN(V$ju<Tc1
zMz6C*Ss$(5zjqnVtvy!A2e+FqBWF)L539DDp{=_!0M49QpO3Au;zlF1Gem1IeJ&Or
z3619kf#HEK8w$rMrTNjR`~@EfNH|&-)$d|1&Tu$J0Uaa)l76^i$oPnnfUORc=zEaL
z#ivY0hS)R<mZuK;LXN@={jNDY*?u++lcgU!3;JXF0rIRH?fzpoRM2o9i(!RW@{Nj5
z_HA2ikv71Ncl6I&kZS=*^o+CI-cd!`8fhXc&TP5Vi3+smdVKc#qR%sk4+S*x0(2O^
zIHG;?tt4E98Rp8CzD<nK*gh0GYALeBd2Ndm$D-<TI(@g-hc6(dT3Z+!q0I_A<Be(w
zrl$if(PW>uEiT-2czsK_7e{(tXY~YLF-O>23tvbFblwT*Xg6VW^-Iem?SzC0xH%nT
zD*OVhw%!)+(B2YBGb+-EVbCg0&mKYWe5v2bjZ7_-Ey-Pi%PQ<s-j^#jD40E;m(Z!K
zqU+lsO1TDhElwL_{r0YRi`<qh+~=_7r7^v_S^2e?k(e;pqeRb6q_x4ECv8g={ZX%J
z!{N`B=7n{$EX3)Yu|$T8&CH6_a?a{ugM0~DYWb)u=<jq99#ATOhS@Hf?}52DN#h8_
ztjU}N3}3!{Igu3`T>^B|WDDCjT2=5a=+bUXmTJ9KSPporaVC5_4ZqT^AE$^}n)RKM
zLps4`M@E(|wGwNzxQl;hWll`M?n^<(X9CXQYBpWWupzFo@?5XOzi+jxAg3{-m(8f7
zi;roa?=21J)php-b#4@LJZJzaQR@Aegu_m;#}euHEG&`_SCke-fJ?1@I9$?)ZJd#x
z>71KYC-FzZ6*KAj2a6*vYe!Eg1VV-KB#H|hGms9Usc$-4-fYfIVn>!67Ch_B44J2^
zm9@cN09I9KUGHFwBnP~J5EL`Bk#Q=1$^Tc`TCJ6JVDuv{U0KP^zN4*8VFGy<=y)?v
zEjHqCsq3ex5Wj$l>`nkKr$65zk_RdDz_Q`zeTazH$~p1~c4_x=OR2C6(^-yBi2gzz
zlls1P#vw-f+~FgnslYk~3!bUwaxN~9$kXnt92qfEx&ST%tA)g%0IM`3>G%1^8sLcl
z$t;sob0UJpB$6MF1(~{nuZ!1|Qg{u>l=&XQ!BG!-w+k;DBKt~_N9D${OUG^L0)154
z#2_||*P1VS9ULd_>UyL*PNF1M*>3~D=W5HX49F4SW4v0kE)>Us8*;@<yz730_o_*>
z)(3|w^$Z1*QPr3%gOe-&NU^B%q$V*H5!JB+WX7+Lp*@TzvV@-D)uJ%BBl@&Y_osU{
z9ugBY98Ng#RY9smnI=9M=cpz!YG--SoDEegg5t>x6Ce3rNcgg=%wlXBqVsV27JOyz
z`$}CR6yWzxrjMH)6DAk<d~aE~G-g6tNT-j~T&p7c%)B>3Q0=luyI~jA%3=9hYsbUQ
z53$G7Q1G0=-05gH-Qi}*uuHem#=+<Zo57O`YWoRWCq~+eK%liSjsS_Awp7iZ^l|zr
znl5pqXVQT6>aJVEFhC&-U#eI91i}}9h&2!X{k~o1CTV<N4ZE?u-lQ*ahAwQC`!b*U
zagD2pC2?9Yk0%+66teN4Va*#~4A-r&QrY<yx&kitaLWIhHQVyjb-LVp7h+woQxaFT
zhbvb|6lNafF+axpTSy1gA(Ipn8kw+fhD!9NNvG4E1j$Xx)Oe;!Wfo6jCpOnTyo84O
zgf^Tyx4+jUkGk>XJCgmKmJ1k(llwm%_>$k!o8KgdhZgHL{e#XWrMJfNFqwAk??au}
z5>75dPcF!3ZA8My>`#1PXI0QCP|Bq#0b7aG(Pov$435R5u0$YDe7U2>!zZF8T-}hO
z+rP`%&ag;k_e{KL*A96LYgCMlEnEz8`fbsy(MMTYQno7B(%z-Xm;OL#66a_T<t<in
z4EX%`Sxly}lSJ)_+&Utq#^ijAce{4GPPKXVwAM!kYTi1qNo9Tr*_Itx+S(JeXrV_l
zWgKp<*M6iByVzcn+J?PeHQK@^9hVv7CK{T2ctS=h8%}>tk3=N7d_xAij)!EIM5a6S
zT;??yPi!~uHy=z0US3FTE;`I?nyt)o?YrP)x2<=4haFzj=_Xdq>@#Ig7A<^qeEpd`
zN;d^-d>njyIc?wMy;W_xy1G#v=#(Pd2DCuGFaT=7cjm(AEm-!RsWLyE)iDeFCUf@7
zpgUPa$Hdw7*~J)pU!8vs<Vvx4Eg_`Khpk<Y!aknXL4U!m-uI^eKJgka7qQeE3O3bG
zPQ}(X$+YF#W3zR}-P#14i%*}kcSFfG700`3XZj^C<3gJw$DFrUtk1SfAav;Ij)tIy
zH(l=0wSN0tBOy!ouY5)O*{V+SV6Wl0mD9P?8S8DSQ_=1kAVm|<C#_pY-WSvvw_<j&
z=TvKLmq1AHW_zpYViGC2)O4RT+!f<JT4wz>#LLeAkItG&UaeoiyjbaACH6QI=90?Z
z0-)l}-J$|r3J59i*CPZOMGAlZjFzroUuv4!^){*AL2eZJTnw5AL8GIGZbz^#M>KY<
z^!#2ubJq&J9%6t?pPjN}MIYxK0v?yD(I;U%2sa4Q1~*PMii8P)e@snO1tR7dKOSX{
zpTaIiOkBhl=>d%VuwwpV3*3GP*&KU(KHGE=ATgN)o!rd7OE=!I^3{rzbxQiuZ{&}|
z;W(dQ)m01xMD&h*0WFhLgSLzkMHa~g8l!D@AC3K4iw>TX!Xsm<fAXZ()f=+~;!{^B
z2;x{x#9eDwl4RB?wqk3uE^T{?sTONkeg|7!Km?ewpEE+LYLAb3Pyt{4a<l|?S^fN-
zMhw{(=HM1BxNGQ4>tD!k`$G8Fv4kqGd(wt$ZE^h=+#83$po|~$8Fm-ZsFkmn)0Uax
z>dCFs&5nykA>yJwvy-El$|2Q@^7et6*$Z7K7Z-KE6Wq*ZJvK{joOSUVZXs(18hf^O
z6A&3)AQnGNn1pSC|BvRrJRHjRZ+jw?CH0MnM15PSCS@p+kz{KuG4`>B?21A52&F_M
zTegH4M%lA8mQeP6XJ|1DW^7|HX6CuZ?|F~+`@VlX&+$Hg{EqkjXO81uuIs+9`=0Cm
zoS*ajoVSUg8a9WmBnMGEsL50j4{+~dH}=$Gn2mL(UmdpZ?sCc1K4HZt94o<pbLXS$
zR7nwYVLu<&C=Gh8H6x|UmT;+tjtfp+^<h%KM)pNO9ak9YQ`Bj3mumvc$IZ6i?18Lm
zvHupwKPtsf-AD~A3_0f}UTWrUa*HB$1_(<2`jDO7|8{4SV3D&BPsd{b@Z}GlzCmj=
z!r66S@bBd})r-EC9>{<un};i|3|yi0(7MZA=!DKn6CY~O3o|>roM<sKXEbGN@}0o5
z_Vf*JXQws<%|W2pa)RQiK<_A}dlM3aZRbOd%)xVID7vY4Fl#e0CNx1&5K>>pSXw$T
z*Dzc=*r#1@e#E=<epVYTAy||!>6EaI|14-KTP?XVUg}U><V%4uZO?3wmX<>;B0=iQ
zI9FhM2-{hUe24|H_}IkbNHa8gww3#ovV%ipk!8(WiHJ7?uNWY;kxie@J<VuoNeuqA
z66&%T(wNgCF=kNhb~iEbXJ4?)x5)F);B0gv13#)I#p#WcCv^00i+Z_?)eiF8a694X
zlYduuPu^+2L->k)*-dL}8)TrH5qlmo4)N@>Jg4br(VZrTC+07n<U<J6Y-<^f)~dAl
zv(LvrK*YSHL=?yGbiKsy1P@=KT($?GD$A{U%X_>8?av&J>_~BA60T+}E4A2-Z=_8<
zoUqTf9$P<ZsHc2LycyB$DItcwy)(<KY2mkadVGAshx^%k!n4N2^sD%tO6R4|YU0x0
zUi9+B>N;sK)5wgTo9KD9or<+9u1?v3GnR~o3YSs0nv~R{I@g$lghUfGGG}s`e)_Fe
zK?!}_C&+4PDZ7+3of$EMcG??v+gTJyReXGAk&bWD@l(MW<&K&^apr$?&ewn#&t>#c
zZn4c}*hEhX6rnI6V94S7Ee1r^BV8!OMiFxpTJu|lTy7g<(!->;v}iDXI6Aj4F)rxb
zq_YZ`sJ=5&rD(e?IE5$Y{reI?V4a}<z}OU;KYos)E(KFnM(Dxj?pmavgxO=uj%_oi
z37u5ANW&(+qAi=TnK|pd?5EyI>f&qW4FS4S=n6>13rZIPcb7-XPZk(l!R}P0Wi?UP
zG!S&5nzo?=a<E@Lo?_phat??yrfG|R1N?t8VC8hh+{dt`-aJ{FsO;fyn(?8-{@w4E
zxS+24=)cU~j-Y(#m6p=YbAa$vy_L34+<)h2&9tJ!me|3twsy6z6Kl<h78NxN!p-qd
z4_^p|0?UYz4wFb>-HsIRr7IF<l~a#O>9caUjj)k$hqNWK(8gT9*-n3HyU)RvsCT!9
zfBq6(Dr~;$(i<8^Cx0mqHK^le-@|+E<k-ut+|xcI>^T2#+RW5SKjlSXCauQIw50kS
zi9}*_3)Yf?r}={_n{Jh$+s^>xJ9I`n#RV=sR+={{>lzj8&n3XcSBBeiAKtXStL!rK
z`NiU!U;g-a;~>E#)Hp_$$nAa|K(zlj4I}sXk=IO_{-97is9DSU-89m;tqV67ugEFz
z8s=;`o-&BJpbhlcg$KoMJPhs3kQ=XX8@I+77I$t^bG6f4)VeYpbZ$@z@r&89Vv8J~
z&g<ubY9dqis3*C{NF$#oF{^GBq)S6VCwva1%Hdz3%Dx}D6c7fS8XjAAuiYFHjdO3G
zMKGp3q>Qj-NQ?zV(xQD4<j+h`JaGHL^lAlc$k^hj=f7Bz-Ey`@I7IYiU_D6Q|NEVt
z9%bg`wSta4;AnKY^<@@Mkbp$8>TK9Sd~}uf4ut(t=KJ@3ySsD;+3!;Y&&~Cofr0z1
z1R_{#4}-xfiZSh%fg=3-lS^d&yC}LZV1q(T=$kArtm559|6Uj_E_Lj8V40qrPrZ@T
z3mk#0p0OIgO<pZ4FF)J}HvCArzM#7>H=;(7Vkst63PR^&x_WtpwmdTc`=+TJNcUCP
zdB!mW>VHJ}i(nt_EXYc<4i%c%p-{BNXB=u~Ya~>KEzR56(NPwhfKB#v&Zv@Y%g`9O
z<NGa-N&tpGQ*#8QpIkQHeUZic%Y6h{<BhV)@#ADv78dIU&RV^ot&LlBfdl)wyqsZp
zgUCrAh>y9tbXf(=XFBU@51LmKYkk5DM?Yx9yY~G)FKhkt6glPyQ~?y}n2Y?HD|1_t
z$Nd~st=THP{MX*qyTO?Thx+$}QOb!va}50akLwCYo*jLrXJV3!G%_-=Qw;~%K$;~u
z-BTJmIx$Ol9DW0hHZd})WM03b1{mthPcZMh(MaD0z#>WfSm!KhkzrKjwz%NGURs!2
zJoU^D<O+T#OIiSTD1#a>@Or>8s|;MY(o?iI>FNj2#OlY~+%bMuQCRa`cbS;{{1qi{
zFE5dMpxQF_EOwPu@+B#=(JQ<!pC#M_b7iB@E{DbLc;V@TiL3DAyJco?B%_}U1n~B<
zNUeD>@r!rBap#c4*zc*myX$~z0`#75d(l`1+;3ZCf&mWnC^^cM0j%kF=_6@?7<+J0
z*!KOo2`Tt1X*{Tug1c*8JrnhBB~w9pSZ_hg%hIMJ>2Bp*h|k0ndFS!E<_c_JLq#p4
zc29Cr&GM2gA*qs<A?Iphr=#Q>AN}_4DPOGE!$yBlp*VOPNA(*o{{v%(WC8=Xki80|
zb*-gmhr6S9l0!#SD(RSVn5(oz+Cwhb*c%n0u?Luqsk_%mONrYVF{O9NYcaHLYX~H2
zzy84|Pc=bRQW&xH<~B-nxaR>FtaH2upv8OTCxyQnDls#Q{AQHLD=Rzgj|G*8m2RG7
z(hAPK+vy5^9~E+YZap0rGeLm`bK8uQiZ&Ymt_0)R3@oNj^*n9)LeFsSsa~IQrv?|n
zuA(g{&RvaDFh#!T$fL0W3zm#h!2D+JX6*~GN9CrSVLx>#?RtOUf}g!)U@OlK<8Ad1
zTyJro%F5*`kazL@(_KN_;^KNoPSU?bWNy!MxgYaDb^Ra&<TBS1Gj=lebRPB!Q1cU1
zKoTa<Fjo^-Or7m9?b6sg#cUsQ56OG~_`P~>(gMjpjEfr$37(yCU)3SWR*<F^@t07!
zxdGL`d}n&c`>=JXHOpSiuSu74<kX$((qAe1;$Gw?6OAV+9OV8Mm6#P$7>HiAsh%i?
zI!1#e&5Iw(I<BH<80k;-U#=hq@%Pcm$JvqY=&c#D&hnIc&#$v)!#Bxzqw2+Moh>Uv
zsv-oE4fxhmx*iaWV?-;Ce$RdSu|KoE)F(F8?_hzpCwBBnb}pC5Z%L~M^@WZvxJ|3?
z2I{bTjF#Ia$c^9}>d9R<ej@0Ca{CW#Q0Tw#K_*NxSFx6o|DWgnCB$l<GC8=9{)MY`
zH^gvkHUrXg4p6_=R1LV^pWaFBNnFq~ZUf;-JMEQ59RqfO@cL$<0PA{k71`M|-_2~9
z3JSl5g?Np*jT&g?d+raja|PY}wagy#gGlI)T*>-S!|YRxcpZcMmU4SiR;Wy1*<2-d
znu?wzZ5Tx7mzqMoIG_r?H*jktmFf^S2)7{OTF72gW}7WLC)Kkys%=!9j#X0k7ECda
zQRj<*h8Gr1S;2fC%Xc@z2b~9b_}7DP_Vb8YUnStqd$?%Pnk;>%u?zQ7*QU{8r0|Ac
zD%PNet#vw6fjEMGJTrT$;M5n}o-IN33Qo>BZtiFk?>z%>OKLn%zH-6$DyQh|1*N6;
zOa+O6`LFwqM+WH-=9PxZq3g^JByAga(`$Norgake?mmU5iQg*dLGAJj_C}*BHW7+&
zL7PxOp_hW(Q^{!VH!*mc81s63bn+AQt7>vnt7qSJ=6xVRkd(B7vpG&CN}d)etceQ6
z9Gv^D<GA45ap(Y-8kAwhB#0bjZh>c?-zqFk(7~U5jv!vw$xP<_PNEfPKh3+r*;G#?
z@IQs2rk;?Mu32r{c=TYqC(${Fd0{gJ2_zn)>%EXk<ovp#Tu$etI~R!u>Pz8B9SbX2
zIFjGaJ9Q?IZV3G-vtHD#A5Ki>I$#hkpg!?%PTFJ}Ltc-B3e~O~6Fm`>epmgTn?L-T
zZhKs`Y#R7NPZYdyJZ*ghBPrq{r4;8B`>K8aacb39?l&0Cd1-Sdv5&Ek;@ROy$5DH9
z7=szIbFbDWGfaO5V`(7!vlYiD_QLYwA`h*>DHW^oBt=pfl6erABL1bx-fbDg{L74p
zJZPY?zYk)--e(2(G~m-4RL;w*3pvQE2vu590`tK^@{qV=y;$Ku2VbEgH|H_FC|X`z
zcxZPYyyq~&ObeZyU%UBziQfA4qzvEcpFD;`z4Y~z6roxKcN{h)`(U1Otv05Vm#w;}
z0iNIb_ccD9VL@JvhUJfF&4zI-K5(UXoQCtx$}KH!BwXr7&WrG0_n?KI7(h0JTDvan
zyQO|@PVxA@X!+S?Tlv3r#fpxb`AiEB9jGmG<6cs)Q1AJ?H*b{qnfJJsN+#Pr2>e7A
z8|SHap<&vLvP!wHtr-XAI4iIvkMR6TlS<dnVzV+y84G;ttvUHS12CBl{zsLCfhS5D
zWvEH)3$da4v!Q7sr;RnPd!#qrOIM02IL)n7dLX#ea>-+lUP0^27dvUWotT{vqNIL7
z+x&-lcc-y~F6*&;lhBzc)V0Mb8uVC;R|W@J?&znlk{%Ywgb6xUH>;qlW2;VCZO@V*
z`Qfz^r~xs+&s>DPU(hJpYTFt$ea#D{CwLm6gC6XC$c0#924RGBQTzISEe;h^47YMO
zGsxrdUw<ZR4}6}Jp9oAKZn5M^fcjFs#U6-w+^?~KH5XJ3+j>3)8R0Y5hlL79ac;Xs
z8F`5O44IF7(h&4X-_}=i!ec&3$Z|8hEK9l#ylcc2z>9_N!I}5%j}W3>cvV=Z`q_ye
z(6j=$?i&{p4~KoFeK*GiDvi6A`_3ibDzr@l#m3AsxFJGH*n`R;`CPf-peah<f4a)j
zWX$q)zisX>UDy@ldGnP4MNaT42f^Wf0T&&T=_4-1wdrVf`QKmKo^SU5#jei@LwEDN
z7ZoA!I$6zB&3m{l7e86Y7GXHe4L?ctjy|-q!iFq&gfZ>rc?E;~Qk9SGv#jnIgx(kk
zUMy(qRPPNrRb`a&%5qQ^`Fg^&*KXFciRj_mE6_GHnH;VtXQzYAwu*%JibykUEfYEr
z`d$P*O0lbtn`ud;%7=JKUW}vyhAe%QK-Q954!|A-#=beMH(#v$gxEfQeNK+c<?{y~
z?Wu=3d6d06Bb+i|cUg=heOl(*bXkK(ULEQQ+A$?1w_YH<WH`yD$WQ=fv^*mIWo?1I
zQMF3Tib<_o@X((Z@SE_fNX)2eb<e<UhC(+opq2s<^f-!A)P^|_ktbCkLdfkzN082P
zT;#B&->5p9igDw>+#eHaA1!gak2n|F%_l@^)MthY>T;}3FD3U?8eSB}Qj#1^PXRrU
zZUG3R*f@r5=d*J;t6xPTvy`iY83O%10;Uro@>RXAlH6>qOLb+zb$Wm~RmpVbFK$cV
zB&QtN>Ijn)yLN}16gF648AOgNLmkAZ2qsN$%M8<{qe4@8&T`9A@jLSjc<hov%WLC9
zNsalO=Mfgh52<yb(V>|<4+@4js5>Gf;U#j*dogD01^1swd^yp+L9%uYd@_j29jj5I
z)gvlM2}-mWOtmp5S!MW}s*>l@Iyyt?(eN<W1aNlKJPJ}_5=E`|4s#8=sIdE`nNRQU
zOUassD;huVC7*jb?_7E2!sgm1ZQN;k23H~Uu#$`FU9|sfR_eCYT~q!K@vlCQVR|@<
zRm2t}QY3}2wL8&r^~02ETOIU73U?m7AmjW#C!CBBXQ=gQykPP)crbfb7LpXG6$gAf
zyqHg8a`KD)glhw5h;K1**Yi{C?`!F+p_2N31-6A-zPw?%EdB0~v2)(I-%u-~NhxTO
zoRU(Idrr^n6o_=Wfll*O?0C0R4`=<M8L29vguP}tTI7_EQ_DHZ>$(Y1AF+P<@=K0R
z@32tg(LQO;u&1w}BbthWe559VXDhay>G|<=_2I9@=9EjqUj=?&xgPQQnP10_?qP6h
z$MhC@%(J62J<w9M$tw}oUfwU?FNhT=Yxn~8Qu>o$Pua*64Ryl2fjOCBe#I)=9*m{x
z=$24mNo&Z-68lakvr@l==(j*3bR=&|dFcnE`tm3NDO@(B!M<wX5C8I(Lh_LbM4Zqh
z3|F6{1|p<h7TgWz>dNmDs=bNAI%i;QC+3mLhWso3dVWv>f?m{7PEyy$dtEnenyrRL
zuqV7yrY4A}7*NvGDiu;?*S7<Qf1;cx-UmT_@gJ%!XD{5C#2xby4W$O385Tp+CXPG2
z%FVa0<}zL`G4pYMUdS0i#(8yL4cA192v!SB80<$UW)TcMs^`eH9zul!6gOi<yB^mb
zJ5DpI8po^wjt3&F*m<$&t$Qh<qkOcKV0;hwb9iZ94A~QY2PKaZ=H)6}?rs_cTo&+k
z<ZBVQ4S{QOh<X|f@>(Psp_)<!fJ1~TFe!y=JNnH&K_ubkbQ}$a)r#zR$io#;-s_N%
zzkm_~^4p+F%c0;R+m-pC{Sf$PFmFK~X(nJ<FGk$x_X%5V(VmBW<=Md?%yf*~139Mw
zkUHGr0l#e8H&?}2w^CrSqqzr2J7azJ0$HD5FUS8-+$hoN=jX>V*ckxOP88^#fL721
zX$K<v9IPk)W|I{Fo~@FSEF<O20m`C-p)N2BjI~7|5Qb(7U0^p&Bmxn=v_QPF3)KtT
zX}0>n+hljcKLI$`KLB`s@;?ChDxAFezW}&K^8W$A&jJ9>-@^jnYncFmM<M?Sz}Z;<
zyhc_c=Dz^onbSE(|1SWZ`%eJw@V^1L*!%wk;Bo%|;2R1=$Ugu$=XO|`&6d`bf(pi^
z@52vS$5nyU%MatITrU$P0CYbR?d)Y*>78b|LVQ0NU?@!ABi$!1h5Y6PP$Yali{%sa
z|6=HqHTS9V2snb9<%R+@!(bwi2U4~R8Z31y@HO7`BGEN5vD3H(Y*2tl*Gn))nKFP)
zxs#kLagPJQ^K(HWYo}eefJ?V(zIEeXum=7RXk<TqI1!R{4v`}B12nHYaR!lYqoD#(
z(Q|r`R4;QIWG+t1+IJX(ko82eylV=p)oY#US6kzr0X;knO_X7#u^u)7q39KvA+3|Z
zOy#Zo&yG|jJgYVHI8*vxELRthp_qThvXZ%7)^RF-5DL1S6MOty@2)D#r-V(UAE^3<
z<6eR$<?K6z6}FSY4Z*d5Ce$xQ&&yP3U11Z}yoExEEi{02e=UCJP}{Pt{(zCmyj}IB
zQR*!Ygw+sr&Q6;?(RmFEsvxj}(dgwd5|zPiHm+6p08|AocBYS&M7<Evme>SLY>w51
z2-VG8lXU_kcg~7<zew6lIvkqC77_QMIhFWoq~~(OP@x3^#`-tFKN54!M~-QK6b7a;
zeKM!@@;X!H4t)cC-gzyF($7OsTkR7Pnnm^ZS%rx0vtfDi&^BDBTF*GUI!c4Re(RtD
z>tHf6n}e4+?@DrjKM@=nK>bN35=(}L-hPcKV%@#hdUjf8VXFOcu{Kz*9FSAE*CW1H
zs3i)0fTdghsVW5S#lKq=3kr3?^8baw`+s9D|D4Sj@NZyQ-8I~TKvs<PEe!43SxG@i
ztdX5zMQ#9YbO8)B@cqHi6&1U89oZov!f%o<O5rW_0%QJlc!6IqrRfiKXKp*Uq@*O0
zr8$Sh3Kay=*Yk#pSEzdyKBp_~nsG@${rna=1J~I{7;VIbXfT)W?wJzwF(wGoFLS&2
zjQ8&64<L^UI@*Fh%tvn5P6WmS+yj>17D%5#qX~i_DPFMsEeYkZ_}sQmM+e5*R{xzc
zViXkA8och44&`C)gub{*afzW^U_AwpdiBDsW><X1;hj5=H;+wDP7;plA7Y)j)n;2^
zes#^Z>x{e6Q{3mD&3P$Dj(Pq(LKf=UZ52M$wviY-O;Dm!b7sg!x6>YP@#tJK10AQN
z`~K_W09S@>Ew`G*@HFLt7|DC|u2n)tK+?h85i<cs8+4jc-uA;}zL`+|!0n0jbh=ip
zj_B_2UN%mKjRw)qLIddM=%ZIWNcbQd@5icJ<T{;yef=QQGCAQQhKQB#cCC2Fs5QC9
zRLQ6vlgbYqWnEL|K*HAKFZa!6oqIahkL^gA+=CSszF%~L{z190w(B}=hYmA_hzsN|
zgzdtL<u>_{>x{B*tE>9$ZS9xH^VYxYS-Uj@vE$;*@rA7>k5D6~o$-OH%R{ymA8TtD
zjiIrfvO_Oe!=!!^S>;!lU)b?>3GZH<i1ZaVD<B_ro8#VQ?umC_Lr=-IX|fvAP}RPT
Iy=4{pA7hAVLI3~&

literal 0
HcmV?d00001

diff --git a/apps/browser/src/images/at-risk-password-carousel/update_login.light.png b/apps/browser/src/images/at-risk-password-carousel/update_login.light.png
new file mode 100644
index 0000000000000000000000000000000000000000..3bc176f8acd325a8be46233dcb56278e1b2e91cd
GIT binary patch
literal 25759
zcmd42cRZV47&jbMv_`cmrFNHDrLECYyQ-}{f?A<!3squElp3W*hf!*e5F@mRouX)|
zO^k?9RW)Kq5aGG?_x$rd@8|ivf4!gQ`7624xzD-Jxz07e*L7YS=xMPr^Du)zAht&j
z?;C+Y^tK?-38hnvK#LWb_bv$Z%<<8EH4}e267h7ZH6&w=hKzdz5l=$DNxBQZlz386
z=+rIoU)tFX{Hkwj=3(;_{a;wiMlYIt+JAgyvW8lxPH<L%1sU>Ijc|p<38|@`JngG4
z)WZ5q$eZmEBr<J^Mo5B;SG#2uFMYCh%G#pc>&rpwW!PoqwC-mdSsX#^^0vRy_sR1Y
zE58VI&>T^OWg`bvBQiYb@xN*4AHXU>*)mn>5ciwB&Vm&$q5di=JI&ZEYHFNO#Qfg|
z6~vMxvo$?EO;D!w0`P9==FsZ3VnI_=lPU6)%AFwH8)iQhLdE<c=Iv!uSkIfs^M&4%
zGf;X?qTW#P)0X4v<^C!&vThFPE29U~<av%?uzeLn*YKsrvvr}o_Sc)8suXQX_nPwh
zaBfUmj27(cg^R~82~{%_ZW+iv_o{a_cR)jf*HE~7O}X{I0$RC_yPvgm>w!bS35YdR
z->1x_%WuKb5tze6v{sxj?{R-($xc^SS8N`S&zn=WI*KQOrqG*if<*#%uH57I8soe#
zJ1G=Q2ef`om32|by=A)o(~eGuc;+<p-)JVA8U<7MHh$)bhVfZianuMno$X(TJiXlW
z4eAtP)qWpQbmC70Cg{I*Gq9=G^6NESYxb<WO*q_90R8dnzcWh0_P`Z~FAsTHkDm?B
z+JINA!=Xw?lumu@#URA-3RH8d^#5k`TkH`9Rmc~v{9BdkCE4Q>t1lF4Za*FfVkmHl
zPMShaxgS4-w(|Ui{)T)NPeq(MevUAGQrF62OCS5+N6hK*`LebqUyr-8*VDuq?;Ud^
zNVN9xzeRlu1O0oxc`5YY=XFlm9(SKTe}en?_uH%g1KsbJMt7=?4~`jyMh~h$Oifr3
z&?hdkBM?(dOBkq&1xW@v8StZ{YgxIXuXIbxDo;<1x=MYZ6NR0W1}Ng?vto`xazHwT
z^@=JV!OtJ8(R~m&-jM2BgQU_DY7x@N!Tkm8excZjYmqo-V8rEo^w^<&)WKtOdyNd}
zMf$|x;TnJ*F{$XMFn()1ek$n&|HaVX*(U&EC4#i#$zyM6N_c6PT-_bLg8VNH)2lWk
zcKYQi?t~q3AWA@jA&#8nI}vu;cl;ySckd&c95OKAOcOz|0Y*90TgGosv}w_@G>u{5
z!Xx?>6HDSH#l<y+9f2hjgvU;E?<c%-LH^T))fzhBj8vaGTl}gjjQl3QWH44gyQ;MF
zTRW<Z&nl$l8TEUTv9@wFd3$@JkVJJ~D3^2FYE4E6urS<WsMOp-5q=iOAq=!{{oDEp
z7yX-%ws#8LkoM&rrZc-Em>0L&OJZmwurX;r$++~xNsUnf%mm~iI$G>ab#J=eqx&G>
z^A9Vo>OE?ty_8c4PWqDIe`)24nT+M2m_KZ+kzg~`==L+I+-k8c>ROqkoS&(8u5z@{
zF(X~IB7U<#_ULdFZNj_#b}s%@J~~`{UG^$Y*xyBbHov}wf@aZC=p$zOu$7%x{6r=#
z)g()OOizvBrUTeE`{b~R+4yiFV@YXg#nS>=Xi9LP<+!e*j^@z0qh*$@^H^aWW7ezy
zyP;@d9y?~UvaP}=LmwXHSu_+7%-Z5f4QIxt=$UR$WqBN}fMa8uU6}sOdLQ7GEQRry
zBp#1R$~U#P(+e3EP88&e_-il4jojo{*2SR>Mm8N0<#m$ATLP~*59B-vZi>EGR9U>F
zO9ss8I@Gp3=2#vK)MMZZxoD_oV?c>rKHCv$#PbRCr%6cQ_99uV#DLjG+rnvFtV~j4
zh?ynede9l42?Z(ELInXx+YQ9fV6GK!$Ag~$2VeWW{?^{NVmTU|&XlG2EZUcX_LXo%
z-z&3dlDoAc>h3}tAxzh|>RH~x%*<+YqN}Fd<|8naHN_Z~HxaAf@9_L%b`J0FEVdu<
z-QP$#3-xRRnO4x?m*e9VE-6a;!~5UGkhcqUchvh`Dj6^pX=&m|%}48H0AsjZK~3#n
z`l+}hN!YRYPxwCwMN~95|8nuI^tJS2Xnpz_22B9x!Fg*4TT&17d6n$<)Pt7mx?`Tk
zWT_DQ6_ZUyDxggjKeEcrum4jT*NTv~UndmmOU-?J2lk}FWeE~;=-{%rQ<BVzDK^`I
z$fL5Sb7(umoabd+!m$M$$)%Yo02RJl=zC`21g^XA%4*$(wVcFR+TN5a@&8+QgSxJ=
zCiXG0&VKae_b#)W@-@#VZ$6M^HM~|jMWy*;i&4kYXwVu16aVE*46@fA@MUgX`T1x^
zi;L5fdSoS9b+8oCbEQ{befPy=rJTGT&qjktCQ*8I`O0bAWAf{zj|*E@dYW3Tz<z(p
zdBBV2i{SORDi(ZK0l(F!5b*6LWqW&Es_86#ND(ol{NI?>RQYUW-_l+D#hlvGxG^({
z*R$P^;482xCJr~~l*?SiKmK5h@$!`BWGAIm+ijJfTgXD<--W%Bf;h-~PAmEh)_+kq
zab=RQ(|+&?XSd}xSEI$Pdk0uhS7=Gt2>#Z=d$+X-2RE$1mw{SJ#}kBcqS5A0mh=ao
zu)#m>xp|aggS{?!_8o@5rN+G8IX{$X<87Hn>q*{HOPGB#&$6-y$DC1wCOok|Ki2^j
z0`$j61F*XVEWD*OuLL<v^@RJTm}-ZRC}3IgdKD+tb^dXSHubrKv6qoFp|Ye$Wl>>*
zAR(yc{%G0#NDh3+r{t*H@N;zT=LO@lfM9pMLfg`4^o)0yFQsGGc)gnOdh=~t%QX{u
z`eg~MP_(bu-^Kj3ym-<_+4O@hh;o|ar>0+UQ)8tAgbeuRY9!x3OVssnbT;o=r4;w3
zefLh&6*N@)0`^S+F=g6tfW-!u1Gm0?uoz(sn=1Wtj*>Gs=AAusEQ&$&N#YUtO;p8|
zUt7uXrwr=)X_8Owbz@31?(`}L1q`j4m;7hwy1vg|$+M)q8sscT>|Js&jE#fb3EtyB
z-DmCUspR)DV~~e`-6yk<cj*?_t2E@_8i9}(wA2y^s;XCjBL1HSdgE;DXfdcEr)7fs
z^T4F=MS)9H%X+o*A**G;tc#qtg*_gdBg`iu72I?*@<WTd3y2nu`9i+<*s5xKS^qzI
zaQNfQPRHtKSwrIYntF$?gy1;eg^^ak*}YFH@4SdJ6K2*%zY_a;ch6Z+5W+yHbxCRe
zk9!=8LR+AoVDx@fZ@TiIrBSIYqV#r?hxV*n=~RXLY{eXN`793`Lj!(qC@KSGz%?p!
z|DT5cxJV-9@jm@%{3W*H?ibXAx#+i(D49&9t}e6G6GP)Kg;3OsZs6;8st3j!VOi}j
z|FNp$J`-aj$kZa}$tC&O#VF>xOFDNhw195gTiENlHQ)NUI6d_{Co8W||4(4htV{HS
z$n`V-)XpuRpCw^A!PRg+fgNw<*1;)Nh~&L?DZwzemYOwzAoDcBpv=lbP4A6Z`hUuo
zmCW(A%XBypRU{TrXCTrtv)%U5c*~6T;!jUn+UDT{`#;;Wokaw9c9Ny(ssFw(Jlf6q
z?ZpWG=B;Nk@_L^uPnjmjWO$YK+{=CCi6za9wHlc`e3Qrg;Mh!wYJ`;1Nmvr2v`pjE
zc$Q(;O_UV8EbUpm$EO#@>Mw}@j2L}s_|KfG6`f=1G7c*08j^8XdAVqA``BKe4u!>=
zCNz~iHP9$BlE=HmjsLS^A9Cm>`cuj>GiOKo(w4+|O8{Tu1QuFLt2)DQ!f0Jt%k8l}
zu_CMZ*y3di6@?~Y>~k3T*x=Q2rY+L>;zpO`WY0`{z;qEMc3%JaR}NS2^^_~Kv)!)B
z6dx0^52D){X7&&$qw*}*%lav*>8Kt1rirJ#>3Q#Zo_6p0B-PTB;-r`1{z&t9lOSow
zmZoo2qp5m(xBP>cq7Y|1x<1MLM=TRayY$)c&5`Qof2tm=`Q+Xr13F{#^93DUB_GT9
zLbj#mcQLqofU9%sLlp==-qY-`$6-Sm_P&l}yA7CL`RyjWu@Y_v!dtQc4Tg_Rl*Ue1
z4R2m+{8Mt4_hHnzufW&43<@CT?|e87LFp<@j^6?vor&(;to2M0H||dP$-f`4wbQio
zGfh{Hr+l;eZpDr^omAE(vD%ka!{7R!y#2>)k!bXLSyrot>UHAc=bOmDY9uqE2Kzh+
zI&V4jdzMJQ)kGO_v3bZ`K45f;`lE03_pqITTeE4IjpFrS;80v%K2KpMMkTOO?+OOx
zI=uV&XAf8w_j`2LGlmK{MxeU8@6)q6Qey%9?ZVOKd|NW7VcBT4X-T01a$x2YIF^Pf
z_s&_>xTFLAeC!=HKIyrF)<yfnrip+23|QsY4R&8(KkCCWtlJPCnYVWEJ0H*fw{O0z
z?S-ND%L%F0c5|y&%ya;OelNve(_8*qN39gYdp818LQR#G{UgsKDy@qysfP3VvSuvQ
zUs1O2q@3A`*KE-q5;BH-PrmL^c{^FMD%fr9FOSz$z5@Oq=YU+@-jnY(s>kciEdt(^
zmYz!E+D3Tt)h~r{lNu6Pl5^pIYILeKw{k5zB%UuK2nr3xk(fUnfo>UQsmWU~CM~_D
zpPhetKN=kKx9IIhEYSF{-T)MS+}~h5291CbM%^e%Z%aXV8HaZ&MCq~1h|Y33%fX4K
zd%3m+U8CmV8Li{!&Z8jbrKiemWAURCku)n~W3YBm(0^*>qq(L1qx|fxw-Trara8=y
zD1JvGdFd*XScNCE-7c9%^6vKbWf5JS3KcrQM$b6uWVlz`j1^<D{vwm?l|l|p?lY8o
zV0bQgu>LB%u~akSa8pq2`tEK)@y$%x$p5(a_N5%KbRFQ_+Hj}Yd%2Wis)9V-U#|xL
zh2T7pGojZ8K0PsxVmMoEKTV>Q{^8EcS+BygXz|Le0XF^OkTBKw9Goy-lSn~{2>jh{
z5L#v9L-m?jQk$q}_SM|0Bo`qYES?<1CCJz>)qmRJ$`Zmnqk@r7&4Q^AJv73lSEFvc
zYc!?^Q`;6gno#t6VkDWV(uQxWg^vaB%9D5?Amfpxls*sc%6RP-ZOKKg+hzJK=xRhH
zba9YWPOKo-xKGP(2UXWhH&a8A)Vz-h7u`MAetxppU5rxy?~CU}guVCe`X#5w7qH<{
zzfJDTlcYyNCJ$B9%R;K}><IJ5wUG7RM?qR-+V$;3QqY5pQdLTV%rERu+Zg)XTljRS
za3mM5rUPkM7==~u#Cs^tRWUr#&l<L$tZb0<`56~LoVm+iFLVL~`tbJ7ggcjomLJY~
zuYmuM^Q*c+UV_i;@+yS?bw(g}zDu+nZ_P94h~+{=&huS`|LNB;5B_XrsQjW2y?6b3
zF;C6XM)ecV?MAu&3)8RN_H+Idgje-~rjVqLb^Y0rvzJ!(wNbl6XN)7Hbde?u<($qu
zPitNCivz|_UW~xlCK?LW?@ks3kn&Sw3a{B56c*t5oYQjb5rB_;F~J%){W)ZJTLW2d
z|I&h}^-no|c>RNXzU;&A+ppO4?tZe*!U@B#-Je~K4B9a-?w9#?E!K%mQGaM3uW1q;
zcDXHuEBcr7tUzO*wv+<Qe5PCYl_mstp`E+=U&Ly_I2?SXn2IcTpK!JiJ$eP2n&q2t
zvusbiV1546phD0y@XwO71+G`J#Dm+b5#l<=0wZh#kGNWm%y7Tb5u*PwW&fRkU^(gd
za2C6z#8eiB@}vFMd$^^7_^9H^%?#SL%0Cj1O~5*t$6<&ZiP^E8vzbqJ;Z&3~+<{dP
z7xp9-4fPUK`DgsT>3%Yp%X&O+dy24VhW_j|O1?c*lj?`vtI_wwHkeggiW!5i^Qj-;
z*QD0?cDCv-vqJUmyegJOtnWhVSj^geR#1{3-Mp?GtBVh{9g%}&h=^jN0-<D=$4?6{
z>@4~C|3G1{)sF<%m@p^?wf{P|;5l}X2D{q~HTBQJZ1q_f$;@^ep0boV`WAS@??BO)
zKiY~4Ca2DQRkj5*=r#Av{MXlp_M|P-Vv59GkCwTAUN+PFu~^USAwSt9vatB(5sHz=
z)w$AcYh7*|7vNO_)gAotWR)QU&_WUqJk4wRcLb*UbP#jc9~f@0x@)nPPhmV9_Zg03
zx%<T%58Cnvmx5Cz8N{k%k#jwkU(iqCz7*;Z7lbU1U7s%s<1BYAmUt@tp$Fz7km3?F
zZX~O3e8t-S96wUOZ{4*>g}nZIBZ&3isc@JW8rlt|@s>{3!L87)1!>7eJDVx~DFfS@
z43#gyXQZwmp)e<ZaN$!_D0syD{x<hPr}=HfdAg5b06bz4*5$Qir$ABi>Q}M;pAj_d
zaY%vEu2qU)b652*u;%Q1n0%&tf^xO;FD!lX$+R1F4nf<F;|rzE{FG`pu%aLK+T2IL
zOskr5Hpjr0?7FiKdJ`wgks%r2^RgBG2x7^VUb7^fAkXTK#sIIH;pcN^QtkpbNd`WX
zEph3cEP}BB#XltOzpmD-TXj3!9`p!TxnR5$>-n%bAHGvjvl@>#QTpOIRFS;h{%a3z
zNqX%h{~%II_KaBM`n7)!g6KH_3Xv;#*f3N~qSk~cMZQgz5-s;#jZb?q90<k~Jsz82
zBhcbL#@b0$C{Yz*J@sX63bKq~?fLHi1Pv5{Db{T#_{=pHoPXk$)au}L!O8goq*ZuC
zw+b2n!DLR&CS9uzJOV86?$9}iWUOLz@n8Y1skLm2Uv{E)ru2Ph88KMA^w{1!yrZjl
z9p9Cbw;HB>82rU9A39wrJ=f7cr)#%7fEr~dyt#Y5T&Qpch=e?X##w9(huAbb4OmC&
z{u8p35*?Ae#a4R-873|2<;~AO6X8T1?Gt53gTrkmU=gjL2mp#$4asobYgn^E#^m5L
zUApWPCZ0W^2FE#-?D_ojv`^=UGy{jRasJSxihcB2*0^Ja^?bvqsewIkvYQcmnot_E
zF(~j)gsw}8T`ow*d*WI8&9VW<08}AgNfpUvW`aZ<wOOljI%@eaazhKr;)F4`@-aTs
z_TTJzWSbsi;cG9lFhQo(1gGXN)3!T%6#XyDW^zxAiXlyfCmflds`c2MGL}v^F>@p5
zu(Q`U5$@s%3rrX*4`VDgAD)~sIAK%;!3h1cs9{%uO^9Pvo_|%WesY)k9o#b|hBV&p
zhz)yJf5~-j&Pv@_`KqM<-G2;!vZ$=Artk;(b!nic;kA_#6?ch-#ppEOqV=TTU1s9U
zPt&oa>Lx0?#igE9xp648#(!%2K7&-$KZolZXQS|_{x&X|r|h(`>`L=U1b+or?3P~H
zmxl7JkF~PUI-_gueJ}M?-c<Vu^w#=HoR26i?5MvVRsP>f&xy~^fD46oX1t?T0C)jL
zD$$}PlM8GQw|P|DUD#zHjV3g4E!T;hGm%81)&XXzaBPSm|FkRDO*Bsu%yS_7^gJz+
zr$@87UA_DtF*VhPSgKKGA;gmawj&KHKy9lS0ZL8O$n_f3*x2E`E4s`Sb*spiZayCO
z0`OK(7=1UAEg7VunN##+ArMm%0|wpoSln9mV=?#oKZr7Wrpx=95Fk^aH}uEU{XYa+
z{_g-&G?XypalER~*1Ti90tEWM32Ob{t@__t{r`*tzjvjV*75YjkvvtLqw3=)-r6hq
z7Ez1HWb)nupjd3(g>{N5Ur!b1c!bI7q}dt^k5W}qVq-EI2#l<v-ppnIGWUeq;<5a9
zWvA~LKYawR#t)l&R?9*T`v5X?r^|VkjtmXCkusuam|Mk&+#WX<@mT2xAdM&9EpDBw
z^oJAx8><1pJ{S-(x$T4<=MtE;?A-ef^$3;Ap(G-*U&Rx@Emre<wdx())05I4%E}aX
zs4XSAxq}u9x?k{nw`s1&gMN*Ugbd?7#yl)**0zu~cl_!FzddH7V|7^gJ|JL;^+Hj!
z5Z_9CWeFF%F9bTQod(z-bc2iaDLRZcRlKE*<~d%|coTLAfrVjpi^?j$m|fpN@c^z|
z_OAO>^C%uRW~bG}-j{Mc6E>92TgrL%tAU)%{PX4bki&^`z`U!EumJCVFXq|lc9OTS
zbTa#)^XO`5&h^@VkVR12X9gb`z+^p4JO=D)+zFN(m);nPKAvi>(a@M(1|p;5yv2`S
z9nYEV&bzs}<KO(gaiv%$`&IF5M`RCXZ|J{F$PaR)1549Q;#DfKq=9zR#^~HvgFzdA
zm-Ol98g9+N42f2<vXH6N)o1C_IUQ@x872V9u9s1bMnBDK{~3G^9BTGSXC0ItenRh|
zw$8g~P~^M(&sB$_mJ7NRz1zq6iUKvlDHo|x{)UNCEOz=`B=E*><#SJ(pJg70*j1k@
z-E$x&CKK^Qrt2=JY(?*)5u~ZnMKfG#;IVNJl<9EGP*Hjdkv_rwSg*6i<49se3ZV61
z0Xrdxx_{n`;Yw)E@4xR8FAnh(AE#SBR1}K6cmGrM1CLm*xOSS3^_u1oJ3CykIzY1L
z_>czWobV<9gXs+)LoAPD(h)_g$4H$h>`Nna>I%TPkJLaKj||D$>D#ih_~V?#<MhHy
zcoQ>1PI+E3C$N7`hKj<DN5_+G_8X|QKqKG%Yo%?B1cHHF1?WSRSR5P=Pi5woz7Zct
z_hvB)Xq?ZhDVzulqFxvKPY^k@myfCi&5izf;UFR5W5WOfMFR^y{(br{!T^P){x98+
zs_DKrL}f02W}p7jsn8Hxa&75gam1HEMG+jF^lkwoza=np8-TL*dJl71pa9;BA<i&p
z0PSzsPXO&eF2lTXNwn4Wn6@|mSCt^lr+VUGKR!Z^2grN;OgpCYWndv3szeqoc+<s$
z*YqF*Jq1NYQZWh%laOlq)-hDi1^p}*_Z~LYSQj~)dhCyZK17#H`IUwI?K|vPtz8y`
zHBKH3=udR1)DC*k4$N4u`~x0BIlM+1rst7ObG^vzuzu8a4`%2zwS}FwmLjDxBF(Y&
z9t2vi!eR-@l9mUU*b9=I`t5q1CGQ*OB|UFmeLv-$ptJ*o=dv3LPk$b6BM)$gGWQ{0
zn<?Q;2V1MVOI(s?TGruPaYzUG>2<Tnx4=#xz<SbT55HdeyFH{&VLJEmBvZVe5o41)
z(dRvFJxYbocZ#0<-i(SbFnKH&G<c&w$Y^a=ajkJkdHp53dFB4(g0fQ<ZN(`Hf&Xf~
z*5-bA_^x#L@NnC_ylH152dPc=oXJa2R`58wuyn^qN2+nXwg2X#Qo#bH#}naw`7o}-
zcK2<qdg_U3Cr>K#tb{gj;CY2F6P2skCK?00P3gaSBB_Kn#)Qo>&k%`oN8Wx(@74nz
z-e3z2#}wQ2@p?86OzrjhU2w=Ah!UK|3DP8|;G@>Q%Vk&#F^OuN3Qdvc9zsd3Nf6xn
zE1wD}8pX9O2Cs(;Zcp2vto+4w#*W|S;eHxdD-SQPWEN+0dEhh?t&n#WaT>Y^9Ei|M
z8PL%{0zzi{i+U@Y{G=^+#(JoYj3~aipH7ET#(p*IR)lENVX+6xk8`r;zh(%EG-a94
z^$LF%&n{N?U2CFDG)$3iXn3(iRzTQQo|?g??WT`bv6~lKTW6Q!F^C^iRDmh3W9&uf
zC1-OO_-qJ|E{Io2cbWycDLDFJY~4-l;|X&#Ts`e_<nQNemCt8ly!lhp5$W1s!xTu8
zUT5#{@-Ng`InOCR+@+|ncPEUM)wyTgw*LYgclv(86&$C3Shx+__3CobGkG7CQFAQ%
z^v0mkZRxAAQ%)_ThHGtiP;VJWv+knzU75?#RtlO;7$1J!toyebDN1InWpv(`bm&~G
zPC@N8fCz^p8k7tz-*}ns%e}ClJkXqsPFu`hcKd3z)Fb~mN&KOO;_?)eS2IP1EZrC{
zk3Jo3Nr87<bYf+3t1pjFC)@tWJ}X?#QM1WDMKWuBK@<(3?(idaC;o(hTg_IBLg`db
z3~c8~b3Xkgpc5~vv+REw`a@p8+BOf*QRrHcvt<Hip|(pQ>>i$psPIJ02_7s)5#pJO
zNuA*)a$&RD*c_17ZWlkGYBY7N>%xYUddu$iqcE;EXAe%Ag`W(uP@M4nvFPDlD)|GR
zZn2i9re8s<BT%)lSxc$l+Tq#W*Gnh35akzcSfzSBPE!;PVXOIs_i}z2k~2}Ud?@qW
zJ1aYCO@3sV%R~8cy;b2HtBO2FaC4pqrDy79zGdv3KzKPX-}id>%`}eGB{Hjkz6pp$
z(9`5SxJj^8?Vjt>g!574ix3hqNai4Isd<nl*&$2R>s%0U+a(VM>Gf%sA35d+9u78n
zwysG~l$m4pv8ryISP!DY_Erp7A~Mak_Q4I;_;c<~S&Jdu5R$Inis5q8uC!=?sZHSP
zkm-`ZI-z;|D+lx|%?QkV_n32ljJWTr2d{MY{d<Q$yK91fSSiAO+~d`kL~bf}qpXki
z6?o%BpbGA02p6X*4=EiMY~Dn_)9vWfYj#(8Y+o^jfWhE41YV>9N}U)zsAif#iGlgU
zJyZy4`EE2m#JyR<a3CAotu{7Z83&P(uh-HEzDCvlcvw|Ujl~V0d&L${oPu=floLMI
zwo_+AK7DS2T0@7jTXU`vw*<*HLtCZQlJPeB{AP*e=fP(_hp_&d!r0AH;KG5*+gNZu
zMPoOBo16Q)Khy(xo5oh)c2__aED5IR{@vs0vAwsHIyB&&)jbWp(TN(>#sn0`JiUP&
z0>(pzskfIlUL7?-c3&I`XhI6Zw$m2!9wn?oI}M`=4-Np({!h@Xg!L(jo%L$pHeXAu
zU6i%Yj#%<ZAmB_C-T!StpXD>FEu%Upq=?=;2T$i2cH+^g^RO$n2t_sM)zHhbUH2wE
zOfGR3#Qfg8=jd%&KkXhC+c3R;8Oio0yyeGh*Q+xgBKK<HY}X%XWAx<`)V7t`m>M?z
zv}zR6GAEalTw?O4c$q=%7N-a7dv<oW104c?)*b3{#SpL(#=9KW!i^&>&d%O{q#+Y;
zb(jsxd7suVMw>KmCV&`)3}ycQka^BJIHPz6E~OKmDp6j0dATL;Mv69QNL6wOB)62x
zJYs!)v~&4yz)v}!`vbJNKXv_~cMkT8Z=DtJsW&(W&$6>0zi--kp1j|%_}(z-d=s=Y
zs6ycPj#pP?$xcB-+4HYSK5mQKiV@2uBQ3#Qj`p+C6!~{C2rja+9(g}@>Pz6yz;c<9
zn}WH@Ru7#@FFm1fkz2T6f8Xn>EzM>fMnUOfneAHE=h4qzVJZO_=izlWSD8>_&HGSe
zUA4#Z<cIWCCgEai!$ep@VH1`SF-yRMbg?Ci&tNdv&cRln)>KV7?>$F(XE>^2eGMKH
zsGKW+5hxMJQ!F$YsxyLo{Cp0MYgtf7ne;_4#?LM<`M1%lM8w!uMA!FK*0?61FaO;e
z-1?J=D>67&F2o2$6{!X7R{vax#I{r;0uSK_3X4qw;Iy!1`nJ}-sPvk@nd}*@o#li<
z+EPGQVc=~G<}O3J_NM6}T0_qA14u~Qa_9ZE;+bWP%S%H{@v44;BJ}08-L$^}!?eO6
zej-n;)tW}a6TwrO5JvJ8A1UghsK8b{Q;F@Vq3v&|Ohn{5L`Y^9l=zV6`zt0ho>za*
zPdq1omt{JouQ;SCzBJ^;R+Ou}II>r#!_F!XKg$*$MsLK{;giWIH!J?Sd=0M}ftrd)
zP#hU<%r0888&(ixdq@=7X`xH!{W@Pib!F+jH$Uctng4oWXZCc26lPS4&s}DQ729t5
zaM+s%p5<XZZvKjCdbN&ukZO={Y0Ui6Jt6jHQ$sqDA-B7x#dyEP%2!#&r<=LLTi2fO
z`}wQLW^f_i)HkVPcw^9)mz#1r`Gb|V0~bTiow4$O8Lxkyb-WlDJWKg_*gSIm3il1~
z;<N?vCHnI;(gWT1KYjT26}=NgjH?4njROp=tWJ5qbek8ny1U(=v)q=bC~gbl=+vEm
zovWrlj9M~OlUN$EW$QO8lNwrkG5*OcTps(jSg`>8?0!bpnwsVC9Hi(G`LyrwmUNm+
zwBgX&AQ6M$I&<9+104n#ga_-Mi%pZ`67WxWu)E(9pR88?BT5k*h_)_&0h1LV+q?;!
zG#t4)I)A&Uf4MzZxj)flM2r^1QLeMd-6oj(O3)jP4)RaS@sJo@#Ew6NEG8E{|ImXI
zQ|NVXHLGE>NaSNSKRSp*a(gMyN*n=x5{JkTs@%}}XD%bSc<1XQ5%jOOtDk3!pB3k)
z-TI(E+gY+8N*t~!g5S$K9buUCRj1ExI8@2ips3<(v%85XPj@{gyGX6R{+#%>*vy5`
zgKza0r(*40WHXmuc**~bcD;~839P564tsNu<=@8@by`L@O$@?C_<NS`ICOoe!ubs~
z=b=YM*_NWYYb2vWS`+yTg-$&Dp!vkzbSX^3e?4C<V7=ZjeBQk^iBYaj4)UA|Tjb7V
zRP$mrXiG4od~{RvvDQLaF}^o!5gSe3U-iwk34)~N7WUlTOAY+%yna!ZO}6pyCj;3h
zs39&zr}MqbS%F6WCibvC&0&-2BG(T)72^3tIFgPVCO0#si2P11uqRKv#xQ6Ed^xlr
zNOB8~MDx@m{l?cDs$7VpQHLvShm<AXzpZ1yU(ZJIG3=A0BrPB%e)Vxp__(_=jqPYf
zPP6xFidr;d7*EA=zE}uPg^M(g^0k5&m+K<i)uXgWO)e#w1m(m<T55b)3@I8l$<bFc
z9=gPGlUB<8N}?$6r$x{_I?=;2qC(xTH#V@(A+RS`-EP;{h@_3exnVD11(0{voh)Ug
z9t6gb1J5--PIs%F-8pIO^bKWp^z*3s%T_j}fqe`eC3y2U6IePM^hY0438MzOH^P0%
z33ognha4*V{h%Bre%bpSa@{!R7Qg4E!ULD*rmitwLKi&Z&wf~oWaoK<p37*B@KCf)
zQ5~4yw&|}bGs<&KY1LZaSPqZ$p>EH+DL6MfoPS52^6No_jcSk9Ou^H2PBh)HU*w2+
zwm-#=aF$1IzdxkRM)J0F@S$H3H%6o;f~LJA?A!sLh(WqQ8S7#lu{q;yeWlm3**0um
zdsy`zQT2|fD>GD%p6V`fdfe(px|o*X=Q2}Gwl1qH?4!Aa4Ce88!f6$pLh{R(FF)zm
zF;=Y4lee5#<so1-IuW9cKKcPCnl8*n8=Dc@tUr=$x%RPgCC{|<1?d%v*{HcNyzu>!
z>_b#up8dA~!!@$iiTq_fi#IQC#~gOF#)TV90REOSt64x2#<q<u1h<5u1mP@~j)J$e
zROYQksE#JlK&qN~21rkuvStP^evjVLvovtq<B*LLP1n^ohKqJPTD&8q2=mK>MX%or
zO{mA|P=Dtu>_}S+yV9ZyF?Eih7UOc`vs%Ux%qmkR%LAK|XfMrXIbpp0DJ(m?ihTL)
zr<WFQF2P4aWnI@Ke(bcpzWT%0Q>;liO*n12@OvIuHbZ)7+T27no|$HdBpCWwQz&OR
z^PcY-RcpK90B>JJaGL(j*<>le>NC%LzAZ9NEKzX3N5t;i{+9XP-JAAoFIWFdTM{pu
zo{W$lx!51wQo$%O9?4u*Y}kHjX>-v-WvOvJTiZBxP*%_2{Y!UsZFEmYUi@8x0T-tS
zVy4xke!(C?-e0A7N6Xu1{JFFLR{Hd(t-uS`BKOwu*-9g%zm>0;$Shnp-hAQ#S2sVV
z4}rI^=$-d=^X?ctW3vWUf~qML7U}sYs2of^CO1DKXFgOPxsP;fvCUghw=)^JN<j=S
z3sQJ4`ypEvtk#^GgbiPQFEe8qs$^QMWW?U-4{;7GNgJ>2EGZri^yCW6u*|6qE$+<i
zO#HCK|6;4}XcMzDPH6sx%(@YL_r@zWkHN+%b~_8+9n{gBK5HFdxEY>L6~pm&if_GO
zGv!lgpptf&CLVlJIZkD}@BP}LoQ`6WpYH~2)m>UC`4$hSR>XTB(uX#mkg_sn&wcb<
zzmOt<;5U>L7A_NlDWp?S@#oLL5CpnKc6k~jG~PAftTfpiWu;kbX4vJy1FARg(X>?>
z)Sm5{=e5S673&5=&HAj@1MpkivLU(@)WVfuoS|_J=XTqg(&#FbQqbbN?z=rTbf}XD
zi_TsU3r5z5uno3_51Y{4du+mB(wAcMeg+-`6Dp->t?%_u*H7uUKmX)WX1Yr&w>Q1R
zdI(#-d7s3~b;htfM{hl(lpwVoIp{SwZL)sX9)}t9>C8BC_M0Rp98wmV7u~6U<PZHO
z*5_-_7FOE=7%*rwU_F}{+y=e)LIYs*-#~uweq{EYzlc0ERIu(TdfpO!Vdf)#{-ndi
z6^R($A|{OoXcsjPmGTOca2aC!4a~GdJ;}rfZa3^*Ko~*&w#0gnHCmht>6UIrFp&()
z`osA_c|510dxzZS!(MyHqc5kph8PQ%pMI&XnV9KE#GFWDS)7eL!!g3Gn!<+jXi;6j
zPrYh`)i1dS2O@j~TPR^cf=hRYtK|6`(2<6^qOBtzW=N4G4zr_16vec4OVNGlYX_7v
zN?g5iJ^D3uU2{a6;{A#9jnA7Fz@1K@67U=O1fM&6`)z`kqp1`PEST&cTWO~&9_Vfe
zMDkt>pXrohETw~+C`xOe6`S`9tjd)+TV>#e#@z5A^;6vdBq*8)WDUlN?0(;D7>0&B
z8_eSP`b+lV<cRl@(=z@2st#3d?lKQAc2`Mbr6A&~yG8>-J=KZ5J2h?L>!N{Hh9hd$
zQs~)8kK04`rv<T$DRq(Z3?GVWD8=|5h6K;+8I#+oaO!MvM4<8@{HJ%;*C<U0TU*b$
z?E@`%=@9B5FQiX1qTU4KlE_Fa7WXtv8heV8F7D(cUy2QqiqI&q;Z<Vtf~%SA8a|Jn
zz)B7&d@Hgap0+Zv^~QqXL91<9R^kV9*G8yPqwHA*jU7DAkwpB)GDqu!C;$$6DT6ng
z(3&1`_X-56_ZsFEsh5#v(Mu_L%#mp3x-)2*?134D6#dt?Nqd~l?uCoDJra{is4bpU
z2j2UiNeH<#7v;Kp>}r9H^%yJh`0{shc(pH#%XP16P5NR_nD`r{qGNbu6Md<bagoa$
zDa-J|Ceu~fM@H4(Al%+A(&r|*u9t_beI{aiyn57g6=atxm!@N^Y(ye%HA&?a-no!&
z;%4%`KAEj;{&p}MvCxmVzHFUz<u-tHsg4FfDuT=F9&61mw^3GJA7sSmoE^ak(ey1Y
zT{r&we7QqLbWqh_CR`7~JIIEf{D5`W$hq-;aV(tvi~H!=I?&r2D<|7@%iZ4lG^8a1
zikkJ^<jfP4&*;#a&&S|$x`8d!f&$TAm$F~S79TzcS(vnE<L&<Qy=6g(pX=S1(`Kt{
zow{+_CuFalW_n__;kAr1lI1pRzgHfU#bUQu*uQj#97N&C&!y<D*AmH`y_1|HqRg4I
z9vSVT2iVNTHu|d?(tO1(50qO+`(Z&?GHUejM>JI}@Hkn?#%*v}0QtwkviVtgM$NNK
za4cZVNnKJTzM+nv4Tog73lb9_C7*u^nilAPB(ks%oy*s+ZG-g^ClamHQ|e<GB1T(Z
zt%(S_NwvZXwa&-4`UI7qj+(<O$6<@?wdGTPauKtFXnfdYVX<6+@NXLjai}6kG3FM-
zq$}8XQ9iuPnBemCi1U3~h|`v5q_Q+~xxJ2Ao#_lS<|4}x0rGQl%eZT8_Qg3?P5J3v
zGlq0w?onF)=l@3#3c#ozp0e70-WkdBolo(L4^%R*2Ng#00vR-+O}{k8z3*IqIt7|H
z#f(ApXH^*9JXiFEJ<Ny+d+5EjE;i2WX8**DTVA&Rv|ffu!F6l+L%QpY&4#=&^j@zO
zIpds8X<LBonJ=FWAG)AZK~=fg>8YC~RsK2oMlkW{$KBUwprDxd3jTjCKUyXjoyJ&p
zoABobzS_vY5#be;GeZ-7Qy0=9%|XW+{YY73?6@jOTe+#{h^IY5iYNm5ZF$F_PPfVU
zwZ&0>4eb#J;%D)W45yOd>=M^YRxiVKLqGM`4IJP`71&NGTl!57!8rPxFD|VB6(|X=
zx~X#JhwH?km7Hmxg2p%EHk7F`_1zN&(uT8-j5n)#wcU8D`!bw|>@&DL2Fj)1X*0Dy
z&7NbcA^I)PShby_q(c2?Bfd*se%Bu(P+-^CnvzEaLuRV%Za;X+#{KwlWjP&7clFIE
ze5eajN>|?Gl(s`7j|V4*+t<)v`K!p;5aQ>8-Vb#i&B{}pwYhQ`eT+vQm-GnOwF=nO
z;-q{AY|dq*Eny6RBVl`=jm!GY=^2HtFyw1BOG_=|*F78eAV?$zs5)6<5f*8lWeok@
z&)Hz5@qy5L$z@jiLfliFvKMUqWv%G;8^7ImNhvlQ+PjZ0pWv3(tI}I8Uv`{;tz{*9
zS)12C{^+r=H3gf5({zrgMtLoIyC-cA>Xh)DH*Ud-v!`8Ro)(7G#AL7-f86Omk9DCq
z%M~*jOr(ZIzkByVEZQ#ZUD0C1M4trLgzb}-STtAY)0v(3-aTTRjgyDSg6|}H6lQNS
z_N=PMJ2{58hP(zRIkQdJjI#%uZ9d{7_fl|(^-Yk$^><aTeU(L@#dSIkg5Je}7&*_C
zogQ+j;PG|7e|Cto4XBpb(9^wkmv|P)QVgH_8hUyAtwdp<TIm3bT?XRp^54}f{>SMC
z5TI=GWqJ(MbVQD^Z${<EOu+B|3%LLP!1e!c=r)3>z8-Hl$}R(HpMWhG?91$Ea{wul
z-b`A?;c1{nRPMiG#?Vv)I*lJ6@sqa3={)~ZJZq}dON43P@9)BZ>`vZ#^|K9kATy-8
zNT^t>zRw^HL~y`x)&DClqPWr<7=Xc!$2U(PPi8})c1a4rQiXCD85v8b70Ek0mQW;)
z(sYUGq;$4wV<V8hE@_(4%mMB!eK-@6ZB<}Qn&C!aG1KwnZH{lBf%_E9*@g9ku1#n&
zhLIZp)qbH%#GBYZxsl90v&jA;`C1_Q&C;5}F81S#NAv1gclC>kH*o^XmtGaLO^OO7
zSk1El494feXVPXaDtUrCQN&_Pa~Gi3yxv^SV^h0);1iqqHT7w-zy#SV5I)cQk<KTj
zh1j>n^x?8dJz&<{8~wpI_~Xu9No1-@1Gta7yfCKVq9M2Ji2zkHFuQFnTKuu?zh{F-
zar{67H@-s)@O%TlsvKvX+BWFmGXE#?>}WRC@v){LENrrNpaw>8WIDrFvAXJ!e#a|U
z(yF!}NL9doyt^jn)XS%hw(ksFQPo1heSG((DP#)oXJdJ<Fl5@TfOons?m*Rn6G?)!
zGt3f1YM+LW)tf1lZW$!N2qO*;n>!+TED=WUkI0kYp{5~L#UAR#_SYcB4;4E*zSKp1
zq^k;byl+KIW&iDwx9}IIzM8E*mFdI335VZr)cxjga}_^Cex>g3!$zlQHGarHol(wF
z34COIrU^x$h@(T#LZ;8vZ4Y`f(TCs*Cs0gb)yTtyIK<4m@uB4=+{TX@TfOimQsZyL
z-^la6B*hgPave~&1CAw`V~bhxxPmG6r%38c2f03~KzrVQH-sL4o9k<I7s1wyy=(s>
zsRvXao9f`pES)Hm-U%U8!gQ~=PeHD9&5QZR4fDyCrPb9VF>l4KG4A7boq>U@d)2n9
z*V8A4ok8!kT9yls$fZivj+mpZi`uAh2d>^~mfkc6HnMEwV1abapLW{LH&0)}l9L~G
zp~-K))r;k6)EU7q>VV|R5^4id{)3E<t@R6bTV_k_RA5O65aCsommla!>;ZW*cR}h{
zXN+r1t~gZcXcf|GMpw*%moDxFT@6QDQ4TsKd^@qw?L%L;6?9VUic*T?WuGLmh)ThG
zRpX{ASOO-IxDru;qkT1sJx}L;6;L;i?=n?T*KpIy+d1rU#lMn%9PDk8-e(=;)Aq8C
z>cHXr4Li3;6<=leH$IF?R-nZL<>=b=Aea&l#3XbSKH^Ze(;}gN*}nxPv{Ocvp9oLz
zq@aWkXX52MP1&x5#(g_7e97^ANLPNmVVbrY7Aa-86_4AE#Z@FA59aU$g4^69WA@X~
z2-MQADS8-VcCAvKBgQ(AhJ2zA#SzKH-YXc)lgGQQiOGxbosDH=AJTJsn{Di9uE}iD
z;^sF1yuLd2_KMaD|C)akF<>F%0t!cMz<t5uXe66c;s+>;;<L@a+Pv8~<z>eW=H32O
zDR_p`gcU;;W$1JNHsw$rhFDkA5-c-6uPIfHoK*o7f<Z<`1|p?Z@MyPFPCy{=?<Fd2
z`iSOL@`_(MaQG~HS+yemb~9KXG+;`5fg*1E^-Vlt;iWA_iu0=~1SSM;#d7(tef-hJ
zQ!S(n=#89V&bc2VSyda`->)Q$QKu-%yzH(Y<9GR%mgGR~nr_V=+pT8ZZxmF5Z_b|`
z9}Ln=l8%suwAQTsn%=zwn8B0BiO>aXD*I5Tb$5ysMc%Aegt%Ia%5?4N>A8ZSgbN;g
zZQe}6m`|D{(S^P!bcsrPT=-IEmZfem=ufPC#yl=+%6m&Ha_6<iEHK@x@mjAu!LPZZ
zr^>7w@VK8%lqoj})6$B{+VxfzTJjDMFjkY7N2##CdBOWbSv5{sA^2bS&6@ookj-HF
z_TOu`rl~dG-Pg;=1eYjo*(Sej0V7#*=FymQv{p6U!w=e0O~Z_gxqb=HU%E{-2JE!3
zBl=ZB78Iv9=-;UiFGG(46-iY?2f9fMy%}zBI2=zT!Ww)@pJm<fV^d8*q(xL#&BxnL
z`*eD4jbT$eHCW9lPbf5tHV-{4KoYxB8JFPaMaFW<+ampk@tZi7Y;)&|(vapGIA;Mi
zd1=Q$c5C?f<u#@1sdAe-XDd0k8}bK&;D?FGy%c1nq-D+h!}7wyj^4WqpUy4dj%aIG
z2~6W4`y)0sw&WkPZBeAZ19^v4ZPF3)M1B2l9i6yCGKR!Ey&E}QsC<Tv3_n?s>MT`J
ze^1|yK{}8bYC$0bye}stxNQ^ooP4HX1F7VuQag89!|o>P<ikXQM}y@28fUq<xcFrx
z>am&JY`3+Xc<_%`r_Uc4i$iHkW~BZcjSEp1htk+KoIl<j0dX=xaKpZbt+y>x1EU)U
z0xL=ymr@ii4<_cVpR!d|pY)p!5i5ZX;_;5u9nu%|iRO@?iO}kREk{73A{@Q?c`7a%
zpSFuATpArNd_Zr&XF_{Nv8wqV8vJ6dm}&~U$$5c}^<nfHg3@qNYHPiX-SQIc7Z>ik
z|3?gxwtRsL;#hToHDajVwuVkrK)<P?uLRK}Zcbh{@Jk>~q|~3toi3o#%vULv6wfN)
z8W^noY0p0G@MhEJ>LF%_(dM?DVvLg0(YmM9gugL(WgD>FSx0kV4ZCAD9>XDVw7*&^
zkApsH#$Fh2=YqON`0UN6P$}<w`;dp;Zl0dlJ4MWep{l34Rp3hQ*3wZ67ep^F+qh5^
z1#M;+D%AH{G%Qz^cm=oGv_427=Ww*?1wziMO@kTTihLf6Ev9k8g<YwcxarcfPk(q5
zd@Hmpzze6eG3jw+!g>SuJaal8L6X=wKsH((ujhMVd&5L~U#9h#Yx{7qF>N*aqv)%4
zP2=Bs0mKt-AJs%Ef?ZNgoKT;t`U`b3pMhdJ-%G8Kahc6;kZY}+e7InWr=-h`2ItIa
zMjO=A=PggdXAg_#)?_&u0TPFfl$fDtG=Os+1T9-myL$O|TTcDT8r&PfARN4ge7-qo
zUl^ZEUPOc%NNf0-kc<l4I;w;fT?XzQnOJJPx5^&7*W`$qrd6b-d)A7**-z`4|D4gA
zy7(DG>X`(~6YRT9YdW(QU!*vU>17)XDd#!!<W51Qng{Jf`3~7xuBsNQdiThVntwW6
zXFuu}2wJK9fIA|2b}kq{jJN^U%GbCYYBW4B;`Rl_H7cNMaizc|&@W_3_i%J(SW^~W
zyVLcarWVpq5u9+J4x9li4$E@C;uKf$qQ!hCutRI?jN+P{=4VJTh5U>XP|xN+M_V}8
zgsKEVjJQk2ND6L)VAomrb?dbXFHsn8*ohpE*out*F%VcIHN8d1>1J3|poEZ~9*vbZ
zZw%OV2DNb^=LMJLaXv3`%I>2Z&x@B2dZ;OEkYeWfe9gF;Rlk!J>X$?5PFJ`L6;|O?
z=HA@CuD6gG<S{Xg+aA<r1bvq(qf<O$i{KAVNDfnP%Xg)wyCv_dAdw>%kQUjkZCsuT
z-hW>(yD-C;&yU)8y+clgmtYB~)nJcrFmbC8+BBX3C~y**B1LXXNrU{||I##*-}Sb&
zwfa!Nlt81txb!!lL8Kl#wcd`3LZApnwR_Ee?g~fg&_>()syZS|yJT~Crnno@yXV%?
zJzQNRB{i%Qu}0%vNh)I^p}Q@b?6cB0nzuh?&N8$QVNzY)Y!qzS1=!Oml0n*fou5j6
zOu;;fh<<}RfVrSkP#8pV$RZDeV~0N7^&UKIZb(<U4-%Rl=F2fh35o|Zw7qG4dm=tf
zTXenXSH8io)>v`J)yl?BmaFxpX*MT|D<e;Q?*wl7SyME!f?L_G5TLEFWWBziQOI{@
zPrb6Us4egtt8}>R&4CTk8PThb4LR`oxubrRDHS^}jwrtrEgmEy`Dq1-ITMb2PMa~6
zYza+`0j?$35802<h(V3U`G^~w#J=!^t)mTfAPP<dWn@Gwf0f~(r>A#8W{F9k06p%8
zNLWTe92n(yU}PNfSDn(K*{H5T%VoZ+5HK^<O-hEiSL}VzT@N>4BZpVhN94HQs|}1g
zB8Po(JVT7sV>WED?}}`29~K@9)Y<HxQ;f{O*eYz(HWow(vd&!ol=Ht=ZxcG>e`zuR
zqSn>5ot4CQk9*DJrBcvNJ}m@^#L<DeqDnSd6+H)RlR6pBaM|Xf{nOA~fAAi~92ctN
z#d#Zc&X~S1s_r$TQr+w3R9srVcTU{OJKQC)37~@RSxEgUytWi{mo{9S9B1pV;WC@V
zz+t=j`-kuL-+>P}<l)`|iHt!uwL8pp#JM1+$5I1a89+kvTb9D@rnEc5Ng>kbaE9Lo
z*I}&ey5)i30OUEyrO`VYBb9(Qe*X8sigL+#elZ=YFx}C`(CMyDn33r$KCJo{)hKSI
zVI2nzFqW41z1<SrA5>cTQm-}Q8|Qr?IvyUL!9zq_B-;fPDhr`NT1!t~R6hmUlPkyx
z98Su1uS?7+WVho<l{l*jDak~-{O;(nKwT^UHCK*Rcsev|R>PXbT%=k^9W-gdH9Hpj
zS&<LLQeu*TdcZWKWmNrsq=$xxJil~`;{}h2Ut8zWO)v<Ll%tU{(xCllS`ABI+PuF0
zJ^OJJoZ4&r53pkOHWYC3bDjfs=>$-jQAnfdBR0>+8W+YTTUuDKf)b(KHlxpYp^__U
zw$*pc`ulzELOl5*xMj-{OH6O@cqx^IFx%M7K3Z6;nd}&F4bI6LNxc$0j@<3tx5J`r
z^Lt;Szty3k>)frAK1#Ahr|MT)TRg&{&D03H5e@ixlWVY^Sf=Zi3J6GbZv3>8sS;A5
z7vn#os1*6cCL018@!|}c?=~zb_u>Fos6S=CoCtEtfF~>M|IHIa9<{PajY%Q*v=xsI
zD)lSBKO;?4*C1&7RVlCM?tro<uPeI5gm{jaB154?a=+`XtK-c24ZHm^Om4p5r7KB0
z558)$IN-1rVmsIGqsSmivIJXgfg4FP4zfM{Wp7__ZV!|7`8nXM7A%DX1s6MV^yAcc
z?b+_?FMd>4F`44qIUWldS%Iw>gF0CU1(i{yYUK?liG#V<fu-fd=1dL0EN0i1iVLGQ
zHhBe!=*4{G;na$P##5kBU-d+(dFACf2W3iK-*_9lihIOPfmDdtoWrlF6jo4IOMryq
zE|i5BX>~~xh97OLozC3tvDJJ;w;TqzR4;{N<g}V+*uF$s+rXyVfT}Z?#D}8d_8H+0
z48_yT?OPaWd?d_z)DK&%T1Xh4V`q{ss~hZSFF$diIisa(MBqqSYWqe>j0w8)*IxyX
zHEFHR^9T>X^D0MLwHTC&MVDJQ38aL@6+RKKVxVjet{qTM@vY5IRc6c*{rr1A5w>(X
zApijXVs(SU!~DMwy&jTCq$g!1`zYkT2sIYB%OdfC;E5wD?++w6HckTdiSDzl5rEpq
z6s+y)Ti!!{R;iF;oZ!+<%4|@E>vgCa-;lYs5h-=p#jZW8)X}^O>8(1wEsyiJd$#a>
zqmVgQ&JM9ZErkuf>$95*o`}@NjCb@jtmJ;tue@q|tj~0Hb$vJ5xttm&p@;L({iKTE
zWfG~{(xdKL$vXVUwUo2XplsE{ZKB9t5C3PPHuHwJ<l;!_mD*Ju%ttrX!CUsZU|#+b
z@n{nq^Ko?Yt$Nf(@mJ%q(^KWrrs8$5;-s>yPiNH>SUulnpP=OE8AKqg)DS$nmo`VO
zyyNIV%yUhhytXGt!8x_gX}=&TlAGb5@fpQDg&4Ex?NnUz<D^RUvRPghEaRG|O2tnD
zbKn*U$FJi62zq+R=YDZf(fVj`M)2m3owcLGwVh)9kglwK5jT8kW$cam?*IWECH_Zo
z=N;ALvaaz^Rf=(om8zm5SOBFXP24KIW`lG#DpCR{1eDMb*r0-2L8TX|0TPfNN+=2n
zLJ$Z6LRBD;5C~F2Xt@*5IqU9o`(5j<b@N|lzB==LlX>5Ho?oocmFx&9#I-fg;7xvG
zLQ|6_35zJ+S+BuWIc|SDx;_~R9qE$Ac@CSOXxO9_3qnkft=Lj%qy4TM{X?zP`1VL!
zsTq{!u~j1R!U{3ZZEV=7>U~d-wc16R8g_Zw3fDjxMOs~|e0;ItbyT}Bh-c01xn_fw
zpE_2Wgl_ihYT?t>iBJa{MjjopSVtZ~+t;7M6#J|WSeWF&f59OcUdaB`afL(E4-t&9
z01}X1x&rzCaCI?he6<6*$+6&#&bA3Jw@3}C>SGabju{L{yKvc`KoNWT6I)MNkP%4f
z#jE=-(DD5WIy@!p39d8-3FMpiMl(TE++HtF2>x<Im%(C3C;<7ACo|M7VNEg7wG%3r
zmV3cplQ29HxFn5oT+ZT*erZlQEcbXe*>xe!x97P3xSmw{9T8=(RUA>ctnh{?P#EnV
zYBvN*U3h1r^y^|UJLwsxM=M*8Zf<VU=zmK37gEbO^0K_Xai{hTIcck<#{@3)Q6<X7
zmnO6k*9B^jd){Xk#f%V3@=>QS>Cni+u;<r-C|WuOa@PHiZ1fWy=v8`HBh`NC2ab5-
z^8|<@OK`XekgwU<A6NH8(w;oo5_#LvfuP8Ps}<7>8c^~^cE_*v3JT=qft1N?^%r`?
z&}lC7ua+MSFf7?r)zThsF2`rj#Y`J2m5jP|uu#Sbelf(h1?9+H2DH29q-PE`U+-3o
z5RpCar19gE<ZW2p<z!XgeA-yOa&Z@GI7Zn218t~W9LWs8*km5P9Bz*2%XvH~7u(5e
zj&$#KK;pX-wo-Y7T3=j@l0~=<v=6X;Fn!@OJiaBSdz~c9c?E72ZY|d1UthR=d3D7*
zWJLsw#49_P2am_74z3fdT?YK>!U!^q9`&-uLzaqsk)d`fgch1H1I>kX?_E^qxqdv&
zU*%X+(|UOYpK#NG=Sr*E*NXbqDl&JzuvNR8aPka@Fe<O$ul5_O&Kyd;;u^20tW0Wd
z4nqV4kaVFMcbK`a*G)8;cN}EA-hF*Qf5DMw3>E`=%29E6gFi=*vbOgvgxwd~K{f}M
zK^7vi9L%cKIyNlYp36?`*oKZwK^JR3LFs=;fZ2W-5C0M1;v@vqJG6F}dzmBk=W9c)
z9#zbi2ZFA0Wv!a96uf}+?;KBOxJ)Cr+?^bm_BN@;ZZwwp0Ec}r{Hrf*<oui7G%ige
z)dt4y^ANHj;_HR!6xloNxH;`sqjWXG?ur(x-#fz0R;2Mrsg{Yw+M!x@(7z#~mEgK@
zP*ED9pFU2mQVjYnZsESu&MMAvwnoUx_5rMIcWPqr%Ej_$b(4rSqXg!Z!P4`XeU9Jb
z&x(Rh9(W=dr)0Xj(V?}7f%2OJ?n``piMJGLUk7{O*qWlUCpm{B8@EXC4)lU>6hu$a
z#ipVgp6sQK9yqxi?~S`ZVOvFDF~QHvaMbwx>fQdrxFnS*G&?wiqQ~VcP15p($C+Aq
z;Wv}N3dR5J(GqVKr5#>pgt8bR=L1!l)34xQQghoebaAw<+Lvt1Lh{JMdrG`wKF$)v
z>S@}@0*<^}TjA*gYIu}Pa!JHjU!8@bqw9|+0+{5gFNG`DtQ%PfCFhdU4YM#+C}M5s
zye%~FFy4#R01}b)i(^v5U>p)A#vT1zx{Hs)Qw8?nH;e<#dmspmJokbd-#7$*4%uDF
zBuTKAB@(tQ+YApiTMDWNO&4<HY4`6hP*NOuHgEJqcA9{-8linwMAC{T7FU!X4&pcC
zrc);_e}>w1nWX&Qb;P86r6G>^<5k>u*2Ldmq@Vt?Z#oc>*n~ll`u!gp5B|><D1Kz&
zLYu*feXdy%e`&kL&SdXLNGO7mG*g&8{20j0PV11f+t~IBq5Tq5Tom9cJOMpxlyaYz
zJ_br573jrxgIx!o|J>IdRqRRa+4))i+%~`#Fp7R2)MWOHdv%qFKX8v}s{)XShf>X5
z)Jb6uflorgo$sz~sa*p#=Pd9Tl6yzsW>H9<4oI^XB6bDTNBUj0m`vf&#VhPxhbnOW
z;=%5Xf|i!n)QIEJ19O7=riWjCy!aciwiS!Byi>_Z6Gyu<y{;4}0{EGBkr};jA+tLE
zl6oCNY3e*bSVe$X?(;~N|ES~{*v(QX%+DW55uuiTR+ml#%SWeSCMKB^J9XXaY~oX8
zK5soe%_7<V?HRDDbYk=7{g3aX9Denzrj3xC>lu}#Svaz^poVRQdWjkr`F=mG;{LdR
z?E<U;Rm}8JJqk|Nyb4W}`CW}|t!eoB1gvcQ=U$Tku1iJax#UrWa>YgH_oz<3r7gbV
z0XDg9-(@*DCtz{{W}eN>t;QumRRGqIr~h~jTu#7n^{Xo|4S8-JsM9YPX?bAe?T8bj
z&Y$_?F6h@o)<%dtLLdyohq4FP#|^WB1xj2dj+BpUQkRWyfyv1sQ@Bx*1lxC{pRDPc
zVQMiGsxhd$*C2*zsvTb235;3Vb-hCc(aR<_?1rtJeM;v65Q{(CwUbI3Zn00H4M!-l
zjZ50MQ7Yp>0$;%#HDg{Vlj6Qx2@09!WLM3n@$Kh+`E<pm8???_f@Qg=B%kE3C-8-A
z_s}B=eJeB0r>(bs`Bb4#p@9o2i7^3GmFeTGA@GHs?I-g;GwS?zjr(8QeEzYwIUI5j
z_&O(cmng=hrW&H!eg=u{_Zja~Q(qcT<9h#Kf)cr__gc23iZre@*4_ogT?^t%3VBU^
ziw$1U>D4|F91v4|&<GJ@z~4R|Ruw!gD}H|^a%d+rjT*|+H(ZVB0J^oZ=gPrveE`*q
zIpJN=!eD?}7qH-U5G>s7OS&8+Rs(!QjkJE!HU>1pIY5g!5pG$!HyTqc`*y*KZx`^p
z*bFgf`ot9MkXJ1-fkUs?+R<$SoBc6U6A6ScG&I!}yd8Pbb$Z&IrDK79bI8)9efup<
zY~@-ofpv-+R0j=rZF4*S+0!g;@Dj1pE4fvdr!rw0KAI0dTH+#J#9tfHfL0+1m69QO
zhC0U7j|v-t4pwjKcfz@JwTg9g=}l=Oi>hXB^^1MdZ7EW78v}Mzz}_0Y=)sJzso%``
z{LcMI4qq1MEMR_YXu0|#i-6kNqnay3j1`HS7Y=;Je{WzTf%<tZW``8eu?)Z%`S!>H
z7b3hgc<n8#LOq`D;opU$)x@_2>oSf886z@*<J@PC?1v-Ls2cJ|78M1w1`RRU4#h}u
z%CU88GXB`^sNHU~P`1I6qB30R(XP!>B)1~@fYr%<_(VvktubB$0{Q-&Wx%mdAvCbN
zm%%5L$*c)(<IUJTq1=7KlFN;_&}`PvCHU~LoI)=lvAzBK$zRC`f5B)?!G{>fVTA=O
zpAh=n*_M{39@et}$Clo?MFWm0tU>BRwMYK#YOl~Nxb=xIv+I6A66>7556I7z&p(Q^
zP_|fJa#@QtUFr25+kHGmvXuM7JuD~7hn8L+ZSP9oZaI4_(5{6l9mKOFd#r4`Cn_AG
zl!tyev?Q_F9ZNiIaSVTYY~{_O;<KRAh7NaGL0lUDZjLEUID#8b46g5Zx6~#fz@2b&
z$sQZV35h!lqzByCQISMm-M75yfcch+8#joY@l&`Z7%dxhLGZW8nu4w%Lh%KaP`{Q~
zj)rSDha$tbM6Xs;zQ3XUIPc;$iQeiv^m#IPY{jSk=n00c(&BA`rf07hVgcJ&pJ1h*
zh7WRO^~%>$^nAk5q%T$clflJMCcfY4R_XC|bt^c3-;N`2qPMla$#^>XU@j1tKsw4?
z5O!7GbL2PCtOXh0o{`dy=q3qZERYYTqwU*Tt!g=i*Mwy*@Hn2=c<qyCmcRnqh1sh!
zrc25Jq`<|tjyCK~h_*afKi!whQJ^^k-M_uV7k>1Ef^`T0A?#3eE%$uDLAlQh24yz7
zWQW?~nq0!IhEp!D)-P#%RaKbVzyHNy%T|jMk<OEi;br-g-wVzDSTuNk&Cju>k#+s!
zb*>FM{6-xTM($;xtl=A4rMeyB0_R%}puVpaUs6(mnY|%qIXWUluo=dr_1VFT<~8%;
zuNGOvaVs7^DeLqfp$=oJexi}K+yY8Q$FJ^2>0<I6t`MDOel)L$+jSKzjlt7ZGRCus
zw)neprtx{gxxI6>-v?LFE=_858>*tfxNF%d6m>3_7o6c8qrBCb{<!OP{0y-p6Dej=
z7EwgbJ~l$(f*b&3tJ4FM5WjGVv#ng#${GfQM4!F=DPll=O%Fs<IW71VtI8!!WB2X<
zR<&FqB%q>p_NZ`c%gyK4S{X?cC5x{oNMguG!gu7Z^6r_i;A9Lx2oih6k4y=iYt=!+
zPH7C1(5lPZ^JM&<{3(QJ=2@};G{GW9W4%SuMvC(Zzbv|y?1k4rJEFBjYfFWQNP3;_
zF3~9oeqrjo=<2F4meeo5g_+M4!Y}FKGxj#6j|KnPA*Z4-7}YH<a&aucC$1o)f3log
zgaB6U4T03<behNbqzQ6GMhdD))KDlxSd54>Teq{be1=7gxpP}khLp|(uMWY7cw4mx
z=O7@(&9BYS2+8StFy1G`MWaJhto4p#zm%bR<hy3eWv((UdKa~v#9~Y=yVcAsdtW1`
zEI9~cZ}J@}xhs_!v>#^vV^32ykL*`pWQy2T_?`0Hpw|2b#k>%-bv*pY=#qLx$lPP1
zFKWxDU;FT-HMP+lpBUVYC27pT$2*-ZyrMmC^Cfsu5f+@za<}>|#uD-HEfYHje1b<q
zHhDbwmYj8wNYEu=YO!Z!PW((IQz$y4*i!}tjG%kK+~U+W-!rSPo7-D^h|RUqKEiZ&
z$O3Okk+9C4obaZ6#kkbyLde0ikYl0?d-gPoWlKMJm*>*7-ZQ3ZWo$WRE_r}QIlvBk
zkyz>M<32W;h9yU-GxPf8fA74vj{i90s<e^n)n(eO781<k5NbcRJUJC%<<n>_cZiIV
z?8agWSJbh_b`IHtr3U?5MoU^zwJedhDaT7}IDdLlwK;i6uj=y;>ZAxCwTqmVk;>7x
z^y!>LjGuVaxvc*rKP^hcTE$B(O=R1nGYh-O<9*&bY483ou$_&dXycfv8%LZYTb8eH
z^ue1Lt<l*oL?<m6*Fmwa$$^h8^c=D->@>sLkHlBX=N=_@=8%Kmg<)P5<-7Q$#5tZ4
zr$@d7L#s2sIz;<>brbZ{TC6VxsB?KX>IIBkq|tWp{56knIpa0prx9=oUTC8Ub@w5n
z;-8|=U%CY0E(q20F-jP1MB)1$AZ24YzhD*8*CQ@|MP%|BPRZz_s%*>#;bKkV^W!46
z(NRw)E9>dOwJ)-IzYkUv<rMg2<)2x67?smex~7Lt3cVSSX&+3XlMOI#Wwv*EXB?W%
z<p!w~)QfK@+ZLH&TKL)X<V>}%?We3Ye5Wp5U6Zxu(17cd@<=2gjUuMh2pM1+mdKyt
z1KF3mX5BNnYX)yqn{*2vpmz~(jvLEW3V8XYHvJMkXi#@!Ph`?-fNpD_VjRB@#kADR
z7`C`rI+-f=q^n&n8Q#YV`H+G#jk-Jc;BkvlDIL*gSv$FjvSQ2(GJP(fajPHv>TwJQ
zjMHR4qlJ9xnCD&Vqn&G##kMW&N7`iWxXv_HUp!|=81R^@7NwK=xA5dx;uN+kB|4;_
z<Ll#~HY(ElEuz6<I>JoxDhDJh5fHBq-Xe(5bZ2;Rlt+cHQc+3^@5h_9R7|12{eEb)
z(%}}@-I}u(Hn!wo_b!FD<!199Tx{ZP8~hY%Jm5YKd#fO3BqjDvM!Q8CPMLn=hO&Ef
z@fGg|)-hl~t-8?dVdykZ8!2>XR_kn(3hm9T@HOr>{cK$wx*}DjN$PF<ZHse}nB?LE
zJWN7cFZCeWt4=2Q70T@fS^=@zDZ8|~M9Sn1++GvlZ;FO$1l*si>U9YwxmH7I90lKP
zn#u;D3(OSpeGu)J?Ati!E+H4o=a`ARw^_F0we@{UYs(`iK1NnBhtPX6y)f&gOhe(r
zcL$DmLeVY)ym@#e&WeB8u(fm~vI9;29_pyva0dHb%PLc4*$xpss23Zduhb!Tq-foX
zzv-UZenqZWtk(u&pH)q3y6DaRVfnag7Ify*9O9XcZMUc4lj6?bG6JG}ctUHefaGT;
zIzb}*$-}KMH`C%OLyrU#TZ_H7CwGjw=!JZLw7x{?x!+zwzpFCaWx79T%JR4$=Q5Cm
zlq(T{UYl2=xygkLCkyV1!_dLlcr$9$!_tWRFECYiQ+UaPi1b;Qg`Y%-Hi;;Dn`cG$
z$<YvnU=xmJ*vr*g*w-$l5&_M1p_=2t&!jR^=__Q1E3gA?9{r;$nVaRxNMf?ef^}<x
z{G*9FFvm+cPf<)@J45l7(!OE`#zNeFP{zeW>p84+V1(b6swUU=Ok@hh#CLst5H%6t
zT!iKaKf^^sb@lM(u!GARS7b?_OD|Rf?U{%ykj(HVUZGXY=IhGTMzxvJ8B>(wfHoki
zmi9OkUq13r>K3-DZ5mdl7<}_XU~Bv(C1CAOlx1tye&`!1MJqWsdAz}i8<LBrZau<P
z`!EbabRq`k?=P&TE~W1t;V^mDV5c-D%K<s3xSa_F#gvh`l;^e4k}VTVL0z<Gz8Nnh
z>jK;L&I3|sUQaoR>E>Yfu!n5Q;UUo$en^<kw!|-BX8oVq{{ImV{Cg_E3H;{P9-zU?
z8bu()<e#y{Vhg4WGZ5OG3xE*_Z0Ean20~oT6C8bJk^YNjVmvs=56`~b*un8(IJ*=D
z=*esEFGvEx>!%99L?mH-!GaYevG_0XH1G`lYdl@|_%HGFIY{ugcR7ELrzQU>p61K_
zYdkHk00OY0k^dl`KGgfq@$|R9#M9EI^uA~R98Wj@C7!<XZ{uk_c09fOAH~xLxOO5d
ze;>YvIi*DMr_svBkR$Mw>c+u-5*R8Wdge>dJrt^MD|km=T$gbm5Q4JO_&JXqklb;}
zi+jsf*`3n@_D1meUr0L>6DcTt>Rs=PV7EikY;6+^aX3{3bWY-*J-RXQZ%>2`_}Im|
zW8BoMkJu5WsdylA)3f!7`_GEb53!2=8=vIC9@>vhc}lXqa?bDoq(xqKNQ4&8pEB(1
z#ypkY9wfZQ=BfN7S0oQ!9cE#1v@CWGpi=C<gy@P<vYq$es1`>*NIzezMmom)tfY<i
zJHMhx^*-S`W@7Y;+Q2t-GXEry9wwH7S*~a3*2z?2pQqk62oQUcE)y_M;GuB#laZwW
zAKgx2DeCn@qkif=6^UD??`(PO**3Ysz6BeF_I_(NWhFL+&0R}84Qm1FO3$5k8at`e
z_YLL9Pd2W|JsFmLx=v;Y-6*yj$d(}{@?N|Gup3k7-3YRv?#{(D^|7V6mDZ=W$#HC4
z1*bwj2{4cW8+^GV5Rj~O^=w0a*iq-_tH>espFy*+rKq3t<kQ>zaW#HTXAXmgGP*ne
zk^i0z$R}0DuQ`GG*frA8noSohK+j1%q-0wF%_}=O6E99JFIDFy^<e<`3~cs7Ktm%q
z#H9+}K@2wX_9{CKC?gkYRa^O-N3xh-CTu;|zyJeo<{Kbc18!62n^r4xVlWSEVRTH%
zNjrIn=>LhG?{RlWHU2<6?M_W^7|a8QozYG&As8BYG&$5b<#(sZf7IvrJ5mPeyrUFq
z^Q~dnf;K%kY}p1jj(dV~ko6k%s%Q8Q<zi!ju|4fNhRFx6#1lSN?tS0>m=3sOry#eK
zsrB?oWRReMzy=cgx;3#4uu?ixP|ke6*E0~CS|%P|^e$3=%30g*(`>D)_SAj&?(TYI
zNR@%b{^DYpok_)jLCa$FrS51Nw_G!Cq&2{-keZ6SvDk!7GQrY{dD75PO8G!LxTbbg
zO$|P<;Z+22O0r{n>8`#@x}p(Uc7Af^Ky%oEqwV_<VpX~^36HcGBW6ngO$vGTT*eMI
z9zzmbt5Pbj9uz)nM0XWW3Y_BuAwH<qHtdvgXN!ZIRX{xTvjA97!RP;#R{#HrQ2NKY
zbNggU#@H<Z;jwb#`g_u;<%p4voeR4#tQAG)v}T3D*_l&_w$2)Z#GeF9`iWwOWKHsV
z8hxAvtKj=OO1jw_KzJ;^dY2}Zc6ZZ$b53BV@gP}pGM?QF!`&f5`$gs|9Klcm%1&%<
zEnEs-;~FZD^_SWT|JftXmcx@Jx>{jw!rz*guY;!^0KPNB<2t?FHnW>Bey-*`;Gu$q
zZ5J<4S);v-MG=$}dz%-IT=z1439?0d9i0I8p4=!~@bjM=oGw&<NhXX6UwwBuC^jyn
zKBDLk_U3ZD4*5Uc6FyE=+~k%^>X6x7ILkgP<e4$XUL-AW&hm!+VEtqb?<URnZ<i1|
z7~GxQzui_i0n4rb1`wy3wq|ZMKmUN@gk%(^t|CP%mBMi2dJEpk^-D|UjKG?KJM1Hd
z{V7w@h{JoODAzM>=Vf0<5gj~i6-?a{0w*r92|AGG0~ktG{`(2^A2ut8U&A22Z(p*x
zHjs|TFj-pO)c}8rbc`hC<-6~MGJN1fNHe=GYg82K&=EhBURv6%3ZF{yh4>!&&>-u*
z+&U!K-u|->^zEZGW_d7<&(1zduZ_Lx<6MGiHO7=w9#)#f9Jc*=X)hEUqPn^i_^drP
p_jr21@=8_v?rMp`=lC{R99j!}CyiFb9oT2n`_=e5`kGV3zX0#16Nvx-

literal 0
HcmV?d00001

diff --git a/apps/browser/src/vault/popup/components/at-risk-carousel-dialog/at-risk-carousel-dialog.component.html b/apps/browser/src/vault/popup/components/at-risk-carousel-dialog/at-risk-carousel-dialog.component.html
new file mode 100644
index 00000000000..aee456a8f2b
--- /dev/null
+++ b/apps/browser/src/vault/popup/components/at-risk-carousel-dialog/at-risk-carousel-dialog.component.html
@@ -0,0 +1,54 @@
+<bit-simple-dialog hideIcon>
+  <div bitDialogContent>
+    <vault-carousel label="Placeholder" (slideChange)="onSlideChange($event)">
+      <vault-carousel-slide [label]="'reviewAtRiskLogins' | i18n">
+        <img
+          class="tw-max-w-full tw-max-h-40"
+          src="../../../../images/at-risk-password-carousel/review_at-risk_logins.light.png"
+          appDarkImgSrc="../../../../images/at-risk-password-carousel/review_at-risk_logins.dark.png"
+          [alt]="'reviewAtRiskLoginSlideImgAlt' | i18n"
+        />
+        <h2 bitTypography="h2" class="tw-mt-8">{{ "reviewAtRiskLogins" | i18n }}</h2>
+        <p bitTypography="body1">
+          {{ "reviewAtRiskLoginsSlideDesc" | i18n }}
+        </p>
+      </vault-carousel-slide>
+      <vault-carousel-slide [label]="'generatePassword' | i18n">
+        <img
+          class="tw-max-w-full tw-max-h-40"
+          src="../../../../images/at-risk-password-carousel/generate_password.light.png"
+          appDarkImgSrc="../../../../images/at-risk-password-carousel/generate_password.dark.png"
+          [alt]="'generatePasswordSlideImgAlt' | i18n"
+        />
+        <h2 bitTypography="h2" class="tw-mt-8">{{ "generatePassword" | i18n }}</h2>
+        <p bitTypography="body1">
+          {{ "generatePasswordSlideDesc" | i18n }}
+        </p>
+      </vault-carousel-slide>
+      <vault-carousel-slide [label]="'updateInBitwarden' | i18n">
+        <img
+          class="tw-max-w-full tw-max-h-40"
+          src="../../../../images/at-risk-password-carousel/update_login.light.png"
+          appDarkImgSrc="../../../../images/at-risk-password-carousel/update_login.dark.png"
+          [alt]="'updateInBitwardenSlideImgAlt' | i18n"
+        />
+        <h2 bitTypography="h2" class="tw-mt-8">{{ "updateInBitwarden" | i18n }}</h2>
+        <p bitTypography="body1">
+          {{ "updateInBitwardenSlideDesc" | i18n }}
+        </p>
+      </vault-carousel-slide>
+    </vault-carousel>
+  </div>
+  <div bitDialogFooter class="tw-w-full">
+    <button
+      type="button"
+      bitButton
+      buttonType="primary"
+      block
+      [disabled]="!dismissBtnEnabled()"
+      (click)="dismiss()"
+    >
+      {{ "reviewAtRiskPasswords" | i18n }}
+    </button>
+  </div>
+</bit-simple-dialog>
diff --git a/apps/browser/src/vault/popup/components/at-risk-carousel-dialog/at-risk-carousel-dialog.component.ts b/apps/browser/src/vault/popup/components/at-risk-carousel-dialog/at-risk-carousel-dialog.component.ts
new file mode 100644
index 00000000000..9af9f0aeda3
--- /dev/null
+++ b/apps/browser/src/vault/popup/components/at-risk-carousel-dialog/at-risk-carousel-dialog.component.ts
@@ -0,0 +1,46 @@
+import { DialogRef } from "@angular/cdk/dialog";
+import { Component, inject, signal } from "@angular/core";
+
+import { ButtonModule, DialogModule, DialogService, TypographyModule } from "@bitwarden/components";
+import { I18nPipe } from "@bitwarden/ui-common";
+import { DarkImageSourceDirective, VaultCarouselModule } from "@bitwarden/vault";
+
+export enum AtRiskCarouselDialogResult {
+  Dismissed = "dismissed",
+}
+
+@Component({
+  selector: "vault-at-risk-carousel-dialog",
+  templateUrl: "./at-risk-carousel-dialog.component.html",
+  imports: [
+    DialogModule,
+    VaultCarouselModule,
+    TypographyModule,
+    ButtonModule,
+    DarkImageSourceDirective,
+    I18nPipe,
+  ],
+  standalone: true,
+})
+export class AtRiskCarouselDialogComponent {
+  private dialogRef = inject(DialogRef);
+
+  protected dismissBtnEnabled = signal(false);
+
+  protected async dismiss() {
+    this.dialogRef.close(AtRiskCarouselDialogResult.Dismissed);
+  }
+
+  protected onSlideChange(slideIndex: number) {
+    // Only enable the dismiss button on the last slide
+    if (slideIndex === 2) {
+      this.dismissBtnEnabled.set(true);
+    }
+  }
+
+  static open(dialogService: DialogService) {
+    return dialogService.open<AtRiskCarouselDialogResult>(AtRiskCarouselDialogComponent, {
+      disableClose: true,
+    });
+  }
+}
diff --git a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-password-page.service.ts b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-password-page.service.ts
index f8cd4a60650..4f3c235dc3f 100644
--- a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-password-page.service.ts
+++ b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-password-page.service.ts
@@ -2,18 +2,27 @@ import { inject, Injectable } from "@angular/core";
 import { map, Observable } from "rxjs";
 
 import {
-  BANNERS_DISMISSED_DISK,
+  AT_RISK_PASSWORDS_PAGE_DISK,
   StateProvider,
   UserKeyDefinition,
 } from "@bitwarden/common/platform/state";
 import { UserId } from "@bitwarden/common/types/guid";
 
-export const AT_RISK_PASSWORD_AUTOFILL_CALLOUT_DISMISSED_KEY = new UserKeyDefinition<boolean>(
-  BANNERS_DISMISSED_DISK,
-  "atRiskPasswordAutofillBannerDismissed",
+const AUTOFILL_CALLOUT_DISMISSED_KEY = new UserKeyDefinition<boolean>(
+  AT_RISK_PASSWORDS_PAGE_DISK,
+  "autofillCalloutDismissed",
   {
     deserializer: (bannersDismissed) => bannersDismissed,
-    clearOn: [], // Do not clear dismissed banners
+    clearOn: [], // Do not clear dismissed callout
+  },
+);
+
+const GETTING_STARTED_CAROUSEL_DISMISSED_KEY = new UserKeyDefinition<boolean>(
+  AT_RISK_PASSWORDS_PAGE_DISK,
+  "gettingStartedCarouselDismissed",
+  {
+    deserializer: (bannersDismissed) => bannersDismissed,
+    clearOn: [], // Do not clear dismissed carousel
   },
 );
 
@@ -23,13 +32,23 @@ export class AtRiskPasswordPageService {
 
   isCalloutDismissed(userId: UserId): Observable<boolean> {
     return this.stateProvider
-      .getUser(userId, AT_RISK_PASSWORD_AUTOFILL_CALLOUT_DISMISSED_KEY)
+      .getUser(userId, AUTOFILL_CALLOUT_DISMISSED_KEY)
       .state$.pipe(map((dismissed) => !!dismissed));
   }
 
   async dismissCallout(userId: UserId): Promise<void> {
+    await this.stateProvider.getUser(userId, AUTOFILL_CALLOUT_DISMISSED_KEY).update(() => true);
+  }
+
+  isGettingStartedDismissed(userId: UserId): Observable<boolean> {
+    return this.stateProvider
+      .getUser(userId, GETTING_STARTED_CAROUSEL_DISMISSED_KEY)
+      .state$.pipe(map((dismissed) => !!dismissed));
+  }
+
+  async dismissGettingStarted(userId: UserId): Promise<void> {
     await this.stateProvider
-      .getUser(userId, AT_RISK_PASSWORD_AUTOFILL_CALLOUT_DISMISSED_KEY)
+      .getUser(userId, GETTING_STARTED_CAROUSEL_DISMISSED_KEY)
       .update(() => true);
   }
 }
diff --git a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.spec.ts b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.spec.ts
index 39b9650538a..c719618b33a 100644
--- a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.spec.ts
+++ b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.spec.ts
@@ -16,7 +16,7 @@ import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.servic
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
 import { CipherService } from "@bitwarden/common/vault/abstractions/cipher.service";
 import { CipherView } from "@bitwarden/common/vault/models/view/cipher.view";
-import { ToastService } from "@bitwarden/components";
+import { DialogService, ToastService } from "@bitwarden/components";
 import {
   ChangeLoginPasswordService,
   DefaultChangeLoginPasswordService,
@@ -28,6 +28,7 @@ import {
 
 import { PopupHeaderComponent } from "../../../../platform/popup/layout/popup-header.component";
 import { PopupPageComponent } from "../../../../platform/popup/layout/popup-page.component";
+import { AtRiskCarouselDialogResult } from "../at-risk-carousel-dialog/at-risk-carousel-dialog.component";
 
 import { AtRiskPasswordPageService } from "./at-risk-password-page.service";
 import { AtRiskPasswordsComponent } from "./at-risk-passwords.component";
@@ -73,6 +74,7 @@ describe("AtRiskPasswordsComponent", () => {
   const mockToastService = mock<ToastService>();
   const mockAtRiskPasswordPageService = mock<AtRiskPasswordPageService>();
   const mockChangeLoginPasswordService = mock<ChangeLoginPasswordService>();
+  const mockDialogService = mock<DialogService>();
 
   beforeEach(async () => {
     mockTasks$ = new BehaviorSubject<SecurityTask[]>([
@@ -109,6 +111,7 @@ describe("AtRiskPasswordsComponent", () => {
     calloutDismissed$ = new BehaviorSubject<boolean>(false);
     setInlineMenuVisibility.mockClear();
     mockToastService.showToast.mockClear();
+    mockDialogService.open.mockClear();
     mockAtRiskPasswordPageService.isCalloutDismissed.mockReturnValue(calloutDismissed$);
 
     await TestBed.configureTestingModule({
@@ -162,6 +165,7 @@ describe("AtRiskPasswordsComponent", () => {
           providers: [
             AtRiskPasswordPageService,
             { provide: ChangeLoginPasswordService, useClass: DefaultChangeLoginPasswordService },
+            DialogService,
           ],
         },
         add: {
@@ -169,6 +173,7 @@ describe("AtRiskPasswordsComponent", () => {
           providers: [
             { provide: AtRiskPasswordPageService, useValue: mockAtRiskPasswordPageService },
             { provide: ChangeLoginPasswordService, useValue: mockChangeLoginPasswordService },
+            { provide: DialogService, useValue: mockDialogService },
           ],
         },
       })
@@ -269,4 +274,31 @@ describe("AtRiskPasswordsComponent", () => {
       });
     });
   });
+
+  describe("getting started carousel", () => {
+    it("should open the carousel automatically if the user has not dismissed it", async () => {
+      mockAtRiskPasswordPageService.isGettingStartedDismissed.mockReturnValue(of(false));
+      mockDialogService.open.mockReturnValue({ closed: of(undefined) } as any);
+      await component.ngOnInit();
+      expect(mockDialogService.open).toHaveBeenCalled();
+    });
+
+    it("should not open the carousel automatically if the user has already dismissed it", async () => {
+      mockDialogService.open.mockClear(); // Need to clear the mock since the component is already initialized once
+      mockAtRiskPasswordPageService.isGettingStartedDismissed.mockReturnValue(of(true));
+      mockDialogService.open.mockReturnValue({ closed: of(undefined) } as any);
+      await component.ngOnInit();
+      expect(mockDialogService.open).not.toHaveBeenCalled();
+    });
+
+    it("should mark the carousel as dismissed when the user dismisses it", async () => {
+      mockAtRiskPasswordPageService.isGettingStartedDismissed.mockReturnValue(of(false));
+      mockDialogService.open.mockReturnValue({
+        closed: of(AtRiskCarouselDialogResult.Dismissed),
+      } as any);
+      await component.ngOnInit();
+      expect(mockDialogService.open).toHaveBeenCalled();
+      expect(mockAtRiskPasswordPageService.dismissGettingStarted).toHaveBeenCalled();
+    });
+  });
 });
diff --git a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.ts b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.ts
index 4753bc77ecb..471bdfeed19 100644
--- a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.ts
+++ b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.ts
@@ -1,5 +1,5 @@
 import { CommonModule } from "@angular/common";
-import { Component, inject, signal } from "@angular/core";
+import { Component, inject, OnInit, signal } from "@angular/core";
 import { Router } from "@angular/router";
 import { combineLatest, firstValueFrom, map, of, shareReplay, startWith, switchMap } from "rxjs";
 
@@ -19,6 +19,8 @@ import {
   BadgeModule,
   ButtonModule,
   CalloutModule,
+  DialogModule,
+  DialogService,
   ItemModule,
   ToastService,
   TypographyModule,
@@ -30,11 +32,16 @@ import {
   PasswordRepromptService,
   SecurityTaskType,
   TaskService,
+  VaultCarouselModule,
 } from "@bitwarden/vault";
 
 import { PopOutComponent } from "../../../../platform/popup/components/pop-out.component";
 import { PopupHeaderComponent } from "../../../../platform/popup/layout/popup-header.component";
 import { PopupPageComponent } from "../../../../platform/popup/layout/popup-page.component";
+import {
+  AtRiskCarouselDialogComponent,
+  AtRiskCarouselDialogResult,
+} from "../at-risk-carousel-dialog/at-risk-carousel-dialog.component";
 
 import { AtRiskPasswordPageService } from "./at-risk-password-page.service";
 
@@ -50,6 +57,8 @@ import { AtRiskPasswordPageService } from "./at-risk-password-page.service";
     CalloutModule,
     ButtonModule,
     BadgeModule,
+    DialogModule,
+    VaultCarouselModule,
   ],
   providers: [
     AtRiskPasswordPageService,
@@ -59,7 +68,7 @@ import { AtRiskPasswordPageService } from "./at-risk-password-page.service";
   standalone: true,
   templateUrl: "./at-risk-passwords.component.html",
 })
-export class AtRiskPasswordsComponent {
+export class AtRiskPasswordsComponent implements OnInit {
   private taskService = inject(TaskService);
   private organizationService = inject(OrganizationService);
   private cipherService = inject(CipherService);
@@ -72,6 +81,7 @@ export class AtRiskPasswordsComponent {
   private atRiskPasswordPageService = inject(AtRiskPasswordPageService);
   private changeLoginPasswordService = inject(ChangeLoginPasswordService);
   private platformUtilsService = inject(PlatformUtilsService);
+  private dialogService = inject(DialogService);
 
   /**
    * The cipher that is currently being launched. Used to show a loading spinner on the badge button.
@@ -141,6 +151,21 @@ export class AtRiskPasswordsComponent {
     }),
   );
 
+  async ngOnInit() {
+    const { userId } = await firstValueFrom(this.activeUserData$);
+    const gettingStartedDismissed = await firstValueFrom(
+      this.atRiskPasswordPageService.isGettingStartedDismissed(userId),
+    );
+    if (!gettingStartedDismissed) {
+      const ref = AtRiskCarouselDialogComponent.open(this.dialogService);
+
+      const result = await firstValueFrom(ref.closed);
+      if (result === AtRiskCarouselDialogResult.Dismissed) {
+        await this.atRiskPasswordPageService.dismissGettingStarted(userId);
+      }
+    }
+  }
+
   async viewCipher(cipher: CipherView) {
     const repromptPassed = await this.passwordRepromptService.passwordRepromptCheck(cipher);
     if (!repromptPassed) {
diff --git a/libs/common/src/platform/state/state-definitions.ts b/libs/common/src/platform/state/state-definitions.ts
index c7901bc34e2..84d5b81ee73 100644
--- a/libs/common/src/platform/state/state-definitions.ts
+++ b/libs/common/src/platform/state/state-definitions.ts
@@ -199,3 +199,4 @@ export const NEW_DEVICE_VERIFICATION_NOTICE = new StateDefinition(
 );
 export const VAULT_APPEARANCE = new StateDefinition("vaultAppearance", "disk");
 export const SECURITY_TASKS_DISK = new StateDefinition("securityTasks", "disk");
+export const AT_RISK_PASSWORDS_PAGE_DISK = new StateDefinition("atRiskPasswordsPage", "disk");
diff --git a/libs/components/src/dialog/simple-dialog/simple-dialog.component.html b/libs/components/src/dialog/simple-dialog/simple-dialog.component.html
index 1f154a8d543..d810838cabb 100644
--- a/libs/components/src/dialog/simple-dialog/simple-dialog.component.html
+++ b/libs/components/src/dialog/simple-dialog/simple-dialog.component.html
@@ -3,10 +3,12 @@
   @fadeIn
 >
   <div class="tw-flex tw-flex-col tw-items-center tw-gap-2 tw-px-4 tw-pt-4 tw-text-center">
-    @if (hasIcon) {
-      <ng-content select="[bitDialogIcon]"></ng-content>
-    } @else {
-      <i class="bwi bwi-exclamation-triangle tw-text-3xl tw-text-warning" aria-hidden="true"></i>
+    @if (!hideIcon()) {
+      @if (hasIcon) {
+        <ng-content select="[bitDialogIcon]"></ng-content>
+      } @else {
+        <i class="bwi bwi-exclamation-triangle tw-text-3xl tw-text-warning" aria-hidden="true"></i>
+      }
     }
     <h1
       bitDialogTitleContainer
diff --git a/libs/components/src/dialog/simple-dialog/simple-dialog.component.ts b/libs/components/src/dialog/simple-dialog/simple-dialog.component.ts
index bc99ba65e9b..db7023b5b86 100644
--- a/libs/components/src/dialog/simple-dialog/simple-dialog.component.ts
+++ b/libs/components/src/dialog/simple-dialog/simple-dialog.component.ts
@@ -1,4 +1,4 @@
-import { Component, ContentChild, Directive } from "@angular/core";
+import { booleanAttribute, Component, ContentChild, Directive, input } from "@angular/core";
 
 import { TypographyDirective } from "../../typography/typography.directive";
 import { fadeIn } from "../animations";
@@ -20,6 +20,11 @@ export class IconDirective {}
 export class SimpleDialogComponent {
   @ContentChild(IconDirective) icon!: IconDirective;
 
+  /**
+   * Optional flag to hide the dialog's center icon. Defaults to false.
+   */
+  hideIcon = input(false, { transform: booleanAttribute });
+
   get hasIcon() {
     return this.icon != null;
   }
diff --git a/libs/components/src/dialog/simple-dialog/simple-dialog.stories.ts b/libs/components/src/dialog/simple-dialog/simple-dialog.stories.ts
index 50016ef358d..13618fdeb5f 100644
--- a/libs/components/src/dialog/simple-dialog/simple-dialog.stories.ts
+++ b/libs/components/src/dialog/simple-dialog/simple-dialog.stories.ts
@@ -1,5 +1,5 @@
 import { NoopAnimationsModule } from "@angular/platform-browser/animations";
-import { Meta, StoryObj, moduleMetadata } from "@storybook/angular";
+import { Meta, moduleMetadata, StoryObj } from "@storybook/angular";
 
 import { ButtonModule } from "../../button";
 import { DialogModule } from "../dialog.module";
@@ -57,8 +57,24 @@ export const CustomIcon: Story = {
   }),
 };
 
+export const HideIcon: Story = {
+  render: (args) => ({
+    props: args,
+    template: `
+      <bit-simple-dialog hideIcon>
+        <span bitDialogTitle>Premium Subscription Available</span>
+        <span bitDialogContent> Message Content</span>
+        <ng-container bitDialogFooter>
+          <button bitButton buttonType="primary">Yes</button>
+          <button bitButton buttonType="secondary">No</button>
+        </ng-container>
+      </bit-simple-dialog>
+    `,
+  }),
+};
+
 export const ScrollingContent: Story = {
-  render: (args: SimpleDialogComponent) => ({
+  render: (args) => ({
     props: args,
     template: `
       <bit-simple-dialog>
diff --git a/libs/vault/src/components/carousel/carousel.component.html b/libs/vault/src/components/carousel/carousel.component.html
index b3e124e02bb..04c6e559056 100644
--- a/libs/vault/src/components/carousel/carousel.component.html
+++ b/libs/vault/src/components/carousel/carousel.component.html
@@ -20,6 +20,6 @@
     ></vault-carousel-button>
   </div>
   <div class="tw-absolute tw-invisible" #tempSlideContainer *ngIf="minHeight === null">
-    <ng-template [cdkPortalOutlet] #tempSlideOutlet></ng-template>
+    <ng-template cdkPortalOutlet></ng-template>
   </div>
 </section>
diff --git a/libs/vault/src/components/carousel/carousel.component.ts b/libs/vault/src/components/carousel/carousel.component.ts
index ab6d0a38f3e..2346ee29902 100644
--- a/libs/vault/src/components/carousel/carousel.component.ts
+++ b/libs/vault/src/components/carousel/carousel.component.ts
@@ -8,12 +8,12 @@ import {
   ContentChildren,
   ElementRef,
   EventEmitter,
+  inject,
   Input,
   Output,
   QueryList,
   ViewChild,
   ViewChildren,
-  inject,
 } from "@angular/core";
 
 import { ButtonModule } from "@bitwarden/components";
@@ -89,7 +89,7 @@ export class VaultCarouselComponent implements AfterViewInit {
     this.slideChange.emit(index);
   }
 
-  ngAfterViewInit(): void {
+  async ngAfterViewInit() {
     this.keyManager = new FocusKeyManager(this.carouselButtons)
       .withHorizontalOrientation("ltr")
       .withWrap()
@@ -98,7 +98,7 @@ export class VaultCarouselComponent implements AfterViewInit {
     // Set the first carousel button as active, this avoids having to double tab the arrow keys on initial focus.
     this.keyManager.setFirstItemActive();
 
-    this.setMinHeightOfCarousel();
+    await this.setMinHeightOfCarousel();
   }
 
   /**
@@ -106,7 +106,7 @@ export class VaultCarouselComponent implements AfterViewInit {
    * Render each slide in a temporary portal outlet to get the height of each slide
    * and store the tallest slide height.
    */
-  private setMinHeightOfCarousel() {
+  private async setMinHeightOfCarousel() {
     // Store the height of the carousel button element.
     const heightOfButtonsPx = this.carouselButtonWrapper.nativeElement.offsetHeight;
 
@@ -121,13 +121,14 @@ export class VaultCarouselComponent implements AfterViewInit {
     // to determine the height of the first slide.
     let tallestSlideHeightPx = containerHeight - heightOfButtonsPx;
 
-    this.slides.forEach((slide, index) => {
-      // Skip the first slide, the height is accounted for above.
-      if (index === this.selectedIndex) {
-        return;
+    for (let i = 0; i < this.slides.length; i++) {
+      if (i === this.selectedIndex) {
+        continue;
       }
+      this.tempSlideOutlet.attach(this.slides.get(i)!.content);
 
-      this.tempSlideOutlet.attach(slide.content);
+      // Wait for the slide to render. Otherwise, the previous slide may not have been removed from the DOM yet.
+      await new Promise(requestAnimationFrame);
 
       // Store the height of the current slide if is larger than the current stored height;
       if (this.tempSlideContainer.nativeElement.offsetHeight > tallestSlideHeightPx) {
@@ -136,8 +137,7 @@ export class VaultCarouselComponent implements AfterViewInit {
 
       // cleanup the outlet
       this.tempSlideOutlet.detach();
-    });
-
+    }
     // Set the min height of the entire carousel based on the largest slide.
     this.minHeight = `${tallestSlideHeightPx + heightOfButtonsPx}px`;
     this.changeDetectorRef.detectChanges();
diff --git a/libs/vault/src/components/carousel/carousel.module.ts b/libs/vault/src/components/carousel/carousel.module.ts
new file mode 100644
index 00000000000..c426e7f89c2
--- /dev/null
+++ b/libs/vault/src/components/carousel/carousel.module.ts
@@ -0,0 +1,10 @@
+import { NgModule } from "@angular/core";
+
+import { VaultCarouselSlideComponent } from "./carousel-slide/carousel-slide.component";
+import { VaultCarouselComponent } from "./carousel.component";
+
+@NgModule({
+  imports: [VaultCarouselComponent, VaultCarouselSlideComponent],
+  exports: [VaultCarouselComponent, VaultCarouselSlideComponent],
+})
+export class VaultCarouselModule {}
diff --git a/libs/vault/src/components/carousel/index.ts b/libs/vault/src/components/carousel/index.ts
index a785c261020..b2fcfb087f5 100644
--- a/libs/vault/src/components/carousel/index.ts
+++ b/libs/vault/src/components/carousel/index.ts
@@ -1 +1 @@
-export { VaultCarouselComponent } from "./carousel.component";
+export { VaultCarouselModule } from "./carousel.module";
diff --git a/libs/vault/src/components/dark-image-source.directive.ts b/libs/vault/src/components/dark-image-source.directive.ts
new file mode 100644
index 00000000000..6f3e03ef914
--- /dev/null
+++ b/libs/vault/src/components/dark-image-source.directive.ts
@@ -0,0 +1,62 @@
+import {
+  DestroyRef,
+  Directive,
+  ElementRef,
+  HostBinding,
+  inject,
+  input,
+  OnInit,
+} from "@angular/core";
+import { takeUntilDestroyed } from "@angular/core/rxjs-interop";
+import { combineLatest, Observable } from "rxjs";
+
+import { SYSTEM_THEME_OBSERVABLE } from "@bitwarden/angular/services/injection-tokens";
+import { Theme } from "@bitwarden/common/platform/enums";
+import { ThemeStateService } from "@bitwarden/common/platform/theming/theme-state.service";
+
+/**
+ * Directive that will switch the image source based on the currently applied theme.
+ *
+ * @example
+ * ```html
+ * <img src="light-image.png" appDarkImgSrc="dark-image.png" />
+ * ```
+ */
+@Directive({
+  selector: "[appDarkImgSrc]",
+  standalone: true,
+})
+export class DarkImageSourceDirective implements OnInit {
+  private themeService = inject(ThemeStateService);
+  private systemTheme$: Observable<Theme> = inject(SYSTEM_THEME_OBSERVABLE);
+  private el = inject(ElementRef<HTMLElement>);
+  private destroyRef = inject(DestroyRef);
+
+  /**
+   * The image source to use when the light theme is applied. Automatically assigned the value
+   * of the `<img>` src attribute.
+   */
+  protected lightImgSrc: string | undefined;
+
+  /**
+   * The image source to use when the dark theme is applied.
+   */
+  darkImgSrc = input.required<string>({ alias: "appDarkImgSrc" });
+
+  @HostBinding("attr.src") src: string | undefined;
+
+  ngOnInit() {
+    // Set the light image source from the element's current src attribute
+    this.lightImgSrc = this.el.nativeElement.getAttribute("src");
+
+    // Update the image source based on the active theme
+    combineLatest([this.themeService.selectedTheme$, this.systemTheme$])
+      .pipe(takeUntilDestroyed(this.destroyRef))
+      .subscribe(([theme, systemTheme]) => {
+        const appliedTheme = theme === "system" ? systemTheme : theme;
+        const isDark =
+          appliedTheme === "dark" || appliedTheme === "nord" || appliedTheme === "solarizedDark";
+        this.src = isDark ? this.darkImgSrc() : this.lightImgSrc;
+      });
+  }
+}
diff --git a/libs/vault/src/index.ts b/libs/vault/src/index.ts
index ac905c1f5ef..e4857411d05 100644
--- a/libs/vault/src/index.ts
+++ b/libs/vault/src/index.ts
@@ -4,6 +4,7 @@ export { CopyCipherFieldService, CopyAction } from "./services/copy-cipher-field
 export { CopyCipherFieldDirective } from "./components/copy-cipher-field.directive";
 export { OrgIconDirective } from "./components/org-icon.directive";
 export { CanDeleteCipherDirective } from "./components/can-delete-cipher.directive";
+export { DarkImageSourceDirective } from "./components/dark-image-source.directive";
 
 export * from "./utils/observable-utilities";
 
@@ -21,6 +22,7 @@ export { NewDeviceVerificationNoticePageOneComponent } from "./components/new-de
 export { NewDeviceVerificationNoticePageTwoComponent } from "./components/new-device-verification-notice/new-device-verification-notice-page-two.component";
 export { DecryptionFailureDialogComponent } from "./components/decryption-failure-dialog/decryption-failure-dialog.component";
 export * from "./components/add-edit-folder-dialog/add-edit-folder-dialog.component";
+export * from "./components/carousel";
 
 export * as VaultIcons from "./icons";
 

From 16ffedc06bdf37b5c7ef93ae22bec08dd52c4760 Mon Sep 17 00:00:00 2001
From: Shane Melton <smelton@bitwarden.com>
Date: Wed, 26 Feb 2025 13:45:57 -0800
Subject: [PATCH 14/47] [PM-18463] [PM-18465] At-risk Password Page Fixes
 (#13573)

* [PM-18463] Add hyphen and fix description pluralization

* [PM-18463] Add spacing between buttons

* [PM-18463] Ensure callout does not flash
---
 apps/browser/src/_locales/en/messages.json    | 21 ++++++++++-----
 .../at-risk-passwords.component.html          |  3 ++-
 .../at-risk-passwords.component.spec.ts       | 25 ++++++++++++++---
 .../at-risk-passwords.component.ts            | 27 +++++++++++++++----
 4 files changed, 61 insertions(+), 15 deletions(-)

diff --git a/apps/browser/src/_locales/en/messages.json b/apps/browser/src/_locales/en/messages.json
index ce73bd99d36..0c25288fb9a 100644
--- a/apps/browser/src/_locales/en/messages.json
+++ b/apps/browser/src/_locales/en/messages.json
@@ -1397,14 +1397,14 @@
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
-  },  
+  },
   "selectAnotherMethod": {
     "message": "Select another method",
     "description": "Select another two-step login method"
   },
   "useYourRecoveryCode": {
     "message": "Use your recovery code"
-  }, 
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -2446,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2459,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
diff --git a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.html b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.html
index 044848eec8c..cd93401c861 100644
--- a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.html
+++ b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.html
@@ -6,7 +6,7 @@
   </popup-header>
 
   <bit-callout
-    *ngIf="!(inlineAutofillSettingEnabled$ | async) && !(calloutDismissed$ | async)"
+    *ngIf="showAutofillCallout$ | async"
     type="info"
     [title]="'changeAtRiskPasswordsFaster' | i18n"
     data-testid="autofill-callout"
@@ -18,6 +18,7 @@
       buttonType="primary"
       (click)="activateInlineAutofillMenuVisibility()"
       data-testid="turn-on-autofill-button"
+      class="tw-mr-2"
     >
       {{ "turnOnAutofill" | i18n }}
     </button>
diff --git a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.spec.ts b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.spec.ts
index c719618b33a..3bf786ad5b7 100644
--- a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.spec.ts
+++ b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.spec.ts
@@ -198,8 +198,27 @@ describe("AtRiskPasswordsComponent", () => {
 
   describe("pageDescription$", () => {
     it("should use single org description when tasks belong to one org", async () => {
-      const description = await firstValueFrom(component["pageDescription$"]);
-      expect(description).toBe("atRiskPasswordsDescSingleOrg");
+      // Single task
+      let description = await firstValueFrom(component["pageDescription$"]);
+      expect(description).toBe("atRiskPasswordDescSingleOrg");
+
+      // Multiple tasks
+      mockTasks$.next([
+        {
+          id: "task",
+          organizationId: "org",
+          cipherId: "cipher",
+          type: SecurityTaskType.UpdateAtRiskCredential,
+        } as SecurityTask,
+        {
+          id: "task2",
+          organizationId: "org",
+          cipherId: "cipher2",
+          type: SecurityTaskType.UpdateAtRiskCredential,
+        } as SecurityTask,
+      ]);
+      description = await firstValueFrom(component["pageDescription$"]);
+      expect(description).toBe("atRiskPasswordsDescSingleOrgPlural");
     });
 
     it("should use multiple org description when tasks belong to multiple orgs", async () => {
@@ -218,7 +237,7 @@ describe("AtRiskPasswordsComponent", () => {
         } as SecurityTask,
       ]);
       const description = await firstValueFrom(component["pageDescription$"]);
-      expect(description).toBe("atRiskPasswordsDescMultiOrg");
+      expect(description).toBe("atRiskPasswordsDescMultiOrgPlural");
     });
   });
 
diff --git a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.ts b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.ts
index 471bdfeed19..dd3d53fed7d 100644
--- a/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.ts
+++ b/apps/browser/src/vault/popup/components/at-risk-passwords/at-risk-passwords.component.ts
@@ -115,14 +115,23 @@ export class AtRiskPasswordsComponent implements OnInit {
     startWith(true),
   );
 
-  protected calloutDismissed$ = this.activeUserData$.pipe(
+  private calloutDismissed$ = this.activeUserData$.pipe(
     switchMap(({ userId }) => this.atRiskPasswordPageService.isCalloutDismissed(userId)),
   );
-
-  protected inlineAutofillSettingEnabled$ = this.autofillSettingsService.inlineMenuVisibility$.pipe(
+  private inlineAutofillSettingEnabled$ = this.autofillSettingsService.inlineMenuVisibility$.pipe(
     map((setting) => setting !== AutofillOverlayVisibility.Off),
   );
 
+  protected showAutofillCallout$ = combineLatest([
+    this.calloutDismissed$,
+    this.inlineAutofillSettingEnabled$,
+  ]).pipe(
+    map(([calloutDismissed, inlineAutofillSettingEnabled]) => {
+      return !calloutDismissed && !inlineAutofillSettingEnabled;
+    }),
+    startWith(false),
+  );
+
   protected atRiskItems$ = this.activeUserData$.pipe(
     map(({ tasks, ciphers }) =>
       tasks
@@ -143,11 +152,19 @@ export class AtRiskPasswordsComponent implements OnInit {
         const [orgId] = orgIds;
         return this.organizationService.organizations$(userId).pipe(
           getOrganizationById(orgId),
-          map((org) => this.i18nService.t("atRiskPasswordsDescSingleOrg", org?.name, tasks.length)),
+          map((org) =>
+            this.i18nService.t(
+              tasks.length === 1
+                ? "atRiskPasswordDescSingleOrg"
+                : "atRiskPasswordsDescSingleOrgPlural",
+              org?.name,
+              tasks.length,
+            ),
+          ),
         );
       }
 
-      return of(this.i18nService.t("atRiskPasswordsDescMultiOrg", tasks.length));
+      return of(this.i18nService.t("atRiskPasswordsDescMultiOrgPlural", tasks.length));
     }),
   );
 

From a2b9844fa456e1490ae47f88fbccd41e21823768 Mon Sep 17 00:00:00 2001
From: Jordan Aasen <166539328+jaasen-livefront@users.noreply.github.com>
Date: Wed, 26 Feb 2025 15:57:29 -0800
Subject: [PATCH 15/47] [PM-18623][PM-18621][PM-18615] fix defects for new
 settings popover (#13572)

* fix defects for new settings popover

* also check for "click items to autofill" setting
---
 .../new-settings-callout.component.html            |  8 +++++++-
 .../new-settings-callout.component.ts              | 14 +++++++++++++-
 .../components/vault-v2/vault-page.service.ts      |  6 ------
 3 files changed, 20 insertions(+), 8 deletions(-)

diff --git a/apps/browser/src/vault/popup/components/vault-v2/new-settings-callout/new-settings-callout.component.html b/apps/browser/src/vault/popup/components/vault-v2/new-settings-callout/new-settings-callout.component.html
index 727a8e938af..a6abe8ed3ac 100644
--- a/apps/browser/src/vault/popup/components/vault-v2/new-settings-callout/new-settings-callout.component.html
+++ b/apps/browser/src/vault/popup/components/vault-v2/new-settings-callout/new-settings-callout.component.html
@@ -14,7 +14,13 @@
   >
     <div bitTypography="body2" (click)="goToAppearance()">
       {{ "newCustomizationOptionsCalloutContent" | i18n }}
-      <a routerLink="/appearance">
+      <a
+        tabIndex="0"
+        bitLink
+        linkType="primary"
+        routerLink="/appearance"
+        (keydown.enter)="goToAppearance()"
+      >
         {{ "newCustomizationOptionsCalloutLink" | i18n }}
       </a>
     </div>
diff --git a/apps/browser/src/vault/popup/components/vault-v2/new-settings-callout/new-settings-callout.component.ts b/apps/browser/src/vault/popup/components/vault-v2/new-settings-callout/new-settings-callout.component.ts
index 71549906474..713dc21c424 100644
--- a/apps/browser/src/vault/popup/components/vault-v2/new-settings-callout/new-settings-callout.component.ts
+++ b/apps/browser/src/vault/popup/components/vault-v2/new-settings-callout/new-settings-callout.component.ts
@@ -9,8 +9,10 @@ import { AccountService } from "@bitwarden/common/auth/abstractions/account.serv
 import { getUserId } from "@bitwarden/common/auth/services/account.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { UserId } from "@bitwarden/common/types/guid";
+import { VaultSettingsService } from "@bitwarden/common/vault/abstractions/vault-settings/vault-settings.service";
 import { ButtonModule, PopoverModule } from "@bitwarden/components";
 
+import { VaultPopupCopyButtonsService } from "../../../services/vault-popup-copy-buttons.service";
 import { VaultPageService } from "../vault-page.service";
 
 @Component({
@@ -30,11 +32,18 @@ export class NewSettingsCalloutComponent implements OnInit, OnDestroy {
     private vaultPageService: VaultPageService,
     private router: Router,
     private logService: LogService,
+    private copyButtonService: VaultPopupCopyButtonsService,
+    private vaultSettingsService: VaultSettingsService,
   ) {}
 
   async ngOnInit() {
     this.activeUserId = await firstValueFrom(this.accountService.activeAccount$.pipe(getUserId));
 
+    const showQuickCopyActions = await firstValueFrom(this.copyButtonService.showQuickCopyActions$);
+    const clickItemsToAutofillVaultView = await firstValueFrom(
+      this.vaultSettingsService.clickItemsToAutofillVaultView$,
+    );
+
     let profileCreatedDate: Date;
 
     try {
@@ -50,7 +59,10 @@ export class NewSettingsCalloutComponent implements OnInit, OnDestroy {
     );
 
     this.showNewCustomizationSettingsCallout =
-      !hasCalloutBeenDismissed && profileCreatedDate < new Date("2024-12-25");
+      !showQuickCopyActions &&
+      !clickItemsToAutofillVaultView &&
+      !hasCalloutBeenDismissed &&
+      profileCreatedDate < new Date("2024-12-25");
   }
 
   async goToAppearance() {
diff --git a/apps/browser/src/vault/popup/components/vault-v2/vault-page.service.ts b/apps/browser/src/vault/popup/components/vault-v2/vault-page.service.ts
index 75354298c26..a7c52ed4c51 100644
--- a/apps/browser/src/vault/popup/components/vault-v2/vault-page.service.ts
+++ b/apps/browser/src/vault/popup/components/vault-v2/vault-page.service.ts
@@ -21,12 +21,6 @@ export const NEW_CUSTOMIZATION_OPTIONS_CALLOUT_DISMISSED_KEY = new UserKeyDefini
 export class VaultPageService {
   private stateProvider = inject(StateProvider);
 
-  async unDismissCallout(userId: UserId): Promise<void> {
-    await this.stateProvider
-      .getUser(userId, NEW_CUSTOMIZATION_OPTIONS_CALLOUT_DISMISSED_KEY)
-      .update(() => false);
-  }
-
   isCalloutDismissed(userId: UserId): Observable<boolean> {
     return this.stateProvider
       .getUser(userId, NEW_CUSTOMIZATION_OPTIONS_CALLOUT_DISMISSED_KEY)

From 182ff6481dcbd928f1df2fb16c8a381eb611b7b0 Mon Sep 17 00:00:00 2001
From: Todd Martin <106564991+trmartin4@users.noreply.github.com>
Date: Wed, 26 Feb 2025 21:49:48 -0500
Subject: [PATCH 16/47] Remove early return from redirect initialization.
 (#13585)

---
 libs/auth/src/angular/sso/sso.component.ts | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/libs/auth/src/angular/sso/sso.component.ts b/libs/auth/src/angular/sso/sso.component.ts
index cd3429323b5..cc9e5f83c01 100644
--- a/libs/auth/src/angular/sso/sso.component.ts
+++ b/libs/auth/src/angular/sso/sso.component.ts
@@ -155,13 +155,6 @@ export class SsoComponent implements OnInit {
       return;
     }
 
-    // Detect if we are on the first portion of the SSO flow
-    // and have been sent here from another client with the info in query params
-    if (this.hasParametersFromOtherClientRedirect(qParams)) {
-      this.initializeFromRedirectFromOtherClient(qParams);
-      return;
-    }
-
     // Detect if we have landed here but only have an SSO identifier in the URL.
     // This is used by integrations that want to "short-circuit" the login to send users
     // directly to their IdP to simulate IdP-initiated SSO, so we submit automatically.
@@ -172,8 +165,15 @@ export class SsoComponent implements OnInit {
       return;
     }
 
-    // If we're routed here with no additional parameters, we'll try to determine the
-    // identifier using claimed domain or local state saved from their last attempt.
+    // Detect if we are on the first portion of the SSO flow
+    // and have been sent here from another client with the info in query params.
+    // If so, we want to initialize the SSO flow with those values.
+    if (this.hasParametersFromOtherClientRedirect(qParams)) {
+      this.initializeFromRedirectFromOtherClient(qParams);
+    }
+
+    // Try to determine the identifier using claimed domain or local state
+    // persisted from the user's last login attempt.
     await this.initializeIdentifierFromEmailOrStorage();
   }
 

From ec488e4f847f1d476e4f95f01d711e6207e334a6 Mon Sep 17 00:00:00 2001
From: Todd Martin <106564991+trmartin4@users.noreply.github.com>
Date: Thu, 27 Feb 2025 10:00:52 -0500
Subject: [PATCH 17/47] [PM-18664] Prevent display of Auth Request notification
 on triggering device (#13597)

* Send device identifier in header.

* Added null to apiUrl property for strict typing.

* Added null to apiUrl for strict typing.
---
 .../auth-request/auth-request-api.service.ts      | 15 ++++++++++++++-
 libs/common/src/abstractions/api.service.ts       |  2 +-
 libs/common/src/services/api.service.ts           |  2 +-
 3 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/libs/auth/src/common/services/auth-request/auth-request-api.service.ts b/libs/auth/src/common/services/auth-request/auth-request-api.service.ts
index b5fc72588a6..c9fec1400c9 100644
--- a/libs/auth/src/common/services/auth-request/auth-request-api.service.ts
+++ b/libs/auth/src/common/services/auth-request/auth-request-api.service.ts
@@ -54,7 +54,20 @@ export class DefaultAuthRequestApiService implements AuthRequestApiService {
 
   async postAuthRequest(request: AuthRequest): Promise<AuthRequestResponse> {
     try {
-      const response = await this.apiService.send("POST", "/auth-requests/", request, false, true);
+      // Submit the current device identifier in the header as well as in the POST body.
+      // The value in the header will be used to build the request context and ensure that the resulting
+      // notifications have the current device as a source.
+      const response = await this.apiService.send(
+        "POST",
+        "/auth-requests/",
+        request,
+        false,
+        true,
+        null,
+        (headers) => {
+          headers.set("Device-Identifier", request.deviceIdentifier);
+        },
+      );
 
       return new AuthRequestResponse(response);
     } catch (e: unknown) {
diff --git a/libs/common/src/abstractions/api.service.ts b/libs/common/src/abstractions/api.service.ts
index 5bd2221860b..fe3f356719b 100644
--- a/libs/common/src/abstractions/api.service.ts
+++ b/libs/common/src/abstractions/api.service.ts
@@ -142,7 +142,7 @@ export abstract class ApiService {
     body: any,
     authed: boolean,
     hasResponse: boolean,
-    apiUrl?: string,
+    apiUrl?: string | null,
     alterHeaders?: (headers: Headers) => void,
   ) => Promise<any>;
 
diff --git a/libs/common/src/services/api.service.ts b/libs/common/src/services/api.service.ts
index ad59ad0837a..6d90f2ac253 100644
--- a/libs/common/src/services/api.service.ts
+++ b/libs/common/src/services/api.service.ts
@@ -1863,7 +1863,7 @@ export class ApiService implements ApiServiceAbstraction {
     body: any,
     authed: boolean,
     hasResponse: boolean,
-    apiUrl?: string,
+    apiUrl?: string | null,
     alterHeaders?: (headers: Headers) => void,
   ): Promise<any> {
     const env = await firstValueFrom(this.environmentService.environment$);

From e6aaa6556356bc4c5b13a32a1d08f93f67d5c334 Mon Sep 17 00:00:00 2001
From: Jared Snider <116684653+JaredSnider-Bitwarden@users.noreply.github.com>
Date: Thu, 27 Feb 2025 10:53:24 -0500
Subject: [PATCH 18/47] fix(New-UI-Login-SSO): [Auth/PM-18693] LoginComp - fix
 form validation not showing up on SSO click  (#13601)

---
 libs/auth/src/angular/login/login.component.ts | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/libs/auth/src/angular/login/login.component.ts b/libs/auth/src/angular/login/login.component.ts
index 47109b00bbb..a84fb93bd23 100644
--- a/libs/auth/src/angular/login/login.component.ts
+++ b/libs/auth/src/angular/login/login.component.ts
@@ -629,12 +629,7 @@ export class LoginComponent implements OnInit, OnDestroy {
    * Handle the SSO button click.
    */
   async handleSsoClick() {
-    // Make sure the email is not empty, for type safety
     const email = this.formGroup.value.email;
-    if (!email) {
-      this.logService.error("Email is required for SSO");
-      return;
-    }
 
     // Make sure the email is valid
     const isEmailValid = await this.validateEmail();
@@ -642,6 +637,12 @@ export class LoginComponent implements OnInit, OnDestroy {
       return;
     }
 
+    // Make sure the email is not empty, for type safety
+    if (!email) {
+      this.logService.error("Email is required for SSO");
+      return;
+    }
+
     // Save the email configuration for the login component
     await this.saveEmailSettings();
 

From 1da7f2052cbf3e9396c26e3236aaba88babac9ff Mon Sep 17 00:00:00 2001
From: Vicki League <vleague@bitwarden.com>
Date: Thu, 27 Feb 2025 11:39:46 -0500
Subject: [PATCH 19/47] [PM-18663] Fix calls to bit-button loading states
 (#13592)

---
 .../src/billing/popup/settings/premium-v2.component.html    | 6 +++---
 .../app/billing/individual/user-subscription.component.html | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/apps/browser/src/billing/popup/settings/premium-v2.component.html b/apps/browser/src/billing/popup/settings/premium-v2.component.html
index f578de8ae7a..4f87a0f6781 100644
--- a/apps/browser/src/billing/popup/settings/premium-v2.component.html
+++ b/apps/browser/src/billing/popup/settings/premium-v2.component.html
@@ -45,14 +45,14 @@
       #refreshBtn
       type="button"
       (click)="refresh()"
-      [disabled]="$any(refreshBtn).loading"
+      [disabled]="$any(refreshBtn).loading()"
       [appApiAction]="refreshPromise"
       bitButton
     >
-      <span [hidden]="$any(refreshBtn).loading">{{ "premiumRefresh" | i18n }}</span>
+      <span [hidden]="$any(refreshBtn).loading()">{{ "premiumRefresh" | i18n }}</span>
       <i
         class="bwi bwi-spinner bwi-spin bwi-lg bwi-fw"
-        [hidden]="!$any(refreshBtn).loading"
+        [hidden]="!$any(refreshBtn).loading()"
         aria-hidden="true"
       ></i>
     </button>
diff --git a/apps/web/src/app/billing/individual/user-subscription.component.html b/apps/web/src/app/billing/individual/user-subscription.component.html
index 1c1382cd816..e801237467a 100644
--- a/apps/web/src/app/billing/individual/user-subscription.component.html
+++ b/apps/web/src/app/billing/individual/user-subscription.component.html
@@ -27,7 +27,7 @@
       #reinstateBtn
       (click)="reinstate()"
       [appApiAction]="reinstatePromise"
-      [disabled]="$any(reinstateBtn).loading"
+      [disabled]="$any(reinstateBtn).loading()"
     >
       {{ "reinstateSubscription" | i18n }}
     </button>
@@ -109,7 +109,7 @@
         class="tw-ml-auto"
         (click)="cancelSubscription()"
         [appApiAction]="cancelPromise"
-        [disabled]="$any(cancelBtn).loading"
+        [disabled]="$any(cancelBtn).loading()"
         *ngIf="subscription && !subscription.cancelled && !subscriptionMarkedForCancel"
       >
         {{ "cancelSubscription" | i18n }}

From 319a4dd1cc929c04140e988eac7af06f40fe98c4 Mon Sep 17 00:00:00 2001
From: Todd Martin <106564991+trmartin4@users.noreply.github.com>
Date: Thu, 27 Feb 2025 13:17:47 -0500
Subject: [PATCH 20/47] Remove checks of device verification flags on client
 (#13604)

---
 apps/browser/src/popup/app-routing.module.ts | 8 +-------
 apps/desktop/src/app/app-routing.module.ts   | 8 +-------
 apps/web/src/app/oss-routing.module.ts       | 8 +-------
 libs/common/src/enums/feature-flag.enum.ts   | 2 --
 4 files changed, 3 insertions(+), 23 deletions(-)

diff --git a/apps/browser/src/popup/app-routing.module.ts b/apps/browser/src/popup/app-routing.module.ts
index eb09f719aaf..76894b23d0a 100644
--- a/apps/browser/src/popup/app-routing.module.ts
+++ b/apps/browser/src/popup/app-routing.module.ts
@@ -17,7 +17,6 @@ import {
   tdeDecryptionRequiredGuard,
   unauthGuardFn,
 } from "@bitwarden/angular/auth/guards";
-import { canAccessFeature } from "@bitwarden/angular/platform/guard/feature-flag.guard";
 import { NewDeviceVerificationNoticeGuard } from "@bitwarden/angular/vault/guards";
 import {
   AnonLayoutWrapperComponent,
@@ -45,7 +44,6 @@ import {
   UserLockIcon,
   VaultIcon,
 } from "@bitwarden/auth/angular";
-import { FeatureFlag } from "@bitwarden/common/enums/feature-flag.enum";
 import { LockComponent } from "@bitwarden/key-management-ui";
 import {
   NewDeviceVerificationNoticePageOneComponent,
@@ -245,11 +243,7 @@ const routes: Routes = [
   {
     path: "device-verification",
     component: ExtensionAnonLayoutWrapperComponent,
-    canActivate: [
-      canAccessFeature(FeatureFlag.NewDeviceVerification),
-      unauthGuardFn(),
-      activeAuthGuard(),
-    ],
+    canActivate: [unauthGuardFn(), activeAuthGuard()],
     children: [{ path: "", component: NewDeviceVerificationComponent }],
     data: {
       pageIcon: DeviceVerificationIcon,
diff --git a/apps/desktop/src/app/app-routing.module.ts b/apps/desktop/src/app/app-routing.module.ts
index b9dccf70322..1ebb1f8de39 100644
--- a/apps/desktop/src/app/app-routing.module.ts
+++ b/apps/desktop/src/app/app-routing.module.ts
@@ -15,7 +15,6 @@ import {
   tdeDecryptionRequiredGuard,
   unauthGuardFn,
 } from "@bitwarden/angular/auth/guards";
-import { canAccessFeature } from "@bitwarden/angular/platform/guard/feature-flag.guard";
 import { NewDeviceVerificationNoticeGuard } from "@bitwarden/angular/vault/guards";
 import {
   AnonLayoutWrapperComponent,
@@ -43,7 +42,6 @@ import {
   NewDeviceVerificationComponent,
   DeviceVerificationIcon,
 } from "@bitwarden/auth/angular";
-import { FeatureFlag } from "@bitwarden/common/enums/feature-flag.enum";
 import { LockComponent } from "@bitwarden/key-management-ui";
 import {
   NewDeviceVerificationNoticePageOneComponent,
@@ -123,11 +121,7 @@ const routes: Routes = [
   {
     path: "device-verification",
     component: AnonLayoutWrapperComponent,
-    canActivate: [
-      canAccessFeature(FeatureFlag.NewDeviceVerification),
-      unauthGuardFn(),
-      activeAuthGuard(),
-    ],
+    canActivate: [unauthGuardFn(), activeAuthGuard()],
     children: [{ path: "", component: NewDeviceVerificationComponent }],
     data: {
       pageIcon: DeviceVerificationIcon,
diff --git a/apps/web/src/app/oss-routing.module.ts b/apps/web/src/app/oss-routing.module.ts
index 81057426500..091c5440d70 100644
--- a/apps/web/src/app/oss-routing.module.ts
+++ b/apps/web/src/app/oss-routing.module.ts
@@ -11,7 +11,6 @@ import {
   unauthGuardFn,
   activeAuthGuard,
 } from "@bitwarden/angular/auth/guards";
-import { canAccessFeature } from "@bitwarden/angular/platform/guard/feature-flag.guard";
 import { NewDeviceVerificationNoticeGuard } from "@bitwarden/angular/vault/guards";
 import {
   AnonLayoutWrapperComponent,
@@ -42,7 +41,6 @@ import {
   NewDeviceVerificationComponent,
   DeviceVerificationIcon,
 } from "@bitwarden/auth/angular";
-import { FeatureFlag } from "@bitwarden/common/enums/feature-flag.enum";
 import { LockComponent } from "@bitwarden/key-management-ui";
 import {
   NewDeviceVerificationNoticePageOneComponent,
@@ -611,11 +609,7 @@ const routes: Routes = [
       },
       {
         path: "device-verification",
-        canActivate: [
-          canAccessFeature(FeatureFlag.NewDeviceVerification),
-          unauthGuardFn(),
-          activeAuthGuard(),
-        ],
+        canActivate: [unauthGuardFn(), activeAuthGuard()],
         children: [
           {
             path: "",
diff --git a/libs/common/src/enums/feature-flag.enum.ts b/libs/common/src/enums/feature-flag.enum.ts
index 2f3e6bb724b..5d34e5b8310 100644
--- a/libs/common/src/enums/feature-flag.enum.ts
+++ b/libs/common/src/enums/feature-flag.enum.ts
@@ -45,7 +45,6 @@ export enum FeatureFlag {
   PrivateKeyRegeneration = "pm-12241-private-key-regeneration",
   ResellerManagedOrgAlert = "PM-15814-alert-owners-of-reseller-managed-orgs",
   AccountDeprovisioningBanner = "pm-17120-account-deprovisioning-admin-console-banner",
-  NewDeviceVerification = "new-device-verification",
   PM15179_AddExistingOrgsFromProviderPortal = "pm-15179-add-existing-orgs-from-provider-portal",
   RecoveryCodeLogin = "pm-17128-recovery-code-login",
   PM12276_BreadcrumbEventLogs = "pm-12276-breadcrumbing-for-business-features",
@@ -104,7 +103,6 @@ export const DefaultFeatureFlagValue = {
   [FeatureFlag.PrivateKeyRegeneration]: FALSE,
   [FeatureFlag.ResellerManagedOrgAlert]: FALSE,
   [FeatureFlag.AccountDeprovisioningBanner]: FALSE,
-  [FeatureFlag.NewDeviceVerification]: FALSE,
   [FeatureFlag.PM15179_AddExistingOrgsFromProviderPortal]: FALSE,
   [FeatureFlag.RecoveryCodeLogin]: FALSE,
   [FeatureFlag.PM12276_BreadcrumbEventLogs]: FALSE,

From 407368b3ea0ba3774c0e73d20af6599c1913d2cd Mon Sep 17 00:00:00 2001
From: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>
Date: Thu, 27 Feb 2025 20:55:24 +0100
Subject: [PATCH 21/47] [PM-18706] Added permission check for organizational
 inactive 2fa report (#13610)

* Added permission check for organizational inactive 2fa report

Only display the cipher's name if the user running the report does not have permissions to view/edit the cipher

* Add appropiate access modifiers to newly added members/methods

---------

Co-authored-by: Daniel James Smith <djsmith85@users.noreply.github.com>
---
 .../inactive-two-factor-report.component.html | 21 ++++++++++++-------
 .../inactive-two-factor-report.component.ts   | 11 ++++++++++
 .../inactive-two-factor-report.component.ts   |  9 ++++++++
 3 files changed, 33 insertions(+), 8 deletions(-)

diff --git a/apps/web/src/app/tools/reports/pages/inactive-two-factor-report.component.html b/apps/web/src/app/tools/reports/pages/inactive-two-factor-report.component.html
index 52bbb1c5e6d..e667a65235b 100644
--- a/apps/web/src/app/tools/reports/pages/inactive-two-factor-report.component.html
+++ b/apps/web/src/app/tools/reports/pages/inactive-two-factor-report.component.html
@@ -47,14 +47,19 @@
                 <app-vault-icon [cipher]="r"></app-vault-icon>
               </td>
               <td bitCell>
-                <a
-                  bitLink
-                  href="#"
-                  appStopClick
-                  (click)="selectCipher(r)"
-                  title="{{ 'editItemWithName' | i18n: r.name }}"
-                  >{{ r.name }}</a
-                >
+                <ng-container *ngIf="!organization || canManageCipher(r); else cantManage">
+                  <a
+                    bitLink
+                    href="#"
+                    appStopClick
+                    (click)="selectCipher(r)"
+                    title="{{ 'editItemWithName' | i18n: r.name }}"
+                    >{{ r.name }}</a
+                  >
+                </ng-container>
+                <ng-template #cantManage>
+                  <span>{{ r.name }}</span>
+                </ng-template>
                 <ng-container *ngIf="!organization && r.organizationId">
                   <i
                     class="bwi bwi-collection"
diff --git a/apps/web/src/app/tools/reports/pages/inactive-two-factor-report.component.ts b/apps/web/src/app/tools/reports/pages/inactive-two-factor-report.component.ts
index 819be73b8be..5265326128e 100644
--- a/apps/web/src/app/tools/reports/pages/inactive-two-factor-report.component.ts
+++ b/apps/web/src/app/tools/reports/pages/inactive-two-factor-report.component.ts
@@ -130,4 +130,15 @@ export class InactiveTwoFactorReportComponent extends CipherReportComponent impl
       this.services.set(serviceData.domain, serviceData.documentation);
     }
   }
+
+  /**
+   * Provides a way to determine if someone with permissions to run an organizational report is also able to view/edit ciphers within the results
+   * Default to true for indivduals running reports on their own vault.
+   * @param c CipherView
+   * @returns boolean
+   */
+  protected canManageCipher(c: CipherView): boolean {
+    // this will only ever be false from the org view;
+    return true;
+  }
 }
diff --git a/apps/web/src/app/tools/reports/pages/organizations/inactive-two-factor-report.component.ts b/apps/web/src/app/tools/reports/pages/organizations/inactive-two-factor-report.component.ts
index 8a2fc333c64..5979e99c0fa 100644
--- a/apps/web/src/app/tools/reports/pages/organizations/inactive-two-factor-report.component.ts
+++ b/apps/web/src/app/tools/reports/pages/organizations/inactive-two-factor-report.component.ts
@@ -13,6 +13,7 @@ import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.servic
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { CipherService } from "@bitwarden/common/vault/abstractions/cipher.service";
 import { SyncService } from "@bitwarden/common/vault/abstractions/sync/sync.service.abstraction";
+import { Cipher } from "@bitwarden/common/vault/models/domain/cipher";
 import { CipherView } from "@bitwarden/common/vault/models/view/cipher.view";
 import { DialogService } from "@bitwarden/components";
 import { CipherFormConfigService, PasswordRepromptService } from "@bitwarden/vault";
@@ -41,6 +42,9 @@ export class InactiveTwoFactorReportComponent
   extends BaseInactiveTwoFactorReportComponent
   implements OnInit
 {
+  // Contains a list of ciphers, the user running the report, can manage
+  private manageableCiphers: Cipher[];
+
   constructor(
     cipherService: CipherService,
     dialogService: DialogService,
@@ -80,6 +84,7 @@ export class InactiveTwoFactorReportComponent
           .organizations$(userId)
           .pipe(getOrganizationById(params.organizationId)),
       );
+      this.manageableCiphers = await this.cipherService.getAll(userId);
       await super.ngOnInit();
     });
   }
@@ -87,4 +92,8 @@ export class InactiveTwoFactorReportComponent
   getAllCiphers(): Promise<CipherView[]> {
     return this.cipherService.getAllFromApiForOrganization(this.organization.id);
   }
+
+  protected canManageCipher(c: CipherView): boolean {
+    return this.manageableCiphers.some((x) => x.id === c.id);
+  }
 }

From eaeea195e4ec8df9b6c02e93cea2f40584b80a9a Mon Sep 17 00:00:00 2001
From: Daniel James Smith <2670567+djsmith85@users.noreply.github.com>
Date: Thu, 27 Feb 2025 20:55:38 +0100
Subject: [PATCH 22/47] Added permission check for organizational unsecure
 website (#13611)

Only display the cipher's name if the user running the report does not have permissions to view/edit the cipher

Co-authored-by: Daniel James Smith <djsmith85@users.noreply.github.com>
---
 .../unsecured-websites-report.component.ts    |  9 +++++
 .../unsecured-websites-report.component.html  | 22 ++++++-----
 .../unsecured-websites-report.component.ts    | 38 ++++++++-----------
 3 files changed, 37 insertions(+), 32 deletions(-)

diff --git a/apps/web/src/app/tools/reports/pages/organizations/unsecured-websites-report.component.ts b/apps/web/src/app/tools/reports/pages/organizations/unsecured-websites-report.component.ts
index 156f3331d32..748986fe5bb 100644
--- a/apps/web/src/app/tools/reports/pages/organizations/unsecured-websites-report.component.ts
+++ b/apps/web/src/app/tools/reports/pages/organizations/unsecured-websites-report.component.ts
@@ -13,6 +13,7 @@ import { AccountService } from "@bitwarden/common/auth/abstractions/account.serv
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
 import { CipherService } from "@bitwarden/common/vault/abstractions/cipher.service";
 import { SyncService } from "@bitwarden/common/vault/abstractions/sync/sync.service.abstraction";
+import { Cipher } from "@bitwarden/common/vault/models/domain/cipher";
 import { CipherView } from "@bitwarden/common/vault/models/view/cipher.view";
 import { DialogService } from "@bitwarden/components";
 import { CipherFormConfigService, PasswordRepromptService } from "@bitwarden/vault";
@@ -41,6 +42,9 @@ export class UnsecuredWebsitesReportComponent
   extends BaseUnsecuredWebsitesReportComponent
   implements OnInit
 {
+  // Contains a list of ciphers, the user running the report, can manage
+  private manageableCiphers: Cipher[];
+
   constructor(
     cipherService: CipherService,
     dialogService: DialogService,
@@ -80,6 +84,7 @@ export class UnsecuredWebsitesReportComponent
           .organizations$(userId)
           .pipe(getOrganizationById(params.organizationId)),
       );
+      this.manageableCiphers = await this.cipherService.getAll(userId);
       await super.ngOnInit();
     });
   }
@@ -87,4 +92,8 @@ export class UnsecuredWebsitesReportComponent
   getAllCiphers(): Promise<CipherView[]> {
     return this.cipherService.getAllFromApiForOrganization(this.organization.id);
   }
+
+  protected canManageCipher(c: CipherView): boolean {
+    return this.manageableCiphers.some((x) => x.id === c.id);
+  }
 }
diff --git a/apps/web/src/app/tools/reports/pages/unsecured-websites-report.component.html b/apps/web/src/app/tools/reports/pages/unsecured-websites-report.component.html
index 9293915363e..6632413a79e 100644
--- a/apps/web/src/app/tools/reports/pages/unsecured-websites-report.component.html
+++ b/apps/web/src/app/tools/reports/pages/unsecured-websites-report.component.html
@@ -47,15 +47,19 @@
               <app-vault-icon [cipher]="r"></app-vault-icon>
             </td>
             <td bitCell>
-              <a
-                bitLink
-                href="#"
-                appStopClick
-                (click)="selectCipher(r)"
-                title="{{ 'editItemWithName' | i18n: r.name }}"
-              >
-                {{ r.name }}
-              </a>
+              <ng-container *ngIf="!organization || canManageCipher(r); else cantManage">
+                <a
+                  bitLink
+                  href="#"
+                  appStopClick
+                  (click)="selectCipher(r)"
+                  title="{{ 'editItemWithName' | i18n: r.name }}"
+                  >{{ r.name }}</a
+                >
+              </ng-container>
+              <ng-template #cantManage>
+                <span>{{ r.name }}</span>
+              </ng-template>
               <ng-container *ngIf="!organization && r.organizationId">
                 <i
                   class="bwi bwi-collection"
diff --git a/apps/web/src/app/tools/reports/pages/unsecured-websites-report.component.ts b/apps/web/src/app/tools/reports/pages/unsecured-websites-report.component.ts
index 11df326766b..02d4117c684 100644
--- a/apps/web/src/app/tools/reports/pages/unsecured-websites-report.component.ts
+++ b/apps/web/src/app/tools/reports/pages/unsecured-websites-report.component.ts
@@ -1,6 +1,6 @@
 import { Component, OnInit } from "@angular/core";
 
-import { CollectionService, Collection } from "@bitwarden/admin-console/common";
+import { CollectionService } from "@bitwarden/admin-console/common";
 import { OrganizationService } from "@bitwarden/common/admin-console/abstractions/organization/organization.service.abstraction";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
@@ -53,17 +53,10 @@ export class UnsecuredWebsitesReportComponent extends CipherReportComponent impl
 
   async setCiphers() {
     const allCiphers = await this.getAllCiphers();
-    const allCollections = await this.collectionService.getAll();
     this.filterStatus = [0];
 
     const unsecuredCiphers = allCiphers.filter((c) => {
-      const containsUnsecured = this.cipherContainsUnsecured(c);
-      if (containsUnsecured === false) {
-        return false;
-      }
-
-      const canView = this.canView(c, allCollections);
-      return canView;
+      return this.cipherContainsUnsecured(c);
     });
 
     this.filterCiphersByOrg(unsecuredCiphers);
@@ -74,7 +67,12 @@ export class UnsecuredWebsitesReportComponent extends CipherReportComponent impl
    * @param cipher Current cipher with unsecured uri
    */
   private cipherContainsUnsecured(cipher: CipherView): boolean {
-    if (cipher.type !== CipherType.Login || !cipher.login.hasUris || cipher.isDeleted) {
+    if (
+      cipher.type !== CipherType.Login ||
+      !cipher.login.hasUris ||
+      cipher.isDeleted ||
+      (!this.organization && !cipher.edit)
+    ) {
       return false;
     }
 
@@ -85,19 +83,13 @@ export class UnsecuredWebsitesReportComponent extends CipherReportComponent impl
   }
 
   /**
-   * If the user does not have readonly set or it's false they have the ability to edit
-   * @param cipher Current cipher with unsecured uri
-   * @param allCollections The collections for the user
+   * Provides a way to determine if someone with permissions to run an organizational report is also able to view/edit ciphers within the results
+   * Default to true for indivduals running reports on their own vault.
+   * @param c CipherView
+   * @returns boolean
    */
-  private canView(cipher: CipherView, allCollections: Collection[]): boolean {
-    if (!cipher.organizationId) {
-      return true;
-    }
-
-    return (
-      allCollections.filter(
-        (item) => cipher.collectionIds.indexOf(item.id) > -1 && !(item.readOnly ?? false),
-      ).length > 0
-    );
+  protected canManageCipher(c: CipherView): boolean {
+    // this will only ever be false from the org view;
+    return true;
   }
 }

From 0b6828a72ba5aa84fc41f2ac9d04b7de08a5d08c Mon Sep 17 00:00:00 2001
From: Vijay Oommen <voommen@livefront.com>
Date: Thu, 27 Feb 2025 14:49:13 -0600
Subject: [PATCH 23/47] [PM-18456] Display unassigned items in reports (#13612)

---
 .../pages/organizations/exposed-passwords-report.component.ts  | 3 +++
 .../organizations/inactive-two-factor-report.component.ts      | 3 +++
 .../pages/organizations/reused-passwords-report.component.ts   | 3 +++
 .../pages/organizations/unsecured-websites-report.component.ts | 3 +++
 .../pages/organizations/weak-passwords-report.component.ts     | 3 +++
 5 files changed, 15 insertions(+)

diff --git a/apps/web/src/app/tools/reports/pages/organizations/exposed-passwords-report.component.ts b/apps/web/src/app/tools/reports/pages/organizations/exposed-passwords-report.component.ts
index 4f523dbf7ba..2722e66f14f 100644
--- a/apps/web/src/app/tools/reports/pages/organizations/exposed-passwords-report.component.ts
+++ b/apps/web/src/app/tools/reports/pages/organizations/exposed-passwords-report.component.ts
@@ -91,6 +91,9 @@ export class ExposedPasswordsReportComponent
   }
 
   canManageCipher(c: CipherView): boolean {
+    if (c.collectionIds.length === 0) {
+      return true;
+    }
     return this.manageableCiphers.some((x) => x.id === c.id);
   }
 }
diff --git a/apps/web/src/app/tools/reports/pages/organizations/inactive-two-factor-report.component.ts b/apps/web/src/app/tools/reports/pages/organizations/inactive-two-factor-report.component.ts
index 5979e99c0fa..9b53d583b99 100644
--- a/apps/web/src/app/tools/reports/pages/organizations/inactive-two-factor-report.component.ts
+++ b/apps/web/src/app/tools/reports/pages/organizations/inactive-two-factor-report.component.ts
@@ -94,6 +94,9 @@ export class InactiveTwoFactorReportComponent
   }
 
   protected canManageCipher(c: CipherView): boolean {
+    if (c.collectionIds.length === 0) {
+      return true;
+    }
     return this.manageableCiphers.some((x) => x.id === c.id);
   }
 }
diff --git a/apps/web/src/app/tools/reports/pages/organizations/reused-passwords-report.component.ts b/apps/web/src/app/tools/reports/pages/organizations/reused-passwords-report.component.ts
index 1e2f5225d59..bcd573fb09d 100644
--- a/apps/web/src/app/tools/reports/pages/organizations/reused-passwords-report.component.ts
+++ b/apps/web/src/app/tools/reports/pages/organizations/reused-passwords-report.component.ts
@@ -89,6 +89,9 @@ export class ReusedPasswordsReportComponent
   }
 
   canManageCipher(c: CipherView): boolean {
+    if (c.collectionIds.length === 0) {
+      return true;
+    }
     return this.manageableCiphers.some((x) => x.id === c.id);
   }
 }
diff --git a/apps/web/src/app/tools/reports/pages/organizations/unsecured-websites-report.component.ts b/apps/web/src/app/tools/reports/pages/organizations/unsecured-websites-report.component.ts
index 748986fe5bb..e653a6b9a05 100644
--- a/apps/web/src/app/tools/reports/pages/organizations/unsecured-websites-report.component.ts
+++ b/apps/web/src/app/tools/reports/pages/organizations/unsecured-websites-report.component.ts
@@ -94,6 +94,9 @@ export class UnsecuredWebsitesReportComponent
   }
 
   protected canManageCipher(c: CipherView): boolean {
+    if (c.collectionIds.length === 0) {
+      return true;
+    }
     return this.manageableCiphers.some((x) => x.id === c.id);
   }
 }
diff --git a/apps/web/src/app/tools/reports/pages/organizations/weak-passwords-report.component.ts b/apps/web/src/app/tools/reports/pages/organizations/weak-passwords-report.component.ts
index 82abc8561fb..41018d69c22 100644
--- a/apps/web/src/app/tools/reports/pages/organizations/weak-passwords-report.component.ts
+++ b/apps/web/src/app/tools/reports/pages/organizations/weak-passwords-report.component.ts
@@ -93,6 +93,9 @@ export class WeakPasswordsReportComponent
   }
 
   canManageCipher(c: CipherView): boolean {
+    if (c.collectionIds.length === 0) {
+      return true;
+    }
     return this.manageableCiphers.some((x) => x.id === c.id);
   }
 }

From 90d66b93b18508fcd5c8467777fb527742404b82 Mon Sep 17 00:00:00 2001
From: "bw-ghapp[bot]" <178206702+bw-ghapp[bot]@users.noreply.github.com>
Date: Fri, 28 Feb 2025 10:31:23 +0100
Subject: [PATCH 24/47] Autosync the updated translations (#13621)

Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>
---
 apps/desktop/src/locales/af/messages.json    |  64 +++++++++
 apps/desktop/src/locales/ar/messages.json    |  64 +++++++++
 apps/desktop/src/locales/az/messages.json    |  64 +++++++++
 apps/desktop/src/locales/be/messages.json    |  64 +++++++++
 apps/desktop/src/locales/bg/messages.json    |  64 +++++++++
 apps/desktop/src/locales/bn/messages.json    |  64 +++++++++
 apps/desktop/src/locales/bs/messages.json    |  64 +++++++++
 apps/desktop/src/locales/ca/messages.json    |  64 +++++++++
 apps/desktop/src/locales/cs/messages.json    |  64 +++++++++
 apps/desktop/src/locales/cy/messages.json    |  64 +++++++++
 apps/desktop/src/locales/da/messages.json    |  64 +++++++++
 apps/desktop/src/locales/de/messages.json    |  66 +++++++++-
 apps/desktop/src/locales/el/messages.json    |  64 +++++++++
 apps/desktop/src/locales/en_GB/messages.json |  64 +++++++++
 apps/desktop/src/locales/en_IN/messages.json |  64 +++++++++
 apps/desktop/src/locales/eo/messages.json    |  64 +++++++++
 apps/desktop/src/locales/es/messages.json    |  64 +++++++++
 apps/desktop/src/locales/et/messages.json    |  64 +++++++++
 apps/desktop/src/locales/eu/messages.json    |  64 +++++++++
 apps/desktop/src/locales/fa/messages.json    |  64 +++++++++
 apps/desktop/src/locales/fi/messages.json    |  64 +++++++++
 apps/desktop/src/locales/fil/messages.json   |  64 +++++++++
 apps/desktop/src/locales/fr/messages.json    |  64 +++++++++
 apps/desktop/src/locales/gl/messages.json    |  64 +++++++++
 apps/desktop/src/locales/he/messages.json    | 132 ++++++++++++++-----
 apps/desktop/src/locales/hi/messages.json    |  64 +++++++++
 apps/desktop/src/locales/hr/messages.json    |  64 +++++++++
 apps/desktop/src/locales/hu/messages.json    |  64 +++++++++
 apps/desktop/src/locales/id/messages.json    |  64 +++++++++
 apps/desktop/src/locales/it/messages.json    |  64 +++++++++
 apps/desktop/src/locales/ja/messages.json    |  64 +++++++++
 apps/desktop/src/locales/ka/messages.json    |  64 +++++++++
 apps/desktop/src/locales/km/messages.json    |  64 +++++++++
 apps/desktop/src/locales/kn/messages.json    |  64 +++++++++
 apps/desktop/src/locales/ko/messages.json    |  64 +++++++++
 apps/desktop/src/locales/lt/messages.json    |  64 +++++++++
 apps/desktop/src/locales/lv/messages.json    |  64 +++++++++
 apps/desktop/src/locales/me/messages.json    |  64 +++++++++
 apps/desktop/src/locales/ml/messages.json    |  64 +++++++++
 apps/desktop/src/locales/mr/messages.json    |  64 +++++++++
 apps/desktop/src/locales/my/messages.json    |  64 +++++++++
 apps/desktop/src/locales/nb/messages.json    |  64 +++++++++
 apps/desktop/src/locales/ne/messages.json    |  64 +++++++++
 apps/desktop/src/locales/nl/messages.json    |  64 +++++++++
 apps/desktop/src/locales/nn/messages.json    |  64 +++++++++
 apps/desktop/src/locales/or/messages.json    |  64 +++++++++
 apps/desktop/src/locales/pl/messages.json    |  70 +++++++++-
 apps/desktop/src/locales/pt_BR/messages.json |  64 +++++++++
 apps/desktop/src/locales/pt_PT/messages.json |  72 +++++++++-
 apps/desktop/src/locales/ro/messages.json    |  64 +++++++++
 apps/desktop/src/locales/ru/messages.json    |  64 +++++++++
 apps/desktop/src/locales/si/messages.json    |  64 +++++++++
 apps/desktop/src/locales/sk/messages.json    |  64 +++++++++
 apps/desktop/src/locales/sl/messages.json    |  64 +++++++++
 apps/desktop/src/locales/sr/messages.json    | 100 +++++++++++---
 apps/desktop/src/locales/sv/messages.json    |  64 +++++++++
 apps/desktop/src/locales/te/messages.json    |  64 +++++++++
 apps/desktop/src/locales/th/messages.json    |  64 +++++++++
 apps/desktop/src/locales/tr/messages.json    |  64 +++++++++
 apps/desktop/src/locales/uk/messages.json    |  64 +++++++++
 apps/desktop/src/locales/vi/messages.json    |  64 +++++++++
 apps/desktop/src/locales/zh_CN/messages.json |  86 ++++++++++--
 apps/desktop/src/locales/zh_TW/messages.json |  64 +++++++++
 63 files changed, 4103 insertions(+), 71 deletions(-)

diff --git a/apps/desktop/src/locales/af/messages.json b/apps/desktop/src/locales/af/messages.json
index be14f15b4f7..fce872cb0ab 100644
--- a/apps/desktop/src/locales/af/messages.json
+++ b/apps/desktop/src/locales/af/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Ongeldige bevestigingskode"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Onthou my"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Stuur weer e-pos met bevestigingskode"
   },
   "useAnotherTwoStepMethod": {
     "message": "Gebruik ’n ander tweestapaantekenmetode"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Plaas u YubiKey in u rekenaar se USB-poort en druk dan op sy knop."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Opsies vir tweestapaantekening"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Selfgehuisveste omgewing"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Waarmerk WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Versteek my e-posadres vir ontvangers."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/ar/messages.json b/apps/desktop/src/locales/ar/messages.json
index c0834bed1e6..efef6558df9 100644
--- a/apps/desktop/src/locales/ar/messages.json
+++ b/apps/desktop/src/locales/ar/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "تسجيل الدخول إلى Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "تسجيل الدخول باستخدام مفتاح المرور"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "تلميح كلمة المرور الرئيسية"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "الانضمام إلى المؤسسة"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "تم إلغاء المصادقة أو استغرقت وقتا طويلا. الرجاء المحاولة مرة أخرى."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "رمز التحقق غير صالح"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "تذكرني"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "إرسال رمز التحقق إلى البريد الإلكتروني مرة أخرى"
   },
   "useAnotherTwoStepMethod": {
     "message": "استخدام طريقة أخرى لتسجيل الدخول بخطوتين"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "أدخل YubiKey الخاص بك في منفذ USB في كمبيوترك، ثم لمس الزر."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "خيارات تسجيل الدخول بخطوتين"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "البيئة المستضافة ذاتيا"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "مصادقة WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "إخفاء عنوان البريد الإلكتروني الخاص بي من المستلمين."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "تسجيل الدخول لـ Duo من خطوتين مطلوب لحسابك."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "تشغيل دوو في المتصفح"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "تأكيد استخدام مفتاح SSH"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "يطلب الوصول إلى"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "تطبيق"
   },
diff --git a/apps/desktop/src/locales/az/messages.json b/apps/desktop/src/locales/az/messages.json
index 50bfcf8f476..e7006cdd004 100644
--- a/apps/desktop/src/locales/az/messages.json
+++ b/apps/desktop/src/locales/az/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Bitwarden-ə giriş edin"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "E-poçtunuza göndərilən kodu daxil edin"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Kimlik doğrulayıcı tətbiqinizdəki kodu daxil edin"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Kimliyi doğrulamaq üçün YubiKey-inizə basın"
+  },
   "logInWithPasskey": {
     "message": "Keçid açarı ilə giriş et"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Ana parol ipucusu"
   },
+  "passwordStrengthScore": {
+    "message": "Parolun güc xalı: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Təşkilata qoşul"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Kimlik doğrulama ləğv edildi və ya çox uzun çəkdi. Lütfən yenidən sınayın."
   },
+  "openInNewTab": {
+    "message": "Yeni vərəqdə aç"
+  },
   "invalidVerificationCode": {
     "message": "Yararsız doğrulama kodu"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Məni xatırla"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Bu cihazda 30 gün ərzində soruşulmasın"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Doğrulama kodu olan e-poçtu yenidən göndər"
   },
   "useAnotherTwoStepMethod": {
     "message": "Başqa bir iki mərhələli giriş metodu istifadə edin"
   },
+  "selectAnotherMethod": {
+    "message": "Başqa üsul seçin",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Geri qaytarma kodunuzu istifadə edin"
+  },
   "insertYubiKey": {
     "message": "\"YubiKey\"i kompüterinizin USB portuna taxın, daha sonra düyməsinə toxunun."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "İki mərhələli giriş seçimləri"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "İki addımlı giriş üsulunu seçin"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted mühit"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn kimlik doğrulama"
   },
+  "readSecurityKey": {
+    "message": "Güvənlik açarını oxu"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Güvənlik açarı ilə əlaqə gözlənilir..."
+  },
   "hideEmail": {
     "message": "E-poçt ünvanımı alıcılardan gizlət."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Hesabınız üçün Duo iki addımlı giriş tələb olunur."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Hesabınız üçün Duo iki addımlı giriş tələb olunur. Giriş prosesini tamamlamaq üçün aşağıdakı addımları izləyin."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Giriş prosesini tamamlamaq üçün aşağıdakı addımları izləyin."
+  },
   "launchDuo": {
     "message": "Duo-nu brauzerdə başlat"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "SSH açar istifadəsini təsdiqlə"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Xəbərdarlıq: Nümayəndə yönləndirilir"
+  },
+  "agentForwardingWarningText": {
+    "message": "Bu tələb, giriş etdiyiniz remote bir cihazdan gəlir"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "bura müraciət tələb edir:"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Bir tətbiq"
   },
diff --git a/apps/desktop/src/locales/be/messages.json b/apps/desktop/src/locales/be/messages.json
index 05a680898f9..1e92720969e 100644
--- a/apps/desktop/src/locales/be/messages.json
+++ b/apps/desktop/src/locales/be/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Памылковы праверачны код"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Запомніць мяне"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Адправіць праверачны код яшчэ раз"
   },
   "useAnotherTwoStepMethod": {
     "message": "Выкарыстоўваць іншы метад двухэтапнага ўваходу"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Устаўце свой YubiKey у порт USB камп'ютара, а потым націсніце на кнопку."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Параметры двухэтапнага ўваходу"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Асяроддзе ўласнага хостынгу"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Аўтэнтыфікацыя WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Схаваць маю электронную пошту ад атрымальнікаў."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/bg/messages.json b/apps/desktop/src/locales/bg/messages.json
index cdada0bd00d..6686254fcbf 100644
--- a/apps/desktop/src/locales/bg/messages.json
+++ b/apps/desktop/src/locales/bg/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Впишете се в Битуорден"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Въведете кода изпратен на е-пощата Ви"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Въведете кода от Вашето приложение за удостоверяване"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Натиснете бутона на своя YubiKey за удостоверяване"
+  },
   "logInWithPasskey": {
     "message": "Вписване със секретен ключ"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Подсказка за главната парола"
   },
+  "passwordStrengthScore": {
+    "message": "Оценка на сложността на паролата: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Присъединяване към организацията"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Удостоверяването беше отменено или отне твърде много време. Моля, опитайте отново."
   },
+  "openInNewTab": {
+    "message": "Отваряне в нов раздел"
+  },
   "invalidVerificationCode": {
     "message": "Грешен код за потвърждаване"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Запомняне"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Не ме питайте отново на това устройство за 30 дни"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Повторно изпращане на писмото за потвърждение"
   },
   "useAnotherTwoStepMethod": {
     "message": "Използвайте друг начин на двустепенно удостоверяване"
   },
+  "selectAnotherMethod": {
+    "message": "Изберете друг метод",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Използване на код за възстановяване"
+  },
   "insertYubiKey": {
     "message": "Поставете устройството на YubiKey в USB порт на компютъра и натиснете бутона на устройството."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Настройки на двустепенното удостоверяване"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Изберете начин за двустепенно удостоверяване"
+  },
   "selfHostedEnvironment": {
     "message": "Собствена среда"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Идентификация WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Прочитане на ключа за сигурност"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Изчакване на действие с ключ за сигурност…"
+  },
   "hideEmail": {
     "message": "Скриване на е-пощата ми от получателите."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Вашата регистрация изисква двустепенно удостоверяване чрез Duo."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Вашият акаунт изисква вписване чрез двустепенно удостоверяване с Duo. Следвайте стъпките по-долу, за да завършите вписването."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Следвайте стъпките по-долу, за да завършите вписването."
+  },
   "launchDuo": {
     "message": "Стартирайте Duo в браузъра"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Потвърждаване на употребата на SSH ключа"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Внимание: Пренасочване на агента"
+  },
+  "agentForwardingWarningText": {
+    "message": "Тази заявка идва от отдалечено устройство, в което сте вписан(а)"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "иска достъп до"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "за да"
+  },
+  "sshActionLogin": {
+    "message": "се удостоверите в сървър"
+  },
+  "sshActionSign": {
+    "message": "подпишете съобщение"
+  },
+  "sshActionGitSign": {
+    "message": "подпишете подаване в git"
+  },
   "unknownApplication": {
     "message": "Приложение"
   },
diff --git a/apps/desktop/src/locales/bn/messages.json b/apps/desktop/src/locales/bn/messages.json
index 5b34f668c4f..256ecb3b660 100644
--- a/apps/desktop/src/locales/bn/messages.json
+++ b/apps/desktop/src/locales/bn/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "আমাকে মনে রাখবেন"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "আবার যাচাইকরণ কোড ইমেইলে প্রেরণ করুন"
   },
   "useAnotherTwoStepMethod": {
     "message": "অন্য দ্বি-পদক্ষেপ প্রবেশ পদ্ধতি ব্যবহার করুন"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "আপনার কম্পিউটারের ইউএসবি পোর্টে আপনার YubiKey ঢোকান, তারপরে তার বোতামটি স্পর্শ করুন।"
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "দ্বি-পদক্ষেপ লগইন বিকল্প"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "স্ব-হোস্টকৃত পরিবেশ"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/bs/messages.json b/apps/desktop/src/locales/bs/messages.json
index c28cc71c4bf..4600638ec00 100644
--- a/apps/desktop/src/locales/bs/messages.json
+++ b/apps/desktop/src/locales/bs/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Neispravan verifikacijski kod"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Zapamti me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Ponovo pošaljite E-Mail sa verifikacionim kodom"
   },
   "useAnotherTwoStepMethod": {
     "message": "Koristite drugi način prijavljivanja u dva koraka"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Ubaci svoj YubiKey u USB slot računara, a zatim dodirni njegovu tipku."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Opcije prijave u dva koraka"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Vlastito hosting okruženje"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/ca/messages.json b/apps/desktop/src/locales/ca/messages.json
index d732c4912c7..c9f2b6a6bdc 100644
--- a/apps/desktop/src/locales/ca/messages.json
+++ b/apps/desktop/src/locales/ca/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Inicia sessió a Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Inicieu sessió amb la clau de pas"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Pista de la contrasenya mestra"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Uniu-vos a l'organització"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "L'autenticació s'ha cancel·lat o ha tardat massa. Torna-ho a provar."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Codi de verificació no vàlid"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Recorda'm"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Envia el codi de verificació altra vegada"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilitzeu un altre mètode d'inici de sessió en dues passes"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Introduïu la vostra YubiKey al port USB de l'ordinador i, a continuació, premeu el seu botó."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Opcions d'inici de sessió en dues passes"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Entorn d'allotjament propi"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Autenticar WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Amagueu la meua adreça de correu electrònic als destinataris."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Es requereix l'inici de sessió en dos passos de DUO al vostre compte."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Inicia Duo al navegador"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Una aplicació"
   },
diff --git a/apps/desktop/src/locales/cs/messages.json b/apps/desktop/src/locales/cs/messages.json
index 6f996578f07..46363e26f70 100644
--- a/apps/desktop/src/locales/cs/messages.json
+++ b/apps/desktop/src/locales/cs/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Přihlásit se do Bitwardenu"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Zadejte kód odeslaný na Váš e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Zadejte kód z Vaší ověřovací aplikace"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Stiskněte svůj YubiKey pro ověření"
+  },
   "logInWithPasskey": {
     "message": "Přihlásit se pomocí přístupového klíče"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Nápověda k hlavnímu heslu"
   },
+  "passwordStrengthScore": {
+    "message": "Skóre síly hesla: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Přidat se k organizaci"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Ověření bylo zrušeno nebo trvalo příliš dlouho. Zkuste to znovu."
   },
+  "openInNewTab": {
+    "message": "Otevřít v nové kartě"
+  },
   "invalidVerificationCode": {
     "message": "Neplatný ověřovací kód"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Zapamatovat mě"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Neptat se na tomto zařízení 30 dnů"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Znovu zaslat ověřovací kód na e-mail"
   },
   "useAnotherTwoStepMethod": {
     "message": "Použít jinou metodu dvoufázového přihlášení"
   },
+  "selectAnotherMethod": {
+    "message": "Vybrat jinou metodu",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Použít obnovovací kód"
+  },
   "insertYubiKey": {
     "message": "Vložte YubiKey do USB portu Vašeho počítače a stiskněte jeho tlačítko."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Volby dvoufázového přihlášení"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Vyberte metodu dvoufázového přihlášení"
+  },
   "selfHostedEnvironment": {
     "message": "Vlastní hostované prostředí"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Ověřit WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Přečíst bezpečnostní klíč"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Čeká se na interakci s bezpečnostním klíčem..."
+  },
   "hideEmail": {
     "message": "Skrýt moji e-mailovou adresu před příjemci."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Pro Váš účet je vyžadováno dvoufázové přihlášení DUO."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Pro Váš účet je nutné dvoufázové přihlášení. Pro dokončení přihlášení postupujte podle následujících kroků."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Postupujte podle kroků níže pro dokončení přihlášení."
+  },
   "launchDuo": {
     "message": "Spustit DUO v prohlížeči"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Potvrdit použití SSH klíče"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Varování: Agent přesměrování"
+  },
+  "agentForwardingWarningText": {
+    "message": "Tento požadavek pochází ze vzdáleného zařízení, ke kterému jste přihlášeni"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "žádá o přístup k"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "za účelem"
+  },
+  "sshActionLogin": {
+    "message": "ověření na serveru"
+  },
+  "sshActionSign": {
+    "message": "podepsání zprávy"
+  },
+  "sshActionGitSign": {
+    "message": "podepsání commitu na gitu"
+  },
   "unknownApplication": {
     "message": "Aplikace"
   },
diff --git a/apps/desktop/src/locales/cy/messages.json b/apps/desktop/src/locales/cy/messages.json
index 91e8f451569..f904deefe8f 100644
--- a/apps/desktop/src/locales/cy/messages.json
+++ b/apps/desktop/src/locales/cy/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/da/messages.json b/apps/desktop/src/locales/da/messages.json
index 93818506a61..87ff2169d22 100644
--- a/apps/desktop/src/locales/da/messages.json
+++ b/apps/desktop/src/locales/da/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log ind på Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log ind med adgangsnøgle"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Hovedadgangskodetip"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Bliv medlem af organisation"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Godkendelsen blev afbrudt eller tog for lang tid. Forsøg igen."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Ugyldig bekræftelseskode"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Husk mig"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send bekræftelseskodee-mail igen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Brug en anden totrins-loginmetode"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Indsæt din YubiKey i din computers USB-port og tryk derefter på dens knap."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Totrins-login indstillinger"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Selv-hostet miljø"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Godkend WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Skjul min e-mailadresse for modtagere."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo totrinsindlogning kræves for kontoen."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Start Duo i webbrowser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Bekræft brug af SSH-nøgle"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "anmoder om adgang til"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "En applikation"
   },
diff --git a/apps/desktop/src/locales/de/messages.json b/apps/desktop/src/locales/de/messages.json
index 527a3014637..0faf41ed21f 100644
--- a/apps/desktop/src/locales/de/messages.json
+++ b/apps/desktop/src/locales/de/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Bei Bitwarden anmelden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Gib den an deine E-Mail-Adresse gesendeten Code ein"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Gib den Code aus deiner Authenticator-App ein"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Drücke zum Authentifizieren auf deinen YubiKey"
+  },
   "logInWithPasskey": {
     "message": "Mit Passkey anmelden"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master-Passwort-Hinweis"
   },
+  "passwordStrengthScore": {
+    "message": "Bewertung der Passwortstärke $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Organisation beitreten"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Die Authentifizierung wurde abgebrochen oder hat zu lange gedauert. Bitte versuche es erneut."
   },
+  "openInNewTab": {
+    "message": "In neuem Tab öffnen"
+  },
   "invalidVerificationCode": {
     "message": "Ungültiger Verifizierungscode"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Angemeldet bleiben"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Für 30 Tage auf diesem Gerät nicht mehr fragen"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "E-Mail mit Bestätigungscode erneut versenden"
   },
   "useAnotherTwoStepMethod": {
     "message": "Eine andere Zwei-Faktor-Anmeldemethode verwenden"
   },
+  "selectAnotherMethod": {
+    "message": "Wähle eine andere Methode",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Verwende deinen Wiederherstellungscode"
+  },
   "insertYubiKey": {
     "message": "Stecke deinen YubiKey in einen USB-Anschluss deines Computers, dann berühre den Button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Optionen für Zwei-Faktor-Authentifizierung"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Zwei-Faktor-Authentifizierungsmethode auswählen"
+  },
   "selfHostedEnvironment": {
     "message": "Selbst gehostete Umgebung"
   },
@@ -1776,7 +1810,7 @@
     "message": "Passwort oder PIN beim Start der App verlangen"
   },
   "requirePasswordWithoutPinOnStart": {
-    "message": "Benötigt ein Passwort beim Starten der App"
+    "message": "Ein Passwort beim Starten der App verlangen"
   },
   "recommendedForSecurity": {
     "message": "Aus Sicherheitsgründen empfohlen."
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn authentifizieren"
   },
+  "readSecurityKey": {
+    "message": "Sicherheitsschlüssel auslesen"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Warte auf Sicherheitsschlüssel-Interaktion..."
+  },
   "hideEmail": {
     "message": "Meine E-Mail-Adresse vor den Empfängern ausblenden."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Für dein Konto ist die DUO Zwei-Faktor-Authentifizierung erforderlich."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Die Duo-Zwei-Faktor-Authentifizierung ist für dein Konto erforderlich. Folge den Schritten unten, um die Anmeldung abzuschließen."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Folge den Schritten unten, um die Anmeldung abzuschließen."
+  },
   "launchDuo": {
     "message": "Duo im Browser starten"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Verwendung des SSH-Schlüssels bestätigen"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "fragt den Zugriff an für"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Eine Anwendung"
   },
diff --git a/apps/desktop/src/locales/el/messages.json b/apps/desktop/src/locales/el/messages.json
index ace7a5ac3bf..d643aabd46f 100644
--- a/apps/desktop/src/locales/el/messages.json
+++ b/apps/desktop/src/locales/el/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Σύνδεση στο Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Σύνδεση με κλειδί πρόσβασης"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Υπόδειξη κύριου κωδικού πρόσβασης"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Συμμετοχή σε οργανισμό"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Η αυθεντικοποίηση ακυρώθηκε ή διήρκησε πολύ ώρα. Παρακαλώ προσπαθήστε ξανά."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Μη έγκυρος κωδικός επαλήθευσης"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Να με θυμάσαι"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Επανάληψη αποστολής κωδικού επαλήθευσης μέσω ηλ. ταχυδρομείου"
   },
   "useAnotherTwoStepMethod": {
     "message": "Χρήση άλλης μεθόδου σύνδεσης δύο βημάτων"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Τοποθετήστε το YubiKey στη θύρα USB του υπολογιστή σας και έπειτα αγγίξτε το κουμπί του."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Επιλογές σύνδεσης δύο βημάτων"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Αυτο-φιλοξενούμενο περιβάλλον"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Ταυτοποίηση WebAutn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Απόκρυψη της διεύθυνσης email μου από τους παραλήπτες."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Η σύνδεση δύο βημάτων Duo απαιτείται για τον λογαριασμό σας."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Εκκίνηση Duo στον περιηγητή"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Επιβεβαίωση χρήσης κλειδιού SSH"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "ζητά πρόσβαση σε"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Μια εφαρμογή"
   },
diff --git a/apps/desktop/src/locales/en_GB/messages.json b/apps/desktop/src/locales/en_GB/messages.json
index 46140d7408d..6546edc5411 100644
--- a/apps/desktop/src/locales/en_GB/messages.json
+++ b/apps/desktop/src/locales/en_GB/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organisation"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/en_IN/messages.json b/apps/desktop/src/locales/en_IN/messages.json
index 451e9f3fb45..e8945cd520f 100644
--- a/apps/desktop/src/locales/en_IN/messages.json
+++ b/apps/desktop/src/locales/en_IN/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organisation"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recepients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/eo/messages.json b/apps/desktop/src/locales/eo/messages.json
index 8861198efba..1ce0e698967 100644
--- a/apps/desktop/src/locales/eo/messages.json
+++ b/apps/desktop/src/locales/eo/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/es/messages.json b/apps/desktop/src/locales/es/messages.json
index 493c2594791..9f232b521dc 100644
--- a/apps/desktop/src/locales/es/messages.json
+++ b/apps/desktop/src/locales/es/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Pista de la contraseña maestra"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Unirse a organización"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "La autenticación fue cancelada o tardó demasiado. Por favor, inténtalo de nuevo."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Código de verificación incorrecto"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Recordarme"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Reenviar código de verificación por correo electrónico"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizar otro método de autenticación en dos pasos"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Inserta tu YubiKey en el puerto USB de tu equipo y posteriormente pulsa su botón."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Opciones de la autenticación en dos pasos"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Entorno de alojamiento propio"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Autenticar WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Ocultar mi dirección de correo electrónico a los destinatarios."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Se requiere el inicio de sesión en dos pasos de Duo para tu cuenta."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Inicia Duo en el navegador"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/et/messages.json b/apps/desktop/src/locales/et/messages.json
index 3d4edad99d1..76be013c4ef 100644
--- a/apps/desktop/src/locales/et/messages.json
+++ b/apps/desktop/src/locales/et/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Ülemparooli vihje"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Liitu organisatsiooniga"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Autentimine tühistati või kestis liiga kaua aega. Palun proovi uuesti."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Vale kinnituskood"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Jäta mind meelde"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Saada kinnituskood uuesti e-postile"
   },
   "useAnotherTwoStepMethod": {
     "message": "Kasuta teist kaheastmelist sisselogimise meetodit"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Sisesta oma YubiKey arvuti USB porti ja kliki sellele nupule."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Kaheastmelise sisselogimise valikud"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted Environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn kinnitamine"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Ära näita saajatele minu e-posti aadressi."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo kahe-astmeline sisselogimine on sinu kontol nõutud."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Käivita Duo brauseris"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/eu/messages.json b/apps/desktop/src/locales/eu/messages.json
index 114bf241513..3261db98090 100644
--- a/apps/desktop/src/locales/eu/messages.json
+++ b/apps/desktop/src/locales/eu/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Egiaztatze-kodea ez da baliozkoa"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Gogora nazazu"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Berbidali email bidezko egiaztatze-kodea"
   },
   "useAnotherTwoStepMethod": {
     "message": "Erabili bi urratseko saio hasierarako beste modu bat"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Sartu zure YubiKey-a ordenagailuko USB atakan, ondoren, sakatu bere botoia."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Bi urratseko saio hasieraren aukerak"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Ostatze ingurune propioa"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn autentifikatu"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Ezkutatu nire emaila hartzaileei."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/fa/messages.json b/apps/desktop/src/locales/fa/messages.json
index 65b152bfa5d..fe6e5ba3337 100644
--- a/apps/desktop/src/locales/fa/messages.json
+++ b/apps/desktop/src/locales/fa/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "کد تأیید نامعتبر است"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "مرا به خاطر بسپار"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "ارسال دوباره ایمیل کد تأیید"
   },
   "useAnotherTwoStepMethod": {
     "message": "استفاده از روش ورود دو مرحله‌ای دیگر"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "YubiKey خود را وارد پورت USB رایانه کنید، بعد دکمه آن را بفشارید."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "گزینه‌های ورود دو مرحله‌ای"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "محیط خود میزبان"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "تأیید اعتبار در WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "نشانی ایمیلم را از گیرندگان مخفی کن."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/fi/messages.json b/apps/desktop/src/locales/fi/messages.json
index 139bd5a1d78..2e77d0fbc1b 100644
--- a/apps/desktop/src/locales/fi/messages.json
+++ b/apps/desktop/src/locales/fi/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Kirjaudu Bitwardeniin"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Syötä sähköpostitse vastaanottamasi koodi"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Syötä todennussovelluksesi näyttämä koodi"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Tunnistaudu painamalla YubiKeytäsi"
+  },
   "logInWithPasskey": {
     "message": "Kirjaudu pääsyavaimella"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Pääsalasanan vihje"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Liity organisaatioon"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Tunnistautuminen peruttiin tai se kesti liian kauan. Yritä uudelleen."
   },
+  "openInNewTab": {
+    "message": "Avaa uudessa välilehdessä"
+  },
   "invalidVerificationCode": {
     "message": "Virheellinen todennuskoodi"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Muista minut"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Lähetä todennuskoodi sähköpostitse uudelleen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Käytä vaihtoehtoista todennustapaa"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Kytke YubiKey-todennuslaitteesi tietokoneen USB-porttiin ja paina sen painiketta."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Kaksivaiheisen kirjautumisen asetukset"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Itse ylläpidetty palvelinympäristö"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn-todennus"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Piilota sähköpostiosoitteeni vastaanottajilta."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Tilillesi kirjautuminen vaatii Duo-vahvistuksen."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Avaa Duo verkkoselaimessa"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Vahvista SSH-avainkäyttö"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "pyytää pääsyä"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Sovellus"
   },
diff --git a/apps/desktop/src/locales/fil/messages.json b/apps/desktop/src/locales/fil/messages.json
index 9842b419522..81d4566966e 100644
--- a/apps/desktop/src/locales/fil/messages.json
+++ b/apps/desktop/src/locales/fil/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Maling verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Tandaan mo ako"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Ipadala muli ang email ng verification code"
   },
   "useAnotherTwoStepMethod": {
     "message": "Gamitin ang isa pang two-step na paraan ng pag-login"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Ipasok ang iyong YubiKey sa USB port ng iyong computer, pagkatapos ay hawakan ang pindutan nito."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Mga pagpipilian para sa two-step login"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Kapaligirang self-hosted"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "I-authenticate ang WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Itago ang aking email address mula sa mga tatanggap."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/fr/messages.json b/apps/desktop/src/locales/fr/messages.json
index f308c3fbd69..2c7a6623279 100644
--- a/apps/desktop/src/locales/fr/messages.json
+++ b/apps/desktop/src/locales/fr/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Se connecter à Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Se connecter avec une clé d'accès"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Indice du mot de passe principal"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Rejoindre l'organisation"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "L'authentification a été annulée ou a pris trop de temps. Veuillez réessayer."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Code de vérification invalide"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Rester connecté"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Envoyer à nouveau le courriel de code de vérification"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utiliser une autre méthode de connexion en deux étapes"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insérez votre YubiKey dans le port USB de votre ordinateur puis appuyez sur son bouton."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Options d'authentification à deux facteurs"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Environnement auto-hébergé"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authentifier WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Masquer mon adresse électronique aux destinataires."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "L'authentification à double facteur Duo est requise pour votre compte."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Lancer Duo dans le navigateur"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirmer l'utilisation de la clé SSH"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "demande l'accès à"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Une application"
   },
diff --git a/apps/desktop/src/locales/gl/messages.json b/apps/desktop/src/locales/gl/messages.json
index 1aa61a9b381..b7693c0d0b5 100644
--- a/apps/desktop/src/locales/gl/messages.json
+++ b/apps/desktop/src/locales/gl/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/he/messages.json b/apps/desktop/src/locales/he/messages.json
index f28b18b5173..05706fd424a 100644
--- a/apps/desktop/src/locales/he/messages.json
+++ b/apps/desktop/src/locales/he/messages.json
@@ -650,7 +650,16 @@
     "message": "התחבר"
   },
   "logInToBitwarden": {
-    "message": "כניסה אל Bitwarden"
+    "message": "היכנס אל Bitwarden"
+  },
+  "enterTheCodeSentToYourEmail": {
+    "message": "הזן את הקוד שנשלח לדוא\"ל שלך"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "הזן את הקוד מיישום המאמת שלך"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "לחץ על ה־YubiKey שלך כדי לאמת"
   },
   "logInWithPasskey": {
     "message": "כניסה עם מפתח גישה"
@@ -659,7 +668,7 @@
     "message": "כניסה עם מכשיר"
   },
   "useSingleSignOn": {
-    "message": "השתמש בהזדהות חד פעמית"
+    "message": "השתמש בכניסה יחידה"
   },
   "submit": {
     "message": "שלח"
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "רמז לסיסמה הראשית"
   },
+  "passwordStrengthScore": {
+    "message": "ציון חוזק סיסמה $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "הצטרף לארגון"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "האימות בוטל או לקח זמן רב מדי. נא לנסות שוב."
   },
+  "openInNewTab": {
+    "message": "פתח בכרטיסייה חדשה"
+  },
   "invalidVerificationCode": {
     "message": "קוד אימות שגוי"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "זכור אותי"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "אל תשאל אותי שוב במכשיר זה למשך 30 יום"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "שלח שוב קוד אימות לאימייל"
   },
   "useAnotherTwoStepMethod": {
     "message": "השתמש בשיטה אחרת עבור כניסה דו שלבית"
   },
+  "selectAnotherMethod": {
+    "message": "בחר שיטה אחרת",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "השתמש בקוד השחזור שלך"
+  },
   "insertYubiKey": {
     "message": "הכנס את ה-YubiKey אל כניסת ה-USB במחשבך, ואז גע בכפתור שלו."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "אפשרויות כניסה דו שלבית"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "בחר שיטת כניסה דו-שלבית"
+  },
   "selfHostedEnvironment": {
     "message": "סביבה על שרתים מקומיים"
   },
@@ -2085,7 +2119,7 @@
     "message": "מדיניות ארגון חסמה ייבוא פריטים אל תוך הכספת האישית שלך."
   },
   "allSends": {
-    "message": "כל הסנדים",
+    "message": "כל הסֵנְדים",
     "description": "'Sends' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendTypeFile": {
@@ -2095,11 +2129,11 @@
     "message": "טקסט"
   },
   "searchSends": {
-    "message": "חפש סנדים",
+    "message": "חפש סֵנְדים",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "editSend": {
-    "message": "ערוך סנד",
+    "message": "ערוך סֵנְד",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "myVault": {
@@ -2112,14 +2146,14 @@
     "message": "תאריך מחיקה"
   },
   "deletionDateDesc": {
-    "message": "הסנד יימחק לצמיתות בתאריך ובשעה שצוינו.",
+    "message": "הסֵנְד יימחק לצמיתות בתאריך ובשעה שצוינו.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "expirationDate": {
     "message": "תאריך תפוגה"
   },
   "expirationDateDesc": {
-    "message": "אם מוגדר, גישה לסנד זה תפוג בתאריך ובשעה שצוינו.",
+    "message": "אם מוגדר, גישה לסֵנְד זה תפוג בתאריך ובשעה שצוינו.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "maxAccessCount": {
@@ -2127,57 +2161,57 @@
     "description": "This text will be displayed after a Send has been accessed the maximum amount of times."
   },
   "maxAccessCountDesc": {
-    "message": "אם מוגדר, משתמשים לא יוכלו עוד לגשת לסנד זה ברגע שמספר הגישות המרבי הושג.",
+    "message": "אם מוגדר, משתמשים לא יוכלו עוד לגשת לסֵנְד זה ברגע שמספר הגישות המרבי הושג.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "currentAccessCount": {
     "message": "מספר גישות נוכחי"
   },
   "disableSend": {
-    "message": "השבת את סנד זה כך שאף אחד לא יוכל לגשת אליו.",
+    "message": "השבת את סֵנְד זה כך שאף אחד לא יוכל לגשת אליו.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendPasswordDesc": {
-    "message": "דרוש סיסמה באופן אופציונלי כדי שמשתמשים יוכלו לגשת אל סנד זה.",
+    "message": "דרוש סיסמה באופן אופציונלי כדי שמשתמשים יוכלו לגשת אל סֵנְד זה.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendNotesDesc": {
-    "message": "הערות פרטיות לגבי סנד זה.",
+    "message": "הערות פרטיות לגבי סֵנְד זה.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendLink": {
-    "message": "קישור סנד",
+    "message": "קישור סֵנְד",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendLinkLabel": {
-    "message": "קישור סנד",
+    "message": "קישור סֵנְד",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "textHiddenByDefault": {
-    "message": "כשניגשים לסנד, הסתר את הטקסט כברירת מחדל",
+    "message": "בעת גישה לסֵנְד, הסתר את הטקסט כברירת מחדל",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "createdSend": {
-    "message": "סנד נוסף",
+    "message": "סֵנְד נוסף",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "editedSend": {
-    "message": "סנד נשמר",
+    "message": "סֵנְד נשמר",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "deletedSend": {
-    "message": "סנד נמחק",
+    "message": "סֵנְד נמחק",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "newPassword": {
     "message": "סיסמה חדשה"
   },
   "whatTypeOfSend": {
-    "message": "איזה סוג של סנד זה?",
+    "message": "איזה סוג של סֵנְד זה?",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "createSend": {
-    "message": "סנד חדש",
+    "message": "סֵנְד חדש",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendTextDesc": {
@@ -2202,22 +2236,22 @@
     "message": "מותאם אישית"
   },
   "deleteSendConfirmation": {
-    "message": "האם אתה בטוח שברצונך למחוק סנד זה?",
+    "message": "האם אתה בטוח שברצונך למחוק סֵנְד זה?",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "copySendLinkToClipboard": {
-    "message": "העתק קישור סנד ללוח",
+    "message": "העתק קישור סֵנְד ללוח",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "copySendLinkOnSave": {
-    "message": "העתק את הקישור לשיתוף סנד זה ללוח ההעתקה שלי עם השמירה."
+    "message": "העתק את הקישור לשיתוף סֵנְד זה ללוח ההעתקה שלי עם השמירה."
   },
   "sendDisabled": {
-    "message": "סנד הוסר",
+    "message": "סֵנְד הוסר",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendDisabledWarning": {
-    "message": "בשל מדיניות ארגונית, אתה יכול למחוק רק סנד קיים.",
+    "message": "בשל מדיניות ארגונית, אתה יכול למחוק רק סֵנְד קיים.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "copyLink": {
@@ -2247,11 +2281,17 @@
   "webAuthnAuthenticate": {
     "message": "אמת WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "קרא מפתח אבטחה"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "ממתין לאינטראקציה עם מפתח אבטחה..."
+  },
   "hideEmail": {
     "message": "הסתר את כתובת הדוא\"ל שלי מנמענים."
   },
   "sendOptionsPolicyInEffect": {
-    "message": "מדיניות ארגון אחת או יותר משפיעה על אפשרויות הסנד שלך."
+    "message": "מדיניות ארגון אחת או יותר משפיעה על אפשרויות הסֵנְד שלך."
   },
   "emailVerificationRequired": {
     "message": "נדרש אימות דוא\"ל"
@@ -2272,7 +2312,7 @@
     "message": "פעולה זו מוגנת. כדי להמשיך, הזן מחדש את הסיסמה הראשית שלך כדי לאמת את זהותך."
   },
   "updatedMasterPassword": {
-    "message": "הסיסמה הראשית עודכנה"
+    "message": "סיסמה ראשית עודכנה"
   },
   "updateMasterPassword": {
     "message": "עדכון סיסמה ראשית"
@@ -2395,7 +2435,7 @@
     "message": "הסיסמה הראשית הוסרה"
   },
   "convertOrganizationEncryptionDesc": {
-    "message": "$ORGANIZATION$ משתמשת ב־SSO עם שרת מפתחות באירוח עצמי. סיסמה ראשית לא דרושה יותר כדי להיכנס עבור חברים של ארגון זה.",
+    "message": "$ORGANIZATION$ משתמש/ת ב־SSO עם שרת מפתחות באירוח עצמי. סיסמה ראשית לא דרושה יותר כדי להיכנס עבור חברים של ארגון זה.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2722,7 +2762,7 @@
     "description": "Part of a URL."
   },
   "apiAccessToken": {
-    "message": "אסימון גישה ל־API"
+    "message": "אסימון גישת API"
   },
   "apiKey": {
     "message": "מפתח API"
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "נדרשת כניסה דו־שלבית של Duo עבור החשבון שלך."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "נדרשת כניסה דו-שלבית של Duo עבור החשבון שלך. עקוב אחר השלבים למטה כדי לסיים להיכנס."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "עקוב אחר השלבים למטה כדי לסיים להיכנס."
+  },
   "launchDuo": {
     "message": "פתח את Duo בדפדפן"
   },
@@ -3284,7 +3330,7 @@
     "message": "נתוני כספת יוצאו"
   },
   "multifactorAuthenticationCancelled": {
-    "message": "אימות רב-שלבי בוטל"
+    "message": "אימות רב-גורמי בוטל"
   },
   "noLastPassDataFound": {
     "message": "לא נמצאו נתוני LastPass"
@@ -3302,7 +3348,7 @@
     "message": "PIN שגוי"
   },
   "multifactorAuthenticationFailed": {
-    "message": "אימות רב-שלבי נכשל"
+    "message": "אימות רב-גורמי נכשל"
   },
   "includeSharedFolders": {
     "message": "כלול תיקיות משותפות"
@@ -3314,7 +3360,7 @@
     "message": "מייבא את החשבון שלך..."
   },
   "lastPassMFARequired": {
-    "message": "נדרש אימות רב-שלבי של LastPass"
+    "message": "נדרש אימות רב-גורמי של LastPass"
   },
   "lastPassMFADesc": {
     "message": "הזן את קוד הגישה החד פעמי שלך מיישום האימות שלך"
@@ -3422,10 +3468,10 @@
     "message": "נתונים"
   },
   "fileSends": {
-    "message": "סנדים של קובץ"
+    "message": "סֵנְדים של קובץ"
   },
   "textSends": {
-    "message": "סנדים של טקסט"
+    "message": "סֵנְדים של טקסט"
   },
   "ssoError": {
     "message": "לא נמצאו יציאות פנויות עבור כניסת ה־sso."
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "אשר שימוש במפתח SSH"
   },
+  "agentForwardingWarningTitle": {
+    "message": "אזהרה: העברת סוכן"
+  },
+  "agentForwardingWarningText": {
+    "message": "הבקשה הזאת באה ממכשיר מרוחק שאתה מחובר אליו"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "מבקש גישה אל"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "על מנת"
+  },
+  "sshActionLogin": {
+    "message": "בצע אימות לשרת"
+  },
+  "sshActionSign": {
+    "message": "חתימה על הודעה"
+  },
+  "sshActionGitSign": {
+    "message": "חתימה על התחייבות Git"
+  },
   "unknownApplication": {
     "message": "יישום"
   },
@@ -3497,7 +3561,7 @@
     "message": "Bitwarden ישלח קוד לדוא\"ל החשבון שלך כדי לאמת כניסות ממכשירים חדשים החל מפברואר 2025."
   },
   "newDeviceVerificationNoticeContentPage2": {
-    "message": "אתה יכול להגדיר כניסה דו-שלבית כדרך חלופית להגן על החשבון שלך או לשנות את הדוא\"ל שלך לאחד שתוכל לגשת אליו."
+    "message": "אתה יכול להגדיר כניסה דו-שלבית כדרך חלופית להגן על החשבון שלך או לשנות את הדוא\"ל שלך לאחד שאתה יכול לגשת אליו."
   },
   "remindMeLater": {
     "message": "הזכר לי מאוחר יותר"
diff --git a/apps/desktop/src/locales/hi/messages.json b/apps/desktop/src/locales/hi/messages.json
index 3265b5f530f..1f5405f8405 100644
--- a/apps/desktop/src/locales/hi/messages.json
+++ b/apps/desktop/src/locales/hi/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/hr/messages.json b/apps/desktop/src/locales/hr/messages.json
index 18da306d929..ed82423d813 100644
--- a/apps/desktop/src/locales/hr/messages.json
+++ b/apps/desktop/src/locales/hr/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Prijavi se u Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Prijava pristupnim ključem"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Podsjetnik glavne lozinke"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Pridruži se organizaciji"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Autentifikacija je otkazana ili je trajala predugo. Molimo pokušaj ponovno."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Nevažeći kôd za provjeru"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Zapamti me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Ponovno slanje kontrolnog koda e-poštom"
   },
   "useAnotherTwoStepMethod": {
     "message": "Koristiti drugi način prijave dvostrukom autentifikacijom"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Umetni svoj YubiKey u USB priključak računala, a zatim dodirni njegovu tipku."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Mogućnosti prijave dvostrukom autentifikacijom"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Vlastito hosting okruženje"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Ovjeri WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Sakrij moju adresu e-pošte od primatelja."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Za tvoj račun je potrebna Duo dvostruka autentifikacija."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Pokreni Duo u pregledniku"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Potvrdi korištenje SSH ključa"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "traži pristup za"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Aplikacija"
   },
diff --git a/apps/desktop/src/locales/hu/messages.json b/apps/desktop/src/locales/hu/messages.json
index d57fe343cc6..a974b10ee49 100644
--- a/apps/desktop/src/locales/hu/messages.json
+++ b/apps/desktop/src/locales/hu/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Bejelentkezés a Bitwardenbe"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Adjuk meg az email címre elküldött kódot."
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Adjuk meg a hitelesítő alkalmazása által generált kódot."
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Nyomjuk meg a YubiKey-t a hitelesítéshez."
+  },
   "logInWithPasskey": {
     "message": "Bejelentkezés hozzáférési kulccsal"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Mesterjelszó emlékeztető"
   },
+  "passwordStrengthScore": {
+    "message": "A jelszó erősségi pontszáma $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Csatlakozás szervezethez"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "A hitelesítés megszakításra került vagy túl sokáig tartott. Próbáljuk újra."
   },
+  "openInNewTab": {
+    "message": "Megnyitás új fülön"
+  },
   "invalidVerificationCode": {
     "message": "Érvénytelen ellenőrző kód"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Adatok megjegyzése"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Ne kérdezzen újra ezen az eszközön 30 napig"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Megerősítő kód ismételt elküldése emailben"
   },
   "useAnotherTwoStepMethod": {
     "message": "Másik kétlépcsős bejelentkezési mód használata"
   },
+  "selectAnotherMethod": {
+    "message": "Másik módszer választás",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Helyreállító kód használata"
+  },
   "insertYubiKey": {
     "message": "A YubiKey beillesztése a számítógép USB portjába és a rajta levő gomb megnyomása."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Kétlépcsős bejelentkezés opciók"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Kétlépcsős bejelentkezési mód használata"
+  },
   "selfHostedEnvironment": {
     "message": "Saját üzemeltetésű környezet"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAutn hitelesítés"
   },
+  "readSecurityKey": {
+    "message": "Biztonsági kulcs olvasása"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Várakozás a biztonsági kulcs interakciójára..."
+  },
   "hideEmail": {
     "message": "Saját email cím elrejtése a címzettek elől."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "A fiókhoz kétlépcsős DUO bejelentkezés szükséges."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo kétlépcsős bejelentkezés szükséges a fiókhoz. Kövessük az alábbi lépéseket a bejelentkezés befejezéséhez."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Kövessük az alábbi lépéseket a bejelentkezés befejezéséhez."
+  },
   "launchDuo": {
     "message": "A Duo elindítása a böngészőben"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "SSH kulcs használat megerősítése"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Figyelmeztetés: Böngésző továbbítás"
+  },
+  "agentForwardingWarningText": {
+    "message": "Ez a kérelem egy távoli eszközről érkezik, amelyre bejelentkeztünk"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "hozzáférést kér:"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "azért, hogy"
+  },
+  "sshActionLogin": {
+    "message": "hitelesítsük magunkat a szerveren"
+  },
+  "sshActionSign": {
+    "message": "aláírjunk egy üzenetet"
+  },
+  "sshActionGitSign": {
+    "message": "aléírjunk egy git commit elemet"
+  },
   "unknownApplication": {
     "message": "Egy alkalmazás"
   },
diff --git a/apps/desktop/src/locales/id/messages.json b/apps/desktop/src/locales/id/messages.json
index d40053aec28..017d3357ccd 100644
--- a/apps/desktop/src/locales/id/messages.json
+++ b/apps/desktop/src/locales/id/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Kode verifikasi tidak valid"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Ingat saya"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Kirim ulang email kode verifikasi"
   },
   "useAnotherTwoStepMethod": {
     "message": "Gunakan metode masuk dua langkah lainnya"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Masukkan YubiKey Anda ke port USB komputer Anda, lalu sentuh tombol nya."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Pilihan Info Masuk Dua Langkah"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Lingkungan Hos-mandiri"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Autentikasi dengan WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Sembunyikan alamat surel saya dari penerima."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/it/messages.json b/apps/desktop/src/locales/it/messages.json
index ee324d47c89..3cecef39f7a 100644
--- a/apps/desktop/src/locales/it/messages.json
+++ b/apps/desktop/src/locales/it/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Accedi a Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Inserisci il codice inviato alla tua e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Inserisci il codice dalla tua app di autenticazione"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Premi la tua chiave Yubi per autenticare"
+  },
   "logInWithPasskey": {
     "message": "Accedi con passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Suggerimento per la password principale"
   },
+  "passwordStrengthScore": {
+    "message": "Valutazione complessità parola d'accesso $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Unisciti all'organizzazione"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "L'autenticazione è stata annullata o ha richiesto troppo tempo. Per favore riprova."
   },
+  "openInNewTab": {
+    "message": "Apri in una nuova scheda"
+  },
   "invalidVerificationCode": {
     "message": "Codice di verifica non valido"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Ricordami"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Non chiedere più su questo dispositivo per 30 giorni"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Invia email con codice di verifica di nuovo"
   },
   "useAnotherTwoStepMethod": {
     "message": "Usa un altro metodo di verifica in due passaggi"
   },
+  "selectAnotherMethod": {
+    "message": "Seleziona un altro metodo",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Usa il tuo codice di recupero"
+  },
   "insertYubiKey": {
     "message": "Inserisci la tua YubiKey nella porta USB del computer e premi il suo pulsante."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Opzioni di verifica in due passaggi"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Seleziona metodo di accesso in due passaggi"
+  },
   "selfHostedEnvironment": {
     "message": "Ambiente self-hosted"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Autenticazione WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Leggi chiave di sicurezza"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "In attesa di interazione con la chiave di sicurezza..."
+  },
   "hideEmail": {
     "message": "Nascondi il mio indirizzo email dai destinatari."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Per il tuo account è richiesta la verifica in due passaggi Duo."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Il login Duo in due passaggi è richiesto per il tuo account. Segui i passaggi qui sotto per completare l'accesso."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Segui i passaggi qui sotto per completare l'accesso."
+  },
   "launchDuo": {
     "message": "Avvia Duo nel browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Conferma l'uso della chiave SSH"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Attenzione: inoltro agente"
+  },
+  "agentForwardingWarningText": {
+    "message": "Questa richiesta proviene da un dispositivo remoto al quale si è connessi"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "richiede l'accesso a"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "al fine di"
+  },
+  "sshActionLogin": {
+    "message": "autenticazione su un server"
+  },
+  "sshActionSign": {
+    "message": "firmare un messaggio"
+  },
+  "sshActionGitSign": {
+    "message": "firmare un commit git"
+  },
   "unknownApplication": {
     "message": "Un'applicazione"
   },
diff --git a/apps/desktop/src/locales/ja/messages.json b/apps/desktop/src/locales/ja/messages.json
index 241b72f95a8..098c683faae 100644
--- a/apps/desktop/src/locales/ja/messages.json
+++ b/apps/desktop/src/locales/ja/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Bitwarden にログイン"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "パスキーでログイン"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "マスターパスワードのヒント"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "組織に参加"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "認証がキャンセルされたか、時間がかかりすぎました。もう一度やり直してください。"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "認証コードが間違っています"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "情報を保存する"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "確認コードをメールで再送"
   },
   "useAnotherTwoStepMethod": {
     "message": "他の2段階認証方法を使用"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "YubiKey を USB ポートに挿入し、ボタンをタッチしてください。"
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "2段階認証オプション"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "セルフホスティング環境"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn の認証"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "メールアドレスを受信者に表示しない"
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "アカウントには Duo 二段階認証が必要です。"
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "ブラウザで Duo を起動"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "SSH 鍵の使用を確認します"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "がアクセスを要求しています: "
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "アプリ"
   },
diff --git a/apps/desktop/src/locales/ka/messages.json b/apps/desktop/src/locales/ka/messages.json
index 762cd87cd01..101679fb6e5 100644
--- a/apps/desktop/src/locales/ka/messages.json
+++ b/apps/desktop/src/locales/ka/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "არასწორი გადამოწმების კოდი"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "დამიმახსოვრე"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/km/messages.json b/apps/desktop/src/locales/km/messages.json
index 1aa61a9b381..b7693c0d0b5 100644
--- a/apps/desktop/src/locales/km/messages.json
+++ b/apps/desktop/src/locales/km/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/kn/messages.json b/apps/desktop/src/locales/kn/messages.json
index 69af0ab913f..5c1ac058bdc 100644
--- a/apps/desktop/src/locales/kn/messages.json
+++ b/apps/desktop/src/locales/kn/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "ನನ್ನನ್ನು ನೆನಪಿನಲ್ಲಿ ಇಡು"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "ಪರಿಶೀಲನೆ ಕೋಡ್ ಇಮೇಲ್ ಅನ್ನು ಮತ್ತೆ ಕಳುಹಿಸಿ"
   },
   "useAnotherTwoStepMethod": {
     "message": "ಮತ್ತೊಂದು ಎರಡು-ಹಂತದ ಲಾಗಿನ್ ವಿಧಾನವನ್ನು ಬಳಸಿ"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "ನಿಮ್ಮ ಯುಬಿಕಿಯನ್ನು ನಿಮ್ಮ ಕಂಪ್ಯೂಟರ್‌ನ ಯುಎಸ್‌ಬಿ ಪೋರ್ಟ್ಗೆ ಸೇರಿಸಿ, ನಂತರ ಅದರ ಗುಂಡಿಯನ್ನು ಸ್ಪರ್ಶಿಸಿ."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "ಎರಡು ಹಂತದ ಲಾಗಿನ್ ಆಯ್ಕೆಗಳು"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "ಸ್ವಯಂ ಆತಿಥೇಯ ಪರಿಸರ"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn ಅನ್ನು ಪ್ರಮಾಣಿಕರಿಸು"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "ಸ್ವೀಕರಿಸುವವರಿಂದ ನನ್ನ ಇಮೇಲ್ ವಿಳಾಸವನ್ನು ಮರೆಮಾಡಿ."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/ko/messages.json b/apps/desktop/src/locales/ko/messages.json
index ef9d69efacf..3a574ed1cde 100644
--- a/apps/desktop/src/locales/ko/messages.json
+++ b/apps/desktop/src/locales/ko/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Bitwarden 로그인"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "패스키로 로그인"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "유효하지 않은 확인 코드"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "기억하기"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "인증 코드 이메일 다시 보내기"
   },
   "useAnotherTwoStepMethod": {
     "message": "다른 2단계 인증 사용"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "YubiKey를 컴퓨터의 USB 포트에 삽입하고 버튼을 누르세요."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "2단계 인증 옵션"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "자체 호스팅 환경"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn 인증"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "받는 사람으로부터 나의 이메일 주소 숨기기"
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/lt/messages.json b/apps/desktop/src/locales/lt/messages.json
index 2b124880774..3f1fcbcb514 100644
--- a/apps/desktop/src/locales/lt/messages.json
+++ b/apps/desktop/src/locales/lt/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Neteisingas patvirtinimo kodas"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Prisiminti mane"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Pakartotinai atsiųsti patvirtinimo kodą el. paštu"
   },
   "useAnotherTwoStepMethod": {
     "message": "Naudoti kitą dviejų žingsnių prisijungimo metodą"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Įkiškite YubiKey į savo kompiuterio USB prievadą, tada palieskite jo mygtuką."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Dviejų žingsnių prisijungimo parinktys"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Savarankiškai sukurta aplinka"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Autentifikuoti WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Slėpti mano el. pašto adresą nuo gavėjų."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/lv/messages.json b/apps/desktop/src/locales/lv/messages.json
index b51f0e523bb..839c1e49024 100644
--- a/apps/desktop/src/locales/lv/messages.json
+++ b/apps/desktop/src/locales/lv/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Pieteikties Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Jāievada e-pastā nosūtītais kods"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Jāievada kods no savas autentificētājlietotnes"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Jāpiespiež sava YubiKey ierīce, lai autentificētu"
+  },
   "logInWithPasskey": {
     "message": "Pieteikties ar piekļuves atslēgu"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Galvenās paroles norāde"
   },
+  "passwordStrengthScore": {
+    "message": "Paroles stipruma novērtējums $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Pievienoties apvienībai"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Autentifikācija tika atcelta vai tā aizņēma pārāk daudz laika. Lūgums mēģināt vēlreiz."
   },
+  "openInNewTab": {
+    "message": "Atvērt jaunā cilnē"
+  },
   "invalidVerificationCode": {
     "message": "Nederīgs apstiprinājuma kods"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Atcerēties mani"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Šajā ierīcē 30 dienas vairs nevaicāt"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Sūtīt apstiprinājuma koda e-pastu vēlreiz"
   },
   "useAnotherTwoStepMethod": {
     "message": "Izmantot citu divpakāpju pieteikšanās veidu"
   },
+  "selectAnotherMethod": {
+    "message": "Atlasīt citu veidu",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Izmantot savu atkopes kodu"
+  },
   "insertYubiKey": {
     "message": "Ievieto savu YubiKey datora USB ligzdā un pieskaries tā pogai!"
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Divpakāpju pieteikšanās iespējas"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Atlasīt divpakāpju pieteikšanās veidu"
+  },
   "selfHostedEnvironment": {
     "message": "Pašuzturēta vide"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Autentificēt WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Nolasīt drošības atslēgu"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Gaida mijiedarbību ar drošības atslēgu..."
+  },
   "hideEmail": {
     "message": "Slēpt e-pasta adresi no saņēmējiem."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Kontam ir nepieciešama Duo divpakāpju pieteikšanās."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Ir nepieciešama Duo divpakāpju pieteikšanās, lai pieteiktos savā kontā. Jāseko zemāk esošajām norādēm, lai pabeigtu pieteikšanos."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Jāseko zemāk esošajām norādēm, lai pabeigtu pieteikšanos."
+  },
   "launchDuo": {
     "message": "Palaist Duo pārlūkā"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Apstiprināt SSH atslēgas lietojumu"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Brīdinājums: aģenta pārsūtīšana"
+  },
+  "agentForwardingWarningText": {
+    "message": "Šis pieprasījums nāk no attālas ierīces, kurā esi pieteicies"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "pieprasa piekļuvi"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": ", lai varētu"
+  },
+  "sshActionLogin": {
+    "message": "autentificēt serverī"
+  },
+  "sshActionSign": {
+    "message": "parakstīt ziņojumu"
+  },
+  "sshActionGitSign": {
+    "message": "parakstīt git iesūtījumu"
+  },
   "unknownApplication": {
     "message": "Lietotne"
   },
diff --git a/apps/desktop/src/locales/me/messages.json b/apps/desktop/src/locales/me/messages.json
index 590d5a1b8ab..e88915f4054 100644
--- a/apps/desktop/src/locales/me/messages.json
+++ b/apps/desktop/src/locales/me/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Zapamti me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Pošalji ponovo verifikacioni kod na email"
   },
   "useAnotherTwoStepMethod": {
     "message": "Koristi drugi metod prijave u dva koraka"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Priključi svoj YubiKey u USB port na kompjuteru i onda takni njegovo dugme."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Opcije prijave u dva koraka"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Okruženje lokalne instalacije (SELF HOST)"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/ml/messages.json b/apps/desktop/src/locales/ml/messages.json
index ef2c81ea238..654a8dcb1e2 100644
--- a/apps/desktop/src/locales/ml/messages.json
+++ b/apps/desktop/src/locales/ml/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "എന്നെ ഓർക്കണം"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "സ്ഥിരീകരണ കോഡ് ഇമെയിൽ വഴി വീണ്ടും അയയ്ക്കുക"
   },
   "useAnotherTwoStepMethod": {
     "message": "മറ്റൊരു രണ്ട് ഘട്ട പ്രവേശന രീതി ഉപയോഗിക്കുക"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "നിങ്ങളുടെ കമ്പ്യൂട്ടറിന്റെ യു‌എസ്‌ബി പോർട്ടിലേക്ക് YubiKey ഇടുക, തുടർന്ന് അതിന്റെ ബട്ടൺ അമർത്തുക."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "രണ്ട്-ഘട്ട പ്രവേശനം ഓപ്ഷനുകൾ"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "സ്വയം ഹോസ്റ്റുചെയ്‌ത എൻവിയോണ്മെന്റ്"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/mr/messages.json b/apps/desktop/src/locales/mr/messages.json
index 1aa61a9b381..b7693c0d0b5 100644
--- a/apps/desktop/src/locales/mr/messages.json
+++ b/apps/desktop/src/locales/mr/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/my/messages.json b/apps/desktop/src/locales/my/messages.json
index a86ab9e5009..26bd06f68bb 100644
--- a/apps/desktop/src/locales/my/messages.json
+++ b/apps/desktop/src/locales/my/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/nb/messages.json b/apps/desktop/src/locales/nb/messages.json
index c4ab8794dcf..e85c4699d9d 100644
--- a/apps/desktop/src/locales/nb/messages.json
+++ b/apps/desktop/src/locales/nb/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Logg inn på Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Logg inn med passnøkkel"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Hint til hovedpassord"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Bli med i organisasjon"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Autentiseringen ble avbrutt eller tok for lang tid. Prøv igjen."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Ugyldig verifiseringskode"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Husk på meg"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send E-posten med verifiseringskoden på nytt"
   },
   "useAnotherTwoStepMethod": {
     "message": "Bruk en annen 2-trinnsinnloggingsmetode"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Sett inn din YubiKey i din datamaskins USB-uttak, og så trykk på dens knapp."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Totrinns innloggingsalternativer"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Selvbetjent miljø"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Autentiser WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Skjul min e-postadresse fra mottakere."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Et program"
   },
diff --git a/apps/desktop/src/locales/ne/messages.json b/apps/desktop/src/locales/ne/messages.json
index 90e4967f7a3..88614d22267 100644
--- a/apps/desktop/src/locales/ne/messages.json
+++ b/apps/desktop/src/locales/ne/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/nl/messages.json b/apps/desktop/src/locales/nl/messages.json
index 5093a5d0d8b..a3c208d24b3 100644
--- a/apps/desktop/src/locales/nl/messages.json
+++ b/apps/desktop/src/locales/nl/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Inloggen op Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Voer de code in die naar je e-mailadres is verstuurd"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Voer de code uit je authenticatie-app in"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Druk op je YubiKey om te verifiëren"
+  },
   "logInWithPasskey": {
     "message": "Inloggen met passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Hoofdwachtwoordhint"
   },
+  "passwordStrengthScore": {
+    "message": "Score wachtwoordsterkte $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organisatie"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "De authenticatie werd geannuleerd of duurde te lang. Probeer het opnieuw."
   },
+  "openInNewTab": {
+    "message": "Openen in nieuwe tab"
+  },
   "invalidVerificationCode": {
     "message": "Ongeldige verificatiecode"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Mijn gegevens onthouden"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "30 dagen niet meer vragen op dit apparaat"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "E-mail met verificatiecode opnieuw versturen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Gebruik een andere methode voor tweestapsaanmelding"
   },
+  "selectAnotherMethod": {
+    "message": "Kies een andere methode",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Gebruik je herstelcode"
+  },
   "insertYubiKey": {
     "message": "Plaats je YubiKey in de USB-poort van je computer en druk op de knop."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Opties voor tweestapsaanmelding"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Kies methode voor tweestapsaanmelding"
+  },
   "selfHostedEnvironment": {
     "message": "Zelfgehoste omgeving"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Verifieer WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Beveiligingssleutel lezen"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Wacht op interactie met beveiligingssleutel..."
+  },
   "hideEmail": {
     "message": "Verberg mijn e-mailadres voor ontvangers."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Jouw account vereist Duo-tweestapsaanmelding."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Jouw account vereist Duo-tweestapsaanmelding. Volg de onderstaande stappen om het inloggen te voltooien."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Volg de onderstaande stappen om in te loggen."
+  },
   "launchDuo": {
     "message": "Start Duo in browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Gebruik SSH-sleutel bevestigen"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Waarschuwing: Agent doorsturen"
+  },
+  "agentForwardingWarningText": {
+    "message": "Dit verzoek komt van een extern apparaat waarop je bent ingelogd"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "vraagt toegang tot"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "om te"
+  },
+  "sshActionLogin": {
+    "message": "autenticeer naar een server"
+  },
+  "sshActionSign": {
+    "message": "een bericht te ondertekenen"
+  },
+  "sshActionGitSign": {
+    "message": "een git-commit te ondertekenen"
+  },
   "unknownApplication": {
     "message": "Een applicatie"
   },
diff --git a/apps/desktop/src/locales/nn/messages.json b/apps/desktop/src/locales/nn/messages.json
index ac06feb9a12..a961d2c8364 100644
--- a/apps/desktop/src/locales/nn/messages.json
+++ b/apps/desktop/src/locales/nn/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Ugyldig stadfestingskode"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Husk meg"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send e-post om stadfestingskode på nytt"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/or/messages.json b/apps/desktop/src/locales/or/messages.json
index c18b4939e19..a175531b182 100644
--- a/apps/desktop/src/locales/or/messages.json
+++ b/apps/desktop/src/locales/or/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/pl/messages.json b/apps/desktop/src/locales/pl/messages.json
index 417592e6f88..257f9e7fc1a 100644
--- a/apps/desktop/src/locales/pl/messages.json
+++ b/apps/desktop/src/locales/pl/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Zaloguj do Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Wpisz kod wysłany na Twój adres e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Wpisz kod z aplikacji uwierzytelniającej"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Naciśnij YubiKey aby uwierzytelnić"
+  },
   "logInWithPasskey": {
     "message": "Zaloguj się używając klucza dostępu"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Podpowiedź do hasła głównego"
   },
+  "passwordStrengthScore": {
+    "message": "Siła hasła: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Dołącz do organizacji"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Uwierzytelnianie zostało anulowane lub trwało zbyt długo. Spróbuj ponownie."
   },
+  "openInNewTab": {
+    "message": "Otwórz w nowej karcie"
+  },
   "invalidVerificationCode": {
     "message": "Kod weryfikacyjny jest nieprawidłowy"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Zapamiętaj mnie"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Nie pytaj ponownie na tym urządzeniu przez 30 dni"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Wyślij ponownie wiadomość z kodem weryfikacyjnym"
   },
   "useAnotherTwoStepMethod": {
     "message": "Użyj innej metody logowania dwustopniowego"
   },
+  "selectAnotherMethod": {
+    "message": "Wybierz inną metodę",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Użyj kodu odzyskiwania"
+  },
   "insertYubiKey": {
     "message": "Włóż klucz YubiKey do portu USB komputera, a następnie dotknij jego przycisku."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Opcje logowania dwustopniowego"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Wybierz metodę logowania dwustopniowego"
+  },
   "selfHostedEnvironment": {
     "message": "Samodzielnie hostowane środowisko"
   },
@@ -1776,7 +1810,7 @@
     "message": "Wymagaj hasła lub PIN przy starcie aplikacji"
   },
   "requirePasswordWithoutPinOnStart": {
-    "message": "Require password on app start"
+    "message": "Wymagaj hasła przy starcie aplikacji"
   },
   "recommendedForSecurity": {
     "message": "Zalecane dla bezpieczeństwa."
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Uwierzytelnianie WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Odczytaj klucz bezpieczeństwa"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Oczekiwanie na interakcję z kluczem bezpieczeństwa..."
+  },
   "hideEmail": {
     "message": "Ukryj mój adres e-mail przed odbiorcami."
   },
@@ -2644,7 +2684,7 @@
     }
   },
   "forwaderInvalidOperation": {
-    "message": "$SERVICENAME$ refused your request. Please contact your service provider for assistance.",
+    "message": "$SERVICENAME$ odrzucił Twoje żądanie. Skontaktuj się z dostawcą usług w celu uzyskania pomocy.",
     "description": "Displayed when the user is forbidden from using the API by the forwarding service.",
     "placeholders": {
       "servicename": {
@@ -2654,7 +2694,7 @@
     }
   },
   "forwaderInvalidOperationWithMessage": {
-    "message": "$SERVICENAME$ refused your request: $ERRORMESSAGE$",
+    "message": "$SERVICENAME$ odrzucił Twoje żądanie: $ERRORMESSAGE$",
     "description": "Displayed when the user is forbidden from using the API by the forwarding service with an error message.",
     "placeholders": {
       "servicename": {
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Dwustopniowe logowanie Duo jest wymagane dla Twojego konta."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Logowanie dwustopniowe Duo jest wymagane dla twojego konta. Wykonaj poniższe kroki, by dokończyć logowanie"
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Wykonaj poniższe kroki, by dokończyć logowanie"
+  },
   "launchDuo": {
     "message": "Uruchom Duo w przeglądarce"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Potwierdź użycie klucza SSH"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "wnioskuje o dostęp do"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Aplikacja"
   },
diff --git a/apps/desktop/src/locales/pt_BR/messages.json b/apps/desktop/src/locales/pt_BR/messages.json
index 693970ff708..88ef71fb92f 100644
--- a/apps/desktop/src/locales/pt_BR/messages.json
+++ b/apps/desktop/src/locales/pt_BR/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Inicie a sessão no Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Iniciar sessão com a chave de acesso"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Dica da senha mestra"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Juntar-se à organização"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "A autenticação foi cancelada ou demorou muito. Por favor tente novamente."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Código de verificação inválido"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Lembrar de mim"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Enviar código de verificação para o e-mail novamente"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizar outro método de verificação em duas etapas"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Introduza a sua YubiKey na porta USB do seu computador, e depois toque no botão da mesma."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Opções de Login em Duas Etapas"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Ambiente auto-hospedado"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Autenticar WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Ocultar meu endereço de e-mail dos destinatários."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "A autenticação em duas etapas do Duo é necessária para sua conta."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Iniciar o Duo no navegador"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirmar uso da chave SSH"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "está solicitando acesso para"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Uma aplicação"
   },
diff --git a/apps/desktop/src/locales/pt_PT/messages.json b/apps/desktop/src/locales/pt_PT/messages.json
index 914a1d8e78f..eef942718ae 100644
--- a/apps/desktop/src/locales/pt_PT/messages.json
+++ b/apps/desktop/src/locales/pt_PT/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Iniciar sessão no Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Introduza o código enviado para o seu e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Introduza o código da sua app de autenticação"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Prima a sua YubiKey para se autenticar"
+  },
   "logInWithPasskey": {
     "message": "Iniciar sessão com a chave de acesso"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Dica da palavra-passe mestra"
   },
+  "passwordStrengthScore": {
+    "message": "Pontuação da força da palavra-passe: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Aderir à organização"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "A autenticação foi cancelada ou demorou demasiado tempo. Por favor, tente novamente."
   },
+  "openInNewTab": {
+    "message": "Abrir num novo separador"
+  },
   "invalidVerificationCode": {
     "message": "Código de verificação inválido"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Memorizar"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Não voltar a perguntar neste dispositivo durante 30 dias"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Enviar e-mail com o código de verificação novamente"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizar outro método de verificação de dois passos"
   },
+  "selectAnotherMethod": {
+    "message": "Selecionar outro método",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Utilize o seu código de recuperação"
+  },
   "insertYubiKey": {
     "message": "Introduza a sua YubiKey na porta USB do seu computador, depois toque no botão da mesma."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Opções de verificação de dois passos"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Selecionar método de verificação de dois passos"
+  },
   "selfHostedEnvironment": {
     "message": "Ambiente auto-hospedado"
   },
@@ -1764,19 +1798,19 @@
     "message": "desbloquear o cofre"
   },
   "autoPromptWindowsHello": {
-    "message": "Pedir o Windows Hello ao iniciar a aplicação"
+    "message": "Pedir o Windows Hello ao iniciar a app"
   },
   "autoPromptPolkit": {
     "message": "Pedir a autenticação do sistema no arranque"
   },
   "autoPromptTouchId": {
-    "message": "Pedir o Touch ID ao iniciar a aplicação"
+    "message": "Pedir o Touch ID ao iniciar a app"
   },
   "requirePasswordOnStart": {
-    "message": "Exigir palavra-passe ou PIN ao iniciar a aplicação"
+    "message": "Exigir palavra-passe ou PIN ao iniciar a app"
   },
   "requirePasswordWithoutPinOnStart": {
-    "message": "Require password on app start"
+    "message": "Exigir palavra-passe ao iniciar a app"
   },
   "recommendedForSecurity": {
     "message": "Recomendado por segurança."
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Autenticar o WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Ler chave de segurança"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "A aguardar interação da chave de segurança..."
+  },
   "hideEmail": {
     "message": "Ocultar o meu endereço de e-mail dos destinatários."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "A verificação de dois passos Duo é necessária para a sua conta."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "A verificação de dois passos do Duo é necessária para a sua conta. Siga os passos abaixo para concluir o início de sessão."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Siga os passos abaixo para concluir o início de sessão."
+  },
   "launchDuo": {
     "message": "Iniciar o Duo no navegador"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirmar a utilização da chave SSH"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Aviso: Reencaminhamento de agentes"
+  },
+  "agentForwardingWarningText": {
+    "message": "Este pedido provém de um dispositivo remoto no qual tem sessão iniciada"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "está a pedir acesso a"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "para"
+  },
+  "sshActionLogin": {
+    "message": "se autenticar num servidor"
+  },
+  "sshActionSign": {
+    "message": "assinar uma mensagem"
+  },
+  "sshActionGitSign": {
+    "message": "assinar um commit no git"
+  },
   "unknownApplication": {
     "message": "Uma aplicação"
   },
diff --git a/apps/desktop/src/locales/ro/messages.json b/apps/desktop/src/locales/ro/messages.json
index 807de4a101c..051ef71c8d3 100644
--- a/apps/desktop/src/locales/ro/messages.json
+++ b/apps/desktop/src/locales/ro/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Cod de verificare nevalid"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Memorare autentificare"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Retrimitere e-mail cu codul de verificare"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizare de metodă diferită de autentificare în două etape"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Introduceți YubiKey în portul USB al calculatorului apoi atingeți butonul acestuia."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Opțiuni de autentificare în două etape"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Mediul găzduit local"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Autentificare WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Ascundeți adresa mea de e-mail de la destinatari."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/ru/messages.json b/apps/desktop/src/locales/ru/messages.json
index 9fb24b00c7c..6e89d4b530b 100644
--- a/apps/desktop/src/locales/ru/messages.json
+++ b/apps/desktop/src/locales/ru/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Войти в Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Введите код, отправленный на ваш email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Введите код из приложения-аутентификатора"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Нажмите на YubiKey для аутентификации"
+  },
   "logInWithPasskey": {
     "message": "Войти с passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Подсказка к мастер-паролю"
   },
+  "passwordStrengthScore": {
+    "message": "Оценка надежности пароля $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Присоединиться к организации"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Аутентификация была отменена или заняла слишком много времени. Пожалуйста, попробуйте еще раз."
   },
+  "openInNewTab": {
+    "message": "Открыть в новой вкладке"
+  },
   "invalidVerificationCode": {
     "message": "Неверный код подтверждения"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Запомнить меня"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Не спрашивать на этом устройстве в течение 30 дней"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Отправить код подтверждения еще раз"
   },
   "useAnotherTwoStepMethod": {
     "message": "Использовать другой метод двухэтапной аутентификации"
   },
+  "selectAnotherMethod": {
+    "message": "Выбрать другой способ",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Использовать код восстановления"
+  },
   "insertYubiKey": {
     "message": "Вставьте свой YubiKey в USB-порт компьютера и нажмите его кнопку."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Настройки двухэтапной аутентификации"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Выбрать другой метод двухэтапной аутентификации"
+  },
   "selfHostedEnvironment": {
     "message": "Окружение пользовательского хостинга"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Аутентификация WebAutn"
   },
+  "readSecurityKey": {
+    "message": "Считать ключ безопасности"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Ожидание взаимодействия с ключом безопасности..."
+  },
   "hideEmail": {
     "message": "Скрыть мой адрес email от получателей."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Для вашего аккаунта требуется двухэтапная аутентификация Duo."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Следуйте указаниям ниже, чтобы завершить авторизацию."
+  },
   "launchDuo": {
     "message": "Запустить Duo в браузере"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Подтвердить использование ключа SSH"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Предупреждение: Переадресация агента"
+  },
+  "agentForwardingWarningText": {
+    "message": "Этот запрос поступает с удаленного устройства, на которое вы вошли"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "запрашивает доступ к"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "чтобы"
+  },
+  "sshActionLogin": {
+    "message": "авторизоваться на сервере"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Приложение"
   },
diff --git a/apps/desktop/src/locales/si/messages.json b/apps/desktop/src/locales/si/messages.json
index 3e77077ddee..cfddc088795 100644
--- a/apps/desktop/src/locales/si/messages.json
+++ b/apps/desktop/src/locales/si/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/sk/messages.json b/apps/desktop/src/locales/sk/messages.json
index 65a718b1a23..2ec3f3cb0cb 100644
--- a/apps/desktop/src/locales/sk/messages.json
+++ b/apps/desktop/src/locales/sk/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Prihlásenie do Bitwardenu"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Zadajte kód zaslaný na váš e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Zadajte kód z overovacej aplikácie"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Stlačte YubiKey na overenie"
+  },
   "logInWithPasskey": {
     "message": "Prihlásiť sa s prístupovým kľúčom"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Nápoveď k hlavnému heslu"
   },
+  "passwordStrengthScore": {
+    "message": "Sila hesla $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Pripojte sa k organizácii"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Overenie bolo zrušené alebo trvalo príliš dlho. Skúste to znova."
   },
+  "openInNewTab": {
+    "message": "Otvoriť v novej karte"
+  },
   "invalidVerificationCode": {
     "message": "Neplatný verifikačný kód"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Zapamätaj si ma"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Nepýtať sa znova na tomto zariadení 30 dní"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Znovu zaslať overovací kód e-mailom"
   },
   "useAnotherTwoStepMethod": {
     "message": "Použiť inú dvojstupňovú metódu prihlásenia"
   },
+  "selectAnotherMethod": {
+    "message": "Vyberte iný spôsob",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Použiť obnovovací kód"
+  },
   "insertYubiKey": {
     "message": "Vložte váš YubiKey do USB portu počítača a stlačte jeho tlačidlo."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Možnosti dvojstupňového prihlásenia"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Vyberte metódu dvojstupňového prihlásenia"
+  },
   "selfHostedEnvironment": {
     "message": "Prevádzkované vo vlastnom prostredí"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Overiť cez WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Prečítať bezpečnostný kľúč"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Čaká sa na interakciu s bezpečnostným kľúčom..."
+  },
   "hideEmail": {
     "message": "Skryť moju e-mailovú adresu pred príjemcami."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Pre váš účet je potrebné dvojstupňové prihlásenie Duo."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Pre váš účet sa vyžaduje dvojstupňové prihlásenie Duo. Na dokončenie prihlásenia postupujte podľa pokynov."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Na dokončenie prihlásenia postupujte podľa pokynov."
+  },
   "launchDuo": {
     "message": "Spustiť Duo v prehliadači"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Potvrdiť použitie kľúča SSH"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Upozornenie: Presmerovanie agenta"
+  },
+  "agentForwardingWarningText": {
+    "message": "Táto požiadavka prichádza zo vzdialeného zariadenia, do ktorého ste prihlásení"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "žiada o prístup k"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "podpísať správu"
+  },
+  "sshActionGitSign": {
+    "message": "podpísať git commit"
+  },
   "unknownApplication": {
     "message": "Aplikácia"
   },
diff --git a/apps/desktop/src/locales/sl/messages.json b/apps/desktop/src/locales/sl/messages.json
index e74cf0392fc..6207b0bca0c 100644
--- a/apps/desktop/src/locales/sl/messages.json
+++ b/apps/desktop/src/locales/sl/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Neveljavna verifikacijska koda"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Zapomni si me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Ponovno pošlji verifikacijsko kodo"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Okolje z lastnim gostovanjem"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/sr/messages.json b/apps/desktop/src/locales/sr/messages.json
index b7a66174e9d..82347a322b7 100644
--- a/apps/desktop/src/locales/sr/messages.json
+++ b/apps/desktop/src/locales/sr/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Пријавите се на Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Унесите кôд послат на ваш имејл"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Унесите кôд из апликације за аутентификацију"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Стисните Ваш YubiKey за аутентификацију"
+  },
   "logInWithPasskey": {
     "message": "Пријавите се са приступним кључем"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Савет главне лозинке"
   },
+  "passwordStrengthScore": {
+    "message": "Снага лозинкe $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Придружи Организацију"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Аутентификација је отказана или је трајала предуго. Молим вас, покушајте поново."
   },
+  "openInNewTab": {
+    "message": "Отвори у новом језичку"
+  },
   "invalidVerificationCode": {
     "message": "Неисправан верификациони код"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Запамти ме"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Не питајте поново на овом уређају 30 дана"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Поново послати верификациони код на имејл"
   },
   "useAnotherTwoStepMethod": {
     "message": "Користите другу методу пријављивања у два корака"
   },
+  "selectAnotherMethod": {
+    "message": "Изаберите другу методу",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Употребите шифру за опоравак"
+  },
   "insertYubiKey": {
     "message": "Убаците свој YubiKey у УСБ порт рачунара, а затим додирните његово дугме."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Опције дво-коракне пријаве"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Одабрати методу пријављивања у два корака"
+  },
   "selfHostedEnvironment": {
     "message": "Самостално окружење"
   },
@@ -1776,7 +1810,7 @@
     "message": "Захтевај лозинку или ПИН при покретању"
   },
   "requirePasswordWithoutPinOnStart": {
-    "message": "Require password on app start"
+    "message": "Захтевај лозинку при покретању"
   },
   "recommendedForSecurity": {
     "message": "Препоручује се за сигурност."
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAutn аутентификација"
   },
+  "readSecurityKey": {
+    "message": "Читај сигурносни кључ"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Чека се интеракција сигурносног кључа..."
+  },
   "hideEmail": {
     "message": "Сакриј моју е-адресу од примаоца."
   },
@@ -2554,7 +2594,7 @@
     "message": "Користите подешено catch-all пријемно сандуче вашег домена."
   },
   "useThisEmail": {
-    "message": "Use this email"
+    "message": "Користи овај имејл"
   },
   "random": {
     "message": "Случајно"
@@ -2644,7 +2684,7 @@
     }
   },
   "forwaderInvalidOperation": {
-    "message": "$SERVICENAME$ refused your request. Please contact your service provider for assistance.",
+    "message": "$SERVICENAME$ одбио ваш захтев. Обратите се свом провајдеру сервиса за помоћ.",
     "description": "Displayed when the user is forbidden from using the API by the forwarding service.",
     "placeholders": {
       "servicename": {
@@ -2654,7 +2694,7 @@
     }
   },
   "forwaderInvalidOperationWithMessage": {
-    "message": "$SERVICENAME$ refused your request: $ERRORMESSAGE$",
+    "message": "$SERVICENAME$ одбио ваш захтев: $ERRORMESSAGE$",
     "description": "Displayed when the user is forbidden from using the API by the forwarding service with an error message.",
     "placeholders": {
       "servicename": {
@@ -2773,7 +2813,7 @@
     "message": "Пријава је покренута"
   },
   "logInRequestSent": {
-    "message": "Request sent"
+    "message": "Захтев је послат"
   },
   "notificationSentDevice": {
     "message": "Обавештење је послато на ваш уређај."
@@ -2782,13 +2822,13 @@
     "message": "Обавештење је послато на ваш уређај"
   },
   "notificationSentDevicePart1": {
-    "message": "Unlock Bitwarden on your device or on the "
+    "message": "Откључај Bitwarden на твом уређају или на "
   },
   "notificationSentDeviceAnchor": {
-    "message": "web app"
+    "message": "веб апликација"
   },
   "notificationSentDevicePart2": {
-    "message": "Make sure the Fingerprint phrase matches the one below before approving."
+    "message": "Потврдите да се фраза отиска поклапа са овом испод пре одобравања."
   },
   "needAnotherOptionV1": {
     "message": "Треба Вам друга опција?"
@@ -2819,10 +2859,10 @@
     "description": "'Character count' describes a feature that displays a number next to each character of the password."
   },
   "areYouTryingToAccessYourAccount": {
-    "message": "Are you trying to access your account?"
+    "message": "Да ли покушавате да приступите вашем налогу?"
   },
   "accessAttemptBy": {
-    "message": "Access attempt by $EMAIL$",
+    "message": "Покушај приступа са $EMAIL$",
     "placeholders": {
       "email": {
         "content": "$1",
@@ -2840,10 +2880,10 @@
     "message": "Време"
   },
   "confirmAccess": {
-    "message": "Confirm access"
+    "message": "Потврдите приступ"
   },
   "denyAccess": {
-    "message": "Deny access"
+    "message": "Одбити приступ"
   },
   "logInConfirmedForEmailOnDevice": {
     "message": "Пријава потврђена за $EMAIL$ на $DEVICE$",
@@ -2880,7 +2920,7 @@
     "message": "Овај захтев више не важи."
   },
   "confirmAccessAttempt": {
-    "message": "Confirm access attempt for $EMAIL$",
+    "message": "Потврдити приступ за $EMAIL$",
     "placeholders": {
       "email": {
         "content": "$1",
@@ -2892,7 +2932,7 @@
     "message": "Захтев пријаве"
   },
   "accountAccessRequested": {
-    "message": "Account access requested"
+    "message": "Приступ рачуна је затражен"
   },
   "creatingAccountOn": {
     "message": "Креирај налог на"
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo пријава у два корака је потребна за ваш налог."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "За ваш налог је потребан два корака. Следите наведене кораке да бисте завршили пријављивање."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Следите наведене кораке да бисте завршили пријављивање."
+  },
   "launchDuo": {
     "message": "Покренути Duo у претраживачу"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Потврдите употребу SSH кључа"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "тражи приступ"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Апликација"
   },
@@ -3524,16 +3588,16 @@
     "message": "Променити имејл налога"
   },
   "allowScreenshots": {
-    "message": "Allow screen capture"
+    "message": "Дозволи снимање екрана"
   },
   "allowScreenshotsDesc": {
-    "message": "Allow the Bitwarden desktop application to be captured in screenshots and viewed in remote desktop sessions. Disabling this will prevent access on some external displays."
+    "message": "Дозволите да Bitwarden апликација прихвата скриншот и преглед у удаљених радних површина. Онемогућавање то ће спречити приступ неким спољним дисплејима."
   },
   "confirmWindowStillVisibleTitle": {
-    "message": "Confirm window still visible"
+    "message": "Потврдите да је прозор и даље видљив"
   },
   "confirmWindowStillVisibleContent": {
-    "message": "Please confirm that the window is still visible."
+    "message": "Потврдите да је прозор и даље видљив."
   },
   "updateBrowserOrDisableFingerprintDialogTitle": {
     "message": "Неопходна надоградња додатка"
diff --git a/apps/desktop/src/locales/sv/messages.json b/apps/desktop/src/locales/sv/messages.json
index 0f7a9000481..69906b4b945 100644
--- a/apps/desktop/src/locales/sv/messages.json
+++ b/apps/desktop/src/locales/sv/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Logga in på Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Logga in med nyckel"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Huvudlösenordsledtråd"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Ogiltig verifieringskod"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Kom ihåg mig"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Skicka e-postmeddelandet med verifieringskoden igen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Använd en annan metod för tvåstegsverifiering"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Anslut din YubiKey till datorns USB-port och tryck sedan på dess knapp."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Alternativ för tvåstegsverifiering"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Egen-hostad miljö"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Autentisera WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Dölj min e-postadress för mottagare."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo tvåstegsverifiering krävs för ditt konto."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Starta Duo i webbläsaren"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "begär tillgång till"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "En applikation"
   },
diff --git a/apps/desktop/src/locales/te/messages.json b/apps/desktop/src/locales/te/messages.json
index 1aa61a9b381..b7693c0d0b5 100644
--- a/apps/desktop/src/locales/te/messages.json
+++ b/apps/desktop/src/locales/te/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Invalid verification code"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/th/messages.json b/apps/desktop/src/locales/th/messages.json
index ad1592f3247..a3d94412a04 100644
--- a/apps/desktop/src/locales/th/messages.json
+++ b/apps/desktop/src/locales/th/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Master password hint"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "The authentication was cancelled or took too long. Please try again."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "รหัสการตรวจสอบสิทธิ์ไม่ถูกต้อง"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "จดจำการเข้าระบบของฉัน"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "ส่งอีเมล์ยืนยันรหัสอีกครั้ง"
   },
   "useAnotherTwoStepMethod": {
     "message": "ใช้วิธีลงชื่อเข้าใช้แบบสองขั้นตอนวิธีอื่น"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "เสียบ YubiKey ของคุณเข้ากับพอร์ต USB ของคอมพิวเตอร์ จากนั้นแตะปุ่ม"
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "ตัวเลือกการเข้าสู่ระบบแบบสองขั้นตอน"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Self-hosted Environment"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Hide my email address from recipients."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo in Browser"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/tr/messages.json b/apps/desktop/src/locales/tr/messages.json
index 354bbfa823b..ec166bd1281 100644
--- a/apps/desktop/src/locales/tr/messages.json
+++ b/apps/desktop/src/locales/tr/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Bitwarden'a giriş yapın"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "E-posta adresinize gönderilen kodu girin"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Kimlik doğrulama uygulamanızdaki kodu girin"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Geçiş anahtarıyla giriş yap"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Ana parola ipucu"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Kuruluşa katıl"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Kimlik doğrulama iptal edildi ve çok uzun sürdü. Lütfen yeniden deneyin."
   },
+  "openInNewTab": {
+    "message": "Yeni sekmede aç"
+  },
   "invalidVerificationCode": {
     "message": "Geçersiz doğrulama kodu"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Beni hatırla"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Doğrulama kodunu yeniden e-postala"
   },
   "useAnotherTwoStepMethod": {
     "message": "Başka bir iki aşamalı giriş yöntemini kullan"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "YubiKey'i bilgisayarınızın USB portuna takın, ardından düğmesine dokunun."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "İki aşamalı giriş seçenekleri"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Şirket içinde barındırılan ortam"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn ile doğrula"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "E-posta adresimi alıcılardan gizle."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Hesabınız için Duo iki adımlı giriş gereklidir."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Duo'yu tarayıcıda aç"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/uk/messages.json b/apps/desktop/src/locales/uk/messages.json
index e07c875914d..f1872e4a8ee 100644
--- a/apps/desktop/src/locales/uk/messages.json
+++ b/apps/desktop/src/locales/uk/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Увійти в Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Увійти з ключем доступу"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Підказка для головного пароля"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Приєднатися до організації"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Автентифікацію було скасовано або вона тривала надто довго. Повторіть спробу."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Недійсний код підтвердження"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Запам'ятати мене"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Надіслати код підтвердження ще раз"
   },
   "useAnotherTwoStepMethod": {
     "message": "Інший спосіб двоетапної перевірки"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Вставте свій YubiKey в USB порт комп'ютера, потім торкніться цієї кнопки."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Налаштування двоетапної перевірки"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Середовище власного хостингу"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Автентифікація WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Приховувати мою адресу електронної пошти від отримувачів."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Для вашого облікового запису необхідна двоетапна перевірка з Duo."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Запустити Duo в браузері"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Підтвердження використання ключа SSH"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "запитує доступ до"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "Програма"
   },
diff --git a/apps/desktop/src/locales/vi/messages.json b/apps/desktop/src/locales/vi/messages.json
index 96e12ee40da..6d34d65726a 100644
--- a/apps/desktop/src/locales/vi/messages.json
+++ b/apps/desktop/src/locales/vi/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "Log in with passkey"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "Gợi ý mật khẩu chính"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Tham gia tổ chức"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "Quá trình xác thực đã bị hủy hoặc mất quá nhiều thời gian. Vui lòng thử lại."
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "Mã xác minh không đúng"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "Ghi nhớ đăng nhập"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Gửi lại email chứa mã xác minh"
   },
   "useAnotherTwoStepMethod": {
     "message": "Sử dụng phương pháp xác minh hai lớp khác"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Cắm YubiKey vào cổng USB trên máy tính bạn và bấm nút trên Yubikey."
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "Tùy chọn xác minh hai bước"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "Môi trường tự lưu trữ"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "Xác thực WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "Ẩn địa chỉ email của tôi khỏi người nhận."
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Tài khoản của bạn yêu cầu xác minh hai bước với Duo."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Khởi chạy Duo trong trình duyệt"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "Confirm SSH key usage"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "is requesting access to"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "An application"
   },
diff --git a/apps/desktop/src/locales/zh_CN/messages.json b/apps/desktop/src/locales/zh_CN/messages.json
index fd1697e06b4..76a7dae11d3 100644
--- a/apps/desktop/src/locales/zh_CN/messages.json
+++ b/apps/desktop/src/locales/zh_CN/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "登录到 Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "输入发送到您的电子邮箱的代码"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "输入来自您的验证器 App 的代码"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "按下 YubiKey 以验证身份"
+  },
   "logInWithPasskey": {
     "message": "使用通行密钥登录"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "主密码提示"
   },
+  "passwordStrengthScore": {
+    "message": "密码强度评分 $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "加入组织"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "身份验证被取消或耗时过长。请重试。"
   },
+  "openInNewTab": {
+    "message": "在新标签页中打开"
+  },
   "invalidVerificationCode": {
     "message": "无效的验证码"
   },
@@ -846,17 +867,27 @@
   "rememberMe": {
     "message": "记住我"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "30 天内在此设备上不再询问"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "再次发送验证码电子邮件"
   },
   "useAnotherTwoStepMethod": {
     "message": "使用其他两步登录方式"
   },
+  "selectAnotherMethod": {
+    "message": "选择其他方式",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "使用您的恢复代码"
+  },
   "insertYubiKey": {
     "message": "将您的 YubiKey 插入计算机的 USB 端口，然后触摸其按钮。"
   },
   "insertU2f": {
-    "message": "将您的安全钥匙插入计算机的 USB 端口。如果它有按钮，请触摸它。"
+    "message": "将您的安全密钥插入计算机的 USB 端口。如果它有按钮，请触摸它。"
   },
   "recoveryCodeDesc": {
     "message": "无法访问您所有的双重身份提供程序吗？请使用您的恢复代码来关闭您账户中所有的双重身份提供程序。"
@@ -872,7 +903,7 @@
     "description": "'Bitwarden Authenticator' is a product name and should not be translated."
   },
   "yubiKeyTitleV2": {
-    "message": "Yubico OTP 安全钥匙"
+    "message": "Yubico OTP 安全密钥"
   },
   "yubiKeyDesc": {
     "message": "使用 YubiKey 来访问您的账户。支持 YubiKey 4、4 Nano、4C 以及 NEO 设备。"
@@ -882,7 +913,7 @@
     "description": "'Duo Security' and 'Duo Mobile' are product names and should not be translated."
   },
   "duoOrganizationDesc": {
-    "message": "为您的组织使用 Duo Security 的 Duo 移动 App、短信、电话或 U2F 安全钥匙来进行验证。",
+    "message": "为您的组织使用 Duo Security 的 Duo 移动 App、短信、电话或 U2F 安全密钥来进行验证。",
     "description": "'Duo Security' and 'Duo Mobile' are product names and should not be translated."
   },
   "verifyIdentity": {
@@ -898,7 +929,7 @@
     "message": "FIDO2 WebAuthn"
   },
   "webAuthnDesc": {
-    "message": "使用任何 WebAuthn 兼容的安全钥匙访问您的帐户。"
+    "message": "使用任何 WebAuthn 兼容的安全密钥访问您的帐户。"
   },
   "emailTitle": {
     "message": "电子邮箱"
@@ -913,11 +944,14 @@
     "message": "此账户已设置两步登录，但此设备不支持任何已配置的两步登录提供程序。"
   },
   "noTwoStepProviders2": {
-    "message": "请添加能更好支持跨设备使用的其他提供程序（例如验证器 App）。"
+    "message": "请添加其他跨设备支持更好的提供程序（例如验证器 App）。"
   },
   "twoStepOptions": {
     "message": "两步登录选项"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "选择两步登录方式"
+  },
   "selfHostedEnvironment": {
     "message": "自托管环境"
   },
@@ -1127,7 +1161,7 @@
     "message": "无效的主密码"
   },
   "twoStepLoginConfirmation": {
-    "message": "两步登录要求您从其他设备（例如安全钥匙、验证器 App、短信、电话或者电子邮件）来验证您的登录，这能使您的账户更加安全。两步登录需要在 bitwarden.com 网页版密码库中设置。现在访问此网站吗？"
+    "message": "两步登录要求您从其他设备（例如安全密钥、验证器 App、短信、电话或者电子邮件）来验证您的登录，这能使您的账户更加安全。两步登录需要在 bitwarden.com 网页版密码库中设置。现在访问此网站吗？"
   },
   "twoStepLogin": {
     "message": "两步登录"
@@ -1542,7 +1576,7 @@
     "message": "没有在已知的数据泄露中发现此密码，它暂时比较安全。"
   },
   "baseDomain": {
-    "message": "基础域",
+    "message": "基础域名",
     "description": "Domain name. Ex. website.com"
   },
   "domainName": {
@@ -1721,7 +1755,7 @@
     "message": "脆弱的主密码"
   },
   "weakMasterPasswordDesc": {
-    "message": "您选择的主密码较弱。您应该使用强密码（或密码短语）来正确保护您的 Bitwarden 账户。仍要使用此主密码吗？"
+    "message": "您选择的主密码较弱。您应该使用强密码（或密码短语）来正确保护您的 Bitwarden 账户。确定要使用这个主密码吗？"
   },
   "pin": {
     "message": "PIN 码",
@@ -2158,7 +2192,7 @@
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "createdSend": {
-    "message": "Send 已创建",
+    "message": "Send 已添加",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "editedSend": {
@@ -2177,7 +2211,7 @@
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "createSend": {
-    "message": "创建 Send",
+    "message": "新增 Send",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendTextDesc": {
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "验证 WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "读取安全密钥"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "等待安全密钥交互……"
+  },
   "hideEmail": {
     "message": "对接收者隐藏我的电子邮箱地址。"
   },
@@ -2287,7 +2327,7 @@
     "message": "您的组织禁用了信任设备加密。要访问您的密码库，请设置一个主密码。"
   },
   "tryAgain": {
-    "message": "请重试"
+    "message": "重试"
   },
   "verificationRequiredForActionSetPinToContinue": {
     "message": "此操作需要验证。设置一个 PIN 码以继续。"
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "您的账户要求使用 Duo 两步登录。"
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "您的账户要求使用 Duo 两步登录。请按照以下步骤完成登录。"
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "按照以下步骤完成登录。"
+  },
   "launchDuo": {
     "message": "在浏览器中启动 Duo"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "确认 SSH 密钥的使用"
   },
+  "agentForwardingWarningTitle": {
+    "message": "警告：代理转发"
+  },
+  "agentForwardingWarningText": {
+    "message": "此请求来自您登录的某台远程设备"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "正在请求访问"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "为了"
+  },
+  "sshActionLogin": {
+    "message": "向服务器验证身份"
+  },
+  "sshActionSign": {
+    "message": "签署一条消息"
+  },
+  "sshActionGitSign": {
+    "message": "签名一个 Git 提交"
+  },
   "unknownApplication": {
     "message": "某个应用程序"
   },
diff --git a/apps/desktop/src/locales/zh_TW/messages.json b/apps/desktop/src/locales/zh_TW/messages.json
index 9f64b0fd8cf..9cf606563b8 100644
--- a/apps/desktop/src/locales/zh_TW/messages.json
+++ b/apps/desktop/src/locales/zh_TW/messages.json
@@ -652,6 +652,15 @@
   "logInToBitwarden": {
     "message": "登入 Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "logInWithPasskey": {
     "message": "以通行密鑰 (passkey) 登入"
   },
@@ -704,6 +713,15 @@
   "masterPassHintLabel": {
     "message": "主密碼提示"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "加入組織"
   },
@@ -816,6 +834,9 @@
   "webauthnCancelOrTimeout": {
     "message": "驗證已被取消或時間過長。請再試一次。"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "invalidVerificationCode": {
     "message": "無效的驗證碼"
   },
@@ -846,12 +867,22 @@
   "rememberMe": {
     "message": "記住我"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "再次傳送​​包含驗證碼的電子郵件"
   },
   "useAnotherTwoStepMethod": {
     "message": "使用另一種兩步驟登入方式"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "將您的 YubiKey 插入電腦的 USB 連接埠，然後按一下它的按鈕。"
   },
@@ -918,6 +949,9 @@
   "twoStepOptions": {
     "message": "兩步驟登入選項"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "selfHostedEnvironment": {
     "message": "自我裝載環境"
   },
@@ -2247,6 +2281,12 @@
   "webAuthnAuthenticate": {
     "message": "驗證 WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "hideEmail": {
     "message": "對收件人隱藏我的電子郵件位址。"
   },
@@ -3206,6 +3246,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "您的帳號要求使用 Duo 兩步驟驗證登入。"
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "使用瀏覽器啟動 Duo"
   },
@@ -3463,9 +3509,27 @@
   "sshkeyApprovalTitle": {
     "message": "確認 SSH 密鑰使用"
   },
+  "agentForwardingWarningTitle": {
+    "message": "Warning: Agent Forwarding"
+  },
+  "agentForwardingWarningText": {
+    "message": "This request comes from a remote device that you are logged into"
+  },
   "sshkeyApprovalMessageInfix": {
     "message": "正在請求存取權限到"
   },
+  "sshkeyApprovalMessageSuffix": {
+    "message": "in order to"
+  },
+  "sshActionLogin": {
+    "message": "authenticate to a server"
+  },
+  "sshActionSign": {
+    "message": "sign a message"
+  },
+  "sshActionGitSign": {
+    "message": "sign a git commit"
+  },
   "unknownApplication": {
     "message": "應用程式"
   },

From f3c0389d420c29b60fccad4665de1340d15b342a Mon Sep 17 00:00:00 2001
From: "bw-ghapp[bot]" <178206702+bw-ghapp[bot]@users.noreply.github.com>
Date: Fri, 28 Feb 2025 12:08:05 +0100
Subject: [PATCH 25/47] Autosync the updated translations (#13622)

Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>
---
 apps/browser/src/_locales/ar/messages.json    | 116 +++++++-
 apps/browser/src/_locales/az/messages.json    | 112 +++++++-
 apps/browser/src/_locales/be/messages.json    | 116 +++++++-
 apps/browser/src/_locales/bg/messages.json    | 114 +++++++-
 apps/browser/src/_locales/bn/messages.json    | 116 +++++++-
 apps/browser/src/_locales/bs/messages.json    | 116 +++++++-
 apps/browser/src/_locales/ca/messages.json    | 116 +++++++-
 apps/browser/src/_locales/cs/messages.json    | 112 +++++++-
 apps/browser/src/_locales/cy/messages.json    | 116 +++++++-
 apps/browser/src/_locales/da/messages.json    | 116 +++++++-
 apps/browser/src/_locales/de/messages.json    | 116 +++++++-
 apps/browser/src/_locales/el/messages.json    | 116 +++++++-
 apps/browser/src/_locales/en_GB/messages.json | 116 +++++++-
 apps/browser/src/_locales/en_IN/messages.json | 116 +++++++-
 apps/browser/src/_locales/es/messages.json    | 116 +++++++-
 apps/browser/src/_locales/et/messages.json    | 116 +++++++-
 apps/browser/src/_locales/eu/messages.json    | 116 +++++++-
 apps/browser/src/_locales/fa/messages.json    | 116 +++++++-
 apps/browser/src/_locales/fi/messages.json    | 156 +++++++++--
 apps/browser/src/_locales/fil/messages.json   | 116 +++++++-
 apps/browser/src/_locales/fr/messages.json    | 152 +++++++++--
 apps/browser/src/_locales/gl/messages.json    | 116 +++++++-
 apps/browser/src/_locales/he/messages.json    | 250 +++++++++++++-----
 apps/browser/src/_locales/hi/messages.json    | 116 +++++++-
 apps/browser/src/_locales/hr/messages.json    | 116 +++++++-
 apps/browser/src/_locales/hu/messages.json    | 116 +++++++-
 apps/browser/src/_locales/id/messages.json    | 116 +++++++-
 apps/browser/src/_locales/it/messages.json    | 112 +++++++-
 apps/browser/src/_locales/ja/messages.json    | 116 +++++++-
 apps/browser/src/_locales/ka/messages.json    | 116 +++++++-
 apps/browser/src/_locales/km/messages.json    | 116 +++++++-
 apps/browser/src/_locales/kn/messages.json    | 116 +++++++-
 apps/browser/src/_locales/ko/messages.json    | 116 +++++++-
 apps/browser/src/_locales/lt/messages.json    | 116 +++++++-
 apps/browser/src/_locales/lv/messages.json    | 112 +++++++-
 apps/browser/src/_locales/ml/messages.json    | 116 +++++++-
 apps/browser/src/_locales/mr/messages.json    | 116 +++++++-
 apps/browser/src/_locales/my/messages.json    | 116 +++++++-
 apps/browser/src/_locales/nb/messages.json    | 116 +++++++-
 apps/browser/src/_locales/ne/messages.json    | 116 +++++++-
 apps/browser/src/_locales/nl/messages.json    | 112 +++++++-
 apps/browser/src/_locales/nn/messages.json    | 116 +++++++-
 apps/browser/src/_locales/or/messages.json    | 116 +++++++-
 apps/browser/src/_locales/pl/messages.json    | 112 +++++++-
 apps/browser/src/_locales/pt_BR/messages.json | 116 +++++++-
 apps/browser/src/_locales/pt_PT/messages.json | 112 +++++++-
 apps/browser/src/_locales/ro/messages.json    | 116 +++++++-
 apps/browser/src/_locales/ru/messages.json    | 116 +++++++-
 apps/browser/src/_locales/si/messages.json    | 116 +++++++-
 apps/browser/src/_locales/sk/messages.json    | 116 +++++++-
 apps/browser/src/_locales/sl/messages.json    | 116 +++++++-
 apps/browser/src/_locales/sr/messages.json    | 148 +++++++++--
 apps/browser/src/_locales/sv/messages.json    | 118 ++++++++-
 apps/browser/src/_locales/te/messages.json    | 116 +++++++-
 apps/browser/src/_locales/th/messages.json    | 116 +++++++-
 apps/browser/src/_locales/tr/messages.json    | 116 +++++++-
 apps/browser/src/_locales/uk/messages.json    | 116 +++++++-
 apps/browser/src/_locales/vi/messages.json    | 116 +++++++-
 apps/browser/src/_locales/zh_CN/messages.json | 144 ++++++++--
 apps/browser/src/_locales/zh_TW/messages.json | 116 +++++++-
 apps/browser/store/locales/he/copy.resx       |   4 +-
 apps/browser/store/locales/pl/copy.resx       |   2 +-
 apps/browser/store/locales/zh_CN/copy.resx    |   2 +-
 63 files changed, 6845 insertions(+), 365 deletions(-)

diff --git a/apps/browser/src/_locales/ar/messages.json b/apps/browser/src/_locales/ar/messages.json
index c8197b36e73..36c0ef40579 100644
--- a/apps/browser/src/_locales/ar/messages.json
+++ b/apps/browser/src/_locales/ar/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "تلميح كلمة المرور الرئيسية (إختياري)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "انضم إلى المنظمة"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "تسجيل الدخول إلى Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "إعادة التسجيل"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "تذكرني"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "إرسال رمز التحقق إلى البريد الإلكتروني مرة أخرى"
   },
   "useAnotherTwoStepMethod": {
     "message": "استخدام طريقة أخرى لتسجيل الدخول بخطوتين"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "أدخل YubiKey الخاص بك في منفذ USB في كمبيوترك، ثم المس الزر."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "فتح علامة تبويب جديدة"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "مصادقة WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "تسجيل الدخول غير متاح"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "خيارات تسجيل الدخول بخطوتين"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "هل تفقد الوصول إلى جميع مزودي التحقق بعاملين؟ استخدم رمز الاسترداد الخاص بك لتعطيل جميع مزودي التحقق بعاملين من حسابك."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "قفل",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/az/messages.json b/apps/browser/src/_locales/az/messages.json
index 75946a57dc2..5b9975cb5b9 100644
--- a/apps/browser/src/_locales/az/messages.json
+++ b/apps/browser/src/_locales/az/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Ana parol ipucu (ixtiyari)"
   },
+  "passwordStrengthScore": {
+    "message": "Parolun güc xalı: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Təşkilata qoşul"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Bitwarden-ə giriş edin"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "E-poçtunuza göndərilən kodu daxil edin"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Kimlik doğrulayıcı tətbiqinizdəki kodu daxil edin"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Kimliyi doğrulamaq üçün YubiKey-inizə basın"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Hesabınız üçün Duo iki addımlı giriş tələb olunur. Giriş prosesini tamamlamaq üçün aşağıdakı addımları izləyin."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Giriş prosesini tamamlamaq üçün aşağıdakı addımları izləyin."
+  },
   "restartRegistration": {
     "message": "Qeydiyyatı yenidən başlat"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Məni xatırla"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Bu cihazda 30 gün ərzində soruşulmasın"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Doğrulama kodu olan e-poçtu yenidən göndər"
   },
   "useAnotherTwoStepMethod": {
     "message": "Başqa bir iki addımlı giriş üsulu istifadə edin"
   },
+  "selectAnotherMethod": {
+    "message": "Başqa üsul seçin",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Geri qaytarma kodunuzu istifadə edin"
+  },
   "insertYubiKey": {
     "message": "\"YubiKey\"i kompüterinizin USB portuna taxın, daha sonra düyməsinə toxunun."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Yeni vərəq aç"
   },
+  "openInNewTab": {
+    "message": "Yeni vərəqdə aç"
+  },
   "webAuthnAuthenticate": {
     "message": "WebAuthn kimlik doğrulama"
   },
+  "readSecurityKey": {
+    "message": "Güvənlik açarını oxu"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Güvənlik açarı ilə əlaqə gözlənilir..."
+  },
   "loginUnavailable": {
     "message": "Giriş edilə bilmir"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "İki addımlı giriş seçimləri"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "İki addımlı giriş üsulunu seçin"
+  },
   "recoveryCodeDesc": {
     "message": "İki faktorlu provayderlərinə müraciəti itirmisiniz? Geri qaytarma kodunuzu istifadə edərək hesabınızdakı bütün iki faktorlu provayderləri sıradan çıxarda bilərsiniz."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Vaxt bitmə əməliyyatı"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Yeni özəlləşdirmə seçimləri"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Cəld kopyalama fəaliyyəti, yığcam rejim və daha çoxu ilə seyf təcrübənizi özəlləşdirin!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Bütün Görünüş ayarlarına bax"
+  },
   "lock": {
     "message": "Kilidlə",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,7 +2446,16 @@
   "atRiskPasswords": {
     "message": "Riskli parollar"
   },
-  "atRiskPasswordsDescSingleOrg": {
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$, sizdən bir parolu dəyişdirməyinizi tələb edir, çünki risk altındadır.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
     "message": "$ORGANIZATION$, sizdən $COUNT$ parolu dəyişdirməyinizi tələb edir, çünki risk altındadır.",
     "placeholders": {
       "organization": {
@@ -2404,7 +2468,7 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
+  "atRiskPasswordsDescMultiOrgPlural": {
     "message": "Təşkilatlarınız, sizdən $COUNT$ parolu dəyişdirməyinizi tələb edir, çünki risk altındadır.",
     "placeholders": {
       "count": {
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Cəld şəkildə parollarınızı avto-doldura və yenilərini yarada bilməyiniz üçün ayarlarınızı güncəlləyin"
   },
+  "reviewAtRiskLogins": {
+    "message": "Risk altındakı giriş məlumatlarını incələ"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Risk altındakı parolları incələ"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Təşkilatınız parolları zəif, təkrar istifadə olunduğu və/və ya ifşa olunduğu üçün risk altındadır.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Risk altındakı girişlərin olduğu siyahının təsviri"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Risk altında olan saytda Bitwarden avto-doldurma menyusu ilə güclü, unikal parolları cəld yaradın.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Yaradılan parolları göstərən Bitwarden avto-doldurma menyusunun təsviri"
+  },
+  "updateInBitwarden": {
+    "message": "Bitwarden-də güncəllə"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden, daha sonra parol menecerində parolu güncəlləməyinizi istəyəcək.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "İstifadəçidən giriş məlumatlarını güncəlləməsini istəyən Bitwarden bildirişinin təsviri"
+  },
   "turnOnAutofill": {
     "message": "Avto-doldurmanı işə sal"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Kopyala: $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Kopyalanacaq dəyər yoxdur"
   },
diff --git a/apps/browser/src/_locales/be/messages.json b/apps/browser/src/_locales/be/messages.json
index dad2b89d25f..e5885c34ccc 100644
--- a/apps/browser/src/_locales/be/messages.json
+++ b/apps/browser/src/_locales/be/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Падказка да асноўнага пароля (неабавязкова)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Далучыцца да арганізацыі"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Увайсці ў Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Запомніць мяне"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Адправіць праверачны код яшчэ раз"
   },
   "useAnotherTwoStepMethod": {
     "message": "Выкарыстоўваць іншы метад двухэтапнага ўваходу"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Устаўце свой YubiKey у порт USB камп'ютара, а потым націсніце на кнопку."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Адкрыць новую ўкладку"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Аўтэнтыфікацыя WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Уваход недаступны"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Параметры двухэтапнага ўваходу"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Згубілі доступ да ўсіх варыянтаў доступу пастаўшчыкоў двухэтапнай аўтэнтыфікацыі? Скарыстайцеся кодам аднаўлення, каб адключыць праверку пастаўшчыкоў двухэтапнай аўтэнтыфікацыі для вашага ўліковага запісу."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Заблакіраваць",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/bg/messages.json b/apps/browser/src/_locales/bg/messages.json
index a60f68b9f7b..8238a03d69a 100644
--- a/apps/browser/src/_locales/bg/messages.json
+++ b/apps/browser/src/_locales/bg/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Подсказване за главната парола (по избор)"
   },
+  "passwordStrengthScore": {
+    "message": "Оценка на сложността на паролата: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Присъединяване към организацията"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Впишете се в Битуорден"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Въведете кода изпратен на е-пощата Ви"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Въведете кода от Вашето приложение за удостоверяване"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Натиснете бутона на своя YubiKey за удостоверяване"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Вашият акаунт изисква вписване чрез двустепенно удостоверяване с Duo. Следвайте стъпките по-долу, за да завършите вписването."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Следвайте стъпките по-долу, за да завършите вписването."
+  },
   "restartRegistration": {
     "message": "Рестартиране на регистрацията"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Запомняне"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Не ме питайте отново на това устройство за 30 дни"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Повторно изпращане на писмото за потвърждение"
   },
   "useAnotherTwoStepMethod": {
     "message": "Използвайте друг начин на двустепенно удостоверяване"
   },
+  "selectAnotherMethod": {
+    "message": "Изберете друг метод",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Използване на код за възстановяване"
+  },
   "insertYubiKey": {
     "message": "Поставете устройството на YubiKey в USB порт на компютъра и натиснете бутона на устройството."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Отваряне на нов раздел"
   },
+  "openInNewTab": {
+    "message": "Отваряне в нов раздел"
+  },
   "webAuthnAuthenticate": {
     "message": "Идентификация WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Прочитане на ключа за сигурност"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Изчакване на действие с ключ за сигурност…"
+  },
   "loginUnavailable": {
     "message": "Записът липсва"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Настройки на двустепенното удостоверяване"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Изберете начин за двустепенно удостоверяване"
+  },
   "recoveryCodeDesc": {
     "message": "Ако сте загубили достъп до двустепенното удостоверяване, може да използвате код за възстановяване, за да изключите двустепенното удостоверяване в абонамента си."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Действие при изтичането на времето за достъп"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Нови възможности за персонализиране"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Персонализирайте трезора си с бързи действия за копиране, компактен режим и още!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Преглед на всички настройки за външния вид"
+  },
   "lock": {
     "message": "Заключване",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,7 +2446,16 @@
   "atRiskPasswords": {
     "message": "Пароли в риск"
   },
-  "atRiskPasswordsDescSingleOrg": {
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ изисква да промените една парола, тъй като е в риск.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
     "message": "$ORGANIZATION$ изисква да промените $COUNT$ пароли, тъй като са в риск.",
     "placeholders": {
       "organization": {
@@ -2404,7 +2468,7 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
+  "atRiskPasswordsDescMultiOrgPlural": {
     "message": "Вашата организация изисква да промените $COUNT$ пароли, тъй като са в риск.",
     "placeholders": {
       "count": {
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Променете настройките си, така че да можете бързо да попълвате автоматично паролите си, както и да генерирате нови"
   },
+  "reviewAtRiskLogins": {
+    "message": "Преглед на елементите за вписване в риск"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Преглед на паролите в риск"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Паролите в организацията Ви са в риск, защото са слаби, преизползвани и/или разкрити.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Илюстрация на списък с елементи за вписване, които са в риск"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Генерирайте бързо сложна и уникална парола от менюто за автоматично попълване на Битуорден, на уеб сайта, който е в риск.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Илюстрация на автоматичното попълване на Битуорден, показващо генерирана парола"
+  },
+  "updateInBitwarden": {
+    "message": "Обновяване в Битуорден"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "След това Битуорден ще попита дали искате да обновите паролата в управителя на пароли.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Илюстрация на известието на Битуорден, чрез което пита потребителя дали да се обновят данните за вписване"
+  },
   "turnOnAutofill": {
     "message": "Включване на автоматичното попълване"
   },
@@ -3249,7 +3343,7 @@
     "message": "Заявката е изпратена"
   },
   "exposedMasterPassword": {
-    "message": "Разобличена главна парола"
+    "message": "Разкрита главна парола"
   },
   "exposedMasterPasswordDesc": {
     "message": "Паролата е намерена в пробив на данни. Използвайте уникална парола, за да защитите вашия акаунт. Наистина ли искате да използвате слаба парола?"
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Копиране на $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Няма стойности за копиране"
   },
diff --git a/apps/browser/src/_locales/bn/messages.json b/apps/browser/src/_locales/bn/messages.json
index 27a5b3b5682..eaa80a68b0a 100644
--- a/apps/browser/src/_locales/bn/messages.json
+++ b/apps/browser/src/_locales/bn/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "মূল পাসওয়ার্ড ইঙ্গিত (ঐচ্ছিক)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "আমাকে মনে রাখবেন"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "আবার যাচাইকরণ কোড ইমেইলে প্রেরণ করুন"
   },
   "useAnotherTwoStepMethod": {
     "message": "অন্য দ্বি-পদক্ষেপ প্রবেশ পদ্ধতি ব্যবহার করুন"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "আপনার কম্পিউটারের ইউএসবি পোর্টে আপনার YubiKey ঢোকান, তারপরে তার বোতামটি স্পর্শ করুন।"
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "লগইন অনুপলব্ধ"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "দ্বি-পদক্ষেপ লগইন বিকল্প"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "আপনার সমস্ত দ্বি-গুণক সরবরাহকারীদের অ্যাক্সেস হারিয়েছেন? আপনার অ্যাকাউন্ট থেকে সমস্ত দ্বি-গুণক সরবরাহকারীদের অক্ষম করতে আপনার পুনরুদ্ধার কোডটি ব্যবহার করুন।"
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "লক",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/bs/messages.json b/apps/browser/src/_locales/bs/messages.json
index c8031f0a0e5..e2a4c09ce3d 100644
--- a/apps/browser/src/_locales/bs/messages.json
+++ b/apps/browser/src/_locales/bs/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master password hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Zaključaj",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/ca/messages.json b/apps/browser/src/_locales/ca/messages.json
index 11ffc21f3e4..9c5874ee522 100644
--- a/apps/browser/src/_locales/ca/messages.json
+++ b/apps/browser/src/_locales/ca/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Pista de la contrasenya mestra (opcional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Uneix-te a l'organització"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Inicia sessió a Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Reinicia el registre"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Recorda'm"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Envia el codi de verificació altra vegada"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilitzeu un altre mètode d'inici de sessió en dues passes"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Introduïu la vostra YubiKey al port USB de l'ordinador i, a continuació, premeu el seu botó."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Obri una pestanya nova"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Autenticar WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Inici de sessió no disponible"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Opcions d'inici de sessió en dues passes"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Heu perdut l'accés a tots els vostres proveïdors de dos factors? Utilitzeu el vostre codi de recuperació per desactivar tots els proveïdors de dos factors del vostre compte."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Acció després del temps d'espera"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Bloqueja",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/cs/messages.json b/apps/browser/src/_locales/cs/messages.json
index 8dc3f40f44a..8b91245b8f0 100644
--- a/apps/browser/src/_locales/cs/messages.json
+++ b/apps/browser/src/_locales/cs/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Nápověda k hlavnímu heslu (volitelné)"
   },
+  "passwordStrengthScore": {
+    "message": "Skóre síly hesla: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Přidat se k organizaci"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Přihlásit se do Bitwardenu"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Zadejte kód odeslaný na Váš e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Zadejte kód z Vaší ověřovací aplikace"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Stiskněte svůj YubiKey pro ověření"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Pro Váš účet je nutné dvoufázové přihlášení. Pro dokončení přihlášení postupujte podle následujících kroků."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Postupujte podle kroků níže pro dokončení přihlášení."
+  },
   "restartRegistration": {
     "message": "Restartovat registraci"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Zapamatovat mě"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Neptat se na tomto zařízení 30 dnů"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Znovu zaslat ověřovací kód na e-mail"
   },
   "useAnotherTwoStepMethod": {
     "message": "Použít jinou metodu dvoufázového přihlášení"
   },
+  "selectAnotherMethod": {
+    "message": "Vybrat jinou metodu",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Použít obnovovací kód"
+  },
   "insertYubiKey": {
     "message": "Vložte YubiKey do USB portu Vašeho počítače a stiskněte jeho tlačítko."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Otevřít novou kartu"
   },
+  "openInNewTab": {
+    "message": "Otevřít v nové kartě"
+  },
   "webAuthnAuthenticate": {
     "message": "Ověřit WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Přečíst bezpečnostní klíč"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Čeká se na interakci s bezpečnostním klíčem..."
+  },
   "loginUnavailable": {
     "message": "Přihlášení není dostupné"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Volby dvoufázového přihlášení"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Vyberte metodu dvoufázového přihlášení"
+  },
   "recoveryCodeDesc": {
     "message": "Ztratili jste přístup ke všem nastaveným poskytovatelům dvoufázového přihlášení? Použijte obnovovací kód pro vypnutí dvoufázového přihlášení."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Akce vypršení časového limitu"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Nové volby přizpůsobení"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Přizpůsobte si svůj trezor s rychlými kopírovacími akcemi, kompaktním režimem a dalším!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Zobrazit všechna nastavení vzhledu"
+  },
   "lock": {
     "message": "Zamknout",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,7 +2446,16 @@
   "atRiskPasswords": {
     "message": "Ohrožená hesla"
   },
-  "atRiskPasswordsDescSingleOrg": {
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ Vás žádá o změnu 1 hesla, protože je v ohrožení.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
     "message": "$ORGANIZATION$ Vás žádá o změnu $COUNT$ hesel, protože jsou v ohrožení.",
     "placeholders": {
       "organization": {
@@ -2404,7 +2468,7 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
+  "atRiskPasswordsDescMultiOrgPlural": {
     "message": "Vaše organizace Vás žádají o změnu $COUNT$ hesel, protože jsou v ohrožení.",
     "placeholders": {
       "count": {
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Aktualizujte svá nastavení, abyste mohli rychle automaticky vyplňovat hesla a generovat nová hesla."
   },
+  "reviewAtRiskLogins": {
+    "message": "Kontrola rizikových přihlášení"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Kontrola rizikových hesel"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Hesla Vaší organizace jsou ohrožena, protože jsou slabá, opakovaně používaná nebo odhalená.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Ilustrace seznamu přihlášení, která jsou riziková"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Rychle vygeneruje silné, unikátní heslo s nabídkou automatického vyplňování Bitwarden na rizikových stránkách.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Ilustrace nabídky automatického vyplňování Bitwarden zobrazující vygenerované heslo"
+  },
+  "updateInBitwarden": {
+    "message": "Aktualizovat v Bitwardenu"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden Vás poté požádá o aktualizaci hesla ve správci hesel.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Ilustrace oznámení v Bitwardenu, která uživatele vyzývá k aktualizaci přihlášení"
+  },
   "turnOnAutofill": {
     "message": "Zapnout automatické vyplňování"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Kopírovat $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Žádné hodnoty ke zkopírování"
   },
diff --git a/apps/browser/src/_locales/cy/messages.json b/apps/browser/src/_locales/cy/messages.json
index f07d598d6f6..17a8dead9ed 100644
--- a/apps/browser/src/_locales/cy/messages.json
+++ b/apps/browser/src/_locales/cy/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master password hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Fy nghofio i"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Anfon ebost â chod dilysu eto"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Rhowch eich YubiKey i mewn i borth USB eich cyfrifiadur, yna gwasgwch y botwm."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Agor tab newydd"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Dewisiadau mewngofnodi dau gam"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Cloi",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/da/messages.json b/apps/browser/src/_locales/da/messages.json
index 796a5ce4ab2..b33960470cf 100644
--- a/apps/browser/src/_locales/da/messages.json
+++ b/apps/browser/src/_locales/da/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Hovedadgangskodetip (valgfrit)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Bliv medlem af organisation"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log ind på Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Genstart registrering"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Husk mig"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verifikationskode-email igen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Brug en anden to-trins login metode"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Indsæt din YubiKey i din computers USB-port, og tryk derefter på dens knap."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Åbn ny fane"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Godkend WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login ikke tilgængelig"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "To-trins-login indstillinger"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Mistet adgang til alle dine to-faktor-udbydere? Brug din genoprettelseskode til at deaktivere alle to-faktor udbydere på din konto."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeouthandling"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lås",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Ingen værdier at kopiere"
   },
diff --git a/apps/browser/src/_locales/de/messages.json b/apps/browser/src/_locales/de/messages.json
index 75fc90150b9..7a81a501c04 100644
--- a/apps/browser/src/_locales/de/messages.json
+++ b/apps/browser/src/_locales/de/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master-Passwort-Hinweis (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Bewertung der Passwortstärke $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Organisation beitreten"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Bei Bitwarden anmelden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Gib den an deine E-Mail-Adresse gesendeten Code ein"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Gib den Code aus deiner Authenticator-App ein"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Drücke zum Authentifizieren auf deinen YubiKey"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Die Duo-Zwei-Faktor-Authentifizierung ist für dein Konto erforderlich. Folge den Schritten unten, um die Anmeldung abzuschließen."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Folge den Schritten unten, um die Anmeldung abzuschließen."
+  },
   "restartRegistration": {
     "message": "Registrierung neu starten"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Angemeldet bleiben"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Für 30 Tage auf diesem Gerät nicht mehr fragen"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "E-Mail mit Bestätigungscode erneut versenden"
   },
   "useAnotherTwoStepMethod": {
     "message": "Verwende eine andere zweistufige Login-Methode"
   },
+  "selectAnotherMethod": {
+    "message": "Wähle eine andere Methode",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Verwende deinen Wiederherstellungscode"
+  },
   "insertYubiKey": {
     "message": "Stecke deinen YubiKey in den USB-Port Ihres Computers, dann berühre den Button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Neuen Tab öffnen"
   },
+  "openInNewTab": {
+    "message": "In neuem Tab öffnen"
+  },
   "webAuthnAuthenticate": {
     "message": "Authentifiziere WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Sicherheitsschlüssel auslesen"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Warte auf Sicherheitsschlüssel-Interaktion..."
+  },
   "loginUnavailable": {
     "message": "Anmeldung nicht verfügbar"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Optionen für Zwei-Faktor-Authentifizierung"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Zwei-Faktor-Authentifizierungsmethode auswählen"
+  },
   "recoveryCodeDesc": {
     "message": "Zugang zu allen Zwei-Faktor Anbietern verloren? Benutze deinen Wiederherstellungscode, um alle Zwei-Faktor Anbieter in deinem Konto zu deaktivieren."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout-Aktion"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Neue Personalisierungs-Optionen"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Personalisiere deinen Tresor mit Schnellkopier-Aktionen, Kompaktmodus und mehr!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Alle Aussehen-Einstellungen anzeigen"
+  },
   "lock": {
     "message": "Sperren",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "Gefährdete Passwörter"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ fordert dich auf, diese $COUNT$ Passwörter zu ändern, da diese gefährdet sind.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Deine Organisationen fordern dich auf, diese $COUNT$ Passwörter zu ändern, da diese gefährdet sind.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Aktualisiere deine Einstellungen, damit du deine Passwörter schnell automatisch ausfüllen kannst und neue generieren kannst"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Auto-Ausfüllen aktivieren"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "$FIELD$, $VALUE$ kopieren",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Keine Werte zum Kopieren"
   },
diff --git a/apps/browser/src/_locales/el/messages.json b/apps/browser/src/_locales/el/messages.json
index 8095cc41476..dd4be61b1d2 100644
--- a/apps/browser/src/_locales/el/messages.json
+++ b/apps/browser/src/_locales/el/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Υπόδειξη κύριου κωδικού πρόσβασης (προαιρετικό)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Συμμετοχή στον οργανισμό"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Σύνδεση στο Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Επανεκκίνηση εγγραφής"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Να με θυμάσαι"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Αποστολή email κωδικού επαλήθευσης ξανά"
   },
   "useAnotherTwoStepMethod": {
     "message": "Χρήση άλλης μεθόδου σύνδεσης δύο παραγόντων"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Τοποθετήστε το YubiKey στη θύρα USB του υπολογιστή σας και έπειτα κάντε κλικ στο κουμπί του."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Άνοιγμα νέας καρτέλας"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Ταυτοποίηση WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Μη διαθέσιμη σύνδεση"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Επιλογές σύνδεσης δύο βημάτων"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Έχετε χάσει την πρόσβαση σε όλους τους παρόχους δύο παραγόντων; Χρησιμοποιήστε τον κωδικό ανάκτησης για να απενεργοποιήσετε όλους τους παρόχους δύο παραγόντων από το λογαριασμό σας."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Ενέργεια κατά τη λήξη χρονικού ορίου"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Κλείδωμα",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "Κωδικοί πρόσβασης σε κίνδυνο"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Ενεργοποίηση αυτόματης συμπλήρωσης"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Δεν υπάρχουν τιμές για αντιγραφή"
   },
diff --git a/apps/browser/src/_locales/en_GB/messages.json b/apps/browser/src/_locales/en_GB/messages.json
index 291c9614de4..e06dd05575d 100644
--- a/apps/browser/src/_locales/en_GB/messages.json
+++ b/apps/browser/src/_locales/en_GB/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master password hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organisation"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customisation options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customise your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lock",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organisations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organisations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organisation passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/en_IN/messages.json b/apps/browser/src/_locales/en_IN/messages.json
index 11beca8f909..23fe1e28140 100644
--- a/apps/browser/src/_locales/en_IN/messages.json
+++ b/apps/browser/src/_locales/en_IN/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master password hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organisation"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to disable all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customisation options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customise your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lock",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organisations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organisations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organisation passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/es/messages.json b/apps/browser/src/_locales/es/messages.json
index 6cd70552b19..9b6d1a48936 100644
--- a/apps/browser/src/_locales/es/messages.json
+++ b/apps/browser/src/_locales/es/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Pista de contraseña maestra (opcional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Incorporarse a la organización"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Iniciar sesión en Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Reiniciar registro"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Recordarme"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Reenviar código de verificación por correo electrónico"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizar otro método de autenticación en dos pasos"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Inserta tu YubiKey en el puerto USB de tu equipo y posteriormente pulsa su botón."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Abrir nueva pestaña"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Autenticar WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Entrada no disponible"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Opciones de la autenticación en dos pasos"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "¿Has perdido el acceso a todos tus métodos de autenticación en dos pasos? Utiliza tu código de recuperación para deshabilitar todos los métodos de autenticación en dos pasos de tu cuenta."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Acción de tiempo agotado"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Bloquear",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "Contraseñas de riesgo"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Activar autorrelleno"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No hay valores para copiar"
   },
diff --git a/apps/browser/src/_locales/et/messages.json b/apps/browser/src/_locales/et/messages.json
index e4b02553b85..81dd447ea9f 100644
--- a/apps/browser/src/_locales/et/messages.json
+++ b/apps/browser/src/_locales/et/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Ülemparooli vihje (ei ole kohustuslik)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Liitu organisatsiooniga"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Alusta registreerimist uuesti"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Jäta mind meelde"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Saada kinnituskood uuesti e-postile"
   },
   "useAnotherTwoStepMethod": {
     "message": "Kasuta teist kaheastmelist sisselogimise meetodit"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Sisesta oma YubiKey arvuti USB porti ja kliki sellele nupule."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Ava uus vahekaart"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "WebAuthn kinnitamine"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Sisselogimine ei ole saadaval"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Kaheastmelise sisselogimise valikud"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Puudub ligipääs kaheastmelise kinnitamise teenusele? Kasuta Taastamise koodi, et kaheastmeline kinnitamine oma kontol välja lülitada."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lukusta",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/eu/messages.json b/apps/browser/src/_locales/eu/messages.json
index 36a2cb365ab..106a4405aa1 100644
--- a/apps/browser/src/_locales/eu/messages.json
+++ b/apps/browser/src/_locales/eu/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Pasahitz nagusirako pista (aukerakoa)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Gogora nazazu"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Berbidali email bidezko egiaztatze-kodea."
   },
   "useAnotherTwoStepMethod": {
     "message": "Erabili bi urratseko saio hasierarako beste modu bat"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Sartu zure YubiKey-a ordenagailuko USB atakan, ondoren, sakatu bere botoia."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Ireki fitxa berria"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "WebAuthn autentifikatu"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Ez dago eskuragarri saio-hasierarik"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Bi urratseko saio hasieraren aukerak"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Bi urratseko egiaztatzeko modu guztietarako sarbidea galdu duzu? Erabili zure berreskuratze-kodea zure kontuko bi urratseko egiaztatze hornitzaile guztiak desaktibatzeko."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Blokeatu",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/fa/messages.json b/apps/browser/src/_locales/fa/messages.json
index 07cb47c8919..cbd12fd6869 100644
--- a/apps/browser/src/_locales/fa/messages.json
+++ b/apps/browser/src/_locales/fa/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "یادآور کلمه عبور اصلی (اختیاری)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "مرا به خاطر بسپار"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "ارسال دوباره ایمیل کد تأیید"
   },
   "useAnotherTwoStepMethod": {
     "message": "استفاده از روش ورود دو مرحله‌ای دیگر"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "YubiKey خود را وارد پورت USB رایانه کنید، بعد دکمه آن را بفشارید."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "باز کردن زبانه جدید"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "تأیید اعتبار در WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "ورود به سیستم در دسترس نیست"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "گزینه‌های ورود دو مرحله‌ای"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "دسترسی به تمامی ارائه‌دهندگان دو مرحله‌ای را از دست داده‌اید؟ از کد بازیابی خود برای غیرفعال‌سازی ارائه‌دهندگان دو مرحله‌ای از حسابتان استفاده کنید."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "قفل",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/fi/messages.json b/apps/browser/src/_locales/fi/messages.json
index e917a43c29e..a19302bba13 100644
--- a/apps/browser/src/_locales/fi/messages.json
+++ b/apps/browser/src/_locales/fi/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Pääsalasanan vihje (valinnainen)"
   },
+  "passwordStrengthScore": {
+    "message": "Salasanan vahvuusarvio $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Liity organisaatioon"
   },
@@ -177,7 +186,7 @@
     "message": "Kopioi merkinnät"
   },
   "copy": {
-    "message": "Copy",
+    "message": "Kopioi",
     "description": "Copy to clipboard"
   },
   "fill": {
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Kirjaudu Bitwardeniin"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Syötä sähköpostitse vastaanottamasi koodi"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Syötä todennussovelluksesi näyttämä koodi"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Tunnistaudu painalla YubiKeytäsi"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duon edellyttää tililtäsi kaksivaiheista tunnistautumista. Viimeistele kirjautuminen seuraamalla seuraavia vaiheita."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Viimeistele kirjautuminen seuraamalla seuraavia vaiheita."
+  },
   "restartRegistration": {
     "message": "Aloita rekisteröityminen alusta"
   },
@@ -1030,7 +1054,7 @@
     "message": "Valitse kohteita täyttääksesi tiedot automaattisesti Holvi-näkymässä"
   },
   "clickToAutofill": {
-    "message": "Click items in autofill suggestion to fill"
+    "message": "Täytä automaattitäytön ehdotus napsauttamalla sitä"
   },
   "clearClipboard": {
     "message": "Tyhjennä leikepöytä",
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Muista minut"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Älä kysy uudelleen tällä laitteella 30 päivään"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Lähetä todennuskoodi sähköpostitse uudelleen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Käytä vaihtoehtoista todennustapaa"
   },
+  "selectAnotherMethod": {
+    "message": "Valitse vaihtoehtoinen tapa",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Käytä palautuskoodiasi"
+  },
   "insertYubiKey": {
     "message": "Kytke YubiKey-todennuslaitteesi tietokoneen USB-porttiin ja paina sen painiketta."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Avaa uusi välilehti"
   },
+  "openInNewTab": {
+    "message": "Avaa uudessa välilehdessä"
+  },
   "webAuthnAuthenticate": {
     "message": "WebAuthn-todennus"
   },
+  "readSecurityKey": {
+    "message": "Lue todennuslaite"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Odotetaan suojausavaimen aktivointia..."
+  },
   "loginUnavailable": {
     "message": "Kirjautuminen ei ole käytettävissä"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Kaksivaiheisen kirjautumisen asetukset"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Käytä vaihtoehtoista tunnistautumistapaa"
+  },
   "recoveryCodeDesc": {
     "message": "Etkö pysty käyttämään kaksivaiheisen kirjautumisen todentajiasi? Poista kaikki tilillesi määritetyt todentajat käytöstä palautuskoodillasi."
   },
@@ -2089,7 +2135,7 @@
     "description": "This will be used as part of a larger sentence, broken up to include the generator icon. The full sentence will read 'Use the generator [GENERATOR_ICON] to create a strong unique password'"
   },
   "vaultCustomization": {
-    "message": "Vault customization"
+    "message": "Holvin mukautus"
   },
   "vaultTimeoutAction": {
     "message": "Holvin aikakatkaisutoiminto"
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Aikakatkaisutoiminto"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lukitse",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2356,7 +2411,7 @@
     "message": "Estetyt verkkotunnukset"
   },
   "learnMoreAboutBlockedDomains": {
-    "message": "Learn more about blocked domains"
+    "message": "Lisätietoja estetyistä verkkotunnuksista"
   },
   "excludedDomains": {
     "message": "Ohitettavat verkkotunnukset"
@@ -2377,10 +2432,10 @@
     "message": "Muuta tätä asetuksissa"
   },
   "change": {
-    "message": "Change"
+    "message": "Vaihda"
   },
   "changeButtonTitle": {
-    "message": "Change password - $ITEMNAME$",
+    "message": "Vaihda salasana - $ITEMNAME$",
     "placeholders": {
       "itemname": {
         "content": "$1",
@@ -2389,10 +2444,19 @@
     }
   },
   "atRiskPasswords": {
-    "message": "At-risk passwords"
+    "message": "Vaarantuneet salasanat"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2414,10 +2478,10 @@
     }
   },
   "reviewAndChangeAtRiskPassword": {
-    "message": "Review and change one at-risk password"
+    "message": "Tarkasta ja vaihda yksi vaarantunut salasana"
   },
   "reviewAndChangeAtRiskPasswordsPlural": {
-    "message": "Review and change $COUNT$ at-risk passwords",
+    "message": "Tarkasta ja vaihda $COUNT$ vaarantunutta salasanaa",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2426,19 +2490,49 @@
     }
   },
   "changeAtRiskPasswordsFaster": {
-    "message": "Change at-risk passwords faster"
+    "message": "Vaihda vaarantuneet salasanat nopeammin"
   },
   "changeAtRiskPasswordsFasterDesc": {
-    "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
+    "message": "Päivitä asetuksesi, jotta voit täyttää salasanasi ja luoda uusia nopeasti."
+  },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
   },
   "turnOnAutofill": {
-    "message": "Turn on autofill"
+    "message": "Ota automaattitäyttö käyttöön"
   },
   "turnedOnAutofill": {
-    "message": "Turned on autofill"
+    "message": "Automaattitäyttö otettiin käyttöön"
   },
   "dismiss": {
-    "message": "Dismiss"
+    "message": "Sulje"
   },
   "websiteItemLabel": {
     "message": "Verkkotunnus $number$ (URI)",
@@ -3045,7 +3139,7 @@
     }
   },
   "forwaderInvalidOperation": {
-    "message": "$SERVICENAME$ refused your request. Please contact your service provider for assistance.",
+    "message": "$SERVICENAME$ hylkäsi pyyntösi. Ole yhteydessä palveluntarjoajaasi saadaksesi apua.",
     "description": "Displayed when the user is forbidden from using the API by the forwarding service.",
     "placeholders": {
       "servicename": {
@@ -3055,7 +3149,7 @@
     }
   },
   "forwaderInvalidOperationWithMessage": {
-    "message": "$SERVICENAME$ refused your request: $ERRORMESSAGE$",
+    "message": "$SERVICENAME$ hylkäsi pyyntösi: $ERRORMESSAGE$",
     "description": "Displayed when the user is forbidden from using the API by the forwarding service with an error message.",
     "placeholders": {
       "servicename": {
@@ -3225,13 +3319,13 @@
     "message": "Laitteellesi on lähetetty ilmoitus."
   },
   "notificationSentDevicePart1": {
-    "message": "Unlock Bitwarden on your device or on the"
+    "message": "Avaa Bitwarden laitteellasi tai"
   },
   "notificationSentDeviceAnchor": {
-    "message": "web app"
+    "message": "verkkosovelluksena"
   },
   "notificationSentDevicePart2": {
-    "message": "Make sure the Fingerprint phrase matches the one below before approving."
+    "message": "Ennen hyväksyntää varmista, että tunnistelause vastaa alla olevaa lausetta."
   },
   "aNotificationWasSentToYourDevice": {
     "message": "Laitteeseesi lähetettiin ilmoitus"
@@ -3246,7 +3340,7 @@
     "message": "Kirjautuminen aloitettu"
   },
   "logInRequestSent": {
-    "message": "Request sent"
+    "message": "Pyyntö lähetetty"
   },
   "exposedMasterPassword": {
     "message": "Paljastunut pääsalasana"
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Ei kopioitavia arvoja"
   },
diff --git a/apps/browser/src/_locales/fil/messages.json b/apps/browser/src/_locales/fil/messages.json
index e9d918dc58f..5dc6e6a59b7 100644
--- a/apps/browser/src/_locales/fil/messages.json
+++ b/apps/browser/src/_locales/fil/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Mungkahi sa Master Password (opsyonal)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Tandaan mo ako"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Ipadala muli ang email ng verification code"
   },
   "useAnotherTwoStepMethod": {
     "message": "Gamitin ang isa pang two-step na paraan ng pag-login"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "I-insert ang iyong YubiKey sa USB port ng iyong computer, pagkatapos ay tindigin ang buton nito."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Buksan ang bagong tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "I-authenticate ang WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Hindi magagamit ang pag-login"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Mga pagpipilian para sa two-step login"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Nawalan ka ng access sa lahat ng iyong mga two-factor provider? Gamitin ang iyong recovery code para i-off ang lahat ng two-factor providers mula sa iyong account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "I-lock",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/fr/messages.json b/apps/browser/src/_locales/fr/messages.json
index 960de5ff252..c37c772acf9 100644
--- a/apps/browser/src/_locales/fr/messages.json
+++ b/apps/browser/src/_locales/fr/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Indice du mot de passe principal (facultatif)"
   },
+  "passwordStrengthScore": {
+    "message": "Score de force du mot de passe $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Rejoindre l'organisation"
   },
@@ -177,7 +186,7 @@
     "message": "Copier les notes"
   },
   "copy": {
-    "message": "Copy",
+    "message": "Copier",
     "description": "Copy to clipboard"
   },
   "fill": {
@@ -664,7 +673,7 @@
     "message": "Vérifier l'identité"
   },
   "weDontRecognizeThisDevice": {
-    "message": "We don't recognize this device. Enter the code sent to your email to verify your identity."
+    "message": "Nous ne reconnaissons pas cet appareil. Saisissez le code envoyé à votre courriel pour vérifier votre identité."
   },
   "continueLoggingIn": {
     "message": "Continuer à se connecter"
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Se connecter à Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Saisissez le code envoyé par courriel"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Saisissez le code de votre application d'authentification"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Appuyez sur votre YubiKey pour vous authentifier"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Les identifiants de l'authentification à deux facteurs Duo sont requis pour votre compte. Suivez les étapes ci-dessous afin de réussir à vous connecter."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Suivez les étapes ci-dessous afin de réussir à vous connecter."
+  },
   "restartRegistration": {
     "message": "Redémarrer l'inscription"
   },
@@ -1009,7 +1033,7 @@
     "message": "Demande l'ajout d'un élément si celui-ci n'est pas trouvé dans votre coffre. S'applique à tous les comptes connectés."
   },
   "showCardsInVaultViewV2": {
-    "message": "Always show cards as Autofill suggestions on Vault view"
+    "message": "Toujours montrer les cartes de paiement en tant que suggestions de remplissage automatique dans l'affichage du coffre"
   },
   "showCardsCurrentTab": {
     "message": "Afficher les cartes de paiement sur la Page d'onglet"
@@ -1018,7 +1042,7 @@
     "message": "Liste les éléments des cartes de paiement sur la Page d'onglet pour faciliter la saisie automatique."
   },
   "showIdentitiesInVaultViewV2": {
-    "message": "Always show identities as Autofill suggestions on Vault view"
+    "message": "Toujours montrer les identités en tant que suggestions de remplissage automatique dans l'affichage du coffre"
   },
   "showIdentitiesCurrentTab": {
     "message": "Afficher les identités sur la Page d'onglet"
@@ -1027,10 +1051,10 @@
     "message": "Liste les éléments d'identité sur la Page d'onglet pour faciliter la saisie automatique."
   },
   "clickToAutofillOnVault": {
-    "message": "Click items to autofill on Vault view"
+    "message": "Cliquez sur les éléments pour le remplissage automatique dans 'affichage du coffre"
   },
   "clickToAutofill": {
-    "message": "Click items in autofill suggestion to fill"
+    "message": "Cliquez sur les éléments de la suggestion de remplissage automatique pour les remplir"
   },
   "clearClipboard": {
     "message": "Effacer le presse-papiers",
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Rester connecté"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Ne plus demander sur cet appareil pendant 30 jours"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Envoyer à nouveau le courriel de code de vérification"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utiliser une autre méthode d'identification en deux étapes"
   },
+  "selectAnotherMethod": {
+    "message": "Sélectionnez une autre méthode",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Utilisez votre code de récupération"
+  },
   "insertYubiKey": {
     "message": "Insérez votre YubiKey dans le port USB de votre ordinateur puis appuyez sur son bouton."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Ouvrir un nouvel onglet"
   },
+  "openInNewTab": {
+    "message": "Ouvrir dans un nouvel onglet"
+  },
   "webAuthnAuthenticate": {
     "message": "Authentifier WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Lire la clé de sécurité"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "En attente d'interaction de la clé de sécurité..."
+  },
   "loginUnavailable": {
     "message": "Identifiant indisponible"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Options d'authentification à feux facteurs"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Sélectionnez la méthode d'authentification à deux facteurs"
+  },
   "recoveryCodeDesc": {
     "message": "Accès perdu à tous vos services d'authentification à double facteurs ? Utilisez votre code de récupération pour désactiver tous les services de double authentifications sur votre compte."
   },
@@ -2069,7 +2115,7 @@
     "message": "Générateur de nom d'utilisateur"
   },
   "useThisEmail": {
-    "message": "Use this email"
+    "message": "Utiliser ce courriel"
   },
   "useThisPassword": {
     "message": "Utiliser ce mot de passe"
@@ -2089,7 +2135,7 @@
     "description": "This will be used as part of a larger sentence, broken up to include the generator icon. The full sentence will read 'Use the generator [GENERATOR_ICON] to create a strong unique password'"
   },
   "vaultCustomization": {
-    "message": "Vault customization"
+    "message": "Personnalisation du coffre"
   },
   "vaultTimeoutAction": {
     "message": "Action après délai d'expiration du coffre"
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Expiration de l'action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Nouvelles options de personnalisation"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Personnalisez votre expérience utilisateur du coffre avec des actions de copie rapide, un mode compact et bien plus encore !"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Verrouiller",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2356,7 +2411,7 @@
     "message": "Domaines bloqués"
   },
   "learnMoreAboutBlockedDomains": {
-    "message": "Learn more about blocked domains"
+    "message": "En savoir plus sur les domaines bloqués"
   },
   "excludedDomains": {
     "message": "Domaines exclus"
@@ -2368,19 +2423,19 @@
     "message": "Bitwarden ne demandera pas d'enregistrer les détails de connexion pour ces domaines pour tous les comptes connectés. Vous devez actualiser la page pour que les modifications prennent effet."
   },
   "blockedDomainsDesc": {
-    "message": "Autofill and other related features will not be offered for these websites. You must refresh the page for changes to take effect."
+    "message": "Le remplissage automatique et d'autres fonctionnalités connexes ne seront pas proposés pour ces sites web. Vous devez actualiser la page pour que les modifications soient prises en compte."
   },
   "autofillBlockedNoticeV2": {
-    "message": "Autofill is blocked for this website."
+    "message": "Le remplissage automatique est bloqué pour ce site web."
   },
   "autofillBlockedNoticeGuidance": {
-    "message": "Change this in settings"
+    "message": "Modifier ceci dans les paramètres"
   },
   "change": {
-    "message": "Change"
+    "message": "Modifier"
   },
   "changeButtonTitle": {
-    "message": "Change password - $ITEMNAME$",
+    "message": "Modifier le mot de passe - $ITEMNAME$",
     "placeholders": {
       "itemname": {
         "content": "$1",
@@ -2389,10 +2444,19 @@
     }
   },
   "atRiskPasswords": {
-    "message": "At-risk passwords"
+    "message": "Mots de passe à risque"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2414,10 +2478,10 @@
     }
   },
   "reviewAndChangeAtRiskPassword": {
-    "message": "Review and change one at-risk password"
+    "message": "Examiner et modifier un mot de passe à risque"
   },
   "reviewAndChangeAtRiskPasswordsPlural": {
-    "message": "Review and change $COUNT$ at-risk passwords",
+    "message": "Examiner et modifier les mots de passe à risque $COUNT$",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2426,11 +2490,41 @@
     }
   },
   "changeAtRiskPasswordsFaster": {
-    "message": "Change at-risk passwords faster"
+    "message": "Modifier plus rapidement les mots de passe à risque"
   },
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Aucune valeur à copier"
   },
diff --git a/apps/browser/src/_locales/gl/messages.json b/apps/browser/src/_locales/gl/messages.json
index 25ebb2df75d..3a2348072f0 100644
--- a/apps/browser/src/_locales/gl/messages.json
+++ b/apps/browser/src/_locales/gl/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Pista do contrasinal mestre (opcional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Unirse a esta organización"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Iniciar sesión en Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Reiniciar rexistro"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Lémbrame"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Enviar un novo correo de verificación"
   },
   "useAnotherTwoStepMethod": {
     "message": "Empregar outro método de verificación en 2 pasos"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Conecta a túa YubiKey no porto USB, despois preme o seu botón."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Abrir nova pestana"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Autenticar con WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Inicio de sesión non dispoñible"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Opcións de verificación en dous pasos"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Perdiche o acceso ós provedores de verificación en dous pasos (2FA)? Emprega o teu código de recuperación para desactivalos."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Acción do temporizador"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Bloquear",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Non hai valores que copiar"
   },
diff --git a/apps/browser/src/_locales/he/messages.json b/apps/browser/src/_locales/he/messages.json
index b5128e2fd09..174dcd4ede2 100644
--- a/apps/browser/src/_locales/he/messages.json
+++ b/apps/browser/src/_locales/he/messages.json
@@ -26,7 +26,7 @@
     "message": "כניסה עם מפתח גישה"
   },
   "useSingleSignOn": {
-    "message": "השתמש בהזדהות חד פעמית"
+    "message": "השתמש בכניסה יחידה"
   },
   "welcomeBack": {
     "message": "ברוך שובך"
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "רמז לסיסמה הראשית (אופציונלי)"
   },
+  "passwordStrengthScore": {
+    "message": "ציון חוזק סיסמה $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "הצטרף לארגון"
   },
@@ -377,13 +386,13 @@
     "message": "ערוך תיקייה"
   },
   "newFolder": {
-    "message": "תיקיה חדשה"
+    "message": "תיקייה חדשה"
   },
   "folderName": {
-    "message": "שם תיקיה"
+    "message": "שם תיקייה"
   },
   "folderHintText": {
-    "message": "קונן תיקיה על ידי הוספת שם תיקיית האב ואחריו “/”. דוגמה: חברתי/פורומים"
+    "message": "קונן תיקייה על ידי הוספת שם תיקיית האב ואחריו “/”. דוגמה: חברתי/פורומים"
   },
   "noFoldersAdded": {
     "message": "לא נוספו תיקיות"
@@ -392,7 +401,7 @@
     "message": "צור תיקיות כדי לארגן את פריטי הכספת שלך"
   },
   "deleteFolderPermanently": {
-    "message": "האם אתה בטוח שברצונך למחוק תיקיה זו לצמיתות?"
+    "message": "האם אתה בטוח שברצונך למחוק תיקייה זו לצמיתות?"
   },
   "deleteFolder": {
     "message": "מחק תיקייה"
@@ -580,7 +589,7 @@
     "message": "מועדף"
   },
   "unfavorite": {
-    "message": "מחק ממועדפים"
+    "message": "הסר ממועדפים"
   },
   "itemAddedToFavorites": {
     "message": "פריט נוסף למועדפים"
@@ -841,7 +850,7 @@
     "message": "אי אפשר לסרוק קוד QR מהדף הנוכחי"
   },
   "totpCaptureSuccess": {
-    "message": "נוסף מפתח מאמת"
+    "message": "מפתח מאמת נוסף"
   },
   "totpCapture": {
     "message": "סרוק קוד QR מאמת מהדף הנוכחי"
@@ -874,7 +883,22 @@
     "message": "היכנס"
   },
   "logInToBitwarden": {
-    "message": "כניסה אל Bitwarden"
+    "message": "היכנס אל Bitwarden"
+  },
+  "enterTheCodeSentToYourEmail": {
+    "message": "הזן את הקוד שנשלח לדוא\"ל שלך"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "הזן את הקוד מיישום המאמת שלך"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "לחץ על ה־YubiKey שלך כדי לאמת"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "נדרשת כניסה דו-שלבית של Duo עבור החשבון שלך. עקוב אחר השלבים למטה כדי לסיים להיכנס."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "עקוב אחר השלבים למטה כדי לסיים להיכנס."
   },
   "restartRegistration": {
     "message": "התחל הרשמה מחדש"
@@ -997,7 +1021,7 @@
     "description": "This is the folder for uncategorized items"
   },
   "enableAddLoginNotification": {
-    "message": "שאל אם לשמור פרטי כניסה"
+    "message": "בקש לשמור כניסה"
   },
   "vaultSaveOptionsTitle": {
     "message": "שמור בהגדרות כספת"
@@ -1006,7 +1030,7 @@
     "message": "בקש להוסיף פריט אם לא נמצא פריט בכספת שלך."
   },
   "addLoginNotificationDescAlt": {
-    "message": "שאל אם להוסיף פריט אם הוא אינו נמצא בכספת שלך. חל על כל החשבונות המחוברים."
+    "message": "בקש להוסיף פריט אם לא נמצא פריט בכספת שלך. חל על כל החשבונות המחוברים."
   },
   "showCardsInVaultViewV2": {
     "message": "הצג תמיד כרטיסים כהצעות מילוי אוטומטי בתצוגת כספת"
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "זכור אותי"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "אל תשאל אותי שוב במכשיר זה למשך 30 יום"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "שלח שוב קוד אימות לאימייל"
   },
   "useAnotherTwoStepMethod": {
     "message": "השתמש בשיטה אחרת עבור כניסה דו שלבית"
   },
+  "selectAnotherMethod": {
+    "message": "בחר שיטה אחרת",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "השתמש בקוד השחזור שלך"
+  },
   "insertYubiKey": {
     "message": "הכנס את ה-YubiKey אל כניסת ה-USB במחשבך, ואז גע בכפתור שלו."
   },
@@ -1378,14 +1412,23 @@
     "message": "הכנס את מפתח האבטחה שלך אל כניסת ה-USB במחשבך. אם יש לו כפתור, לחץ עליו."
   },
   "webAuthnNewTab": {
-    "message": "על מנת להתחיל אימות WebAuthn דו-שלבי. לחץ על הכפתור למטה כדי לפתוח כרטיסייה חדשה ועקוב אחר ההוראות המסופקת בכרטיסייה החדשה."
+    "message": "על מנת להתחיל אימות WebAuthn דו-שלבי. לחץ על הלחצן למטה כדי לפתוח כרטיסייה חדשה ועקוב אחר ההוראות המסופקת בכרטיסייה החדשה."
   },
   "webAuthnNewTabOpen": {
     "message": "פתח כרטיסייה חדשה"
   },
+  "openInNewTab": {
+    "message": "פתח בכרטיסייה חדשה"
+  },
   "webAuthnAuthenticate": {
     "message": "אמת WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "קרא מפתח אבטחה"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "ממתין לאינטראקציה עם מפתח אבטחה..."
+  },
   "loginUnavailable": {
     "message": "כניסה לא זמינה"
   },
@@ -1398,8 +1441,11 @@
   "twoStepOptions": {
     "message": "אפשרויות כניסה דו-שלבית"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "בחר שיטת כניסה דו-שלבית"
+  },
   "recoveryCodeDesc": {
-    "message": "איבדת גישה לכל הספקים הדו-שלביים שלך? השתמש בקוד השחזור שלך כדי להשבית את כל הספקים הדו-שלביים מהחשבון שלך."
+    "message": "איבדת גישה לכל הספקים הדו-גורמיים שלך? השתמש בקוד השחזור שלך כדי להשבית את כל הספקים הדו-גורמיים בחשבון שלך."
   },
   "recoveryCodeTitle": {
     "message": "קוד שחזור"
@@ -1622,7 +1668,7 @@
     "message": "דפדפן זה לא יכול לעבד בקשות U2F בחלון צף זה. האם ברצונך לפתוח את החלון הצף כחלון חדש רגיל כדי שתוכל להכנס באמצעות U2F?"
   },
   "enableFavicon": {
-    "message": "הצג סמלים של אתרי אינטרנט"
+    "message": "הצג סמלי אתר אינטרנט"
   },
   "faviconDesc": {
     "message": "הצג תמונה ניתנת לזיהוי ליד כל כניסה."
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "פעולת פסק זמן"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "אפשרויות התאמה אישית חדשות"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "התאם אישית את חווית הכספת שלך עם פעולות העתקה מהירות, מצב קומפקטי, ועוד!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "הצג את כל הגדרות המראה"
+  },
   "lock": {
     "message": "נעילה",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2139,10 +2194,10 @@
     "message": "מלא ושמור"
   },
   "autoFillSuccessAndSavedUri": {
-    "message": "הפריט התמלא אוטומטית וה־URI נשמר"
+    "message": "הפריט מולא אוטומטית וה־URI נשמר"
   },
   "autoFillSuccess": {
-    "message": "פריט התמלא אוטומטית "
+    "message": "הפריט מולא אוטומטית "
   },
   "insecurePageWarning": {
     "message": "אזהרה: זהו דף HTTP לא מאובטח, וכל מידע שאתה שולח יכול באופן פוטנציאלי להיראות ולהשתנות על ידי אחרים. הכניסה הזאת נשמרה במקור בדף מאובטח (HTTPS)."
@@ -2151,7 +2206,7 @@
     "message": "האם עדיין ברצונך להשלים כניסה זו?"
   },
   "autofillIframeWarning": {
-    "message": "הטופס מאורח על ידי דומיין שונה מה־URI של הכניסה השמורה שלך. בחר \"בסדר\" כדי להשלים אוטומטית בכל זאת, או \"ביטול\" כדי לעצור."
+    "message": "הטופס מאורח על ידי דומיין שונה מה־URI של הכניסה השמורה שלך. בחר \"בסדר\" כדי למלא אוטומטית בכל זאת, או \"ביטול\" כדי לעצור."
   },
   "autofillIframeWarningTip": {
     "message": "כדי למנוע אזהרה זו בעתיד, שמור את URI זה, $HOSTNAME$, בפריט כניסת Bitwarden שלך עבור אתר זה.",
@@ -2389,10 +2444,19 @@
     }
   },
   "atRiskPasswords": {
-    "message": "סיסמאות בסכנה"
+    "message": "סיסמאות בסיכון"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ מבקש/ת שתשנה $COUNT$ סיסמאות בגלל שהן בסכנה.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ מבקש/ת ממך לשנות סיסמה אחת בגלל שהיא בסיכון.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ מבקש/ת ממך לשנות $COUNT$ סיסמאות בגלל שהן בסיכון.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "הארגונים שלך מבקשים שתשנה $COUNT$ סיסמאות בגלל שהן בסכנה.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "הארגונים שלך מבקשים שתשנה $COUNT$ סיסמאות בגלל שהן בסיכון.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2414,10 +2478,10 @@
     }
   },
   "reviewAndChangeAtRiskPassword": {
-    "message": "סקור ושנה סיסמה אחת בסכנה"
+    "message": "סקור ושנה סיסמה אחת בסיכון"
   },
   "reviewAndChangeAtRiskPasswordsPlural": {
-    "message": "סקור ושנה $COUNT$ סיסמאות בסכנה",
+    "message": "סקור ושנה $COUNT$ סיסמאות בסיכון",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2426,16 +2490,46 @@
     }
   },
   "changeAtRiskPasswordsFaster": {
-    "message": "שנה סיסמאות בסכנה מהר יותר"
+    "message": "שנה סיסמאות בסיכון מהר יותר"
   },
   "changeAtRiskPasswordsFasterDesc": {
     "message": "עדכן את ההגדרות שלך כך שתוכל למלא במהירות את הסיסמאות שלך וליצור חדשות"
   },
+  "reviewAtRiskLogins": {
+    "message": "סקור כניסות בסיכון"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "סקור סיסמאות בסיכון"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "סיסמאות הארגון שלך הן בסכנה בגלל שהן חלשות, משומשות, ו/או חשופות.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "איור של רשימת כניסות בסיכון"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "צור במהירות סיסמה חזקה וייחודית עם תפריט המילוי האוטומטי של Bitwarden באתר שבסיכון.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "איור של תפריט המילוי האוטומטי של Bitwarden המציג סיסמה שנוצרה"
+  },
+  "updateInBitwarden": {
+    "message": "עדכן ב־Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden אז ינחה אותך לעדכן את הסיסמה במנהל הסיסמאות.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "איור של התראת Bitwarden המנחה את המשתמש לעדכן את הכניסה"
+  },
   "turnOnAutofill": {
-    "message": "הפעל השלמה אוטומטית"
+    "message": "הפעל מילוי אוטומטי"
   },
   "turnedOnAutofill": {
-    "message": "השלמה אוטומטית הופעלה"
+    "message": "מילוי אוטומטי הופעל"
   },
   "dismiss": {
     "message": "התעלם"
@@ -2468,7 +2562,7 @@
     "message": "הגבל צפיות"
   },
   "limitSendViewsHint": {
-    "message": "אף אחד לא יכול לצפות בסנד זה לאחר ההגעה למגבלה.",
+    "message": "אף אחד לא יכול לצפות בסֵנְד זה לאחר ההגעה למגבלה.",
     "description": "Displayed under the limit views field on Send"
   },
   "limitSendViewsCount": {
@@ -2482,11 +2576,11 @@
     }
   },
   "send": {
-    "message": "סנד",
+    "message": "סֵנְד",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendDetails": {
-    "message": "פרטי סנד",
+    "message": "פרטי סֵנְד",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendTypeText": {
@@ -2499,7 +2593,7 @@
     "message": "קובץ"
   },
   "allSends": {
-    "message": "כל הסנדים",
+    "message": "כל הסֵנְדים",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "hideTextByDefault": {
@@ -2515,7 +2609,7 @@
     "message": "העתק קישור"
   },
   "copySendLink": {
-    "message": "העתק קישור סנד",
+    "message": "העתק קישור סֵנְד",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "removePassword": {
@@ -2528,11 +2622,11 @@
     "message": "הסיסמה הוסרה"
   },
   "deletedSend": {
-    "message": "סנד נמחק",
+    "message": "סֵנְד נמחק",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendLink": {
-    "message": "קישור סנד",
+    "message": "קישור סֵנְד",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "disabled": {
@@ -2542,26 +2636,26 @@
     "message": "האם אתה בטוח שברצונך להסיר את הסיסמה?"
   },
   "deleteSend": {
-    "message": "מחק סנד",
+    "message": "מחק סֵנְד",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "deleteSendConfirmation": {
-    "message": "האם אתה בטוח שברצונך למחוק סנד זה?",
+    "message": "האם אתה בטוח שברצונך למחוק סֵנְד זה?",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "deleteSendPermanentConfirmation": {
-    "message": "האם אתה בטוח שברצונך למחוק לצמיתות סנד זה?",
+    "message": "האם אתה בטוח שברצונך למחוק לצמיתות סֵנְד זה?",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "editSend": {
-    "message": "ערוך סנד",
+    "message": "ערוך סֵנְד",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "deletionDate": {
     "message": "תאריך מחיקה"
   },
   "deletionDateDescV2": {
-    "message": "סנד זה יימחק לצמיתות בתאריך זה.",
+    "message": "סֵנְד זה יימחק לצמיתות בתאריך זה.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "expirationDate": {
@@ -2583,38 +2677,38 @@
     "message": "מותאם אישית"
   },
   "sendPasswordDescV3": {
-    "message": "הוסף סיסמה אופציונלית עבור נמענים כדי לגשת לסנד זה.",
+    "message": "הוסף סיסמה אופציונלית עבור נמענים כדי לגשת לסֵנְד זה.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "createSend": {
-    "message": "סנד חדש",
+    "message": "סֵנְד חדש",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "newPassword": {
     "message": "סיסמה חדשה"
   },
   "sendDisabled": {
-    "message": "סנד הוסר",
+    "message": "סֵנְד הוסר",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendDisabledWarning": {
-    "message": "בשל מדיניות ארגונית, אתה יכול למחוק רק סנד קיים.",
+    "message": "בשל מדיניות ארגונית, אתה יכול למחוק רק סֵנְד קיים.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "createdSend": {
-    "message": "סנד נוצר",
+    "message": "סֵנְד נוצר",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "createdSendSuccessfully": {
-    "message": "סנד נוצר בהצלחה!",
+    "message": "סֵנְד נוצר בהצלחה!",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendExpiresInHoursSingle": {
-    "message": "הסנד יהיה זמין לכל אחד עם הקישור במשך השעה הבאה.",
+    "message": "הסֵנְד יהיה זמין לכל אחד עם הקישור במשך השעה הבאה.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendExpiresInHours": {
-    "message": "הסנד יהיה זמין לכל אחד עם הקישור במשך $HOURS$ השעות הבאות.",
+    "message": "הסֵנְד יהיה זמין לכל אחד עם הקישור במשך $HOURS$ השעות הבאות.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated.",
     "placeholders": {
       "hours": {
@@ -2624,11 +2718,11 @@
     }
   },
   "sendExpiresInDaysSingle": {
-    "message": "הסנד יהיה זמין לכל אחד עם הקישור במשך היום הבא.",
+    "message": "הסֵנְד יהיה זמין לכל אחד עם הקישור במשך היום הבא.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendExpiresInDays": {
-    "message": "הסנד יהיה זמין לכל אחד עם הקישור במשך $DAYS$ הימים הבאים.",
+    "message": "הסֵנְד יהיה זמין לכל אחד עם הקישור במשך $DAYS$ הימים הבאים.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated.",
     "placeholders": {
       "days": {
@@ -2638,11 +2732,11 @@
     }
   },
   "sendLinkCopied": {
-    "message": "קישור סנד הועתק",
+    "message": "קישור סֵנְד הועתק",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "editedSend": {
-    "message": "סנד נשמר",
+    "message": "סֵנְד נשמר",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendFilePopoutDialogText": {
@@ -2650,7 +2744,7 @@
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendFilePopoutDialogDesc": {
-    "message": "כדי ליצור קובץ סנד, אתה צריך להקפיץ את ההרחבה לחלון חדש.",
+    "message": "כדי ליצור קובץ סֵנְד, אתה צריך להקפיץ את ההרחבה לחלון חדש.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendLinuxChromiumFileWarning": {
@@ -2705,7 +2799,7 @@
     "message": "עליך לאמת את הדוא\"ל שלך כדי להשתמש בתכונה זו. ניתן לאמת את הדוא\"ל שלך בכספת הרשת."
   },
   "updatedMasterPassword": {
-    "message": "הסיסמה הראשית עודכנה"
+    "message": "סיסמה ראשית עודכנה"
   },
   "updateMasterPassword": {
     "message": "עדכן סיסמה ראשית"
@@ -2726,7 +2820,7 @@
     "message": "לארגון זה יש מדיניות ארגונית שתרשום אותך באופן אוטומטי לאיפוס סיסמה. הרישום יאפשר למנהלי הארגון לשנות את הסיסמה הראשית שלך."
   },
   "selectFolder": {
-    "message": "בחר תיקיה..."
+    "message": "בחר תיקייה..."
   },
   "noFoldersFound": {
     "message": "לא נמצאו תיקיות",
@@ -2843,7 +2937,7 @@
     "message": "לא נמצא מזהה ייחודי."
   },
   "convertOrganizationEncryptionDesc": {
-    "message": "$ORGANIZATION$ משתמשת ב־SSO עם שרת מפתחות באירוח עצמי. סיסמה ראשית לא דרושה יותר כדי להיכנס עבור חברים של ארגון זה.",
+    "message": "$ORGANIZATION$ משתמש/ת ב־SSO עם שרת מפתחות באירוח עצמי. סיסמה ראשית לא דרושה יותר כדי להיכנס עבור חברים של ארגון זה.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -3123,7 +3217,7 @@
     "description": "Part of a URL."
   },
   "apiAccessToken": {
-    "message": "אסימון גישה ל־API"
+    "message": "אסימון גישת API"
   },
   "apiKey": {
     "message": "מפתח API"
@@ -3430,11 +3524,11 @@
     "message": "מכשיר מהימן"
   },
   "sendsNoItemsTitle": {
-    "message": "אין סנדים פעילים",
+    "message": "אין סֵנְדים פעילים",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendsNoItemsMessage": {
-    "message": "השתמש בסנד כדי לשתף באופן מאובטח מידע מוצפן עם כל אחד.",
+    "message": "השתמש בסֵנְד כדי לשתף באופן מאובטח מידע מוצפן עם כל אחד.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "inputRequired": {
@@ -3575,7 +3669,7 @@
     "message": "דלג לתוכן"
   },
   "bitwardenOverlayButton": {
-    "message": "כפתור תפריט מילוי אוטומטי של Bitwarden",
+    "message": "לחצן תפריט מילוי אוטומטי של Bitwarden",
     "description": "Page title for the iframe containing the overlay button"
   },
   "toggleBitwardenVaultOverlay": {
@@ -3777,7 +3871,7 @@
     "message": "למד על אפשרויות הייבוא שלך"
   },
   "selectImportFolder": {
-    "message": "בחר תיקיה"
+    "message": "בחר תיקייה"
   },
   "selectImportCollection": {
     "message": "בחר אוסף"
@@ -3899,7 +3993,7 @@
     "message": "אימות נדרש כדי להשתמש במפתח גישה. אמת את זהותך כדי להמשיך."
   },
   "multifactorAuthenticationCancelled": {
-    "message": "אימות רב-שלבי בוטל"
+    "message": "אימות רב-גורמי בוטל"
   },
   "noLastPassDataFound": {
     "message": "לא נמצאו נתוני LastPass"
@@ -3917,7 +4011,7 @@
     "message": "PIN שגוי"
   },
   "multifactorAuthenticationFailed": {
-    "message": "אימות רב-שלבי נכשל"
+    "message": "אימות רב-גורמי נכשל"
   },
   "includeSharedFolders": {
     "message": "כלול תיקיות משותפות"
@@ -3929,7 +4023,7 @@
     "message": "מייבא את החשבון שלך..."
   },
   "lastPassMFARequired": {
-    "message": "נדרש אימות רב-שלבי של LastPass"
+    "message": "נדרש אימות רב-גורמי של LastPass"
   },
   "lastPassMFADesc": {
     "message": "הזן את קוד הגישה החד פעמי שלך מיישום האימות שלך"
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "העתק $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "אין ערכים להעתקה"
   },
@@ -4200,7 +4308,7 @@
     "message": "מסוף ניהול"
   },
   "accountSecurity": {
-    "message": "אבטחת חשבון"
+    "message": "אבטחת החשבון"
   },
   "notifications": {
     "message": "התראות"
@@ -4248,7 +4356,7 @@
     }
   },
   "itemsWithNoFolder": {
-    "message": "פריטים ללא תיקיה"
+    "message": "פריטים ללא תיקייה"
   },
   "itemDetails": {
     "message": "פרטי הפריט"
@@ -4467,7 +4575,7 @@
     "description": "A section header for a list of passwords."
   },
   "logInWithPasskeyAriaLabel": {
-    "message": "היכנס עם מפתח גישה",
+    "message": "כניסה עם מפתח גישה",
     "description": "ARIA label for the inline menu button that logs in with a passkey."
   },
   "assign": {
@@ -4665,16 +4773,16 @@
     "message": "מיקום פריט"
   },
   "fileSend": {
-    "message": "קובץ סנד"
+    "message": "סֵנְד של קובץ"
   },
   "fileSends": {
-    "message": "סנדים של קובץ"
+    "message": "סֵנְדים של קובץ"
   },
   "textSend": {
-    "message": "טקסט סנד"
+    "message": "סֵנְד של טקסט"
   },
   "textSends": {
-    "message": "סנדים של טקסט"
+    "message": "סֵנְדים של טקסט"
   },
   "accountActions": {
     "message": "פעולות חשבון"
@@ -4833,7 +4941,7 @@
     "description": "Represents the ^ key in screen reader content as a readable word"
   },
   "ampersandCharacterDescriptor": {
-    "message": "אמפרסנד",
+    "message": "אמפרסֵנְד",
     "description": "Represents the & key in screen reader content as a readable word"
   },
   "asteriskCharacterDescriptor": {
@@ -4953,7 +5061,7 @@
     "message": "Bitwarden ישלח קוד לדוא\"ל החשבון שלך כדי לאמת כניסות ממכשירים חדשים החל מפברואר 2025."
   },
   "newDeviceVerificationNoticeContentPage2": {
-    "message": "אתה יכול להגדיר כניסה דו-שלבית כדרך חלופית להגן על החשבון שלך או לשנות את הדוא\"ל שלך לאחד שתוכל לגשת אליו."
+    "message": "אתה יכול להגדיר כניסה דו-שלבית כדרך חלופית להגן על החשבון שלך או לשנות את הדוא\"ל שלך לאחד שאתה יכול לגשת אליו."
   },
   "remindMeLater": {
     "message": "הזכר לי מאוחר יותר"
diff --git a/apps/browser/src/_locales/hi/messages.json b/apps/browser/src/_locales/hi/messages.json
index de5ecb22984..430ffbf0849 100644
--- a/apps/browser/src/_locales/hi/messages.json
+++ b/apps/browser/src/_locales/hi/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master Password Hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "आपके ईमेल पर भेजा गया कोड भरें"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "अपने प्रमाणक ऐप से कोड डालें"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "मुझे याद रखें"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "फिर से सत्यापन कोड ईमेल भेजें"
   },
   "useAnotherTwoStepMethod": {
     "message": "एक और दो-चरण लॉगिन विधि का उपयोग करें"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "अपने कंप्यूटर के यूएसबी पोर्ट में अपने YubiKey डालें, फिर इसके बटन को स्पर्श करें।"
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "नया टैब खोलें"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "वेबऑथन प्रमाणित करें"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login Unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step Login Options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "अपने दो कारक प्रदाताओं के सभी के लिए उपयोग खो दिया है? अपने खाते से सभी दो-कारक प्रदाताओं को अक्षम करने के लिए अपने रिकवरी कोड का उपयोग करें।"
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "टाइमआउट कार्रवाई"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "लॉक",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/hr/messages.json b/apps/browser/src/_locales/hr/messages.json
index 70d3b7b0446..b1677323605 100644
--- a/apps/browser/src/_locales/hr/messages.json
+++ b/apps/browser/src/_locales/hr/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Podsjetnik glavne lozinke (neobavezno)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Pridruži se organizaciji"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Prijavi se u Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Ponovno pokreni registraciju"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Zapamti me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Ponovno slanje kontrolnog koda e-poštom"
   },
   "useAnotherTwoStepMethod": {
     "message": "Koristiti drugi način prijave dvostrukom autentifikacijom"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Umetni svoj YubiKey u USB priključak računala, a zatim dodirni njegovu tipku."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Otvori novu karticu"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Ovjeri WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Prijava nije dostupna"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Mogućnosti prijave dvostrukom autentifikacijom"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Izgubljen je pristup uređaju za dvostruku autentifikaciju? Koristi svoj kôd za oporavak za onemogućavanje svih pružatelja usluga dvostruke autentifikacije na tvojem računu."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Radnja nakon isteka "
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Zaključaj",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "Rizične lozinke"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "Broj rizičnih lozinki koje $ORGANIZATION$ traži da promijeniš: $COUNT$.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Broj rizičnih lozinki koje tvoja organizacija traži da promijeniš: $COUNT$.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Ažuriraj svoje postavke kako za brzu auto-ispunu svojih lozinki i generiranje novih"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Uključi auto-ispunu"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Nema vrijednosti za kopiranje"
   },
diff --git a/apps/browser/src/_locales/hu/messages.json b/apps/browser/src/_locales/hu/messages.json
index 4d547f3b62d..e134c7f1f26 100644
--- a/apps/browser/src/_locales/hu/messages.json
+++ b/apps/browser/src/_locales/hu/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Mesterjelszó emlékeztető (nem kötelező)"
   },
+  "passwordStrengthScore": {
+    "message": "A jelszó erősségi pontszáma $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Csatlakozás szervezethez"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Bejelentkezés a Bitwardenbe"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Adjuk meg az email címre elküldött kódot."
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Adjuk meg a hitelesítő alkalmazása által generált kódot."
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Nyomjuk meg a YubiKey-t a hitelesítéshez."
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo kétlépcsős bejelentkezés szükséges a fiókhoz. Kövessük az alábbi lépéseket a bejelentkezés befejezéséhez."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Kövessük az alábbi lépéseket a bejelentkezés befejezéséhez."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Emlékezz rám"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Ne kérdezzen újra ezen az eszközön 30 napig"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Megerősítő kód e-mail újra küldése"
   },
   "useAnotherTwoStepMethod": {
     "message": "Más két lépcsős bejelentkezés használata"
   },
+  "selectAnotherMethod": {
+    "message": "Másik módszer választás",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Helyreállító kód használata"
+  },
   "insertYubiKey": {
     "message": "Illeszd be a YubiKey-t a számítógéped egyik USB portjába, majd nyomd meg a gombját."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Új fül megnyitása"
   },
+  "openInNewTab": {
+    "message": "Megnyitás új fülön"
+  },
   "webAuthnAuthenticate": {
     "message": "WebAutn hitelesítés"
   },
+  "readSecurityKey": {
+    "message": "Biztonsági kulcs olvasása"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Várakozás a biztonsági kulcs interakciójára..."
+  },
   "loginUnavailable": {
     "message": "A bejelentkezés nem érhető el."
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Kétlépcsős bejelentkezés opciók"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Kétlépcsős bejelentkezési mód használata"
+  },
   "recoveryCodeDesc": {
     "message": "Elveszett a hozzáférés az összes kétlépcsős szolgáltatóhoz? A helyreállító kód használatával letilthatók fiókból a kétlépcsős szolgáltatók."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Időkifutási művelet"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Új testreszabási opciók"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Szabjuk testre tárhely élményét gyors másolási műveletekkel, kompakt móddal és még sok mással!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Az összes megjelenési beállítás megtekintése"
+  },
   "lock": {
     "message": "Lezárás",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "Veszélyes jelszavak"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ $COUNT$ jelszó meegváltoztatását kéri, mert veszélyben vannak.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ egy jelszó megváltoztatását kéri, mert az kockázatos.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ $COUNT$ jelszó megváltoztatását kéri, mert azok kockázatosak.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "A szervezetek $COUNT$ jelszó meegváltoztatását kérik, mert veszélyben vannak.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "A szervezetek $COUNT$ jelszó megváltoztatását kérik, mert azok kockázatosak.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Frissítsük a beállításokat, hogy gyorsan automatikusan kitölthessük a jelszavakat és újakat generálhassunk."
   },
+  "reviewAtRiskLogins": {
+    "message": "Kockázatos bejelentkezések áttekintése"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Kockázatos jelszavak áttekintése"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "A szervezeti jelszavak kockázatosak, mert gyengék, újra felhasználásra kerültek és/vagy nyilvánosságra kerültek.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "A kockázatos bejelentkezések listájának illusztrációja"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Gyorsan generálhatunk erős, egyedi jelszót a Bitwarden automatikus kitöltési menüjével a kockázatos webhelyen.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "A Bitwarden automatikus kitöltési menüjének illusztrációja, amely egy generált jelszót jelenít meg."
+  },
+  "updateInBitwarden": {
+    "message": "Frissítés a Bitwardenben"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "A Bitwarden ezután felkér a jelszó frissítésére a jelszókezelőben.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illusztráció a Bitwarden értesítéséről, amely felszólítja a felhasználót a bejelentkezési adatok frissítésére."
+  },
   "turnOnAutofill": {
     "message": "Automatikus kitöltés bekapcsolása"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "$FIELD$, $VALUE$ másolása",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Nincsenek másolandó értékek."
   },
diff --git a/apps/browser/src/_locales/id/messages.json b/apps/browser/src/_locales/id/messages.json
index 57a1ed59026..c4f3af84e34 100644
--- a/apps/browser/src/_locales/id/messages.json
+++ b/apps/browser/src/_locales/id/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Petunjuk Kata Sandi Utama (opsional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Bergabung ke organisasi"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Masuk ke Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Mulai ulang pendaftaran"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Ingat saya"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Kirim ulang email kode verifikasi"
   },
   "useAnotherTwoStepMethod": {
     "message": "Gunakan metode masuk dua langkah lainnya"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Masukkan YubiKey Anda ke port USB komputer Anda, lalu sentuh tombolnya."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Buka tab baru"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Autentikasi dengan WebAuthn."
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Info Masuk Tidak Tersedia"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Opsi Info Masuk Dua Langkah"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Kehilangan akses ke semua penyedia dua faktor Anda? Gunakan kode pemulihan untuk menonaktifkan semua penyedia dua faktor dari akun Anda."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Batas waktu tindakan"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Kunci",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Tidak ada nilai untuk disalin"
   },
diff --git a/apps/browser/src/_locales/it/messages.json b/apps/browser/src/_locales/it/messages.json
index 4f85ed889ff..e33d1276ecf 100644
--- a/apps/browser/src/_locales/it/messages.json
+++ b/apps/browser/src/_locales/it/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Suggerimento per la password principale (facoltativo)"
   },
+  "passwordStrengthScore": {
+    "message": "Valutazione complessità parola d'accesso $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Unisciti all'organizzazione"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Accedi a Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Inserisci il codice inviato alla tua e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Inserisci il codice dalla tua app di autenticazione"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Premi la tua chiave Yubi per autenticare"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Il login Duo in due passaggi è richiesto per il tuo account. Segui i passaggi qui sotto per completare l'accesso."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Segui i passaggi qui sotto per completare l'accesso."
+  },
   "restartRegistration": {
     "message": "Riprova la registrazione"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Ricordami"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Non chiedere più su questo dispositivo per 30 giorni"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Invia di nuovo l'email con codice di verifica"
   },
   "useAnotherTwoStepMethod": {
     "message": "Usa un altro metodo di verifica in due passaggi"
   },
+  "selectAnotherMethod": {
+    "message": "Seleziona un altro metodo",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Usa il tuo codice di recupero"
+  },
   "insertYubiKey": {
     "message": "Inserisci la tua YubiKey nella porta USB del computer, poi premi il suo pulsante."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Apri nuova scheda"
   },
+  "openInNewTab": {
+    "message": "Apri in una nuova scheda"
+  },
   "webAuthnAuthenticate": {
     "message": "Autenticazione WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Leggi chiave di sicurezza"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "In attesa di interazione con la chiave di sicurezza..."
+  },
   "loginUnavailable": {
     "message": "Login non disponibile"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Opzioni di verifica in due passaggi"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Seleziona metodo di accesso in due passaggi"
+  },
   "recoveryCodeDesc": {
     "message": "Hai perso l'accesso a tutti i tuoi metodi di verifica in due passaggi? Usa il tuo codice di recupero per disattivarli tutti dal tuo account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Azione al timeout"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Nuove opzioni di personalizzazione"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Personalizza l'esperienza della tua cassaforte con azioni di copia rapida, modalità compatta e altro ancora!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Vedi tutte le impostazioni di aspetto"
+  },
   "lock": {
     "message": "Blocca",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,7 +2446,16 @@
   "atRiskPasswords": {
     "message": "Parola d'accesso a rischio"
   },
-  "atRiskPasswordsDescSingleOrg": {
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ ti chiede di cambiare una parola d'accesso perché è a rischio.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
     "message": "$ORGANIZATION$ ti sta richiedendo di modificare $COUNT$ parole d'accesso perché sono a rischio.",
     "placeholders": {
       "organization": {
@@ -2404,7 +2468,7 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
+  "atRiskPasswordsDescMultiOrgPlural": {
     "message": "Le tue organizzazioni ti chiedono di modificare le $COUNT$ parole d'accesso perché sono a rischio.",
     "placeholders": {
       "count": {
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Aggiorna le impostazioni in modo da poter rapidamente riempire automaticamente le parole d'accesso e generarne di nuove"
   },
+  "reviewAtRiskLogins": {
+    "message": "Redi accessi a rischio"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Rivedi parole d'accesso a rischio"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Le parole d'accesso dell'organizzazione sono a rischio perché sono deboli, riutilizzate, e/o esposte.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustrazione di un elenco di accessi a rischio"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Genera rapidamente una parola d'accesso forte e unica con il menu' di riempimento automatico Bitwarden nel sito a rischio.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustrazione del menu' di riempimento automatico Bitwarden che mostra una parola d'accesso generata"
+  },
+  "updateInBitwarden": {
+    "message": "Aggiorna in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden ti chiederà quindi di aggiornare la parola d'accesso nel gestore di parole d'accesso.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustrazione di una notifica Bitwarden che richiede all'utente di aggiornare l'accesso"
+  },
   "turnOnAutofill": {
     "message": "Attiva riempimento automatico"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copia $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Nessun valore da copiare"
   },
diff --git a/apps/browser/src/_locales/ja/messages.json b/apps/browser/src/_locales/ja/messages.json
index 2a0c926118a..34a91f6e74d 100644
--- a/apps/browser/src/_locales/ja/messages.json
+++ b/apps/browser/src/_locales/ja/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "マスターパスワードのヒント (省略可能)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "組織に参加"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Bitwarden にログイン"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "登録を再度始める"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "情報を保存する"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "確認コードをメールで再送"
   },
   "useAnotherTwoStepMethod": {
     "message": "他の2段階認証方法を使用"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": " YubiKey を USB ポートに挿入し、ボタンをタッチしてください。"
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "新しいタブを開く"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "WebAuthn の認証"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "ログインできません。"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "2段階認証オプション"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "すべての2段階認証プロパイダにアクセスできなくなったときは、リカバリーコードを使用するとアカウントの2段階認証を無効化できます。"
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "タイムアウト時のアクション"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "ロック",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "コピーする値がありません"
   },
diff --git a/apps/browser/src/_locales/ka/messages.json b/apps/browser/src/_locales/ka/messages.json
index 92f0d2c5416..2a066ebe1f2 100644
--- a/apps/browser/src/_locales/ka/messages.json
+++ b/apps/browser/src/_locales/ka/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master password hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "დამიმახსოვრე"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "ახალი ჩანართის გახსნა"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "ჩაკეტვა",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/km/messages.json b/apps/browser/src/_locales/km/messages.json
index 9fe497bc1c7..41ca7e5dcd2 100644
--- a/apps/browser/src/_locales/km/messages.json
+++ b/apps/browser/src/_locales/km/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master password hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lock",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/kn/messages.json b/apps/browser/src/_locales/kn/messages.json
index af436923b14..b9f37778020 100644
--- a/apps/browser/src/_locales/kn/messages.json
+++ b/apps/browser/src/_locales/kn/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "ಮಾಸ್ಟರ್ ಪಾಸ್ವರ್ಡ್ ಸುಳಿವು (ಐಚ್ಛಿಕ)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "ನನ್ನನ್ನು ನೆನಪಿನಲ್ಲಿ ಇಡು"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "ಪರಿಶೀಲನೆ ಕೋಡ್ ಇಮೇಲ್ ಅನ್ನು ಮತ್ತೆ ಕಳುಹಿಸಿ"
   },
   "useAnotherTwoStepMethod": {
     "message": "ಮತ್ತೊಂದು ಎರಡು-ಹಂತದ ಲಾಗಿನ್ ವಿಧಾನವನ್ನು ಬಳಸಿ"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "ನಿಮ್ಮ ಯುಬಿಕಿಯನ್ನು ನಿಮ್ಮ ಕಂಪ್ಯೂಟರ್‌ನ ಯುಎಸ್‌ಬಿ ಪೋರ್ಟ್ಗೆ ಸೇರಿಸಿ, ನಂತರ ಅದರ ಗುಂಡಿಯನ್ನು ಸ್ಪರ್ಶಿಸಿ."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "ಹೊಸ ಟ್ಯಾಬ್ ತೆರೆಯಿರಿ"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "WebAuthn ಅನ್ನು ಪ್ರಮಾಣಿಕರಿಸು"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "ಲಾಗಿನ್ ಲಭ್ಯವಿಲ್ಲ"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "ಎರಡು ಹಂತದ ಲಾಗಿನ್ ಆಯ್ಕೆಗಳು"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "ನಿಮ್ಮ ಎಲ್ಲಾ ಎರಡು ಅಂಶ ಪೂರೈಕೆದಾರರಿಗೆ ಪ್ರವೇಶವನ್ನು ಕಳೆದುಕೊಂಡಿದ್ದೀರಾ? ನಿಮ್ಮ ಖಾತೆಯಿಂದ ಎಲ್ಲಾ ಎರಡು ಅಂಶ ಪೂರೈಕೆದಾರರನ್ನು ನಿಷ್ಕ್ರಿಯಗೊಳಿಸಲು ನಿಮ್ಮ ಮರುಪಡೆಯುವಿಕೆ ಕೋಡ್ ಬಳಸಿ."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "ಲಾಕ್‌",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/ko/messages.json b/apps/browser/src/_locales/ko/messages.json
index 7c484651f5a..b607fa3910b 100644
--- a/apps/browser/src/_locales/ko/messages.json
+++ b/apps/browser/src/_locales/ko/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "마스터 비밀번호 힌트 (선택)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "\"조직\"에 가입하기"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Bitwarden에 로그인"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "등록 재시작"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "기억하기"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "인증 코드 이메일 다시 보내기"
   },
   "useAnotherTwoStepMethod": {
     "message": "다른 2단계 인증 사용"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "YubiKey를 컴퓨터의 USB 포트에 삽입하고 이 버튼을 누르세요."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "새 탭 열기"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "WebAuthn 인증"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "로그인 불가능"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "2단계 인증 옵션"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "모든 2단계 인증을 사용할 수 없는 상황인가요? 복구 코드를 사용하여 계정의 모든 2단계 인증을 비활성화할 수 있습니다."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "시간초과 시 행동"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "잠금",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "복사할 값이 없습니다"
   },
diff --git a/apps/browser/src/_locales/lt/messages.json b/apps/browser/src/_locales/lt/messages.json
index 58814072686..f3313844eab 100644
--- a/apps/browser/src/_locales/lt/messages.json
+++ b/apps/browser/src/_locales/lt/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Pagrindinio slaptažodžio užuomina (neprivaloma)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Prisiminti mane"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Pakartotinai atsiųsti patvirtinimo koda el. paštu"
   },
   "useAnotherTwoStepMethod": {
     "message": "Naudoti dar vieną dviejų žingsnių prisijungimo metodą"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Įkišk YubiKey į savo kompiuterio USB prievadą, tada paliesk jo mygtuką."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Atidaryti naują skirtuką"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Autentifikuoti WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Prisijungimas nepasiekiamas"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Dviejų žingsnių prisijungimo parinktys"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Praradai prieigą prie visų savo dviejų veiksnių teikėjų? Naudok atkūrimo kodą, kad iš savo paskyros išjungtum visus dviejų veiksnių teikėjus."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Užrakinti",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/lv/messages.json b/apps/browser/src/_locales/lv/messages.json
index 9799ff17146..2c80b0b6f10 100644
--- a/apps/browser/src/_locales/lv/messages.json
+++ b/apps/browser/src/_locales/lv/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Galvenās paroles norāde (nav nepieciešama)"
   },
+  "passwordStrengthScore": {
+    "message": "Paroles stipruma novērtējums $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Pievienoties apvienībai"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Pieteikties Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Jāievada e-pastā nosūtītais kods"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Jāievada kods no savas autentificētājlietotnes"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Jāpiespiež sava YubiKey ierīce, lai autentificētu"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Ir nepieciešama Duo divpakāpju pieteikšanās, lai pieteiktos savā kontā. Jāseko zemāk esošajām norādēm, lai pabeigtu pieteikšanos."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Jāseko zemāk esošajām norādēm, lai pabeigtu pieteikšanos."
+  },
   "restartRegistration": {
     "message": "Sākt reģistrēšanos no jauna"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Atcerēties mani"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Šajā ierīcē 30 dienas vairs nevaicāt"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Sūtīt apstiprinājuma koda e-pastu vēlreiz"
   },
   "useAnotherTwoStepMethod": {
     "message": "Izmantot citu divpakāpju pieteikšanās veidu"
   },
+  "selectAnotherMethod": {
+    "message": "Atlasīt citu veidu",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Izmantot savu atkopes kodu"
+  },
   "insertYubiKey": {
     "message": "Ievieto savu YubiKey datora USB ligzdā un pieskaries tā pogai!"
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Atvērt jaunu cilni"
   },
+  "openInNewTab": {
+    "message": "Atvērt jaunā cilnē"
+  },
   "webAuthnAuthenticate": {
     "message": "Autentificēt WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Nolasīt drošības atslēgu"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Gaida mijiedarbību ar drošības atslēgu..."
+  },
   "loginUnavailable": {
     "message": "Pieteikšanās nav pieejama"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Divpakāpju pieteikšanās iespējas"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Atlasīt divpakāpju pieteikšanās veidu"
+  },
   "recoveryCodeDesc": {
     "message": "Zaudēta piekļuve visiem divpakāpju nodrošinātājiem? Izmanto atkopšanas kodus, lai atspējotu visus sava konta divpakāpju nodrošinātājus!"
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Noildzes darbība"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Jaunas pielāgošanas iespējas"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Savu glabātavas pieredzi var pielāgot ar ātrām kopēšanas darbībām, ciešo izkārtojumu un vēl."
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Apskatīt visus izskata iestatījumus"
+  },
   "lock": {
     "message": "Slēgt",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,7 +2446,16 @@
   "atRiskPasswords": {
     "message": "Riskam pakļautās paroles"
   },
-  "atRiskPasswordsDescSingleOrg": {
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ pieprasa mainīt vienu paroli, jo tā ir pakļauta riskam.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
     "message": "$ORGANIZATION$ pieprasa mainīt $COUNT$ paroles, jo tās ir pakļautas riskam.",
     "placeholders": {
       "organization": {
@@ -2404,7 +2468,7 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
+  "atRiskPasswordsDescMultiOrgPlural": {
     "message": "Apvienības pieprasa mainīt $COUNT$ paroles, jo tās ir pakļautas riskam.",
     "placeholders": {
       "count": {
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Jāatjaunina savi iestatījumi, lai varētu veikli aizpildīt paroles automātiski un izveidot jaunas"
   },
+  "reviewAtRiskLogins": {
+    "message": "Pārskatīt riskam pakļautos pieteikšanās vienumus"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Pārskatīt riskam pakļautās paroles"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Apvienības paroles ir pakļautas riskam, jo tās ir vājas, atkārtoti izmantotas un/vai noplūdušas.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Riskam pakļauto pieteikšanās vienumu saraksta attēlojums"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Riskam pakļauto vienumu vietnē ar automātiskās aizpildes izvēlni var ātri izveidot stipru, neatkārtojamu paroli.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Bitwarden automātiskās izvēlnes attēlojums, kurā ir redzama izveidota parole"
+  },
+  "updateInBitwarden": {
+    "message": "Atjaunināt Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden tad vaicās atjaunināt paroli paroļu pārvaldniekā.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Bitwarden paziņojuma, kas aicina lietotāju atjaunināt pieteikšanās vienumu, attēlojums"
+  },
   "turnOnAutofill": {
     "message": "Ieslēgt automātisko aizpildi"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Ievietot starpliktuvē $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Nav vērtību, ko ievietot starpliktuvē"
   },
diff --git a/apps/browser/src/_locales/ml/messages.json b/apps/browser/src/_locales/ml/messages.json
index 7bed62eb24b..637f139e816 100644
--- a/apps/browser/src/_locales/ml/messages.json
+++ b/apps/browser/src/_locales/ml/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "പ്രാഥമിക പാസ്‌വേഡ് സൂചന (ഇഷ്ടാനുസൃതമായ)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "എന്നെ ഓർക്കുക"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "സ്ഥിരീകരണ കോഡ് ഇമെയിൽ വഴി അയയ്ക്കുക"
   },
   "useAnotherTwoStepMethod": {
     "message": "മറ്റൊരു രണ്ട് ഘട്ട ലോഗിൻ രീതി ഉപയോഗിക്കുക"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "നിങ്ങളുടെ കമ്പ്യൂട്ടറിന്റെ യു‌എസ്‌ബി പോർട്ടിലേക്ക് യുബിക്കി ഇടുക, തുടർന്ന് അതിന്റെ ബട്ടൺ അമർത്തുക."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "പ്രവേശനം ലഭ്യമല്ല"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "രണ്ട്-ഘട്ട പ്രവേശനം ഓപ്ഷനുകൾ"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "നിങ്ങളുടെ രണ്ട്-ഘടക ദാതാക്കളിലേക്കുള്ള ആക്‌സസ്സ് നഷ്‌ടപ്പെട്ടോ? നിങ്ങളുടെ അക്കൗണ്ടിൽ നിന്ന് രണ്ട്-ഘടക ദാതാക്കളെ പ്രവർത്തനരഹിതമാക്കാൻ നിങ്ങളുടെ റിക്കവറി കോഡ് ഉപയോഗിക്കുക."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "പൂട്ടുക",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/mr/messages.json b/apps/browser/src/_locales/mr/messages.json
index c264ec60f09..181627cd358 100644
--- a/apps/browser/src/_locales/mr/messages.json
+++ b/apps/browser/src/_locales/mr/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "मुख्य पासवर्डचा संकेत (पर्यायी)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lock",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/my/messages.json b/apps/browser/src/_locales/my/messages.json
index 9fe497bc1c7..41ca7e5dcd2 100644
--- a/apps/browser/src/_locales/my/messages.json
+++ b/apps/browser/src/_locales/my/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master password hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lock",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/nb/messages.json b/apps/browser/src/_locales/nb/messages.json
index 18d889863a4..8022d4372d3 100644
--- a/apps/browser/src/_locales/nb/messages.json
+++ b/apps/browser/src/_locales/nb/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Et hint for hovedpassordet (valgfritt)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Bli med i organisasjonen"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Logg inn på Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Start registreringen på nytt"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Husk på meg"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send E-posten med verifiseringskoden på nytt"
   },
   "useAnotherTwoStepMethod": {
     "message": "Bruk en annen 2-trinnsinnloggingsmetode"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Sett inn din YubiKey i din datamaskins USB-uttak, og så trykk på dens knapp."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Åpne ny fane"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Autentiser WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Innloggingen er utilgjengelig"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Alternativer for 2-trinnsinnlogging"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Har du mistet tilgang til alle dine 2-trinnsleverandører? Bruk din gjenopprettingskode til å fjerne alle 2-trinnsleverandører fra din konto."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Handling ved tidsavbrudd"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lås",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Ingen verdier å kopiere"
   },
diff --git a/apps/browser/src/_locales/ne/messages.json b/apps/browser/src/_locales/ne/messages.json
index 9fe497bc1c7..41ca7e5dcd2 100644
--- a/apps/browser/src/_locales/ne/messages.json
+++ b/apps/browser/src/_locales/ne/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master password hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lock",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/nl/messages.json b/apps/browser/src/_locales/nl/messages.json
index 6019c5aa339..c07244d8cde 100644
--- a/apps/browser/src/_locales/nl/messages.json
+++ b/apps/browser/src/_locales/nl/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Hoofdwachtwoordhint (optioneel)"
   },
+  "passwordStrengthScore": {
+    "message": "Score wachtwoordsterkte $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Lid van organisatie worden"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Inloggen op Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Voer de code in die naar je e-mailadres is verstuurd"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Voer de code uit je authenticatie-app in"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Druk op je YubiKey om te verifiëren"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Jouw account vereist Duo-tweestapsaanmelding. Volg de onderstaande stappen om het inloggen te voltooien."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Volg de onderstaande stappen om in te loggen."
+  },
   "restartRegistration": {
     "message": "Registratie herstarten"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Mijn gegevens onthouden"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "30 dagen niet meer vragen op dit apparaat"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "E-mail met verificatiecode opnieuw versturen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Gebruik een andere methode voor tweestapsaanmelding"
   },
+  "selectAnotherMethod": {
+    "message": "Kies een andere methode",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Gebruik je herstelcode"
+  },
   "insertYubiKey": {
     "message": "Plaats je YubiKey in de USB-poort van je computer en druk op de knop."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Nieuwe tab openen"
   },
+  "openInNewTab": {
+    "message": "Openen in nieuwe tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticeer WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Beveiligingssleutel lezen"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Wacht op interactie met beveiligingssleutel..."
+  },
   "loginUnavailable": {
     "message": "Login niet beschikbaar"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Opties voor tweestapsaanmelding"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Kies methode voor tweestapsaanmelding"
+  },
   "recoveryCodeDesc": {
     "message": "Ben je de toegang tot al je tweestapsaanbieders verloren? Gebruik dan je herstelcode om alle tweestapsaanbieders op je account uit te schakelen."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Time-out actie"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Nieuwe aanpassingsopties"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Personaliseer je kluiservaring met snelle kopieeracties, compacte modus en meer!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Alle personalisatie-instellingen bekijken"
+  },
   "lock": {
     "message": "Vergrendelen",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,7 +2446,16 @@
   "atRiskPasswords": {
     "message": "Wachtwoorden in gevaar"
   },
-  "atRiskPasswordsDescSingleOrg": {
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ vraagt je om één wachtwoord te wijzigen omdat deze een risico vormt.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
     "message": "$ORGANIZATION$ vraagt je om de $COUNT$ wachtwoorden te wijzigen omdat ze een risico vormen.",
     "placeholders": {
       "organization": {
@@ -2404,7 +2468,7 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
+  "atRiskPasswordsDescMultiOrgPlural": {
     "message": "Je organisatie(s) vragen je de $COUNT$ wachtwoorden te wijzigen omdat ze een risico vormen.",
     "placeholders": {
       "count": {
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Werk je instellingen bij voor het snel automatisch invullen van je wachtwoorden en genereren van nieuwe"
   },
+  "reviewAtRiskLogins": {
+    "message": "Risicovolle logins bekijken"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Risicovolle wachtwoorden bekijken"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "De wachtwoorden van je organisatie zijn in gevaar omdat ze zwak, hergebruikt en/of blootgelegd zijn.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Voorbeeld van een lijst van risicovolle logins"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Genereer snel een sterk, uniek wachtwoord met het automatisch invulmenu van Bitwaren op de risicovolle website.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Voorbeeld van het automatisch invulmenu van Bitwarden met een gegenereerd wachtwoord"
+  },
+  "updateInBitwarden": {
+    "message": "Bijwerken in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden vraagt je vervolgens het wachtwoord bij te werken in de wachtwoordbeheerder.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Voorbeeld van een Bitwarden-melding die de gebruiker aanspoort tot het bijwerken van de login"
+  },
   "turnOnAutofill": {
     "message": "Automatisch invullen inschakelen"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "$FIELD$, $VALUE$ kopiëren",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Geen waarden om te kopiëren"
   },
diff --git a/apps/browser/src/_locales/nn/messages.json b/apps/browser/src/_locales/nn/messages.json
index 9fe497bc1c7..41ca7e5dcd2 100644
--- a/apps/browser/src/_locales/nn/messages.json
+++ b/apps/browser/src/_locales/nn/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master password hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lock",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/or/messages.json b/apps/browser/src/_locales/or/messages.json
index 9fe497bc1c7..41ca7e5dcd2 100644
--- a/apps/browser/src/_locales/or/messages.json
+++ b/apps/browser/src/_locales/or/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master password hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lock",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/pl/messages.json b/apps/browser/src/_locales/pl/messages.json
index 0f552edd4eb..70c567f1938 100644
--- a/apps/browser/src/_locales/pl/messages.json
+++ b/apps/browser/src/_locales/pl/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Podpowiedź do hasła głównego (opcjonalnie)"
   },
+  "passwordStrengthScore": {
+    "message": "Siła hasła: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Dołącz do organizacji"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Zaloguj się do Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Wpisz kod wysłany na Twój adres e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Wpisz kod z aplikacji uwierzytelniającej"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Naciśnij YubiKey aby uwierzytelnić"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Logowanie dwustopniowe Duo jest wymagane dla twojego konta. Wykonaj poniższe kroki, by dokończyć logowanie"
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Wykonaj poniższe kroki, by dokończyć logowanie"
+  },
   "restartRegistration": {
     "message": "Zrestartuj rejestrację"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Zapamiętaj mnie"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Nie pytaj ponownie na tym urządzeniu przez 30 dni"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Wyślij ponownie wiadomość z kodem weryfikacyjnym"
   },
   "useAnotherTwoStepMethod": {
     "message": "Użyj innej metody logowania dwustopniowego"
   },
+  "selectAnotherMethod": {
+    "message": "Wybierz inną metodę",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Użyj kodu odzyskiwania"
+  },
   "insertYubiKey": {
     "message": "Włóż klucz YubiKey do portu USB komputera, a następnie dotknij jego przycisku."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Otwórz nową kartę"
   },
+  "openInNewTab": {
+    "message": "Otwórz w nowej karcie"
+  },
   "webAuthnAuthenticate": {
     "message": "Uwierzytelnianie WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Odczytaj klucz bezpieczeństwa"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Oczekiwanie na interakcję z kluczem bezpieczeństwa..."
+  },
   "loginUnavailable": {
     "message": "Logowanie jest niedostępne"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Opcje logowania dwustopniowego"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Wybierz metodę logowania dwustopniowego"
+  },
   "recoveryCodeDesc": {
     "message": "Utraciłeś dostęp do wszystkich swoich mechanizmów dwustopniowego logowania? Użyj kodów odzyskiwania, aby wyłączyć dwustopniowe logowanie na Twoim koncie."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Akcja po przekroczeniu limitu czasu"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Nowe opcje dostosowywania"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Dostosuj swój sejf dzięki akcjom szybkiego kopiowania, trybowi kompaktowemu i więcej!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Zobacz wszystkie ustawienia wyglądu"
+  },
   "lock": {
     "message": "Zablokuj",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,7 +2446,16 @@
   "atRiskPasswords": {
     "message": "Zagrożone hasła"
   },
-  "atRiskPasswordsDescSingleOrg": {
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ prosi o zmianę jednego hasła, ponieważ jest ono zagrożone.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
     "message": "$ORGANIZATION$ prosi o zmianę $COUNT$ haseł, ponieważ są one zagrożone.",
     "placeholders": {
       "organization": {
@@ -2404,7 +2468,7 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
+  "atRiskPasswordsDescMultiOrgPlural": {
     "message": "Twoje organizacje proszą o zmianę $COUNT$ haseł, ponieważ są one zagrożone.",
     "placeholders": {
       "count": {
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Zaktualizuj swoje ustawienia, aby szybko autouzupełniać hasła i generować nowe"
   },
+  "reviewAtRiskLogins": {
+    "message": "Przejrzyj zagrożone loginy"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Przejrzyj zagrożone hasła"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Twoje hasła organizacji są zagrożone, ponieważ są słabe, ponownie używane i/lub narażone.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Ilustracja listy loginów, które są zagrożone"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Szybko wygeneruj silne, unikalne hasło z menu autouzupełniania Bitwarden na stronie narażonej na ryzyko.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Ilustracja menu autouzupełniania Bitwarden pokazująca wygenerowane hasło"
+  },
+  "updateInBitwarden": {
+    "message": "Aktualizacja w Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden poprosi Cię o aktualizację hasła w menedżerze haseł.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Ilustracja powiadomienia Bitwardena, która prosi użytkownika o aktualizację logowania"
+  },
   "turnOnAutofill": {
     "message": "Włącz autouzupełnienie"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Kopiuj $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Brak wartości do skopiowania"
   },
diff --git a/apps/browser/src/_locales/pt_BR/messages.json b/apps/browser/src/_locales/pt_BR/messages.json
index 1e0d2f7241c..8066ece4829 100644
--- a/apps/browser/src/_locales/pt_BR/messages.json
+++ b/apps/browser/src/_locales/pt_BR/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Dica de Senha Mestra (opcional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Juntar-se à organização"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Inicie a sessão no Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Reiniciar registro"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Lembrar de mim"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Enviar código de verificação para o e-mail novamente"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizar outro método de verificação em duas etapas"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insira a sua YubiKey na porta USB do seu computador, e depois toque no botão da mesma."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Abrir nova aba"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Autenticar WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Sessão Indisponível"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Opções de Login em Duas Etapas"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Perdeu o acesso a todos os seus provedores de duas etapas? Utilize o seu código de recuperação para desativar todos os provedores de duas etapas da sua conta."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Ação do tempo"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Bloquear",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Não há valores para copiar"
   },
diff --git a/apps/browser/src/_locales/pt_PT/messages.json b/apps/browser/src/_locales/pt_PT/messages.json
index 28c1e2661df..007a4092431 100644
--- a/apps/browser/src/_locales/pt_PT/messages.json
+++ b/apps/browser/src/_locales/pt_PT/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Dica da palavra-passe mestra (opcional)"
   },
+  "passwordStrengthScore": {
+    "message": "Pontuação da força da palavra-passe: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Aderir à organização"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Iniciar sessão no Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Introduza o código enviado para o seu e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Introduza o código da sua app de autenticação"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Prima a sua YubiKey para se autenticar"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "A verificação de dois passos do Duo é necessária para a sua conta. Siga os passos abaixo para concluir o início de sessão."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Siga os passos abaixo para concluir o início de sessão."
+  },
   "restartRegistration": {
     "message": "Reiniciar registo"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Memorizar"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Não voltar a perguntar neste dispositivo durante 30 dias"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Enviar e-mail com o código de verificação novamente"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizar outro método de verificação de dois passos"
   },
+  "selectAnotherMethod": {
+    "message": "Selecionar outro método",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Utilize o seu código de recuperação"
+  },
   "insertYubiKey": {
     "message": "Introduza a sua YubiKey na porta USB do seu computador, depois toque no botão da mesma."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Abrir novo separador"
   },
+  "openInNewTab": {
+    "message": "Abrir num novo separador"
+  },
   "webAuthnAuthenticate": {
     "message": "Autenticar o WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Ler chave de segurança"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "A aguardar interação da chave de segurança..."
+  },
   "loginUnavailable": {
     "message": "Início de sessão indisponível"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Opções de verificação de dois passos"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Selecionar método de verificação de dois passos"
+  },
   "recoveryCodeDesc": {
     "message": "Perdeu o acesso a todos os seus fornecedores de verificação de dois passos? Utilize o seu código de recuperação para desativar todos os fornecedores de verificação de dois passos da sua conta."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Ação de tempo limite"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Novas opções de personalização"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Personalize a sua experiência no cofre com ações de cópia rápida, modo compacto e muito mais!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Ver todas as definições de Aspeto"
+  },
   "lock": {
     "message": "Bloquear",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,7 +2446,16 @@
   "atRiskPasswords": {
     "message": "Palavras-passe em risco"
   },
-  "atRiskPasswordsDescSingleOrg": {
+  "atRiskPasswordDescSingleOrg": {
+    "message": "A $ORGANIZATION$ pede-lhe que altere uma palavra-passe por estarem em risco.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
     "message": "A $ORGANIZATION$ pede-lhe que altere as $COUNT$ palavras-passe por estarem em risco.",
     "placeholders": {
       "organization": {
@@ -2404,7 +2468,7 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
+  "atRiskPasswordsDescMultiOrgPlural": {
     "message": "As suas organizações pedem-lhe que altere as $COUNT$ palavras-passe por estarem em risco.",
     "placeholders": {
       "count": {
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Atualize as suas definições para poder preencher automaticamente as suas palavras-passe e gerar novas palavras-passe"
   },
+  "reviewAtRiskLogins": {
+    "message": "Rever credenciais em risco"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Rever palavras-passe em risco"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "As palavras-passe da sua organização estão em risco porque são fracas, reutilizadas e/ou expostas.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Ilustração de uma lista de credenciais que estão em risco"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Gira rapidamente uma palavra-passe forte e única com o menu de preenchimento automático do Bitwarden no site em risco.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Ilustração do menu de preenchimento automático do Bitwarden com uma palavra-passe gerada"
+  },
+  "updateInBitwarden": {
+    "message": "Atualização no Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "O Bitwarden pedir-lhe-á então para atualizar a palavra-passe no gestor de palavras-passe.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Ilustração de uma notificação do Bitwarden a pedir ao utilizador que atualize a credencial"
+  },
   "turnOnAutofill": {
     "message": "Ativar o preenchimento automático"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copiar $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Não há valores a copiar"
   },
diff --git a/apps/browser/src/_locales/ro/messages.json b/apps/browser/src/_locales/ro/messages.json
index c3291112629..8f6b2fdf6bb 100644
--- a/apps/browser/src/_locales/ro/messages.json
+++ b/apps/browser/src/_locales/ro/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Indiciu pentru parola principală (opțional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Alăturați-vă organizației"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Reporniți înregistrarea"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Memorare autentificare"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Retrimitere e-mail cu codul de verificare"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizare de metodă diferită de autentificare în două etape"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Introduceți YubiKey în portul USB al calculatorului apoi apăsați butonul acestuia."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Deschideți o filă nouă"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Autentificare WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Autentificare indisponibilă"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Opțiuni de autentificare în două etape"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Ați pierdut accesul la toți furnizorii de autentificare în două etape? Utilizați codul de recuperare pentru a dezactiva toți acești furnizori din contul dvs."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Blocare",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/ru/messages.json b/apps/browser/src/_locales/ru/messages.json
index f1fadb1af0e..71dab1574e7 100644
--- a/apps/browser/src/_locales/ru/messages.json
+++ b/apps/browser/src/_locales/ru/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Подсказка к мастер-паролю (необяз.)"
   },
+  "passwordStrengthScore": {
+    "message": "Оценка надежности пароля $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Присоединиться к организации"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Войти в Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Введите код, отправленный на ваш email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Введите код из приложения-аутентификатора"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Нажмите на YubiKey для аутентификации"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Следуйте указаниям ниже, чтобы завершить авторизацию."
+  },
   "restartRegistration": {
     "message": "Перезапустить регистрацию"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Запомнить меня"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Не спрашивать на этом устройстве в течение 30 дней"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Отправить код подтверждения еще раз"
   },
   "useAnotherTwoStepMethod": {
     "message": "Использовать другой метод двухэтапной аутентификации"
   },
+  "selectAnotherMethod": {
+    "message": "Выбрать другой способ",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Использовать код восстановления"
+  },
   "insertYubiKey": {
     "message": "Вставьте свой YubiKey в USB-порт компьютера и нажмите его кнопку."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Открыть новую вкладку"
   },
+  "openInNewTab": {
+    "message": "Открыть в новой вкладке"
+  },
   "webAuthnAuthenticate": {
     "message": "Аутентификация WebAutn"
   },
+  "readSecurityKey": {
+    "message": "Считать ключ безопасности"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Ожидание взаимодействия с ключом безопасности..."
+  },
   "loginUnavailable": {
     "message": "Вход недоступен"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Настройки двухэтапной аутентификации"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Выбрать другой метод двухэтапной аутентификации"
+  },
   "recoveryCodeDesc": {
     "message": "Потеряли доступ ко всем вариантам двухэтапной аутентификации? Используйте код восстановления, чтобы отключить двухэтапную аутентификацию для вашей учетной записи."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Тайм-аут действия"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Новые возможности настроек"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Настройте работу с хранилищем с помощью действий быстрого копирования, компактного режима и многого другого!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Посмотреть все настройки внешнего вида"
+  },
   "lock": {
     "message": "Блокировка",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "Пароли, подверженные риску"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ запрашивает смену одного пароля, так как он находится под угрозой.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ запрашивает смену $COUNT$ паролей, так как они находятся под угрозой.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Ваша организация запрашивает смену $COUNT$ паролей, так как они находятся под угрозой.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Обзор логинов, находящихся под угрозой"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Обзор паролей, находящихся под угрозой"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Пароли вашей организации находятся под угрозой, потому что они слабые, повторно используются и/или раскрыты.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Иллюстрация списка логинов, которые находятся под угрозой"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Быстро сгенерируйте надежный уникальный пароль с помощью меню автозаполнения Bitwarden на сайте, находящемся под угрозой.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Иллюстрация меню автозаполнения Bitwarden, отображающего сгенерированный пароль"
+  },
+  "updateInBitwarden": {
+    "message": "Обновить в Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "После этого Bitwarden предложит вам обновить пароль в менеджере паролей.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Иллюстрация уведомления Bitwarden, предлагающего пользователю обновить логин"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Скопировать $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Нет значений для копирования"
   },
diff --git a/apps/browser/src/_locales/si/messages.json b/apps/browser/src/_locales/si/messages.json
index dfab38fd25d..07d252dde4e 100644
--- a/apps/browser/src/_locales/si/messages.json
+++ b/apps/browser/src/_locales/si/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "ප්රධාන මුරපදය ඉඟියක් (විකල්ප)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "මාව මතක තබා ගන්න"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "සත්යාපන කේතය නැවත විද්යුත් තැපෑල යවන්න"
   },
   "useAnotherTwoStepMethod": {
     "message": "තවත් පියවර දෙකක පිවිසුම් ක්රමයක් භාවිතා කරන්න"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "ඔබේ පරිගණකයේ USB පෝට් එකට ඔබගේ YuBiKey ඇතුල් කරන්න, ඉන්පසු එහි බොත්තම ස්පර්ශ කරන්න."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "නව ටැබය විවෘත කරන්න"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "සත්‍යවත් වෙබ් සත්‍යවත් කරන්න"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "ලොගින් වන්න ලබාගත නොහැක"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "ද්වි-පියවර ලොගින් වන්න විකල්ප"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "ඔබගේ ද්වි-සාධක සපයන්නන් සියලු ප්රවේශ අහිමි? ඔබගේ ගිණුමෙන් සියලුම ද්වි-සාධක සපයන්නන් අක්රීය කිරීමට ඔබගේ ප්රතිසාධන කේතය භාවිතා කරන්න."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "අගුල",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/sk/messages.json b/apps/browser/src/_locales/sk/messages.json
index 512f18b697c..efdf9b6177d 100644
--- a/apps/browser/src/_locales/sk/messages.json
+++ b/apps/browser/src/_locales/sk/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Nápoveď k hlavnému heslu (voliteľné)"
   },
+  "passwordStrengthScore": {
+    "message": "Sila hesla $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Pripojte sa k organizácii"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Prihlásenie do Bitwardenu"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Zadajte kód zaslaný na váš e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Zadajte kód z overovacej aplikácie"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Stlačte YubiKey na overenie"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Pre váš účet sa vyžaduje dvojstupňové prihlásenie Duo. Na dokončenie prihlásenie nasledujte pokyny."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Na dokončenie prihlásenia postupujte podľa pokynov."
+  },
   "restartRegistration": {
     "message": "Zopakovať registráciu"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Zapamätať si ma"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Nepýtať sa znova na tomto zariadení 30 dní"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Znovu zaslať overovací kód emailom"
   },
   "useAnotherTwoStepMethod": {
     "message": "Použiť inú dvojstupňovú metódu prihlásenia"
   },
+  "selectAnotherMethod": {
+    "message": "Vyberte iný spôsob",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Použiť obnovovací kód"
+  },
   "insertYubiKey": {
     "message": "Vložte váš YubiKey do USB portu počítača a stlačte jeho tlačidlo."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Otvoriť v novej karte"
   },
+  "openInNewTab": {
+    "message": "Otvoriť v novej karte"
+  },
   "webAuthnAuthenticate": {
     "message": "Overiť cez WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Prečítať bezpečnostný kľúč"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Čaká sa na interakciu s bezpečnostným kľúčom..."
+  },
   "loginUnavailable": {
     "message": "Prihlásenie nie je dispozícii"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Možnosti dvojstupňového prihlásenia"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Vyberte metódu dvojstupňového prihlásenia"
+  },
   "recoveryCodeDesc": {
     "message": "Stratili ste prístup ku všetkým vašim dvojstupňovým poskytovateľom? Použite váš záchranný kód pre vypnutie všetkých poskytovateľov vo vašom účte."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Akcia pri vypršaní časového limitu"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Nové možnosti prispôsobenia"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Prispôsobte si trezor pomocou akcií rýchleho kopírovania, kompaktného režimu a ďalších možností!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Zobraziť všetky nastavenia vzhľadu"
+  },
   "lock": {
     "message": "Uzamknúť",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "Rizikové heslá"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ vás žiada o zmenu $COUNT$ hesiel, pretože sú ohrozené.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Vaše organizácie vás žiadajú o zmenu $COUNT$ hesiel, pretože sú ohrozené.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Aktualizujte nastavenia, aby ste mohli rýchlo vypĺňať svoje heslá a vygenerovať nové"
   },
+  "reviewAtRiskLogins": {
+    "message": "Prehľad ohrozených prihlasovacích mien"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Prehľad ohrozených hesiel"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Heslá vašej organizácie sú v ohrození, pretože sú slabé, opakovane používané a/alebo uniknuté.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Príklady zoznamu prihlásení, ktoré sú ohrozené"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Rýchlo generujte silné, jedinečné heslo pomocu ponuky automatického vypĺňania Bitwardenu na ohrozených stránkach.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Príklad ponuky automatického vypĺňania Bitwardenu zobrazujúca vygenerované heslo"
+  },
+  "updateInBitwarden": {
+    "message": "Aktualizovať v Bitwardene"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden vás vyzve na aktualizáciu hesla v správcovi hesiel.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Príklad upozornenia Bitwardenu na aktualizovanie prihlasovacích údajov"
+  },
   "turnOnAutofill": {
     "message": "Zapnúť automatické vypĺňanie"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Kopírovať $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Nie je čo kopírovať"
   },
diff --git a/apps/browser/src/_locales/sl/messages.json b/apps/browser/src/_locales/sl/messages.json
index b1c20934758..2023ecbd5f1 100644
--- a/apps/browser/src/_locales/sl/messages.json
+++ b/apps/browser/src/_locales/sl/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Namig za glavno geslo (neobvezno)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Zapomni si me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Ponovno pošlji verifikacijsko kodo na email"
   },
   "useAnotherTwoStepMethod": {
     "message": "Uporabi drugi način prijave v dveh korakih"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Priključi svoj YubiKey v USB priključek, nato pa pritisni na njegovo tipko."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Odpri nov zavihek"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Prijava ni na voljo"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Možnosti dvostopenjske prijave"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Ste izgubili dostop do vseh ponudnikov dvostopenjske prijave? Uporabite svojo kodo za obnovitev in tako onemogočite dvostopenjsko prijavo v svoj račun."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Zaklepanje",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/sr/messages.json b/apps/browser/src/_locales/sr/messages.json
index d20e904d5b9..8d35a517bc8 100644
--- a/apps/browser/src/_locales/sr/messages.json
+++ b/apps/browser/src/_locales/sr/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Савет Главне Лозинке (опционо)"
   },
+  "passwordStrengthScore": {
+    "message": "Снага лозинкe $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Придружи Организацију"
   },
@@ -177,7 +186,7 @@
     "message": "Копирати белешке"
   },
   "copy": {
-    "message": "Copy",
+    "message": "Копирај",
     "description": "Copy to clipboard"
   },
   "fill": {
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Пријавите се на Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Унесите кôд послат на ваш имејл"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Унесите кôд из апликације за аутентификацију"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Стисните Ваш YubiKey за аутентификацију"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "За ваш налог је потребан два корака. Следите наведене кораке да бисте завршили пријављивање."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Следите наведене кораке да бисте завршили пријављивање."
+  },
   "restartRegistration": {
     "message": "Поново покрените регистрацију"
   },
@@ -1030,7 +1054,7 @@
     "message": "Кликните на ставке за ауто-попуњавање у приказу сефа"
   },
   "clickToAutofill": {
-    "message": "Click items in autofill suggestion to fill"
+    "message": "Кликните на ставке у ауто-пуњење предлогу за попуњавање"
   },
   "clearClipboard": {
     "message": "Обриши привремену меморију",
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Запамти ме"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Не питајте поново на овом уређају 30 дана"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Поново послати верификациони код на имејл"
   },
   "useAnotherTwoStepMethod": {
     "message": "Користите другу методу пријављивања у два корака"
   },
+  "selectAnotherMethod": {
+    "message": "Изаберите другу методу",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Употребите шифру за опоравак"
+  },
   "insertYubiKey": {
     "message": "Убаците свој YubiKey у УСБ порт рачунара, а затим додирните његово дугме."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Отвори нови језичак "
   },
+  "openInNewTab": {
+    "message": "Отвори у новом језичку"
+  },
   "webAuthnAuthenticate": {
     "message": "WebAutn аутентификација"
   },
+  "readSecurityKey": {
+    "message": "Читај сигурносни кључ"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Чека се интеракција сигурносног кључа..."
+  },
   "loginUnavailable": {
     "message": "Пријава недоступна"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Опције дво-коракне пријаве"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Одабрати методу пријављивања у два корака"
+  },
   "recoveryCodeDesc": {
     "message": "Изгубили сте приступ свим својим двофакторским добављачима? Употребите код за опоравак да онемогућите све двофакторске добављаче из налога."
   },
@@ -2089,7 +2135,7 @@
     "description": "This will be used as part of a larger sentence, broken up to include the generator icon. The full sentence will read 'Use the generator [GENERATOR_ICON] to create a strong unique password'"
   },
   "vaultCustomization": {
-    "message": "Vault customization"
+    "message": "Прилагођавање сефа"
   },
   "vaultTimeoutAction": {
     "message": "Акција на тајмаут сефа"
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Акција тајмаута"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Нове опције прилагођавања"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Прилагодите своје искуство сефа помоћу брзих акција копирања, компактног режима и још много тога!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "Погледајте сва подешавања изглед"
+  },
   "lock": {
     "message": "Закључај",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2356,7 +2411,7 @@
     "message": "Блокирани домени"
   },
   "learnMoreAboutBlockedDomains": {
-    "message": "Learn more about blocked domains"
+    "message": "Сазнајте више о блокираним доменима"
   },
   "excludedDomains": {
     "message": "Изузети домени"
@@ -2377,10 +2432,10 @@
     "message": "Промените ово у подешавањима"
   },
   "change": {
-    "message": "Change"
+    "message": "Промени"
   },
   "changeButtonTitle": {
-    "message": "Change password - $ITEMNAME$",
+    "message": "Промена лозинке - $ITEMNAME$",
     "placeholders": {
       "itemname": {
         "content": "$1",
@@ -2389,10 +2444,19 @@
     }
   },
   "atRiskPasswords": {
-    "message": "At-risk passwords"
+    "message": "Лозинке под ризиком"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2414,10 +2478,10 @@
     }
   },
   "reviewAndChangeAtRiskPassword": {
-    "message": "Review and change one at-risk password"
+    "message": "Прегледајте и промените једну лозинку за ризик"
   },
   "reviewAndChangeAtRiskPasswordsPlural": {
-    "message": "Review and change $COUNT$ at-risk passwords",
+    "message": "Прегледајте и промените лозинке под ризиком: $COUNT$",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2426,19 +2490,49 @@
     }
   },
   "changeAtRiskPasswordsFaster": {
-    "message": "Change at-risk passwords faster"
+    "message": "Брже промените лозинке за ризик"
   },
   "changeAtRiskPasswordsFasterDesc": {
-    "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
+    "message": "Ажурирајте поставке да бисте брзо поставили лозинке и генерисати нове"
+  },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
   },
   "turnOnAutofill": {
-    "message": "Turn on autofill"
+    "message": "Омогућите ауто-пуњење"
   },
   "turnedOnAutofill": {
-    "message": "Turned on autofill"
+    "message": "Ауто-пуњење упаљено"
   },
   "dismiss": {
-    "message": "Dismiss"
+    "message": "Одбаци"
   },
   "websiteItemLabel": {
     "message": "Сајт $number$ (УРЛ)",
@@ -3045,7 +3139,7 @@
     }
   },
   "forwaderInvalidOperation": {
-    "message": "$SERVICENAME$ refused your request. Please contact your service provider for assistance.",
+    "message": "$SERVICENAME$ одбио ваш захтев. Обратите се свом провајдеру сервиса за помоћ.",
     "description": "Displayed when the user is forbidden from using the API by the forwarding service.",
     "placeholders": {
       "servicename": {
@@ -3055,7 +3149,7 @@
     }
   },
   "forwaderInvalidOperationWithMessage": {
-    "message": "$SERVICENAME$ refused your request: $ERRORMESSAGE$",
+    "message": "$SERVICENAME$ одбио ваш захтев: $ERRORMESSAGE$",
     "description": "Displayed when the user is forbidden from using the API by the forwarding service with an error message.",
     "placeholders": {
       "servicename": {
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Копирај $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Нема вредности за копирање"
   },
diff --git a/apps/browser/src/_locales/sv/messages.json b/apps/browser/src/_locales/sv/messages.json
index 15e2160b9d2..d501572be76 100644
--- a/apps/browser/src/_locales/sv/messages.json
+++ b/apps/browser/src/_locales/sv/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Huvudlösenordsledtråd (valfri)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Gå med i organisation"
   },
@@ -177,7 +186,7 @@
     "message": "Kopiera anteckningar"
   },
   "copy": {
-    "message": "Copy",
+    "message": "Kopiera",
     "description": "Copy to clipboard"
   },
   "fill": {
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Logga in på Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Kom ihåg mig"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Skicka e-postmeddelandet med verifieringskoden igen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Använd en annan inloggningsmetod för tvåstegsverifiering"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Sätt i din YubiKey i en av datorns USB-portar och sätt fingret på knappen."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Öppna ny flik"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Autentisera WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Inloggning ej tillgänglig"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Alternativ för tvåstegsverifiering"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Förlorat åtkomst till alla dina metoder för tvåstegsverifiering? Använd din återställningskod för att inaktivera tvåstegsverifiering på ditt konto."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lås",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/te/messages.json b/apps/browser/src/_locales/te/messages.json
index 9fe497bc1c7..41ca7e5dcd2 100644
--- a/apps/browser/src/_locales/te/messages.json
+++ b/apps/browser/src/_locales/te/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master password hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Lock",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/th/messages.json b/apps/browser/src/_locales/th/messages.json
index d37c7fc7a21..e2a9b099baf 100644
--- a/apps/browser/src/_locales/th/messages.json
+++ b/apps/browser/src/_locales/th/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Master Password Hint (optional)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Join organization"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Restart registration"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "ส่งโค้ดยืนยันไปยังอีเมลอีกครั้ง"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Open new tab"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Login Unavailable"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Two-step Login Options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to turn off all two-factor providers from your account."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "ล็อก",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "No values to copy"
   },
diff --git a/apps/browser/src/_locales/tr/messages.json b/apps/browser/src/_locales/tr/messages.json
index acabe8a5688..6087b05bedb 100644
--- a/apps/browser/src/_locales/tr/messages.json
+++ b/apps/browser/src/_locales/tr/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Ana parola ipucu (isteğe bağlı)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Kuruluşa katıl"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Bitwarden'a giriş yapın"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "E-posta adresinize gönderilen kodu girin"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Kimlik doğrulama uygulamanızdaki kodu girin"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Kaydı yeniden başlat"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Beni hatırla"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Doğrulama kodunu yeniden gönder"
   },
   "useAnotherTwoStepMethod": {
     "message": "Başka bir iki aşamalı giriş yöntemini kullan"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "YubiKey'i bilgisayarınızın USB portuna takın, ardından düğmesine dokunun."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Yeni sekme aç"
   },
+  "openInNewTab": {
+    "message": "Yeni sekmede aç"
+  },
   "webAuthnAuthenticate": {
     "message": "WebAutn ile doğrula"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Giriş yapılamıyor"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "İki aşamalı giriş seçenekleri"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "İki aşamalı doğrulama sağlayıcılarınıza ulaşamıyor musunuz? Kurtarma kodunuzu kullanarak hesabınızdaki tüm iki aşamalı giriş sağlayıcılarını devre dışı bırakabilirsiniz."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Zaman aşımı eylemi"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "Yeni özelleştirme seçenekleri"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Kilitle",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "Riskli parolalar"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Otomatik doldurmayı etkinleştir"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Kopyala: $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Kopyalanacak değer yok"
   },
diff --git a/apps/browser/src/_locales/uk/messages.json b/apps/browser/src/_locales/uk/messages.json
index abe0a082e88..7568eff9ea4 100644
--- a/apps/browser/src/_locales/uk/messages.json
+++ b/apps/browser/src/_locales/uk/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Підказка для головного пароля (необов'язково)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Приєднатися до організації"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Увійти в Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Перезапустити реєстрацію"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Запам'ятати мене"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Надіслати код підтвердження ще раз"
   },
   "useAnotherTwoStepMethod": {
     "message": "Інший спосіб двоетапної перевірки"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Вставте свій YubiKey в USB порт комп'ютера, потім торкніться цієї кнопки."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Відкрити нову вкладку"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Автентифікація WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Вхід недоступний"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Налаштування двоетапної перевірки"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Втратили доступ до всіх провайдерів двоетапної перевірки? Скористайтеся кодом відновлення, щоб вимкнути двоетапну перевірку для свого облікового запису."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Дія після часу очікування"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Блокувати",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "Ризиковані паролі"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ вимагає зміни $COUNT$ паролів, оскільки вони ризиковані.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Ваші організації вимагають зміни $COUNT$ паролів, оскільки вони ризиковані.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Оновіть налаштування, щоб швидше автоматично заповнювати й створювати паролі"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Увімкніть автозаповнення"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Немає значень для копіювання"
   },
diff --git a/apps/browser/src/_locales/vi/messages.json b/apps/browser/src/_locales/vi/messages.json
index f4164e66ee2..8e7bc5545f2 100644
--- a/apps/browser/src/_locales/vi/messages.json
+++ b/apps/browser/src/_locales/vi/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "Gợi ý mật khẩu chính (tùy chọn)"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "Tham gia tổ chức"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "Tiến hành đăng ký lại"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "Ghi nhớ đăng nhập"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Gửi lại email chứa mã xác nhận"
   },
   "useAnotherTwoStepMethod": {
     "message": "Sử dụng phương pháp đăng nhập 2 bước khác"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Lắp YubiKey vào cổng USB máy tính của bạn, sau đó chạm vào nút trên nó."
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "Mở thẻ mới"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "Xác thực WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "Đăng nhập không có sẵn"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "Tùy chọn xác thực hai lớp"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Bạn mất quyền truy cập vào tất cả các dịch vụ xác thực 2 lớp? Sử dụng mã phục hồi của bạn để vô hiệu hóa tất cả các dịch vụ xác thực hai lớp trong tài khoản của bạn."
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "Timeout action"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "Khóa",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "Không có giá trị để sao chép"
   },
diff --git a/apps/browser/src/_locales/zh_CN/messages.json b/apps/browser/src/_locales/zh_CN/messages.json
index 7b94c0b07b6..c7ad885de92 100644
--- a/apps/browser/src/_locales/zh_CN/messages.json
+++ b/apps/browser/src/_locales/zh_CN/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "主密码提示（可选）"
   },
+  "passwordStrengthScore": {
+    "message": "密码强度评分 $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "加入组织"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "登录到 Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "输入发送到您的电子邮箱的代码"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "输入来自您的验证器 App 的代码"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "按下 YubiKey 以验证身份"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "您的账户要求使用 Duo 两步登录。请按照以下步骤完成登录。"
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "按照以下步骤完成登录。"
+  },
   "restartRegistration": {
     "message": "重启注册"
   },
@@ -907,7 +931,7 @@
     "message": "文件夹已添加"
   },
   "twoStepLoginConfirmation": {
-    "message": "两步登录要求您从其他设备（例如安全钥匙、验证器 App、短信、电话或者电子邮件）来验证您的登录，这能使您的账户更加安全。两步登录需要在 bitwarden.com 网页版密码库中设置。现在访问此网站吗？"
+    "message": "两步登录要求您从其他设备（例如安全密钥、验证器 App、短信、电话或者电子邮件）来验证您的登录，这能使您的账户更加安全。两步登录需要在 bitwarden.com 网页版密码库中设置。现在访问此网站吗？"
   },
   "twoStepLoginConfirmationContent": {
     "message": "在 Bitwarden 网页 App 中设置两步登录，让您的账户更加安全。"
@@ -1365,17 +1389,27 @@
   "rememberMe": {
     "message": "记住我"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "30 天内在此设备上不再询问"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "再次发送验证码电子邮件"
   },
   "useAnotherTwoStepMethod": {
     "message": "使用其他两步登录方式"
   },
+  "selectAnotherMethod": {
+    "message": "选择其他方式",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "使用您的恢复代码"
+  },
   "insertYubiKey": {
     "message": "将您的 YubiKey 插入计算机的 USB 端口，然后触摸其按钮。"
   },
   "insertU2f": {
-    "message": "将您的安全钥匙插入计算机的 USB 端口。如果它有按钮，请触摸它。"
+    "message": "将您的安全密钥插入计算机的 USB 端口。如果它有按钮，请触摸它。"
   },
   "webAuthnNewTab": {
     "message": "要开始 WebAuthn 2FA 验证，请点击下面的按钮打开一个新标签页，并按照新标签页中提供的说明操作。"
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "打开新标签页"
   },
+  "openInNewTab": {
+    "message": "在新标签页中打开"
+  },
   "webAuthnAuthenticate": {
     "message": "验证 WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "读取安全密钥"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "等待安全密钥交互……"
+  },
   "loginUnavailable": {
     "message": "登录不可用"
   },
@@ -1393,11 +1436,14 @@
     "message": "此账户已设置两步登录，但此浏览器不支持任何已配置的两步登录提供程序。"
   },
   "noTwoStepProviders2": {
-    "message": "请使用支持的网页浏览器（例如 Chrome）和/或添加其他支持更广泛的提供程序（例如验证器 App）。"
+    "message": "请使用受支持的网页浏览器（例如 Chrome），和/或添加其他跨网页浏览器支持更好的提供程序（例如验证器 App）。"
   },
   "twoStepOptions": {
     "message": "两步登录选项"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "选择两步登录方式"
+  },
   "recoveryCodeDesc": {
     "message": "无法访问您所有的双重身份提供程序吗？请使用您的恢复代码来关闭您账户中所有的双重身份提供程序。"
   },
@@ -1412,7 +1458,7 @@
     "description": "'Bitwarden Authenticator' is a product name and should not be translated."
   },
   "yubiKeyTitleV2": {
-    "message": "Yubico OTP 安全钥匙"
+    "message": "Yubico OTP 安全密钥"
   },
   "yubiKeyDesc": {
     "message": "使用 YubiKey 来访问您的账户。支持 YubiKey 4、4 Nano、4C 以及 NEO 设备。"
@@ -1422,14 +1468,14 @@
     "description": "'Duo Security' and 'Duo Mobile' are product names and should not be translated."
   },
   "duoOrganizationDesc": {
-    "message": "为您的组织使用 Duo Security 的 Duo 移动 App、短信、电话或 U2F 安全钥匙来进行验证。",
+    "message": "为您的组织使用 Duo Security 的 Duo 移动 App、短信、电话或 U2F 安全密钥来进行验证。",
     "description": "'Duo Security' and 'Duo Mobile' are product names and should not be translated."
   },
   "webAuthnTitle": {
     "message": "FIDO2 WebAuthn"
   },
   "webAuthnDesc": {
-    "message": "使用任何 WebAuthn 兼容的安全钥匙访问您的账户。"
+    "message": "使用任何 WebAuthn 兼容的安全密钥访问您的账户。"
   },
   "emailTitle": {
     "message": "电子邮箱"
@@ -1575,7 +1621,7 @@
     "message": "为当前网站自动填充最后一次使用的身份信息"
   },
   "commandGeneratePasswordDesc": {
-    "message": "生成一个新的随机密码并将其复制到剪贴板中。"
+    "message": "生成一个新的随机密码并将其复制到剪贴板"
   },
   "commandLockVaultDesc": {
     "message": "锁定密码库"
@@ -1890,11 +1936,11 @@
     "message": "没有在已知的数据泄露中发现此密码，它暂时比较安全。"
   },
   "baseDomain": {
-    "message": "基础域",
+    "message": "基础域名",
     "description": "Domain name. Ex. website.com"
   },
   "baseDomainOptionRecommended": {
-    "message": "基础域（推荐）",
+    "message": "基础域名（推荐）",
     "description": "Domain name. Ex. website.com"
   },
   "domainName": {
@@ -2002,10 +2048,10 @@
     "description": "ex. A weak password. Scale: Weak -> Good -> Strong"
   },
   "weakMasterPassword": {
-    "message": "弱主密码"
+    "message": "脆弱的主密码"
   },
   "weakMasterPasswordDesc": {
-    "message": "您选择的主密码较弱。您应该使用强密码（或密码短语）来正确保护您的 Bitwarden 账户。仍要使用此主密码吗？"
+    "message": "您选择的主密码较弱。您应该使用强密码（或密码短语）来正确保护您的 Bitwarden 账户。确定要使用这个主密码吗？"
   },
   "pin": {
     "message": "PIN 码",
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "超时动作"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "新的自定义选项"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "自定义您的密码库体验，包括快速复制操作、紧凑模式等！"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "查看所有外观设置"
+  },
   "lock": {
     "message": "锁定",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2389,9 +2444,18 @@
     }
   },
   "atRiskPasswords": {
-    "message": "有风险的密码"
+    "message": "存在风险的密码"
   },
-  "atRiskPasswordsDescSingleOrg": {
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ 要求您更改 1 个密码，因为它存在风险。",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
     "message": "$ORGANIZATION$ 要求您更改 $COUNT$ 个密码，因为它们存在风险。",
     "placeholders": {
       "organization": {
@@ -2404,7 +2468,7 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
+  "atRiskPasswordsDescMultiOrgPlural": {
     "message": "您的组织要求您更改 $COUNT$ 个密码，因为它们存在风险。",
     "placeholders": {
       "count": {
@@ -2414,10 +2478,10 @@
     }
   },
   "reviewAndChangeAtRiskPassword": {
-    "message": "审查并更改某个有风险的密码"
+    "message": "审查并更改 1 个存在风险的密码"
   },
   "reviewAndChangeAtRiskPasswordsPlural": {
-    "message": "审查并更改 $COUNT$ 个有风险的密码",
+    "message": "审查并更改 $COUNT$ 个存在风险的密码",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "更新您的设置，以便您可以快速自动填充密码并生成新的密码"
   },
+  "reviewAtRiskLogins": {
+    "message": "审查存在风险的登录"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "审查存在风险的密码"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "您的组织密码存在风险，因为它们过于简单、被重复使用和/或已暴露。",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "存在风险的登录列表示意图"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "在存在风险的网站上，使用 Bitwarden 自动填充菜单快速生成强大且唯一的密码。",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Bitwarden 自动填充菜单显示生成的密码示意图"
+  },
+  "updateInBitwarden": {
+    "message": "在 Bitwarden 中更新"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "然后，Bitwarden 会提示您更新密码管理器中的密码。",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "提示用户更新登录的 Bitwarden 通知示意图"
+  },
   "turnOnAutofill": {
     "message": "开启自动填充"
   },
@@ -3693,7 +3787,7 @@
     }
   },
   "tryAgain": {
-    "message": "请重试"
+    "message": "重试"
   },
   "verificationRequiredForActionSetPinToContinue": {
     "message": "此操作需要验证。设置一个 PIN 码以继续。"
@@ -4005,7 +4099,7 @@
     "message": "托管于"
   },
   "useDeviceOrHardwareKey": {
-    "message": "使用您的设备或实体钥匙"
+    "message": "使用您的设备或硬件密钥"
   },
   "justOnce": {
     "message": "仅此一次"
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "复制 $FIELD$，$VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "没有要复制的值"
   },
diff --git a/apps/browser/src/_locales/zh_TW/messages.json b/apps/browser/src/_locales/zh_TW/messages.json
index 4f80f1c6412..37d5239622d 100644
--- a/apps/browser/src/_locales/zh_TW/messages.json
+++ b/apps/browser/src/_locales/zh_TW/messages.json
@@ -80,6 +80,15 @@
   "masterPassHint": {
     "message": "主密碼提示（選用）"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "joinOrganization": {
     "message": "加入組織"
   },
@@ -876,6 +885,21 @@
   "logInToBitwarden": {
     "message": "登入 Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "restartRegistration": {
     "message": "重新啟動註冊"
   },
@@ -1365,12 +1389,22 @@
   "rememberMe": {
     "message": "記住我"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "再次傳送​​包含驗證碼的電子郵件"
   },
   "useAnotherTwoStepMethod": {
     "message": "使用另一種兩步驟登入方法"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "將您的 YubiKey 插入電腦的 USB 連接埠，然後按一下它的按鈕。"
   },
@@ -1383,9 +1417,18 @@
   "webAuthnNewTabOpen": {
     "message": "開啟新分頁"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "webAuthnAuthenticate": {
     "message": "驗證 WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "loginUnavailable": {
     "message": "登入無法使用"
   },
@@ -1398,6 +1441,9 @@
   "twoStepOptions": {
     "message": "兩步驟登入選項"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "無法使用任何雙因素提供程式嗎？請使用您的復原碼以停用您帳戶的所有雙因素提供程式。"
   },
@@ -2097,6 +2143,15 @@
   "vaultTimeoutAction1": {
     "message": "逾時後動作"
   },
+  "newCustomizationOptionsCalloutTitle": {
+    "message": "New customization options"
+  },
+  "newCustomizationOptionsCalloutContent": {
+    "message": "Customize your vault experience with quick copy actions, compact mode, and more!"
+  },
+  "newCustomizationOptionsCalloutLink": {
+    "message": "View all Appearance settings"
+  },
   "lock": {
     "message": "鎖定",
     "description": "Verb form: to make secure or inaccessible by"
@@ -2391,8 +2446,17 @@
   "atRiskPasswords": {
     "message": "At-risk passwords"
   },
-  "atRiskPasswordsDescSingleOrg": {
-    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordDescSingleOrg": {
+    "message": "$ORGANIZATION$ is requesting you change one password because it is at-risk.",
+    "placeholders": {
+      "organization": {
+        "content": "$1",
+        "example": "Acme Corp"
+      }
+    }
+  },
+  "atRiskPasswordsDescSingleOrgPlural": {
+    "message": "$ORGANIZATION$ is requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "organization": {
         "content": "$1",
@@ -2404,8 +2468,8 @@
       }
     }
   },
-  "atRiskPasswordsDescMultiOrg": {
-    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at risk.",
+  "atRiskPasswordsDescMultiOrgPlural": {
+    "message": "Your organizations are requesting you change the $COUNT$ passwords because they are at-risk.",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -2431,6 +2495,36 @@
   "changeAtRiskPasswordsFasterDesc": {
     "message": "Update your settings so you can quickly autofill your passwords and generate new ones"
   },
+  "reviewAtRiskLogins": {
+    "message": "Review at-risk logins"
+  },
+  "reviewAtRiskPasswords": {
+    "message": "Review at-risk passwords"
+  },
+  "reviewAtRiskLoginsSlideDesc": {
+    "message": "Your organization passwords are at-risk because they are weak, reused, and/or exposed.",
+    "description": "Description of the review at-risk login slide on the at-risk password page carousel"
+  },
+  "reviewAtRiskLoginSlideImgAlt": {
+    "message": "Illustration of a list of logins that are at-risk"
+  },
+  "generatePasswordSlideDesc": {
+    "message": "Quickly generate a strong, unique password with the Bitwarden autofill menu on the at-risk site.",
+    "description": "Description of the generate password slide on the at-risk password page carousel"
+  },
+  "generatePasswordSlideImgAlt": {
+    "message": "Illustration of the Bitwarden autofill menu displaying a generated password"
+  },
+  "updateInBitwarden": {
+    "message": "Update in Bitwarden"
+  },
+  "updateInBitwardenSlideDesc": {
+    "message": "Bitwarden will then prompt you to update the password in the password manager.",
+    "description": "Description of the update in Bitwarden slide on the at-risk password page carousel"
+  },
+  "updateInBitwardenSlideImgAlt": {
+    "message": "Illustration of a Bitwarden’s notification prompting the user to update the login"
+  },
   "turnOnAutofill": {
     "message": "Turn on autofill"
   },
@@ -4181,6 +4275,20 @@
       }
     }
   },
+  "copyFieldValue": {
+    "message": "Copy $FIELD$, $VALUE$",
+    "description": "Title for a button that copies a field value to the clipboard.",
+    "placeholders": {
+      "field": {
+        "content": "$1",
+        "example": "Username"
+      },
+      "value": {
+        "content": "$2",
+        "example": "Foo"
+      }
+    }
+  },
   "noValuesToCopy": {
     "message": "沒有資料可以複製"
   },
diff --git a/apps/browser/store/locales/he/copy.resx b/apps/browser/store/locales/he/copy.resx
index 37ca9b6d667..6edd86c4a68 100644
--- a/apps/browser/store/locales/he/copy.resx
+++ b/apps/browser/store/locales/he/copy.resx
@@ -152,8 +152,8 @@ Bitwarden באופן קבוע מבצעת ביקורות אבטחה מקיפות
 2FA מתקדם
 אבטח את הכניסות שלך עם מאמת צד שלישי, קודים בדוא"ל, או אישורי FIDO2 WebAuthn כמו מפתח אבטחת חומרה או מפתח גישה.
 
-Bitwarden סנד
-שדר נתונים ישירות אל אחרים תוך כדי שמירה על אבטחת הצפנה מקצה-לקצה והגבלת חשיפה.
+Bitwarden סֵנְד
+שדר נתונים ישירות אל אחרים תוך שמירה על אבטחת הצפנה מקצה-לקצה והגבלת חשיפה.
 
 מחולל מובנה
 צור סיסמאות ארוכות, מורכבות, ושונות ושמות משתמש ייחודיים עבור כל אתר שאתה מבקר. שלב עם ספקי כינויי דוא"ל עבור פרטיות נוספת.
diff --git a/apps/browser/store/locales/pl/copy.resx b/apps/browser/store/locales/pl/copy.resx
index 5641c68c488..3d5c4f47864 100644
--- a/apps/browser/store/locales/pl/copy.resx
+++ b/apps/browser/store/locales/pl/copy.resx
@@ -121,7 +121,7 @@
     <value>Menedżer Haseł Bitwarden</value>
   </data>
   <data name="Summary" xml:space="preserve">
-    <value>W domu, w pracy, lub w ruchu, Bitwarden z łatwością zabezpiecza wszystkie Twoje hasła, passkeys i poufne informacje.</value>
+    <value>W domu, w pracy lub w ruchu Bitwarden z łatwością zabezpiecza wszystkie twoje hasła, klucze i poufne informacje.</value>
   </data>
   <data name="Description" xml:space="preserve">
     <value>Uznany za najlepszego menedżera haseł przez PCMag, WIRED, The Verge, CNET, G2 i wielu innych!
diff --git a/apps/browser/store/locales/zh_CN/copy.resx b/apps/browser/store/locales/zh_CN/copy.resx
index 0f73ccd6619..c66c6fdb411 100644
--- a/apps/browser/store/locales/zh_CN/copy.resx
+++ b/apps/browser/store/locales/zh_CN/copy.resx
@@ -150,7 +150,7 @@
 Bitwarden 定期与知名的安全公司进行全面的第三方安全审计。这些年度审计包括对 Bitwarden IP、服务器和 Web 应用程序的源代码评估和渗透测试。
 
 高级 2FA
-使用第三方验证器、电子邮件代码或 FIDO2 WebAuthn 凭据（例如硬件安全钥匙或通行密钥）保护您的登录。
+使用第三方验证器、电子邮件代码或 FIDO2 WebAuthn 凭据（例如硬件安全密钥或通行密钥）保护您的登录。
 
 Bitwarden Send
 直接传输数据给他人，同时保持端对端加密的安全性并防止暴露。

From 8176515c57749133a4908302bfb0a5cf11c37651 Mon Sep 17 00:00:00 2001
From: "bw-ghapp[bot]" <178206702+bw-ghapp[bot]@users.noreply.github.com>
Date: Fri, 28 Feb 2025 12:57:17 +0100
Subject: [PATCH 26/47] Autosync the updated translations (#13623)

Co-authored-by: bitwarden-devops-bot <106330231+bitwarden-devops-bot@users.noreply.github.com>
---
 apps/web/src/locales/af/messages.json    |  73 ++++++++
 apps/web/src/locales/ar/messages.json    |  73 ++++++++
 apps/web/src/locales/az/messages.json    |  73 ++++++++
 apps/web/src/locales/be/messages.json    |  73 ++++++++
 apps/web/src/locales/bg/messages.json    |  73 ++++++++
 apps/web/src/locales/bn/messages.json    |  73 ++++++++
 apps/web/src/locales/bs/messages.json    |  73 ++++++++
 apps/web/src/locales/ca/messages.json    |  73 ++++++++
 apps/web/src/locales/cs/messages.json    |  73 ++++++++
 apps/web/src/locales/cy/messages.json    |  73 ++++++++
 apps/web/src/locales/da/messages.json    |  73 ++++++++
 apps/web/src/locales/de/messages.json    |  77 ++++++++-
 apps/web/src/locales/el/messages.json    |  75 ++++++++-
 apps/web/src/locales/en_GB/messages.json |  73 ++++++++
 apps/web/src/locales/en_IN/messages.json |  73 ++++++++
 apps/web/src/locales/eo/messages.json    |  73 ++++++++
 apps/web/src/locales/es/messages.json    |  73 ++++++++
 apps/web/src/locales/et/messages.json    |  73 ++++++++
 apps/web/src/locales/eu/messages.json    |  73 ++++++++
 apps/web/src/locales/fa/messages.json    |  73 ++++++++
 apps/web/src/locales/fi/messages.json    |  73 ++++++++
 apps/web/src/locales/fil/messages.json   |  73 ++++++++
 apps/web/src/locales/fr/messages.json    |  99 +++++++++--
 apps/web/src/locales/gl/messages.json    |  73 ++++++++
 apps/web/src/locales/he/messages.json    |  73 ++++++++
 apps/web/src/locales/hi/messages.json    |  73 ++++++++
 apps/web/src/locales/hr/messages.json    |  73 ++++++++
 apps/web/src/locales/hu/messages.json    |  73 ++++++++
 apps/web/src/locales/id/messages.json    |  73 ++++++++
 apps/web/src/locales/it/messages.json    |  73 ++++++++
 apps/web/src/locales/ja/messages.json    |  73 ++++++++
 apps/web/src/locales/ka/messages.json    |  73 ++++++++
 apps/web/src/locales/km/messages.json    |  73 ++++++++
 apps/web/src/locales/kn/messages.json    |  73 ++++++++
 apps/web/src/locales/ko/messages.json    |  73 ++++++++
 apps/web/src/locales/lv/messages.json    |  73 ++++++++
 apps/web/src/locales/ml/messages.json    |  73 ++++++++
 apps/web/src/locales/mr/messages.json    |  73 ++++++++
 apps/web/src/locales/my/messages.json    |  73 ++++++++
 apps/web/src/locales/nb/messages.json    |  73 ++++++++
 apps/web/src/locales/ne/messages.json    |  73 ++++++++
 apps/web/src/locales/nl/messages.json    |  73 ++++++++
 apps/web/src/locales/nn/messages.json    |  73 ++++++++
 apps/web/src/locales/or/messages.json    |  73 ++++++++
 apps/web/src/locales/pl/messages.json    |  73 ++++++++
 apps/web/src/locales/pt_BR/messages.json |  73 ++++++++
 apps/web/src/locales/pt_PT/messages.json |  77 ++++++++-
 apps/web/src/locales/ro/messages.json    |  73 ++++++++
 apps/web/src/locales/ru/messages.json    |  79 ++++++++-
 apps/web/src/locales/si/messages.json    |  73 ++++++++
 apps/web/src/locales/sk/messages.json    |  77 ++++++++-
 apps/web/src/locales/sl/messages.json    |  73 ++++++++
 apps/web/src/locales/sr/messages.json    | 135 +++++++++++----
 apps/web/src/locales/sr_CS/messages.json |  73 ++++++++
 apps/web/src/locales/sv/messages.json    |  73 ++++++++
 apps/web/src/locales/te/messages.json    |  73 ++++++++
 apps/web/src/locales/th/messages.json    |  73 ++++++++
 apps/web/src/locales/tr/messages.json    |  73 ++++++++
 apps/web/src/locales/uk/messages.json    |  73 ++++++++
 apps/web/src/locales/vi/messages.json    |  73 ++++++++
 apps/web/src/locales/zh_CN/messages.json | 201 +++++++++++++++--------
 apps/web/src/locales/zh_TW/messages.json |  73 ++++++++
 62 files changed, 4644 insertions(+), 118 deletions(-)

diff --git a/apps/web/src/locales/af/messages.json b/apps/web/src/locales/af/messages.json
index 5c058d2ad6e..89bd6740eba 100644
--- a/apps/web/src/locales/af/messages.json
+++ b/apps/web/src/locales/af/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Onthou my"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Stuur weer e-pos met bevestigingskode"
   },
   "useAnotherTwoStepMethod": {
     "message": "Gebruik ’n ander tweestapaantekenmetode"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Plaas u YubiKey in u rekenaar se USB-poort en druk dan op sy knop."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Opsies vir tweestapaantekening"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Het u toegang tot al u tweestapaanbieders verloor? Gebruik dan u terugstelkode om alle tweestapaanbieders op u rekening te deaktiveer."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Gemigreer van FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "E-pos"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "U gebruik ’n onondersteunde webblaaier. Die webkluis werk dalk nie soos normaal nie."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Stel minimum vereistes vir hoofwagwoordsterkte."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Waarmerk WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn word nie in hierdie blaaier ondersteun nie."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/ar/messages.json b/apps/web/src/locales/ar/messages.json
index c42d23205d9..aae3889400e 100644
--- a/apps/web/src/locales/ar/messages.json
+++ b/apps/web/src/locales/ar/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "تسجيل الدخول إلى بيتواردن"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "مهلة المصادقة"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "تذكرني"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "إرسال رمز التحقق إلى البريد الإلكتروني مرة أخرى"
   },
   "useAnotherTwoStepMethod": {
     "message": "استخدام طريقة أخرى لتسجيل الدخول بخطوتين"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "خيارات تسجيل الدخول بخطوتين"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "البريد الإلكتروني"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/az/messages.json b/apps/web/src/locales/az/messages.json
index f586d92a136..b2a68c104a4 100644
--- a/apps/web/src/locales/az/messages.json
+++ b/apps/web/src/locales/az/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritik tətbiqlər"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "Risk altında heç bir kritik tətbiq yoxdur"
+  },
   "accessIntelligence": {
     "message": "Müraciət Kəşfiyyatı"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Bitwarden-ə giriş edin"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "E-poçtunuza göndərilən kodu daxil edin"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Kimlik doğrulayıcı tətbiqinizdəki kodu daxil edin"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Kimliyi doğrulamaq üçün YubiKey-inizə basın"
+  },
   "authenticationTimeout": {
     "message": "Kimlik doğrulama vaxtı bitdi"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Məni xatırla"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Bu cihazda 30 gün ərzində soruşulmasın"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Doğrulama kodu olan e-poçtu yenidən göndər"
   },
   "useAnotherTwoStepMethod": {
     "message": "Başqa bir iki addımlı giriş üsulu istifadə edin"
   },
+  "selectAnotherMethod": {
+    "message": "Başqa üsul seçin",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Geri qaytarma kodunuzu istifadə edin"
+  },
   "insertYubiKey": {
     "message": "\"YubiKey\"i kompüterinizin USB portuna taxın, daha sonra düyməsinə toxunun."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "İki addımlı giriş seçimləri"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "İki addımlı giriş üsulunu seçin"
+  },
   "recoveryCodeDesc": {
     "message": "İki addımlı giriş provayderlərinə müraciəti itirmisiniz? Hesabınızdakı bütün iki addımlı giriş provayderlərini söndürmək üçün geri qaytarma kodunuzu istifadə edin."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(FIDO-dan köçürüldü)"
   },
+  "openInNewTab": {
+    "message": "Yeni vərəqdə aç"
+  },
   "emailTitle": {
     "message": "E-poçt"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Dəstəklənməyən bir veb brauzer istifadə edirsiniz. Veb seyf düzgün işləməyə bilər."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Başqa bir cihazdan gözləyən bir giriş tələbiniz var."
+  },
+  "reviewLoginRequest": {
+    "message": "Giriş tələbini incələ"
+  },
   "freeTrialEndPromptCount": {
     "message": "Ödənişsiz sınaq müddətiniz $COUNT$ günə bitir.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Ana parol gücü üçün tələbləri ayarla."
   },
+  "passwordStrengthScore": {
+    "message": "Parolun güc xalı: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "İki addımlı girişi tələb et"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn kimlik doğrulama"
   },
+  "readSecurityKey": {
+    "message": "Güvənlik açarını oxu"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Güvənlik açarı ilə əlaqə gözlənilir..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn bu brauzerdə dəstəklənmir."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Hesabınız üçün DUO iki addımlı giriş tələb olunur."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Hesabınız üçün Duo iki addımlı giriş tələb olunur. Giriş prosesini tamamlamaq üçün aşağıdakı addımları izləyin."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Giriş prosesini tamamlamaq üçün aşağıdakı addımları izləyin."
+  },
   "launchDuo": {
     "message": "DUO-nu başlat"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Üzvlərin öz hesablarının kilidini PIN ilə açmasına icazə verilməsin."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ planında real event log-larına müraciət yoxdur",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Teams və ya Enterprise planına yüksəldərək təşkilatın event log-larına tam müraciət əldə edin."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Real event log dataları üçün yüksəlt"
+  },
+  "upgradeEventLogMessage": {
+    "message": "Bu event-lər sadəcə nümunədir və Bitwarden təşkilatınızdakı real event-ləri əks etdirmir."
   }
 }
diff --git a/apps/web/src/locales/be/messages.json b/apps/web/src/locales/be/messages.json
index 84b9ce7a599..4cffb7879ca 100644
--- a/apps/web/src/locales/be/messages.json
+++ b/apps/web/src/locales/be/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Крытычныя праграмы"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Кіраванне доступам"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Запомніць мяне"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Адправіць праверачны код яшчэ раз"
   },
   "useAnotherTwoStepMethod": {
     "message": "Выкарыстоўваць іншы метад двухэтапнага ўваходу"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Устаўце свой YubiKey у порт USB камп'ютара, а потым націсніце на кнопку."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Параметры двухэтапнага ўваходу"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Згубілі доступ да ўсіх варыянтаў доступу пастаўшчыкоў двухэтапнай аўтэнтыфікацыі? Скарыстайцеся кодам аднаўлення, каб адключыць праверку пастаўшчыкоў двухэтапнай аўтэнтыфікацыі для вашага ўліковага запісу."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Перанесена з FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Электронная пошта"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Ваш браўзер не падтрымліваецца. Вэб-сховішча можа працаваць няправільна."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Прызначце мінімальныя патрабаванні да надзейнасці асноўнага пароля."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Патрабуецца двухэтапны ўваход"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Аўтэнтыфікатар WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn не падтрымліваецца ў гэтым браўзеры."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/bg/messages.json b/apps/web/src/locales/bg/messages.json
index 059652e0daa..f51788bc724 100644
--- a/apps/web/src/locales/bg/messages.json
+++ b/apps/web/src/locales/bg/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Важни приложения"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "Няма важни приложения в риск"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Впишете се в Битуорден"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Въведете кода изпратен на е-пощата Ви"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Въведете кода от Вашето приложение за удостоверяване"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Натиснете бутона на своя YubiKey за удостоверяване"
+  },
   "authenticationTimeout": {
     "message": "Време на давност за удостоверяването"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Запомняне"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Не ме питайте отново на това устройство за 30 дни"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Повторно изпращане на писмото за потвърждение"
   },
   "useAnotherTwoStepMethod": {
     "message": "Използвайте друг начин на двустепенно удостоверяване"
   },
+  "selectAnotherMethod": {
+    "message": "Изберете друг метод",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Използване на код за възстановяване"
+  },
   "insertYubiKey": {
     "message": "Поставете устройството на YubiKey в USB порт на компютъра и натиснете бутона на устройството."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Настройки на двустепенното удостоверяване"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Изберете начин за двустепенно удостоверяване"
+  },
   "recoveryCodeDesc": {
     "message": "Ако сте загубили достъп до двустепенното удостоверяване, може да използвате код за възстановяване, за да изключите двустепенното удостоверяване в абонамента си."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Мигрирано от FIDO)"
   },
+  "openInNewTab": {
+    "message": "Отваряне в нов раздел"
+  },
   "emailTitle": {
     "message": "Електронна поща"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Ползвате неподдържан браузър. Трезорът по уеб може да не сработи правилно."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Имате чакаща заявка за вписване от друго устройство."
+  },
+  "reviewLoginRequest": {
+    "message": "Преглед на заявката за вписване"
+  },
   "freeTrialEndPromptCount": {
     "message": "Вашият безплатен пробен период приключва след $COUNT$ дни.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Задаване на минимална сила на главната парола."
   },
+  "passwordStrengthScore": {
+    "message": "Оценка на сложността на паролата: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Изискване на двустепенно удостоверяване"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Идентификация WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Прочитане на ключа за сигурност"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Изчакване на действие с ключ за сигурност…"
+  },
   "webAuthnNotSupported": {
     "message": "Този браузър не поддържа WebAuthn."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Вашата регистрация изисква двустепенно удостоверяване чрез DUO."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Вашият акаунт изисква вписване чрез двустепенно удостоверяване с Duo. Следвайте стъпките по-долу, за да завършите вписването."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Следвайте стъпките по-долу, за да завършите вписването."
+  },
   "launchDuo": {
     "message": "Стартиране на DUO"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Забраняване на членовете да отключват акаунтите си с ПИН."
+  },
+  "limitedEventLogs": {
+    "message": "Плановете от тип „$PRODUCT_TYPE$“ нямат достъп до истинските журнали на събитията",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Получете пълен достъп до журналите на събитията за организациите като надградите до Екипния план или този за Големи организации."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Надградете за достъп до истинските журнали на събитията"
+  },
+  "upgradeEventLogMessage": {
+    "message": "Тези събития са само за пример и не отразяват истинските събития във Вашата организация."
   }
 }
diff --git a/apps/web/src/locales/bn/messages.json b/apps/web/src/locales/bn/messages.json
index afc52f85e8e..853bf4fe67d 100644
--- a/apps/web/src/locales/bn/messages.json
+++ b/apps/web/src/locales/bn/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "আমাকে মনে রাখবেন"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "আবার যাচাইকরণ কোড ইমেইলে প্রেরণ করুন"
   },
   "useAnotherTwoStepMethod": {
     "message": "অন্য দ্বি-পদক্ষেপ প্রবেশ পদ্ধতি ব্যবহার করুন"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "আপনার কম্পিউটারের ইউএসবি পোর্টে আপনার YubiKey ঢোকান, তারপরে তার বোতামটি স্পর্শ করুন।"
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "দ্বি-পদক্ষেপ লগইন বিকল্প"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "আপনার সমস্ত দ্বি-গুণক সরবরাহকারীদের অ্যাক্সেস হারিয়েছেন? আপনার অ্যাকাউন্ট থেকে সমস্ত দ্বি-গুণক সরবরাহকারীদের অক্ষম করতে আপনার পুনরুদ্ধার কোডটি ব্যবহার করুন।"
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/bs/messages.json b/apps/web/src/locales/bs/messages.json
index 22943f0be44..83b7892bb93 100644
--- a/apps/web/src/locales/bs/messages.json
+++ b/apps/web/src/locales/bs/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Zapamti me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Ponovno slanje kontrolnog koda imejlom"
   },
   "useAnotherTwoStepMethod": {
     "message": "Koristiti drugi način prijave u dva koraka"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Povežite Vaš YubiKey preko USB porta na vašem računaru, pa pritisnite dugme na njemu."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Mogućnosti prijave u dva koraka"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Izgubljen je pristup uređaju za dvostruku autentifikaciju? Koristite svoj kôd za oporavak za onemogućavanje svih pružatelja usluga dvostruke autentifikacije na tvojem računu."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/ca/messages.json b/apps/web/src/locales/ca/messages.json
index ccf66c932ed..b1e2d60f263 100644
--- a/apps/web/src/locales/ca/messages.json
+++ b/apps/web/src/locales/ca/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Aplicacions crítiques"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Intel·ligència d'accés"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Inicia sessió a Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Temps d'espera d'autenticació"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Recorda'm"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Envia el codi de verificació altra vegada"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilitzeu un altre mètode d'inici de sessió en dues passes"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Introduïu el vostre YubiKey al port USB de l'ordinador i, a continuació, premeu el seu botó."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Opcions d'inici de sessió en dos passos"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Heu perdut l'accés a tots els vostres proveïdors de dos factors? Utilitzeu el vostre codi de recuperació per desactivar tots els proveïdors de dos factors del vostre compte."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrat de FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Correu electrònic"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Esteu utilitzant un navegador web no compatible. La caixa forta web pot no funcionar correctament."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Estableix els requisits mínims per al nivell de seguretat de la contrasenya principal."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Cal iniciar sessió en dos passos"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Autenticar WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn no és compatible amb aquest navegador."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Es requereix l'inici de sessió en dos passos de DUO al vostre compte."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Inicia DUO"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/cs/messages.json b/apps/web/src/locales/cs/messages.json
index e805e9e4d21..b24b86bdb49 100644
--- a/apps/web/src/locales/cs/messages.json
+++ b/apps/web/src/locales/cs/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritické aplikace"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "Žádné ohrožené kritické aplikace"
+  },
   "accessIntelligence": {
     "message": "Přístup k inteligenci"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Přihlásit se do Bitwardenu"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Zadejte kód odeslaný na Váš e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Zadejte kód z Vaší ověřovací aplikace"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Stiskněte svůj YubiKey pro ověření"
+  },
   "authenticationTimeout": {
     "message": "Časový limit ověření"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Zapamatovat mě"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Neptat se na tomto zařízení 30 dnů"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Znovu zaslat ověřovací kód na e-mail"
   },
   "useAnotherTwoStepMethod": {
     "message": "Použít jinou metodu dvoufázového přihlášení"
   },
+  "selectAnotherMethod": {
+    "message": "Vybrat jinou metodu",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Použít obnovovací kód"
+  },
   "insertYubiKey": {
     "message": "Vložte YubiKey do USB portu Vašeho počítače a stiskněte jeho tlačítko."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Volby dvoufázového přihlášení"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Vyberte metodu dvoufázového přihlášení"
+  },
   "recoveryCodeDesc": {
     "message": "Ztratili jste přístup ke všem nastaveným poskytovatelům dvoufázového přihlášení? Použijte obnovovací kód pro vypnutí dvoufázového přihlášení."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrováno z FIDO)"
   },
+  "openInNewTab": {
+    "message": "Otevřít v nové kartě"
+  },
   "emailTitle": {
     "message": "E-mail"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Používáte nepodporovaný webový prohlížeč. Webový trezor nemusí pracovat správně."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Máte čekající žádost o přihlášení z jiného zařízení."
+  },
+  "reviewLoginRequest": {
+    "message": "Podívat se na žádost o přihlášení"
+  },
   "freeTrialEndPromptCount": {
     "message": "Vaše zkušební doba končí za $COUNT$ dnů.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Nastavte minimální požadavky pro sílu hlavního hesla."
   },
+  "passwordStrengthScore": {
+    "message": "Skóre síly hesla: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Požadovat dvoufázové přihlášení"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Ověřit WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Přečíst bezpečnostní klíč"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Čeká se na interakci s bezpečnostním klíčem..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn není v tomto prohlížeči podporován."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Pro Váš účet je vyžadováno dvoufázové přihlášení Duo."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Pro Váš účet je nutné dvoufázové přihlášení. Pro dokončení přihlášení postupujte podle následujících kroků."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Postupujte podle kroků níže pro dokončení přihlášení."
+  },
   "launchDuo": {
     "message": "Spustit Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Nepovolí členům odemknout svůj účet pomocí PIN."
+  },
+  "limitedEventLogs": {
+    "message": "Plány $PRODUCT_TYPE$ nemají přístup k protokolům reálných událostí",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Získejte plný přístup k protokolům událostí organizace aktualizací do týmů nebo plánu Enterprise."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Aktualizovat pro reálná data protokolu událostí"
+  },
+  "upgradeEventLogMessage": {
+    "message": "Tyto události jsou jen příklady a neodrážejí skutečné události v rámci Vaší organizace Bitwarden."
   }
 }
diff --git a/apps/web/src/locales/cy/messages.json b/apps/web/src/locales/cy/messages.json
index 0aa20a9e625..ff08a6fbe7f 100644
--- a/apps/web/src/locales/cy/messages.json
+++ b/apps/web/src/locales/cy/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/da/messages.json b/apps/web/src/locales/da/messages.json
index 0d7b28211ce..530a9ce0b03 100644
--- a/apps/web/src/locales/da/messages.json
+++ b/apps/web/src/locales/da/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritiske apps"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Adgangsefterretning"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log ind på Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Godkendelsestimeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Husk mig"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send bekræftelseskode-email igen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Brug en anden totrins-login metode"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Indsæt din YubiKey i computerens USB-port og tryk på dens knap."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Totrins-login indstillinger"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Mistet adgang til alle totrinsudbyderene? Brug din genoprettelseskode til at deaktivere dem alle på kontoen."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migreret fra FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "E-mail"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Du bruger en ikke-understøttet webbrowser. Web-boksen fungerer muligvis ikke korrekt."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Den gratis prøveperiode slutter om $COUNT$ dage.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Angiv krav til styrken af hovedadgangskode."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Kræv totrins-login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Godkend WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "Denne browser understøtter ikke WebAuthn."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo totrinsindlogning kræves for kontoen."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Start Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/de/messages.json b/apps/web/src/locales/de/messages.json
index 9fef604190b..a27de099a74 100644
--- a/apps/web/src/locales/de/messages.json
+++ b/apps/web/src/locales/de/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritische Anwendungen"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Zugriff auf Informationen"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Bei Bitwarden anmelden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Gib den an deine E-Mail-Adresse gesendeten Code ein"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Gib den Code aus deiner Authenticator-App ein"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Drücke zum Authentifizieren auf deinen YubiKey"
+  },
   "authenticationTimeout": {
     "message": "Authentifizierungs-Timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Angemeldet bleiben"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Für 30 Tage auf diesem Gerät nicht mehr fragen"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "E-Mail mit Bestätigungscode erneut versenden"
   },
   "useAnotherTwoStepMethod": {
     "message": "Verwenden sie eine andere Zwei-Faktor-Anmelde-Methode"
   },
+  "selectAnotherMethod": {
+    "message": "Wähle eine andere Methode",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Verwende deinen Wiederherstellungscode"
+  },
   "insertYubiKey": {
     "message": "Stecken Sie Ihren YubiKey in einen USB-Port Ihres Computers und berühren Sie dessen Knopf."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Optionen für Zwei-Faktor-Authentifizierung"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Zwei-Faktor-Authentifizierungsmethode auswählen"
+  },
   "recoveryCodeDesc": {
     "message": "Zugang zu allen Zwei-Faktor-Anbietern verloren? Benutze deinen Wiederherstellungscode, um alle Zwei-Faktor-Anbieter in deinem Konto zu deaktivieren."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Von FIDO migriert)"
   },
+  "openInNewTab": {
+    "message": "In neuem Tab öffnen"
+  },
   "emailTitle": {
     "message": "E-Mail"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Du verwendest einen nicht unterstützten Webbrowser. Der Web-Tresor funktioniert möglicherweise nicht richtig."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Du hast eine ausstehende Anmeldeanfrage von einem anderen Gerät."
+  },
+  "reviewLoginRequest": {
+    "message": "Anmeldeanfrage überprüfen"
+  },
   "freeTrialEndPromptCount": {
     "message": "Deine kostenlose Testversion endet in $COUNT$ Tagen.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Mindestanforderungen für die Stärke des Master-Passworts festlegen."
   },
+  "passwordStrengthScore": {
+    "message": "Bewertung der Passwortstärke $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Zwei-Faktor-Authentifizierung verlangen"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn authentifizieren"
   },
+  "readSecurityKey": {
+    "message": "Sicherheitsschlüssel auslesen"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Warte auf Sicherheitsschlüssel-Interaktion..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn wird in diesem Browser nicht unterstützt."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Für dein Konto ist die DUO Zwei-Faktor-Authentifizierung erforderlich."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Die Duo-Zwei-Faktor-Authentifizierung ist für dein Konto erforderlich. Folge den Schritten unten, um die Anmeldung abzuschließen."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Folge den Schritten unten, um die Anmeldung abzuschließen."
+  },
   "launchDuo": {
     "message": "DUO starten"
   },
@@ -10433,9 +10488,27 @@
     "message": "Die zugewiesenen Plätze überschreiten die verfügbaren Plätze."
   },
   "removeUnlockWithPinPolicyTitle": {
-    "message": "Remove Unlock with PIN"
+    "message": "Entsperren mit PIN entfernen"
   },
   "removeUnlockWithPinPolicyDesc": {
-    "message": "Do not allow members to unlock their account with a PIN."
+    "message": "Mitgliedern nicht erlauben, ihr Konto mit einer PIN zu entsperren."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/el/messages.json b/apps/web/src/locales/el/messages.json
index 6fc22e74103..0cdb9b68bf1 100644
--- a/apps/web/src/locales/el/messages.json
+++ b/apps/web/src/locales/el/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Κρίσιμες εφαρμογές"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Πληροφορίες Πρόσβασης"
   },
@@ -474,7 +477,7 @@
     "message": "Nest a folder by adding the parent folder's name followed by a “/”. Example: Social/Forums"
   },
   "deleteFolderPermanently": {
-    "message": "Are you sure you want to permanently delete this folder?"
+    "message": "Είστε σίγουροι ότι θέλετε να διαγράψετε μόνιμα αυτόν το φάκελο;"
   },
   "baseDomain": {
     "message": "Βασικός τομέας",
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Να με θυμάσαι"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Αποστολή email κωδικού επαλήθευσης ξανά"
   },
   "useAnotherTwoStepMethod": {
     "message": "Χρήση άλλης μεθόδου δύο παραγόντων"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Τοποθετήστε το YubiKey στη θύρα USB του υπολογιστή σας και έπειτα πατήστε το κουμπί του."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Επιλογές σύνδεσης δύο παραγόντων"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Έχετε χάσει την πρόσβαση σε όλους τους παρόχους δύο παραγόντων; Χρησιμοποιήστε τον κωδικό ανάκτησης για να απενεργοποιήσετε όλους τους παρόχους δύο παραγόντων από το λογαριασμό σας."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Μετεγκατάσταση από το FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Χρησιμοποιείτε ένα μη υποστηριζόμενο browser. Το web vault ενδέχεται να μην λειτουργεί σωστά."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Ορίστε ελάχιστες απαιτήσεις, για ισχύ του κύριου κωδικού."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Απαίτηση για σύνδεση δύο βημάτων"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Ταυτοποίηση WebAutn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "Το WebAuthn δεν υποστηρίζεται σε αυτό το πρόγραμμα περιήγησης."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Εκκίνηση Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/en_GB/messages.json b/apps/web/src/locales/en_GB/messages.json
index ee68658c048..7179a886761 100644
--- a/apps/web/src/locales/en_GB/messages.json
+++ b/apps/web/src/locales/en_GB/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organisation event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organisation."
   }
 }
diff --git a/apps/web/src/locales/en_IN/messages.json b/apps/web/src/locales/en_IN/messages.json
index 81585d785af..035cdd6143d 100644
--- a/apps/web/src/locales/en_IN/messages.json
+++ b/apps/web/src/locales/en_IN/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-factor providers? Use your recovery code to disable all two-factor providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set minimum requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organisation event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organisation."
   }
 }
diff --git a/apps/web/src/locales/eo/messages.json b/apps/web/src/locales/eo/messages.json
index 4cc9202b2cd..17d4bc9fe1e 100644
--- a/apps/web/src/locales/eo/messages.json
+++ b/apps/web/src/locales/eo/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Ensaluti en Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Memoru min"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Sendu retpoŝtan kontrol-kodon denove"
   },
   "useAnotherTwoStepMethod": {
     "message": "Uzu alian metodon de identigo en du-ŝtupa saluto"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Enmetu vian YubiKey en la USB-havenon de via komputilo, tiam tuŝu ĝian butonon."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Elektebloj de la du-ŝtupa saluto"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Ĉu vi perdis aliron al ĉiuj viaj du-faktoraj provizantoj? Uzu vian reakiran kodon por malŝalti ĉiujn du-faktorajn provizantojn de via konto."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Retpoŝto"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Vi uzas nesubtenatan tTT-legilon. La ttt-volbo eble ne funkcias ĝuste."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Agordi minimumajn postulojn por majstra pasvorta forto."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Devigu dufazan ensaluton"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/es/messages.json b/apps/web/src/locales/es/messages.json
index 4a74b101c78..906092a2d4b 100644
--- a/apps/web/src/locales/es/messages.json
+++ b/apps/web/src/locales/es/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Aplicaciones críticas"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Inteligencia de Acceso"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Recordarme"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Reenviar código de verificación por correo electrónico"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizar otro método de autenticación en dos pasos"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Inserta tu YubiKey en el puerto USB de tu equipo y posteriormente pulsa su botón."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Opciones de la autenticación en dos pasos"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "¿Has perdido el acceso a todos tus métodos de autenticación en dos pasos? Utiliza tu código de recuperación para deshabilitar todos los métodos de autenticación en dos pasos de tu cuenta."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrado desde FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Correo electrónico"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Está utilizando un navegador web no compatible. Es posible que la caja fuerte web no funcione correctamente."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Establecer requisitos mínimos para la fortaleza de la contraseña maestra."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Requiere inicio de sesión en dos pasos"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Autenticar WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn no es compatible con este navegador."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Iniciar Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/et/messages.json b/apps/web/src/locales/et/messages.json
index 9a8d3d18281..47c3eeadfea 100644
--- a/apps/web/src/locales/et/messages.json
+++ b/apps/web/src/locales/et/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Jäta mind meelde"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Saada e-postile uus kinnituskood"
   },
   "useAnotherTwoStepMethod": {
     "message": "Kasuta teist kaheastmelist sisselogimise meetodit"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Sisesta oma YubiKey arvuti USB porti ja kliki sellele nupule."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Kaheastmelise sisselogimise valikud"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Sul ei ole ligipääsu ühelegi kaheastmelise kinnitamise teenusele? Kasuta taastamise koodi, et kaheastmeline kinnitamine oma kontol välja lülitada."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(pärineb FIDO'lt)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "E-post"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Kasutad brauserit, mida ei toetata. Veebihoidla ei pruugi hästi töötada."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Määra minimaalsed ülemparooli tugevuse tingimused."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Nõua kahe-astmelist sisselogimist"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn kinnitamine"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "Sinu brauser ei toeta WebAuthn'i."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/eu/messages.json b/apps/web/src/locales/eu/messages.json
index 2efe0c0f629..97d636833ed 100644
--- a/apps/web/src/locales/eu/messages.json
+++ b/apps/web/src/locales/eu/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Gogora nazazu"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Berbidali email bidezko egiaztatze-kodea"
   },
   "useAnotherTwoStepMethod": {
     "message": "Erabili bi urratseko saio hasierarako beste modu bat"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Sartu zure YubiKey-a ordenagailuko USB atakan, ondoren, sakatu bere botoia."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Bi urratseko saio hasieraren aukerak"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Bi urratseko egiaztatzeko modu guztietarako sarbidea galdu duzu? Erabili zure berreskuratze-kodea zure kontuko bi urratseko egiaztatze hornitzaile guztiak desaktibatzeko."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(FIDO-tik migratua)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Emaila"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Euskarririk gabeko web nabigatzailea erabiltzen ari zara. Baliteke webguneko kutxa gotorrak behar bezala ez funtzionatzea."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Ezarri pasahitz nagusiaren gutxieneko baldintzak."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Bi urratseko saio hasiera beharrezkoa da"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn autentifikatu"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn ez da bateragarria nabigatzaile honetan."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/fa/messages.json b/apps/web/src/locales/fa/messages.json
index 3aa355fccb0..083caa4b594 100644
--- a/apps/web/src/locales/fa/messages.json
+++ b/apps/web/src/locales/fa/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "مرا به خاطر بسپار"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "ارسال دوباره ایمیل کد تأیید"
   },
   "useAnotherTwoStepMethod": {
     "message": "استفاده از روش ورود دو مرحله‌ای دیگر"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "YubiKey خود را وارد پورت USB رایانه کنید، بعد دکمه آن را بفشارید."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "گزینه‌های ورود دو مرحله‌ای"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "دسترسی به تمامی ارائه‌دهندگان دو مرحله‌ای را از دست داده‌اید؟ از کد بازیابی خود برای غیرفعال‌سازی ارائه‌دهندگان دو مرحله‌ای از حسابتان استفاده کنید."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(مهاجرت از FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "ایمیل"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "شما از یک مرورگر وب پشتیبانی نشده استفاده می‌کنید. گاوصندوق وب ممکن است به درستی کار نکند."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "الزامات را برای قدرت کلمه عبور اصلی تنظیم کنید."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "فعال کردن ورود دو مرحله ای الزامیست"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "تأیید اعتبار در WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn در این مرورگر پشتیبانی نمی‌شود."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/fi/messages.json b/apps/web/src/locales/fi/messages.json
index 7ed6320a08e..55aa712c6dc 100644
--- a/apps/web/src/locales/fi/messages.json
+++ b/apps/web/src/locales/fi/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kriittiset sovellukset"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Kirjaudu Bitwardeniin"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Tunnistaudu painamalla YubiKeytäsi"
+  },
   "authenticationTimeout": {
     "message": "Todennuksen aikakatkaisu"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Muista minut"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Lähetä todennuskoodi sähköpostitse uudelleen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Käytä vaihtoehtoista todennustapaa"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Kytke YubiKey-todennuslaitteesi tietokoneen USB-porttiin ja paina sen painiketta."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Kaksivaiheisen kirjautumisen asetukset"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Etkö voi käyttää kaksivaiheisen kirjautumisen todentajiasi? Poista kaikki määritetyt todentajat käytöstä palautuskoodillasi."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(siirretty FIDO:sta)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Sähköposti"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Käytät selainta, jota ei tueta. Verkkoholvi ei välttämättä toimi oikein."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Ilmainen kokeilujakso päättyy $COUNT$ päivän kuluttua.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Aseta pääsalasanan vahvuusvaatimukset."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Vaadi kaksivaiheinen kirjautuminen"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn-todennus"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn-todennusta ei tueta tässä selaimessa."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Tilillesi kirjautuminen vaatii Duo-vahvistuksen."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Avaa Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/fil/messages.json b/apps/web/src/locales/fil/messages.json
index b9de65f5eb2..0f1fc9c2b7e 100644
--- a/apps/web/src/locales/fil/messages.json
+++ b/apps/web/src/locales/fil/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Tandaan ako"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Ipadala ulit ang email na naglalaman ng code pamberipika"
   },
   "useAnotherTwoStepMethod": {
     "message": "Gumamit ng ibang paraan sa dalawang-hakbang na pag-log in"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Ipasok ang YubiKey mo sa USB port ng iyong computer, tapos pindutin ang buton nito."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Mga opsyon para sa dalawang-hakbang na pag-log in"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Nawalan ng access sa lahat ng provider mo ng dalawang-hakbang na pag-log in? Gamitin ang code pang-recover mo para patayin ang lahat ng mga provider ng dalawang-hakbang na pag-log in sa account mo."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Inilipat mula sa FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Gumagamit ka ng isang hindi suportado na web browser. Ang web vault ay maaaring hindi gumana nang maayos."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Magtakda ng mga kinakailangan para sa lakas ng master password."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Kailangan ng dalawang-hakbang na pag-login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "I-authenticate ang WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "Hindi suportado ang WebAuthn sa browser na ito."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/fr/messages.json b/apps/web/src/locales/fr/messages.json
index 087e71ab674..c4acc33f79a 100644
--- a/apps/web/src/locales/fr/messages.json
+++ b/apps/web/src/locales/fr/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Applications critiques"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "Aucune application critique à risques"
+  },
   "accessIntelligence": {
     "message": "Accéder à Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Se connecter à Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Entrez le code envoyé à votre adresse courriel"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Entrez le code de votre application d'authentification"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Appuyez sur votre YubiKey pour vous authentifier"
+  },
   "authenticationTimeout": {
     "message": "Délai d'authentification dépassé"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Se souvenir de moi"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Ne plus demander sur cet appareil pendant 30 jours"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Envoyer à nouveau le courriel de code de vérification"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utiliser une autre méthode d'authentification à deux facteurs"
   },
+  "selectAnotherMethod": {
+    "message": "Sélectionnez une autre méthode",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Utilisez votre code de récupération"
+  },
   "insertYubiKey": {
     "message": "Insérez votre YubiKey dans le port USB de votre ordinateur puis appuyez sur son bouton."
   },
@@ -1459,7 +1481,7 @@
     "message": "Identifiant non disponible"
   },
   "noTwoStepProviders": {
-    "message": "Ce compte dispose d'une authentification à deux facteurs de configurée, cependant, aucun des fournisseurs à deux facteurs configurés n'est pris en charge par ce navigateur web."
+    "message": "Ce compte dispose d'une configuration d'authentification à deux facteurs, cependant, aucun des fournisseurs d'authentification à deux facteurs configurés n'est pris en charge par ce navigateur web."
   },
   "noTwoStepProviders2": {
     "message": "Merci d'utiliser un navigateur web compatible (comme Chrome) et/ou d'ajouter des services additionnels d'identification en deux étapes qui sont mieux supportés par les navigateurs web (comme par exemple une application d'authentification)."
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Options d'authentification à deux facteurs"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Sélectionnez la méthode d'authentification à deux facteurs"
+  },
   "recoveryCodeDesc": {
     "message": "Vous avez perdu l'accès à tous vos fournisseurs d'authentification à deux facteurs ? Utilisez votre code de récupération pour désactiver tous les fournisseurs d'authentification à deux facteurs de votre compte."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migré depuis FIDO)"
   },
+  "openInNewTab": {
+    "message": "Ouvrir dans un nouvel onglet"
+  },
   "emailTitle": {
     "message": "Courriel"
   },
@@ -1732,7 +1760,7 @@
     "message": "Inclure un Chiffre"
   },
   "generatorPolicyInEffect": {
-    "message": "Les exigences de la politique de sécurité de l'entreprise ont été appliquées aux options de votre générateur.",
+    "message": "Les exigences de la politique de sécurité Entreprise ont été appliquées aux options de votre générateur.",
     "description": "Indicates that a policy limits the credential generator screen."
   },
   "passwordHistory": {
@@ -3099,7 +3127,7 @@
     "message": "Pour les entreprises et autres équipes."
   },
   "planNameTeamsStarter": {
-    "message": "Teams Starter"
+    "message": "Équipes Essentiel"
   },
   "planNameEnterprise": {
     "message": "Entreprise"
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Vous utilisez un navigateur non supporté. Le coffre web pourrait ne pas fonctionner correctement."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Vous avez une demande de connexion en attente depuis un autre appareil."
+  },
+  "reviewLoginRequest": {
+    "message": "Examiner la demande de connexion"
+  },
   "freeTrialEndPromptCount": {
     "message": "Votre essai gratuit se termine dans $COUNT$ jours.",
     "placeholders": {
@@ -4176,7 +4210,7 @@
     "message": "Si vous ne pouvez pas accéder à votre compte par les méthodes normales d'authentification à deux facteurs, vous pouvez utiliser votre code de récupération d'authentification à deux facteurs pour désactiver tous les fournisseurs à deux facteurs sur votre compte."
   },
   "logInBelowUsingYourSingleUseRecoveryCode": {
-    "message": "Connectez-vous ci-dessous en utilisant votre code de récupération à usage unique. Cela désactivera tous les fournisseurs en deux étapes de votre compte."
+    "message": "Connectez-vous ci-dessous en utilisant votre code de récupération à usage unique. Cela désactivera tous les fournisseurs d'authentification à deux facteurs de votre compte."
   },
   "recoverAccountTwoStep": {
     "message": "Récupérer l'authentification à deux facteurs"
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Définir les exigences de robustesse du mot de passe principal."
   },
+  "passwordStrengthScore": {
+    "message": "Score de force du mot de passe $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Exiger une authentification à deux facteurs"
   },
@@ -4942,7 +4985,7 @@
     "message": "Pour vous connecter avec votre fournisseur de SSO, entrez l'identifiant SSO de votre organisation pour commencer. Vous devrez peut-être entrer cet identifiant SSO lorsque vous vous connecterez à partir d'un nouvel appareil."
   },
   "enterpriseSingleSignOn": {
-    "message": "Portail de connexion unique d'entreprise (Single Sign-On)"
+    "message": "Portail de connexion unique Entreprise"
   },
   "ssoHandOff": {
     "message": "Vous pouvez maintenant fermer cet onglet et continuer dans l'extension."
@@ -4960,7 +5003,7 @@
     "message": "Toutes les fonctionnalités pour les équipes, plus :"
   },
   "includeAllTeamsStarterFeatures": {
-    "message": "Toutes les fonctionnalités de Teams Starter, plus :"
+    "message": "Toutes les fonctionnalités d'Équipes Essentiel, plus :"
   },
   "chooseMonthlyOrAnnualBilling": {
     "message": "Choisissez la facturation mensuelle ou annuelle"
@@ -5024,13 +5067,13 @@
     "message": "Authentification par Connexion Unique (Single Sign-On)"
   },
   "requireSsoPolicyDesc": {
-    "message": "Exiger que les utilisateurs se connectent avec la méthode du portail de connexion unique d'entreprise."
+    "message": "Exiger que les membres se connectent avec la méthode du portail de connexion unique Entreprise."
   },
   "prerequisite": {
     "message": "Prérequis"
   },
   "requireSsoPolicyReq": {
-    "message": "La politique d'entreprise \"Organisation Unique\" doit être activée avant d'activer cette politique."
+    "message": "La politique d'organisation unique Entreprise doit être activée avant d'activer cette politique."
   },
   "requireSsoPolicyReqError": {
     "message": "La politique \"Organisation Unique\" n'est pas activée."
@@ -5337,7 +5380,7 @@
     "message": "Les propriétaires et les administrateurs de l'organisation sont exonérés de l'application de cette politique."
   },
   "personalOwnershipSubmitError": {
-    "message": "En raison d'une politique d'entreprise, il vous est interdit d'enregistrer des éléments dans votre coffre personnel. Sélectionnez une organisation dans l'option Propriété et choisissez parmi les collections disponibles."
+    "message": "En raison d'une politique de sécurité Entreprise, il vous est interdit d'enregistrer des éléments dans votre coffre personnel. Sélectionnez une organisation dans l'option Propriété et choisissez parmi les collections disponibles."
   },
   "disableSend": {
     "message": "Supprimer le Send"
@@ -5354,7 +5397,7 @@
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendDisabledWarning": {
-    "message": "En raison d'une politique d'entreprise, vous ne pouvez que supprimer un Send existant.",
+    "message": "En raison d'une politique de sécurité Entreprise, vous ne pouvez que supprimer un Send existant.",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendOptions": {
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authentifier WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Lire la clé de sécurité"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "En attente de l'interaction de la clé de sécurité..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn n'est pas pris en charge dans ce navigateur."
   },
@@ -5756,7 +5805,7 @@
     "message": "Les comptes existants avec les mots de passe principaux exigeront que les membres s'inscrivent d'eux-mêmes avant que les administrateurs puissent récupérer leurs comptes. L'inscription automatique activera la récupération du compte pour les nouveaux membres."
   },
   "accountRecoverySingleOrgRequirementDesc": {
-    "message": "La politique Entreprise d'organisation unique doit être activée avant d'activer cette politique."
+    "message": "La politique de sécurité d'organisation unique Entreprise doit être activée avant d'activer cette politique de sécurité."
   },
   "resetPasswordPolicyAutoEnroll": {
     "message": "Inscription automatique"
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "L'authentification à double facteur DUO est requise pour votre compte."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "L'authentification à deux facteurs est requise pour votre compte. Suivez les étapes ci-dessous pour terminer la connexion."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Suivez les étapes ci-dessous pour terminer de vous connecter."
+  },
   "launchDuo": {
     "message": "Lancer DUO"
   },
@@ -7970,7 +8025,7 @@
     }
   },
   "teamsStarterPlanInvLimitReachedManageBilling": {
-    "message": "Les abonnements Teams Starter peuvent compter jusqu'à $SEATCOUNT$ membres. Passez à une offre payante pour inviter plus de membres.",
+    "message": "Les abonnements Équipes Essentiel peuvent compter jusqu'à $SEATCOUNT$ membres. Mettez à niveau vers une offre payante pour inviter plus de membres.",
     "placeholders": {
       "seatcount": {
         "content": "$1",
@@ -7979,7 +8034,7 @@
     }
   },
   "teamsStarterPlanInvLimitReachedNoManageBilling": {
-    "message": "Les abonnements Teams Starter peuvent compter jusqu'à $SEATCOUNT$ membres. Contacter le propriétaire de votre organisation pour améliorer votre abonnements et inviter plus de membres.",
+    "message": "Les abonnements Équipes Essentiel peuvent compter jusqu'à $SEATCOUNT$ membres. Contacter le propriétaire de votre organisation pour mettre à niveau votre abonnements et inviter plus de membres.",
     "placeholders": {
       "seatcount": {
         "content": "$1",
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Ne pas autoriser les membres à déverrouiller leur compte avec un NIP."
+  },
+  "limitedEventLogs": {
+    "message": "Les plans $PRODUCT_TYPE$ n'ont pas accès aux journaux d'événements réels",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Obtenez un accès complet aux journaux d'événements de l'organisation en mettant à niveau vers un plan Équipes ou Entreprise."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Mettez à niveau pour les données du journal des événements réels"
+  },
+  "upgradeEventLogMessage": {
+    "message": "Ces événements sont des exemples et ne reflètent pas les événements réels au sein de votre organisation Bitwarden."
   }
 }
diff --git a/apps/web/src/locales/gl/messages.json b/apps/web/src/locales/gl/messages.json
index 1b3a777413c..d466c972baf 100644
--- a/apps/web/src/locales/gl/messages.json
+++ b/apps/web/src/locales/gl/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/he/messages.json b/apps/web/src/locales/he/messages.json
index 239df6791c0..2201e8b4968 100644
--- a/apps/web/src/locales/he/messages.json
+++ b/apps/web/src/locales/he/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "זכור אותי"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "שלח שוב קוד אימות לאימייל"
   },
   "useAnotherTwoStepMethod": {
     "message": "השתמש בשיטה אחרת עבור כניסה דו שלבית"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "הכנס את ה-YubiKey אל כניסת ה-USB במחשבך, ואז גע בכפתור שלו."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "אפשרויות כניסה דו שלבית"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "איבדת גישה לכל ספקי האימות הדו-שלבי שלך? השתמש בקוד האימות כדי לבטל את הספקים הקיימים מתוך החשבון שלך."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "אימייל"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "אתה משתמש בדפדפן אינטרנט שאיננו נתמך. כספת הרשת עלולה שלא לפעול כראוי."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "קבע דרישות מינימום עבור חוזק הסיסמה הראשית."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/hi/messages.json b/apps/web/src/locales/hi/messages.json
index 5128575a717..57e7fb45f2d 100644
--- a/apps/web/src/locales/hi/messages.json
+++ b/apps/web/src/locales/hi/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "मुझे याद रखें"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "फिर से सत्यापन कोड ईमेल भेजें"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/hr/messages.json b/apps/web/src/locales/hr/messages.json
index b400780719b..2663e056292 100644
--- a/apps/web/src/locales/hr/messages.json
+++ b/apps/web/src/locales/hr/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritične aplikacije"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Pristup inteligenciji"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Prijavi se u Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Istek vremena za autentifikaciju"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Zapamti me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Ponovno slanje kontrolnog koda e-poštom"
   },
   "useAnotherTwoStepMethod": {
     "message": "Koristiti drugi način prijave dvostrukom autentifikacijom"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Umetni svoj YubiKey u USB priključak računala, a zatim dodirni njegovu tipku."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Mogućnosti prijave dvostrukom autentifikacijom"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Izgubljen je pristup uređaju za prijavu dvostrukom autentifikacijom? Koristi svoj kôd za oporavak za onemogućavanje svih pružatelja usluga prijave dvostrukom autentifikacijom na svom računu."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(migrirano s FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "E-pošta"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Koristiš nepodržani preglednik. Web trezor možda neće ispravno raditi."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Besplatno probno razdoblje završava za $COUNT$ dan/a.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Postavi pravila sigurnosti koja mora zadovoljiti glavna lozinka."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Zahtijevaj prijavu dvostrukom autentifikacijom"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Ovjeri WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn nije podržan u ovom pregledniku."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Za tvoj račun je potrebna Duo dvostruka autentifikacija."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Pokreni Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/hu/messages.json b/apps/web/src/locales/hu/messages.json
index 4e698bbbe74..c414a82c017 100644
--- a/apps/web/src/locales/hu/messages.json
+++ b/apps/web/src/locales/hu/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritikus alkalmazások"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "Nincsenek veszélyben levő kritikus alkalmazások."
+  },
   "accessIntelligence": {
     "message": "Elérés intelligencia"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Bejelentkezés a Bitwardenbe"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Adjuk meg az email címre elküldött kódot."
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Adjuk meg a hitelesítő alkalmazása által generált kódot."
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Nyomjuk meg a YubiKey-t a hitelesítéshez."
+  },
   "authenticationTimeout": {
     "message": "Hitelesítési időkifutás"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Adatok megjegyzése"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Ne kérdezzen újra ezen az eszközön 30 napig"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Megerősítő kód ismételt elküldése emailben"
   },
   "useAnotherTwoStepMethod": {
     "message": "Másik kétlépcsős bejelentkezés használata"
   },
+  "selectAnotherMethod": {
+    "message": "Másik módszer választás",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Helyreállító kód használata"
+  },
   "insertYubiKey": {
     "message": "A YubiKey beillesztése a számítógép USB portjába és a rajta levő gomb megnyomása."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Kétlépcsős bejelentkezés opciók"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Kétlépcsős bejelentkezési mód használata"
+  },
   "recoveryCodeDesc": {
     "message": "Elveszett a hozzáférés az összes kétlépcsős szolgáltatóhoz? A visszaállítókód használatával letilthatók fiókból a kétlépcsős szolgáltatók."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(FIDO-ból áthelyezve)"
   },
+  "openInNewTab": {
+    "message": "Megnyitás új fülön"
+  },
   "emailTitle": {
     "message": "Email cím"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Nem támogatott böngészőt használunk. Előfordulhat, hogy a webes széf nem működik megfelelően."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Függőben lévő bejelentkezési kérelem van egy másik eszközről."
+  },
+  "reviewLoginRequest": {
+    "message": "Bejelentkezési kérés áttekintése"
+  },
   "freeTrialEndPromptCount": {
     "message": "Az ingyenes próbaidőszak $COUNT$ nap múlva ér véget.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "A minimális követelmények beállítása a mesterjelszó hosszához."
   },
+  "passwordStrengthScore": {
+    "message": "A jelszó erősségi pontszáma $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Kétlépéses bejelentkezés szükséges"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAutn hitelesítés"
   },
+  "readSecurityKey": {
+    "message": "Biztonsági kulcs olvasása"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Várakozás a biztonsági kulcs interakciójára..."
+  },
   "webAuthnNotSupported": {
     "message": "Ezen a böngészőn a WebAuthn nem támogatott."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "A fiókhoz kétlépcsős Duo bejelentkezés szükséges."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo kétlépcsős bejelentkezés szükséges a fiókhoz. Kövessük az alábbi lépéseket a bejelentkezés befejezéséhez."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Kövessük az alábbi lépéseket a bejelentkezés befejezéséhez."
+  },
   "launchDuo": {
     "message": "Duo indítása"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Nem engedjük meg a tagoknak, hogy PIN kóddal oldják fel fiókjuk zárolását."
+  },
+  "limitedEventLogs": {
+    "message": "A $PRODUCT_TYPE$ csomagok nem férnek hozzá a valós eseménynaplókhoz.",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Teljes hozzáférést kaphatunk a szervezeti eseménynaplókhoz, ha Teams vagy Enterprise csomagra térünk át."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Áttérés valós eseménynapló adatokhoz"
+  },
+  "upgradeEventLogMessage": {
+    "message": "Ezek az események csak példák és nem tükröznek valós eseményeket a Bitwarden szervezetén belül."
   }
 }
diff --git a/apps/web/src/locales/id/messages.json b/apps/web/src/locales/id/messages.json
index 055968f85c6..c839b0f295a 100644
--- a/apps/web/src/locales/id/messages.json
+++ b/apps/web/src/locales/id/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Ingat saya"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Kirim ulang email kode verifikasi"
   },
   "useAnotherTwoStepMethod": {
     "message": "Gunakan metode login dua-langkah lainnya"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Masukkan YubiKey Anda ke port USB komputer Anda, lalu sentuh tombol nya."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Opsi login dua-langkah"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Kehilangan akses ke semua penyedia dua faktor Anda? Gunakan kode pemulihan untuk menonaktifkan semua penyedia dua faktor dari akun Anda."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Dipindahkan dari FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Surel"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Anda menggunakan browser web yang tidak didukung. Kubah web mungkin tidak berfungsi dengan baik."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Tetapkan persyaratan minimum untuk kekuatan kata sandi utama."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Diperlukan login dua-langkah"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Autentikasi dengan WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn tidak didukung oleh browser ini."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/it/messages.json b/apps/web/src/locales/it/messages.json
index 7ed38e87270..f8d45738fde 100644
--- a/apps/web/src/locales/it/messages.json
+++ b/apps/web/src/locales/it/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "Nessuna applicazione critica a rischio"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Ricordami"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Invia di nuovo l'email con codice di verifica"
   },
   "useAnotherTwoStepMethod": {
     "message": "Usa un altro metodo di verifica in due passaggi"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Inserisci la tua YubiKey nella porta USB del computer e premi il suo pulsante."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Opzioni verifica in due passaggi"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Hai perso l'accesso a tutti i tuoi metodi di verifica in due passaggi? Usa il tuo codice di recupero per disattivarli tutti dal tuo account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Trasferito da FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Stai utilizzando un browser non supportato. La cassaforte web potrebbe non funzionare correttamente."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Hai una richiesta di accesso in sospeso da un altro dispositivo."
+  },
+  "reviewLoginRequest": {
+    "message": "Rivedi richiesta di accesso"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Imposta requisiti minimi di complessità della password principale."
   },
+  "passwordStrengthScore": {
+    "message": "Valutazione complessità parola d'accesso $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Verifica in due passaggi obbligatoria"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Autenticazione WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn non è supportato da questo browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Per il tuo account è richiesta la verifica in due passaggi DUO."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Avvia DUO"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Non consentire ai membri di sbloccare il proprio account con un PIN."
+  },
+  "limitedEventLogs": {
+    "message": "I piani $PRODUCT_TYPE$ non hanno accesso ai registri degli eventi reali",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Ottieni pieno accesso ai registri degli eventi dell'organizzazione aggiornando a un piano Teams o Enterprise."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Aggiorna per i dati del registro eventi reali"
+  },
+  "upgradeEventLogMessage": {
+    "message": "Questi eventi sono solo esempi e non riflettono eventi reali all'interno della tua organizzazione Bitwarden."
   }
 }
diff --git a/apps/web/src/locales/ja/messages.json b/apps/web/src/locales/ja/messages.json
index 060d55724b0..cbc34ccee17 100644
--- a/apps/web/src/locales/ja/messages.json
+++ b/apps/web/src/locales/ja/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "きわめて重要なアプリ"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "アクセス インテリジェンス"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Bitwarden にログイン"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "認証のタイムアウト"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "情報を保存する"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "確認コードをメールで再送"
   },
   "useAnotherTwoStepMethod": {
     "message": "他の2段階認証方法を使用"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "YubiKey を USB ポートに挿入し、ボタンをタッチしてください。"
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "2段階認証オプション"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "すべての2段階認証プロパイダにアクセスできなくなったときは、リカバリーコードを使用するとアカウントの2段階認証を無効化できます。"
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(FIDOから移行)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "メールアドレス"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "サポートされていないブラウザを使用しています。ウェブ保管庫が正しく動作しないかもしれません。"
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "無料体験はあと $COUNT$ 日で終了します。",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "マスターパスワードの強度に最低要件を設定する。"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "2段階認証が必要です"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn の認証"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn はこのブラウザではサポートされていません。"
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "アカウントには DUO 二段階認証が必要です。"
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "DUO を起動"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/ka/messages.json b/apps/web/src/locales/ka/messages.json
index a7a1a5c3113..121adac3ad4 100644
--- a/apps/web/src/locales/ka/messages.json
+++ b/apps/web/src/locales/ka/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "დამიმახსოვრე"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "გამოგზავნა ერთჯერადი კოდის ელ-ფოსტაზე განმეორებით"
   },
   "useAnotherTwoStepMethod": {
     "message": "გამოყენება სხვა ორსაფეხურიანი შესვლის მეთოდით"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "შეარჭეთ თქვენი YubiKey თქვენს კომპიუტერის USB პორტში, შემდგომ დაადეთ მის ღილაკს."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "ორსაფეხურიანი ავტორიზაციის პარამეტრები"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "დაკარგეთ წვდომა ყველა შენს ორსაფეხურიან პროვაიდერებთან? გამოიყენეთ თქვენი აღდგენის კოდი რომ გათიშოთ ყველა ორსაფეხურიანი ავტორიზაციის პროვაიდერები შენი ანგარიშიდან."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(გადმომიგრირდა FIDO-დან)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "ელ-ფოსტა"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/km/messages.json b/apps/web/src/locales/km/messages.json
index 1c4e2e55201..aed10e3ad71 100644
--- a/apps/web/src/locales/km/messages.json
+++ b/apps/web/src/locales/km/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/kn/messages.json b/apps/web/src/locales/kn/messages.json
index 9abeaf5707f..9330589ce76 100644
--- a/apps/web/src/locales/kn/messages.json
+++ b/apps/web/src/locales/kn/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "ನನ್ನನ್ನು ನೆನಪಿನಲ್ಲಿ ಇಡು"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "ಪರಿಶೀಲನೆ ಕೋಡ್ ಇಮೇಲ್ ಅನ್ನು ಮತ್ತೆ ಕಳುಹಿಸಿ"
   },
   "useAnotherTwoStepMethod": {
     "message": "ಮತ್ತೊಂದು ಎರಡು-ಹಂತದ ಲಾಗಿನ್ ವಿಧಾನವನ್ನು ಬಳಸಿ"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "ನಿಮ್ಮ ಯುಬಿಕಿಯನ್ನು ನಿಮ್ಮ ಕಂಪ್ಯೂಟರ್‌ನ ಯುಎಸ್‌ಬಿ ಪೋರ್ಟ್ಗೆ ಸೇರಿಸಿ, ನಂತರ ಅದರ ಗುಂಡಿಯನ್ನು ಸ್ಪರ್ಶಿಸಿ."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "ಎರಡು ಹಂತದ ಲಾಗಿನ್ ಆಯ್ಕೆಗಳು"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "ನಿಮ್ಮ ಎಲ್ಲಾ ಎರಡು ಅಂಶ ಪೂರೈಕೆದಾರರಿಗೆ ಪ್ರವೇಶವನ್ನು ಕಳೆದುಕೊಂಡಿದ್ದೀರಾ? ನಿಮ್ಮ ಖಾತೆಯಿಂದ ಎಲ್ಲಾ ಎರಡು ಅಂಶ ಪೂರೈಕೆದಾರರನ್ನು ನಿಷ್ಕ್ರಿಯಗೊಳಿಸಲು ನಿಮ್ಮ ಮರುಪಡೆಯುವಿಕೆ ಕೋಡ್ ಬಳಸಿ."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(FIDO ನಿಂದ ವಲಸೆ ಬಂದಿದೆ)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "ಇಮೇಲ್"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "ನೀವು ಬೆಂಬಲಿಸದ ವೆಬ್ ಬ್ರೌಸರ್ ಅನ್ನು ಬಳಸುತ್ತಿರುವಿರಿ. ವೆಬ್ ವಾಲ್ಟ್ ಸರಿಯಾಗಿ ಕಾರ್ಯನಿರ್ವಹಿಸದೆ ಇರಬಹುದು."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "ಮಾಸ್ಟರ್ ಪಾಸ್‌ವರ್ಡ್ ಶಕ್ತಿಗಾಗಿ ಕನಿಷ್ಠ ಅವಶ್ಯಕತೆಗಳನ್ನು ಹೊಂದಿಸಿ."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn ಅನ್ನು ಪ್ರಮಾಣಿಕರಿಸು"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "ಈ ಬ್ರೌಸರ್‌ನಲ್ಲಿ ವೆಬ್‌ಆಥ್ನ್ ಬೆಂಬಲಿಸುವುದಿಲ್ಲ."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/ko/messages.json b/apps/web/src/locales/ko/messages.json
index 4cc8c841075..3aa0eac1a64 100644
--- a/apps/web/src/locales/ko/messages.json
+++ b/apps/web/src/locales/ko/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "기억하기"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "인증 코드 이메일 다시 보내기"
   },
   "useAnotherTwoStepMethod": {
     "message": "다른 2단계 로그인 방법 사용"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "YubiKey를 컴퓨터의 USB 포트에 삽입하고 버튼을 누르세요."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "2단계 인증 옵션"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "모든 2단계 인증을 사용할 수 없는 상황인가요? 복구 코드를 사용하여 계정의 모든 2단계 인증을 비활성화할 수 있습니다."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(FIDO에서 이전됨)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "이메일"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "지원하지 않는 웹 브라우저를 사용하고 있습니다. 웹 보관함 기능이 제대로 동작하지 않을 수 있습니다."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "마스터 비밀번호 강도에 대한 최소 요구 사항을 설정해주세요."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAuthn 인증"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "이 브라우저에서는 WebAuthn이 지원되지 않습니다."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/lv/messages.json b/apps/web/src/locales/lv/messages.json
index 5d8afb53a09..2dceab3f691 100644
--- a/apps/web/src/locales/lv/messages.json
+++ b/apps/web/src/locales/lv/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritiskās lietotnes"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "Nav riskam pakļautu būtisku lietotņu"
+  },
   "accessIntelligence": {
     "message": "Piekļuves inteliģence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Pieteikties Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Jāievada e-pastā nosūtītais kods"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Jāievada kods no savas autentificētājlietotnes"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Jāpiespiež sava YubiKey ierīce, lai autentificētu"
+  },
   "authenticationTimeout": {
     "message": "Autentificēšanās noildze"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Atcerēties mani"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Šajā ierīcē 30 dienas vairs nevaicāt"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Atkārtoti nosūtīt apstiprinājuma kodu"
   },
   "useAnotherTwoStepMethod": {
     "message": "Izmantot citu divpakāpju pieteikšanās veidu"
   },
+  "selectAnotherMethod": {
+    "message": "Atlasīt citu veidu",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Izmantot savu atkopes kodu"
+  },
   "insertYubiKey": {
     "message": "Ievietojiet YubiKey datora USB portā un pēc tam pieskarieties tā pogai."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Divpakāpju pieteikšanās iespējas"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Atlasīt divpakāpju pieteikšanās veidu"
+  },
   "recoveryCodeDesc": {
     "message": "Zaudēta piekļuve visiem divpakāpju pieteikšanās nodrošinātājiem? Jāizmanto atkopšanas kods, lai izslēgtu visus sava konta divpakāpju pieteikšanās nodrošinātājus."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Pārgājis no FIDO)"
   },
+  "openInNewTab": {
+    "message": "Atvērt jaunā cilnē"
+  },
   "emailTitle": {
     "message": "E-pasts"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Tiek izmantots neatbalstīts tīmekļa pārlūks. Tīmekļa glabātava var nedarboties pareizi."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Ir neizskatīts pieteikšanās pieprasījums no citas ierīces."
+  },
+  "reviewLoginRequest": {
+    "message": "Izskatīt pieteikšanās pieprasījumu"
+  },
   "freeTrialEndPromptCount": {
     "message": "Bezmaksas izmēģinājums beigsies pēc $COUNT$ dienām.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Uzstādīt galvenās paroles stipruma mazākās izpildāmās prasības."
   },
+  "passwordStrengthScore": {
+    "message": "Paroles stipruma novērtējums $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Pieprasīt divpakāpju pieteikšanos"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Autentificēt WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Nolasīt drošības atslēgu"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Gaida mijiedarbību ar drošības atslēgu..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn šajā pārlūkā netiek atbalstīts."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Kontam ir nepieciešama DUO divpakāpju pieteikšanās."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Ir nepieciešama Duo divpakāpju pieteikšanās, lai pieteiktos savā kontā. Jāseko zemāk esošajām norādēm, lai pabeigtu pieteikšanos."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Jāseko zemāk esošajām norādēm, lai pabeigtu pieteikšanos."
+  },
   "launchDuo": {
     "message": "Palaist DUO"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Neļaut dalībniekiem atslēgt savu kontu ar PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plāniem nav piekļuve īstajiem notikumu žurnāliem",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Pilna piekļuve apvienības notikumu žurnāliem ir iegūstama, ja izmanto Komandu vai Uzņēmējdarbības plānu."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Uzlabot, lai piekļūtu īstajiem notikumu žurnāla datiem"
+  },
+  "upgradeEventLogMessage": {
+    "message": "Šie notikumu ir tikai piemēri, un tie neatspoguļo īstus notikumus Bitwarden apvienībā."
   }
 }
diff --git a/apps/web/src/locales/ml/messages.json b/apps/web/src/locales/ml/messages.json
index b3c686a0f46..3b5edb91838 100644
--- a/apps/web/src/locales/ml/messages.json
+++ b/apps/web/src/locales/ml/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "എന്നെ ഓർക്കണം"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "സ്ഥിരീകരണ കോഡ് ഇമെയിൽ വഴി വീണ്ടും അയയ്ക്കുക"
   },
   "useAnotherTwoStepMethod": {
     "message": "മറ്റൊരു രണ്ട് ഘട്ട പ്രവേശന രീതി ഉപയോഗിക്കുക"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "നിങ്ങളുടെ കമ്പ്യൂട്ടറിന്റെ യു‌എസ്‌ബി പോർട്ടിലേക്ക് YubiKey ഇടുക, തുടർന്ന് അതിന്റെ ബട്ടൺ അമർത്തുക."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "രണ്ട്-ഘട്ട പ്രവേശനം ഓപ്ഷനുകൾ"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "നിങ്ങളുടെ രണ്ട്-ഘടക ദാതാക്കളിലേക്കുള്ള ആക്‌സസ്സ് നഷ്‌ടപ്പെട്ടോ? നിങ്ങളുടെ അക്കൗണ്ടിൽ നിന്ന് രണ്ട്-ഘടക ദാതാക്കളെ പ്രവർത്തനരഹിതമാക്കാൻ നിങ്ങളുടെ റിക്കവറി കോഡ് ഉപയോഗിക്കുക."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "ഇമെയിൽ"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set minimum requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/mr/messages.json b/apps/web/src/locales/mr/messages.json
index 1c4e2e55201..aed10e3ad71 100644
--- a/apps/web/src/locales/mr/messages.json
+++ b/apps/web/src/locales/mr/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/my/messages.json b/apps/web/src/locales/my/messages.json
index 1c4e2e55201..aed10e3ad71 100644
--- a/apps/web/src/locales/my/messages.json
+++ b/apps/web/src/locales/my/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/nb/messages.json b/apps/web/src/locales/nb/messages.json
index 32f3a9485a8..a457deb1cb8 100644
--- a/apps/web/src/locales/nb/messages.json
+++ b/apps/web/src/locales/nb/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Logg inn på Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Husk på meg"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send E-posten med verifiseringskoden på nytt"
   },
   "useAnotherTwoStepMethod": {
     "message": "Bruk en annen 2-trinnsinnloggingsmetode"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Sett inn din YubiKey i din datamaskins USB-uttak, og så trykk på dens knapp."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "2-trinnsinnloggingsalternativer"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Har du mistet tilgang til alle dine 2-trinnsleverandører? Bruk din gjenopprettingskode til å fjerne alle 2-trinnsleverandører fra din konto."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrert fra FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "E-post"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Du bruker en ustøttet nettleser. Netthvelvet vil kanskje ikke fungere ordentlig."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Sett minimumskrav til hovedpassordets styrke."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Krev 2-trinnsinnlogging"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Autentiser WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn støttes ikke i denne nettleseren."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Start Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/ne/messages.json b/apps/web/src/locales/ne/messages.json
index 7070b26a7bc..484164fdfad 100644
--- a/apps/web/src/locales/ne/messages.json
+++ b/apps/web/src/locales/ne/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/nl/messages.json b/apps/web/src/locales/nl/messages.json
index df680d0359a..4f69a15d49e 100644
--- a/apps/web/src/locales/nl/messages.json
+++ b/apps/web/src/locales/nl/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Belangrijke applicaties"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "Geen belangrijke applicaties lopen risico"
+  },
   "accessIntelligence": {
     "message": "Toegangsintelligentie"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Inloggen op Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Voer de code in die naar je e-mailadres is verstuurd"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Voer de code uit je authenticatie-app in"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Druk op je YubiKey om te verifiëren"
+  },
   "authenticationTimeout": {
     "message": "Authenticatie-timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Mijn gegevens onthouden"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "30 dagen niet meer vragen op dit apparaat"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "E-mail met verificatiecode opnieuw versturen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Gebruik een andere methode voor tweestapsaanmelding"
   },
+  "selectAnotherMethod": {
+    "message": "Kies een andere methode",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Gebruik je herstelcode"
+  },
   "insertYubiKey": {
     "message": "Plaats je YubiKey in de USB-poort van je computer en druk op de knop."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Opties voor tweestapsaanmelding"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Kies methode voor tweestapsaanmelding"
+  },
   "recoveryCodeDesc": {
     "message": "Ben je de toegang tot al je tweestapsaanbieders verloren? Gebruik dan je herstelcode om alle tweestapsaanbieders op je account uit te schakelen."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Gemigreerd van FIDO)"
   },
+  "openInNewTab": {
+    "message": "Openen in nieuwe tab"
+  },
   "emailTitle": {
     "message": "E-mailadres"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Je maakt gebruik van webbrowser die we niet ondersteunen. De webkluis werkt mogelijk niet goed."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Je hebt inlogverzoek van een ander apparaat."
+  },
+  "reviewLoginRequest": {
+    "message": "Inlogverzoek afhandelen"
+  },
   "freeTrialEndPromptCount": {
     "message": "Je gratis proefperiode eindigt over $COUNT$ dagen.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Minimale eisen voor de sterkte van het hoofdwachtwoord instellen."
   },
+  "passwordStrengthScore": {
+    "message": "Score wachtwoordsterkte $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Tweestapsaanmelding vereisen"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticeer WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Beveiligingssleutel lezen"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Wacht op interactie met beveiligingssleutel..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn wordt niet ondersteund in deze browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "DUO tweestapsaanmelding is vereist voor jouw account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Jouw account vereist Duo-tweestapsaanmelding. Volg de onderstaande stappen om het inloggen te voltooien."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Volg de onderstaande stappen om in te loggen."
+  },
   "launchDuo": {
     "message": "DUO starten"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Leden niet toestaan hun account te ontgrendelen met een pincode."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$-abonnementen hebben geen toegang tot echte event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Krijg volledige toegang tot event logs van de organisatie door te upgraden naar een Teams- of Enterprise-abonnement."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade voor echte event log gegevens"
+  },
+  "upgradeEventLogMessage": {
+    "message": "Deze events zijn voorbeelden en weerspiegelen geen echte evenementen binnen je Bitwarden-organisatie."
   }
 }
diff --git a/apps/web/src/locales/nn/messages.json b/apps/web/src/locales/nn/messages.json
index c139fc606b8..1694768fd79 100644
--- a/apps/web/src/locales/nn/messages.json
+++ b/apps/web/src/locales/nn/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Hugsa meg"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Bruk ein annan tofaktormetode for pålogging"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/or/messages.json b/apps/web/src/locales/or/messages.json
index 1c4e2e55201..aed10e3ad71 100644
--- a/apps/web/src/locales/or/messages.json
+++ b/apps/web/src/locales/or/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/pl/messages.json b/apps/web/src/locales/pl/messages.json
index eb372bb81cf..3fdc4d1f281 100644
--- a/apps/web/src/locales/pl/messages.json
+++ b/apps/web/src/locales/pl/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Krytyczne aplikacje"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "Brak zagrożonych aplikacji krytycznych"
+  },
   "accessIntelligence": {
     "message": "Dostęp do informacji"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Zaloguj do Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Wpisz kod wysłany na Twój adres e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Wpisz kod z aplikacji uwierzytelniającej"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Naciśnij YubiKey aby uwierzytelnić"
+  },
   "authenticationTimeout": {
     "message": "Limit czasu uwierzytelniania"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Zapamiętaj mnie"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Nie pytaj ponownie na tym urządzeniu przez 30 dni"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Wyślij ponownie wiadomość z kodem weryfikacyjnym"
   },
   "useAnotherTwoStepMethod": {
     "message": "Użyj innej metody logowania dwustopniowego"
   },
+  "selectAnotherMethod": {
+    "message": "Wybierz inną metodę",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Użyj kodu odzyskiwania"
+  },
   "insertYubiKey": {
     "message": "Włóż klucz YubiKey do portu USB komputera, a następnie dotknij jego przycisku."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Opcje logowania dwustopniowego"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Wybierz metodę logowania dwustopniowego"
+  },
   "recoveryCodeDesc": {
     "message": "Utraciłeś dostęp do wszystkich swoich mechanizmów dwustopniowego logowania? Użyj kodów odzyskiwania, aby wyłączyć dwustopniowe logowanie na Twoim koncie."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(przeniesiony z FIDO)"
   },
+  "openInNewTab": {
+    "message": "Otwórz w nowej karcie"
+  },
   "emailTitle": {
     "message": "Adres e-mail"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Używasz nieobsługiwanej przeglądarki. Sejf internetowy może działać niewłaściwie."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Masz oczekujące żądanie logowania z innego urządzenia."
+  },
+  "reviewLoginRequest": {
+    "message": "Przejrzyj żądanie logowania"
+  },
   "freeTrialEndPromptCount": {
     "message": "Twój okres próbny kończy się za $COUNT$ dni.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Ustaw minimalne wymagania dla hasła głównego."
   },
+  "passwordStrengthScore": {
+    "message": "Siła hasła: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Wymagaj logowania dwustopniowego"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Uwierzytelnianie WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Odczytaj klucz bezpieczeństwa"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Oczekiwanie na interakcję z kluczem bezpieczeństwa..."
+  },
   "webAuthnNotSupported": {
     "message": "Ta przeglądarka nie obsługuje uwierzytelniania WebAuthn."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Dwustopniowe logowanie DUO jest wymagane dla Twojego konta."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Logowanie dwustopniowe Duo jest wymagane dla twojego konta. Wykonaj poniższe kroki, by dokończyć logowanie"
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Wykonaj poniższe kroki, by dokończyć logowanie"
+  },
   "launchDuo": {
     "message": "Uruchom DUO"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Nie zezwalaj członkom na odblokowanie ich konta za pomocą kodu PIN."
+  },
+  "limitedEventLogs": {
+    "message": "Plany $PRODUCT_TYPE$ nie mają dostępu do dzienników rzeczywistych wydarzeń",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Uzyskaj pełny dostęp do dzienników zdarzeń organizacji poprzez uaktualnienie do planu Teams lub Enterprise."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Uaktualnij dla rzeczywistych danych dziennika zdarzeń"
+  },
+  "upgradeEventLogMessage": {
+    "message": "Te wydarzenia są tylko przykładami i nie odzwierciedlają rzeczywistych wydarzeń w Twojej organizacji Bitwarden."
   }
 }
diff --git a/apps/web/src/locales/pt_BR/messages.json b/apps/web/src/locales/pt_BR/messages.json
index d360195f3fd..2bc5ac479fa 100644
--- a/apps/web/src/locales/pt_BR/messages.json
+++ b/apps/web/src/locales/pt_BR/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Aplicações críticas"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Acessar a Inteligência"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Inicie a sessão no Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Tempo de autenticação esgotado"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Lembrar de mim"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Enviar código de verificação para o e-mail novamente"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizar outro método de verificação em duas etapas"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insira a sua YubiKey na porta USB do seu computador, e depois toque no botão da mesma."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Opções de login em duas etapas"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Perdeu o acesso a todos os seus provedores de duas etapas? Utilize o seu código de recuperação para desativar todos os provedores de duas etapas da sua conta."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrado de FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "E-mail"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Você está usando um navegador da Web não suportado. O cofre web pode não funcionar corretamente."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Defina os requisitos mínimos para a força da senha mestra."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Exigir login em duas etapas"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Autenticar WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "O WebAuthn não é suportado neste navegador."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "A autenticação em duas etapas do Duo é necessária para sua conta."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Abrir o Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/pt_PT/messages.json b/apps/web/src/locales/pt_PT/messages.json
index 69606c58924..543729c956c 100644
--- a/apps/web/src/locales/pt_PT/messages.json
+++ b/apps/web/src/locales/pt_PT/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Aplicações críticas"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "Não há aplicações críticas em risco"
+  },
   "accessIntelligence": {
     "message": "Aceder à informação"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Iniciar sessão no Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Introduza o código enviado para o seu e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Introduza o código da sua app de autenticação"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Prima a sua YubiKey para se autenticar"
+  },
   "authenticationTimeout": {
     "message": "Tempo limite de autenticação"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Memorizar"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Não voltar a perguntar neste dispositivo durante 30 dias"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Enviar e-mail com o código de verificação novamente"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizar outro método de verificação de dois passos"
   },
+  "selectAnotherMethod": {
+    "message": "Selecionar outro método",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Utilize o seu código de recuperação"
+  },
   "insertYubiKey": {
     "message": "Introduza a sua YubiKey na porta USB do seu computador, depois toque no botão da mesma."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Opções de verificação de dois passos"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Selecionar método de verificação de dois passos"
+  },
   "recoveryCodeDesc": {
     "message": "Perdeu o acesso a todos os seus fornecedores de verificação de dois passos? Utilize o seu código de recuperação para desativar todos os fornecedores de verificação de dois passos da sua conta."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrado do FIDO)"
   },
+  "openInNewTab": {
+    "message": "Abrir num novo separador"
+  },
   "emailTitle": {
     "message": "E-mail"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Está a utilizar um navegador web não suportado. O cofre web pode não funcionar corretamente."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Tem um pedido de início de sessão pendente doutro dispositivo."
+  },
+  "reviewLoginRequest": {
+    "message": "Rever pedido de início de sessão"
+  },
   "freeTrialEndPromptCount": {
     "message": "O seu período experimental gratuito termina dentro de $COUNT$ dias.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Definir requisitos para a força da palavra-passe mestra."
   },
+  "passwordStrengthScore": {
+    "message": "Pontuação da força da palavra-passe: $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Exigir verificação de dois passos"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Autenticar o WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Ler chave de segurança"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "A aguardar interação da chave de segurança..."
+  },
   "webAuthnNotSupported": {
     "message": "O WebAuthn não é suportado por este navegador."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "A verificação de dois passos Duo é necessária para a sua conta."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "A verificação de dois passos do Duo é necessária para a sua conta. Siga os passos abaixo para concluir o início de sessão."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Siga os passos abaixo para concluir o início de sessão."
+  },
   "launchDuo": {
     "message": "Iniciar o DUO"
   },
@@ -10433,9 +10488,27 @@
     "message": "Os lugares atribuídos excedem os lugares disponíveis."
   },
   "removeUnlockWithPinPolicyTitle": {
-    "message": "Remove Unlock with PIN"
+    "message": "Remover o desbloqueio com PIN"
   },
   "removeUnlockWithPinPolicyDesc": {
-    "message": "Do not allow members to unlock their account with a PIN."
+    "message": "Não permitir que os membros desbloqueiem a sua conta com um PIN."
+  },
+  "limitedEventLogs": {
+    "message": "Os planos $PRODUCT_TYPE$ não têm acesso a registos de eventos reais",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Obtenha acesso total aos registos de eventos da organização ao atualizar para um plano Equipas ou Empresarial."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Atualizar para dados de registo de eventos reais"
+  },
+  "upgradeEventLogMessage": {
+    "message": "Estes eventos são apenas exemplos e não refletem eventos reais na sua organização Bitwarden."
   }
 }
diff --git a/apps/web/src/locales/ro/messages.json b/apps/web/src/locales/ro/messages.json
index 0b4572578e4..bf23ee549e8 100644
--- a/apps/web/src/locales/ro/messages.json
+++ b/apps/web/src/locales/ro/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Aplicațiile critice"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Memorare autentificare"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Retrimitere e-mail cu codul de verificare"
   },
   "useAnotherTwoStepMethod": {
     "message": "Utilizare de metodă diferită de autentificare în două etape"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Introduceți YubiKey în portul USB al calculatorului apoi apăsați butonul acestuia."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Opțiuni de autentificare în două etape"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Ați pierdut accesul la toți furnizorii de autentificare în două etape? Folosiți codul de recuperare pentru a dezactiva toți acești furnizori din contul dvs."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrate din FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "E-mail"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Utilizați un browser nesuportat. Seiful web ar putea să nu funcționeze corect."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Setați cerințele pentru puterea parolei principale."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Necesită autentificare în doi pași"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Autentificare WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn nu este acceptat în acest browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/ru/messages.json b/apps/web/src/locales/ru/messages.json
index 11f00e2fb4b..fb1e5b1a09d 100644
--- a/apps/web/src/locales/ru/messages.json
+++ b/apps/web/src/locales/ru/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Критичные приложения"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "Никакие критически важные приложения не подвергаются риску"
+  },
   "accessIntelligence": {
     "message": "Управление доступом"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Войти в Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Введите код, отправленный на ваш email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Введите код из приложения-аутентификатора"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Нажмите на YubiKey для аутентификации"
+  },
   "authenticationTimeout": {
     "message": "Таймаут аутентификации"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Запомнить меня"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Не спрашивать на этом устройстве в течение 30 дней"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Отправить код подтверждения еще раз"
   },
   "useAnotherTwoStepMethod": {
     "message": "Использовать другой метод двухэтапной аутентификации"
   },
+  "selectAnotherMethod": {
+    "message": "Выбрать другой способ",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Использовать код восстановления"
+  },
   "insertYubiKey": {
     "message": "Вставьте свой YubiKey в USB-порт компьютера и нажмите его кнопку."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Настройки двухэтапной аутентификации"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Выбрать другой метод двухэтапной аутентификации"
+  },
   "recoveryCodeDesc": {
     "message": "Потеряли доступ ко всем вариантам двухэтапной аутентификации? Используйте код восстановления, чтобы отключить ее для вашего аккаунта."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Перенесено из FIDO)"
   },
+  "openInNewTab": {
+    "message": "Открыть в новой вкладке"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -2210,13 +2238,13 @@
     "message": "Просмотр элементов"
   },
   "viewItemsHidePass": {
-    "message": "Просмотр элементов, скрытых паролей"
+    "message": "Просмотр элементов, пароли скрыты"
   },
   "editItems": {
-    "message": "Изменить элементы"
+    "message": "Изменение элементов"
   },
   "editItemsHidePass": {
-    "message": "Изменить элементы, скрытые пароли"
+    "message": "Изменение элементов, пароли скрыты"
   },
   "disable": {
     "message": "Отключить"
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Вы используете неподдерживаемый браузер. Веб-хранилище может работать некорректно."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "У вас есть незавершенный запрос на авторизацию с другого устройства."
+  },
+  "reviewLoginRequest": {
+    "message": "Просмотр запроса на вход"
+  },
   "freeTrialEndPromptCount": {
     "message": "Ваша бесплатная пробная версия заканчивается через $COUNT$ дней.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Установите требования к надежности мастер-пароля."
   },
+  "passwordStrengthScore": {
+    "message": "Оценка надежности пароля $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Требуется двухэтапная аутентификация"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Аутентификация WebAutn"
   },
+  "readSecurityKey": {
+    "message": "Считать ключ безопасности"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Ожидание взаимодействия с ключом безопасности..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn не поддерживается в этом браузере."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Для вашего аккаунта требуется двухэтапная аутентификация Duo."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Следуйте указаниям ниже, чтобы завершить авторизацию."
+  },
   "launchDuo": {
     "message": "Запустить Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Не разрешать пользователям разблокировать свои аккаунты с помощью PIN-кода."
+  },
+  "limitedEventLogs": {
+    "message": "Планы $PRODUCT_TYPE$ не имеют доступа к реальным журналам событий",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Получите полный доступ к журналам событий организации, перейдя на план Teams или Enterprise."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "Эти события являются лишь примерами и не отражают реальных событий в вашей организации Bitwarden."
   }
 }
diff --git a/apps/web/src/locales/si/messages.json b/apps/web/src/locales/si/messages.json
index d7d7133d056..fff2413cf4d 100644
--- a/apps/web/src/locales/si/messages.json
+++ b/apps/web/src/locales/si/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "වි-තැපෑල"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/sk/messages.json b/apps/web/src/locales/sk/messages.json
index f7843acb742..61390245659 100644
--- a/apps/web/src/locales/sk/messages.json
+++ b/apps/web/src/locales/sk/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritické aplikácie"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Prehľad o prístupe"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Prihlásenie do Bitwardenu"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Zadajte kód zaslaný na váš e-mail"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Zadajte kód z overovacej aplikácie"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Stlačte YubiKey na overenie"
+  },
   "authenticationTimeout": {
     "message": "Časový limit overenia"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Zapamätaj si ma"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Nepýtať sa znova na tomto zariadení 30 dní"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Znovu zaslať overovací kód emailom"
   },
   "useAnotherTwoStepMethod": {
     "message": "Použiť inú dvojstupňovú metódu prihlásenia"
   },
+  "selectAnotherMethod": {
+    "message": "Vyberte iný spôsob",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Použiť obnovovací kód"
+  },
   "insertYubiKey": {
     "message": "Vložte váš YubiKey do USB portu počítača a stlačte jeho tlačidlo."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Možnosti dvojstupňového prihlásenia"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Vyberte metódu dvojstupňového prihlásenia"
+  },
   "recoveryCodeDesc": {
     "message": "Stratili ste prístup ku všetkým vašim dvojstupňovým poskytovateľom? Použite váš záchranný kód pre vypnutie všetkých poskytovateľov vo vašom účte."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrované z FIDO)"
   },
+  "openInNewTab": {
+    "message": "Otvoriť v novej karte"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Používate nepodporovaný prehliadač. Webový trezor nemusí úplne fungovať."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Máte čakajúcu požiadavku na prihlásenie z iného zariadenia."
+  },
+  "reviewLoginRequest": {
+    "message": "Skontrolovať požiadavku o prihlásenie"
+  },
   "freeTrialEndPromptCount": {
     "message": "Vaše bezplatné skúšobné obdobie vyprší o $COUNT$ dní.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Nastavte minimálne požiadavky pre silu hlavného hesla."
   },
+  "passwordStrengthScore": {
+    "message": "Sila hesla $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Vyžadovať dvojstupňové prihlásenie"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Overiť cez WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Prečítať bezpečnostný kľúč"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Čaká sa na interakciu s bezpečnostným kľúčom..."
+  },
   "webAuthnNotSupported": {
     "message": "Tento prehliadač nepodporuje WebAuthn."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Pre váš účet je potrebné dvojstupňové prihlásenie DUO."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Pre váš účet sa vyžaduje dvojstupňové prihlásenie Duo. Na dokončenie prihlásenia postupujte podľa pokynov."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Na dokončenie prihlásenia postupujte podľa pokynov."
+  },
   "launchDuo": {
     "message": "Spustiť DUO"
   },
@@ -10433,9 +10488,27 @@
     "message": "Počet pridelených sedení presahuje počet dostupných sedení."
   },
   "removeUnlockWithPinPolicyTitle": {
-    "message": "Remove Unlock with PIN"
+    "message": "Odstrániť odomknutie PIN kódom"
   },
   "removeUnlockWithPinPolicyDesc": {
-    "message": "Do not allow members to unlock their account with a PIN."
+    "message": "Neumožnite vaším členom odomykať si konto PIN kódom."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/sl/messages.json b/apps/web/src/locales/sl/messages.json
index fad209c3c03..a0358d28ee9 100644
--- a/apps/web/src/locales/sl/messages.json
+++ b/apps/web/src/locales/sl/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritične aplikacije"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Analiza dostopa"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Zapomni si me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Ponovno posreduj potrditveno kodo na e-poštni naslov"
   },
   "useAnotherTwoStepMethod": {
     "message": "Uporabi drug dvostopenjski način vpisa"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Svoj YubiKey ključek vstavite v USB režo in pritisnite na njegovo tipko."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Možnosti dvostopenjske prijave"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Ste izgubili dostop do vseh vaših ponudnikov dvostopenjse prijave? Uporabite svoje kode za obnovitev in tako onemogočite dvostopenjsko prijavo v svoj račun."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Preseljeno iz FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "E-pošta"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Nastavite zahteve za moč glavnega gesla."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/sr/messages.json b/apps/web/src/locales/sr/messages.json
index 6540a709174..f261fe8c90b 100644
--- a/apps/web/src/locales/sr/messages.json
+++ b/apps/web/src/locales/sr/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Критичне апликације"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Приступи интелигенцији"
   },
@@ -465,16 +468,16 @@
     "message": "Уреди фасциклу"
   },
   "newFolder": {
-    "message": "New folder"
+    "message": "Нова фасцикла"
   },
   "folderName": {
-    "message": "Folder name"
+    "message": "Име фасцикле"
   },
   "folderHintText": {
-    "message": "Nest a folder by adding the parent folder's name followed by a “/”. Example: Social/Forums"
+    "message": "Угнездите фасциклу додавањем имена надређене фасцкле праћеног знаком „/“. Пример: Друштвени/Форуми"
   },
   "deleteFolderPermanently": {
-    "message": "Are you sure you want to permanently delete this folder?"
+    "message": "Да ли сте сигурни да желите да трајно избришете ову фасциклу?"
   },
   "baseDomain": {
     "message": "Главни домен",
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Пријавите се на Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Унесите кôд послат на ваш имејл"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Унесите кôд из апликације за аутентификацију"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Стисните Ваш YubiKey за аутентификацију"
+  },
   "authenticationTimeout": {
     "message": "Истекло је време аутентификације"
   },
@@ -1399,7 +1411,7 @@
     "message": "Одбиј приступ"
   },
   "notificationSentDeviceAnchor": {
-    "message": "web app"
+    "message": "веб апликација"
   },
   "notificationSentDevicePart2": {
     "message": "Потврдите да се фраза отиска прста поклапа са овом испод пре одобравања."
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Запамти ме"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Не питајте поново на овом уређају 30 дана"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Поново послати верификациони код на Е-пошту"
   },
   "useAnotherTwoStepMethod": {
     "message": "Користите другу методу пријављивања у два корака"
   },
+  "selectAnotherMethod": {
+    "message": "Изаберите другу методу",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Употребите шифру за опоравак"
+  },
   "insertYubiKey": {
     "message": "Убаците свој YubiKey у УСБ порт рачунара, а затим додирните његово дугме."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Опције дво-коракне пријаве"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Одабрати методу пријављивања у два корака"
+  },
   "recoveryCodeDesc": {
     "message": "Изгубили сте приступ свим својим двофакторским добављачима? Употребите код за опоравак да онемогућите све двофакторске добављаче из налога."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Мигрирао из FIDO)"
   },
+  "openInNewTab": {
+    "message": "Отвори у новом језичку"
+  },
   "emailTitle": {
     "message": "Е-пошта"
   },
@@ -1888,16 +1916,16 @@
     "message": "Укључи заштиту пријаве на новом уређају"
   },
   "turnOffNewDeviceLoginProtectionModalDesc": {
-    "message": "Proceed below to turn off the verification emails bitwarden sends when you login from a new device."
+    "message": "Наставите доле да бисте искључили верификационе имејлове које Bitwarden шаље када се пријавите са новог уређаја."
   },
   "turnOnNewDeviceLoginProtectionModalDesc": {
-    "message": "Proceed below to have bitwarden send you verification emails when you login from a new device."
+    "message": "Наставите доле да бисте Bitwarden Ва- шаље верификационе имејлове када се пријавите са новог уређаја."
   },
   "turnOffNewDeviceLoginProtectionWarning": {
-    "message": "With new device login protection turned off, anyone with your master password can access your account from any device. To protect your account without verification emails, set up two-step login."
+    "message": "Ако је заштита нових пријава искључена, је било ко са вашом главном лозинком може приступити вашем налогу са било којег уређаја. Да бисте заштитили свој рачун без верификационих имејлова, поставите пријаву у два корака."
   },
   "accountNewDeviceLoginProtectionSaved": {
-    "message": "New device login protection changes saved"
+    "message": "Промене нових уређаји за заштиту пријаве су сачуване"
   },
   "sessionsDeauthorized": {
     "message": "Одузето овлашћење свих сесија"
@@ -2163,7 +2191,7 @@
     "message": "Омогућавање пријаве у два корака може вас трајно закључати са вашег Bitwarden-а налога. Код за опоравак омогућава вам приступ вашем налогу у случају да више не можете да користите свог уобичајеног добављача услуге пријављивања у два корака (нпр. ако изгубите уређај). Подршка Bitwarden-а неће вам моћи помоћи ако изгубите приступ свом налогу. Препоручујемо да запишете или одштампате код за опоравак и сачувате га на сигурном месту."
   },
   "yourSingleUseRecoveryCode": {
-    "message": "Your single-use recovery code can be used to turn off two-step login in the event that you lose access to your two-step login provider. Bitwarden recommends you write down the recovery code and keep it in a safe place."
+    "message": "Ваш јединствени кôд за опоравак може се користити за искључивање у два корака у случају да изгубите приступ свом двоструком провајдеру пријаве. Bitwarden препоручује да запишете кôд за опоравак и држите га на сигурном месту."
   },
   "viewRecoveryCode": {
     "message": "Погледати шифру за опоравак"
@@ -2414,7 +2442,7 @@
     "message": "Догодила се грешка приликом читања безбедносног кључа. Покушајте поново."
   },
   "twoFactorWebAuthnWarning1": {
-    "message": "Due to platform limitations, WebAuthn cannot be used on all Bitwarden applications. You should set up another two-step login provider so that you can access your account when WebAuthn cannot be used."
+    "message": "Због ограничења платформе, WebAuthn се не могу користити на свим Bitwarden апликацијама. Требали бисте подесити другог добављача услуге пријављивања у два корака како бисте могли да приступите свом налогу када WebAuthn не могу да се користе."
   },
   "twoFactorRecoveryYourCode": {
     "message": "Ваш Bitwarden код за опоравак пријаве у два корака"
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Користите неподржани веб прегледач. Веб сеф можда неће правилно функционисати."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "Имате захтев за пријаву на чекању са другог уређаја."
+  },
+  "reviewLoginRequest": {
+    "message": "Прегледајте захтев за пријаву"
+  },
   "freeTrialEndPromptCount": {
     "message": "Ваша проба се завршава за $COUNT$ дана.",
     "placeholders": {
@@ -4176,7 +4210,7 @@
     "message": "Ако не можете да приступите свом налогу путем уобичајених метода пријављивања у два корака, можете користити свој код за опоравак пријаве да бисте онемогућили све добављаче услуга у два корака на свом налогу."
   },
   "logInBelowUsingYourSingleUseRecoveryCode": {
-    "message": "Log in below using your single-use recovery code. This will turn off all two-step providers on your account."
+    "message": "Пријавите се испод коришћења вашег једнократног кôда за опоравак. Ово ће искључити све провајдере у два корака на вашем налогу."
   },
   "recoverAccountTwoStep": {
     "message": "Опоравак пријаве у два корака"
@@ -4470,7 +4504,7 @@
     "message": "Ажурирање кључа за шифровање не може да се настави"
   },
   "editFieldLabel": {
-    "message": "Edit $LABEL$",
+    "message": "Уреди $LABEL$",
     "placeholders": {
       "label": {
         "content": "$1",
@@ -4479,7 +4513,7 @@
     }
   },
   "reorderToggleButton": {
-    "message": "Reorder $LABEL$. Use arrow key to move item up or down.",
+    "message": "Преместити $LABEL$. Користите тастер са стрелицом да бисте померили ставку.",
     "placeholders": {
       "label": {
         "content": "$1",
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Поставите минималне захтеве за чврстоћу главне лозинке."
   },
+  "passwordStrengthScore": {
+    "message": "Снага лозинкe $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Потребна дво-степенска пријава"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAutn аутентификација"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn није подржано у овом прегледачу."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "DUO пријава у два корака је потребна за ваш налог."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Покренути DUO"
   },
@@ -8462,16 +8517,16 @@
     "message": "Одобри захтев"
   },
   "deviceApproved": {
-    "message": "Device approved"
+    "message": "Уређај одобрен"
   },
   "deviceRemoved": {
-    "message": "Device removed"
+    "message": "Уређај је уклоњен"
   },
   "removeDevice": {
-    "message": "Remove device"
+    "message": "Уклони уређај"
   },
   "removeDeviceConfirmation": {
-    "message": "Are you sure you want to remove this device?"
+    "message": "Да ли сте сигурни да желите да уклоните овај уређај?"
   },
   "noDeviceRequests": {
     "message": "Нема захтева уређаја"
@@ -10291,38 +10346,38 @@
     "message": "Domain claimed"
   },
   "organizationNameMaxLength": {
-    "message": "Organization name cannot exceed 50 characters."
+    "message": "Име организације не може прећи 50 знакова."
   },
   "openingExtension": {
-    "message": "Opening the Bitwarden browser extension"
+    "message": "Отварање Bitwarden додатка прегледача"
   },
   "somethingWentWrong": {
-    "message": "Something went wrong..."
+    "message": "Нешто није у реду..."
   },
   "openingExtensionError": {
-    "message": "We had trouble opening the Bitwarden browser extension. Click the button to open it now."
+    "message": "Имали смо проблема са отварањем додатка. Кликните на дугме да бисте га сада отворили."
   },
   "openExtension": {
-    "message": "Open extension"
+    "message": "Отвори додатак"
   },
   "doNotHaveExtension": {
-    "message": "Don't have the Bitwarden browser extension?"
+    "message": "Немате додатак за Bitwarden?"
   },
   "installExtension": {
-    "message": "Install extension"
+    "message": "Инсталирајте додатак"
   },
   "openedExtension": {
-    "message": "Opened the browser extension"
+    "message": "Отворите додатак претраживача"
   },
   "openedExtensionViewAtRiskPasswords": {
-    "message": "Successfully opened the Bitwarden browser extension. You can now review your at-risk passwords."
+    "message": "Успешно је отворен додатак. Сада можете да прегледате своје ризичне лозинке."
   },
   "openExtensionManuallyPart1": {
-    "message": "We had trouble opening the Bitwarden browser extension. Open the Bitwarden icon",
+    "message": "Имали смо проблема са отварањем додатка. Отворите Bitwarden иконицу",
     "description": "This will be used as part of a larger sentence, broken up to include the Bitwarden icon. The full sentence will read 'We had trouble opening the Bitwarden browser extension. Open the Bitwarden icon [Bitwarden Icon] from the toolbar.'"
   },
   "openExtensionManuallyPart2": {
-    "message": "from the toolbar.",
+    "message": "са алатне траке.",
     "description": "This will be used as part of a larger sentence, broken up to include the Bitwarden icon. The full sentence will read 'We had trouble opening the Bitwarden browser extension. Open the Bitwarden icon [Bitwarden Icon] from the toolbar.'"
   },
   "resellerRenewalWarningMsg": {
@@ -10390,7 +10445,7 @@
     "message": "This action will delete the member account including all items in their vault. This replaces the previous Remove action."
   },
   "deleteManagedUserWarning": {
-    "message": "Delete is a new action!"
+    "message": "Избриши је нова акција!"
   },
   "seatsRemaining": {
     "message": "You have $REMAINING$ seats remaining out of $TOTAL$ seats assigned to this organization. Contact your provider to manage your subscription.",
@@ -10406,7 +10461,7 @@
     }
   },
   "existingOrganization": {
-    "message": "Existing organization"
+    "message": "Постојећа организација"
   },
   "selectOrganizationProviderPortal": {
     "message": "Select an organization to add to your Provider Portal."
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/sr_CS/messages.json b/apps/web/src/locales/sr_CS/messages.json
index 6b5a1e6def2..ffad2e5525d 100644
--- a/apps/web/src/locales/sr_CS/messages.json
+++ b/apps/web/src/locales/sr_CS/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritične aplikacije"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Pristupi inteligenciji"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Zapamti me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Povežite Vaš YubiKey preko USB porta na vašem računaru, pa pritisnite dugme na njemu."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/sv/messages.json b/apps/web/src/locales/sv/messages.json
index d3aeee603b8..bbcf4b6fa7e 100644
--- a/apps/web/src/locales/sv/messages.json
+++ b/apps/web/src/locales/sv/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritiska applikationer"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Logga in på Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Kom ihåg mig"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Skicka e-postmeddelandet med verifieringskoden igen"
   },
   "useAnotherTwoStepMethod": {
     "message": "Använd en annan metod för tvåstegsverifiering"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Sätt in din YubiKey i din dators USB-port och tryck på dess knapp."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Alternativ för tvåstegsverifiering"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Förlorat åtkomst till alla dina metoder för tvåstegsverifiering? Använd din återställningskod för att inaktivera tvåstegsverifiering på ditt konto."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrerad från FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "E-post"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Du använder en webbläsare som inte stöds. Webbvalvet kanske inte fungerar som det ska."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Ange minimikrav för huvudlösenordsstyrka."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Kräv tvåstegsverifiering"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Autentisera WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn stöds inte i denna webbläsare."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Starta Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/te/messages.json b/apps/web/src/locales/te/messages.json
index 1c4e2e55201..aed10e3ad71 100644
--- a/apps/web/src/locales/te/messages.json
+++ b/apps/web/src/locales/te/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Remember me"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Send verification code email again"
   },
   "useAnotherTwoStepMethod": {
     "message": "Use another two-step login method"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Two-step login options"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/th/messages.json b/apps/web/src/locales/th/messages.json
index d78b2e863de..f6bb3f7005a 100644
--- a/apps/web/src/locales/th/messages.json
+++ b/apps/web/src/locales/th/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "จำการเข้าระบบของฉันไว้"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "ส่งรหัสยืนยันไปยังอีเมลอีกครั้ง"
   },
   "useAnotherTwoStepMethod": {
     "message": "ใช้วิธีลงชื่อเข้าใช้แบบสองขั้นตอนวิธีอื่น"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "ตัวเลือกการเข้าสู่ระบบแบบสองขั้นตอน"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Lost access to all of your two-step login providers? Use your recovery code to turn off all two-step login providers from your account."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "อีเมล"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/tr/messages.json b/apps/web/src/locales/tr/messages.json
index 94c9633e225..3502742bc02 100644
--- a/apps/web/src/locales/tr/messages.json
+++ b/apps/web/src/locales/tr/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Kritik uygulamalar"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "E-posta adresinize gönderilen kodu girin"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Kimlik doğrulama uygulamanızdaki kodu girin"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Beni hatırla"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Doğrulama kodu e-postasını yeniden gönder"
   },
   "useAnotherTwoStepMethod": {
     "message": "Başka bir iki aşamalı giriş yöntemini kullan"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "YubiKey'inizi bilgisayarınızın USB portuna takın, ardından düğmesine dokunun."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "İki aşamalı giriş seçenekleri"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "İki aşamalı giriş sağlayıcılarınıza ulaşamıyor musunuz? Kurtarma kodunuzu kullanarak hesabınızdaki tüm iki aşamalı giriş sağlayıcılarını devre dışı bırakabilirsiniz."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(FIDO'dan taşındı)"
   },
+  "openInNewTab": {
+    "message": "Yeni sekmede aç"
+  },
   "emailTitle": {
     "message": "E-posta"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Desteklenmeyen bir web tarayıcısı kullanıyorsunuz. Web kasası düzgün çalışmayabilir."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Ana parola gücü gereksinimlerini ayarlayın."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "İki adımlı girişi zorunlu tut"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "WebAutn ile doğrula"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn bu tarayıcıda desteklenmiyor."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Hesabınız için Duo iki adımlı giriş gereklidir."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Duo'yu başlat"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/uk/messages.json b/apps/web/src/locales/uk/messages.json
index 85f9cfafab1..c963b69547c 100644
--- a/apps/web/src/locales/uk/messages.json
+++ b/apps/web/src/locales/uk/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Критичні програми"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Управління доступом"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Увійти в Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Час очікування автентифікації"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Запам'ятати мене"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Надіслати код підтвердження ще раз"
   },
   "useAnotherTwoStepMethod": {
     "message": "Інший спосіб двоетапної перевірки"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Вставте свій YubiKey в USB порт комп'ютера, потім торкніться цієї кнопки."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Налаштування двоетапної перевірки"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Втратили доступ до всіх провайдерів двоетапної перевірки? Скористайтеся кодом відновлення, щоб вимкнути двоетапну перевірку для свого облікового запису."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Перенесено з FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Е-пошта"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "Ви використовуєте непідтримуваний браузер. Вебсховище може працювати неправильно."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Ваш безплатний пробний період завершується через $COUNT$ днів.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Встановіть вимоги надійності головного пароля."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Вимагати двоетапну перевірку"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Автентифікація WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn не підтримується в цьому браузері."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Для вашого облікового запису необхідна двоетапна перевірка з Duo."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Запустити Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/vi/messages.json b/apps/web/src/locales/vi/messages.json
index e1d5e54b550..53a215d2ded 100644
--- a/apps/web/src/locales/vi/messages.json
+++ b/apps/web/src/locales/vi/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "Critical applications"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "Log in to Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "Authentication timeout"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "Ghi nhớ đăng nhập"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "Gửi lại email xác minh"
   },
   "useAnotherTwoStepMethod": {
     "message": "Dùng phương pháp xác mnih hai bước khác"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "Cắm YubiKey vào cổng USB trên máy tính bạn và bấm nút trên Yubikey."
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "Tùy chọn xác minh hai bước"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "Bạn bị mất quyền truy cập vào tất cả các dịch vụ xác minh hai bước? Sử dụng mã phục hồi của bạn để tắt chúng trên tài khoản bạn."
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "(Migrated from FIDO)"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "Email"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "You are using an unsupported web browser. The web vault may not function properly."
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "Your free trial ends in $COUNT$ days.",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "Set requirements for master password strength."
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "Require two-step login"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "Authenticate WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "WebAuthn is not supported in this browser."
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "Launch Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }
diff --git a/apps/web/src/locales/zh_CN/messages.json b/apps/web/src/locales/zh_CN/messages.json
index 616bdd68360..8d73dbd72e6 100644
--- a/apps/web/src/locales/zh_CN/messages.json
+++ b/apps/web/src/locales/zh_CN/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "关键应用程序"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "没有关键应用程序存在风险"
+  },
   "accessIntelligence": {
     "message": "Access Intelligence"
   },
@@ -15,7 +18,7 @@
     "message": "密码风险"
   },
   "reviewAtRiskPasswords": {
-    "message": "跨应用程序审查有风险的密码（弱密码、暴露的密码或重复使用的密码）。选择最关键的应用程序，优先为用户采取安全措施，以解决密码风险问题。"
+    "message": "审查各个应用程序中存在风险的密码（弱、暴露或重复使用）。选择最关键的应用程序，优先为用户采取安全措施，以解决存在风险的密码问题。"
   },
   "dataLastUpdated": {
     "message": "数据最后更新于：$DATE$",
@@ -78,13 +81,13 @@
     }
   },
   "noAppsInOrgDescription": {
-    "message": "当用户保存登录信息时，应用程序会出现在这里，显示所有有风险的密码。标记关键应用程序并通知用户更新密码。"
+    "message": "当用户保存登录信息时，应用程序会出现在这里，显示所有存在风险的密码。标记关键应用程序并通知用户更新密码。"
   },
   "noCriticalAppsTitle": {
     "message": "您未将任何应用程序标记为关键"
   },
   "noCriticalAppsDescription": {
-    "message": "选择最关键的应用程序来发现有风险的密码，并通知用户更改这些密码。"
+    "message": "选择最关键的应用程序来发现存在风险的密码，并通知用户更改这些密码。"
   },
   "markCriticalApps": {
     "message": "标记关键应用程序"
@@ -99,7 +102,7 @@
     "message": "应用程序"
   },
   "atRiskPasswords": {
-    "message": "有风险的密码"
+    "message": "存在风险的密码"
   },
   "requestPasswordChange": {
     "message": "请求更改密码"
@@ -111,10 +114,10 @@
     "message": "搜索应用程序"
   },
   "atRiskMembers": {
-    "message": "有风险的成员"
+    "message": "存在风险的成员"
   },
   "atRiskMembersWithCount": {
-    "message": "有风险的成员 ($COUNT$)",
+    "message": "存在风险的成员 ($COUNT$)",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -123,7 +126,7 @@
     }
   },
   "atRiskApplicationsWithCount": {
-    "message": "有风险的应用程序 ($COUNT$)",
+    "message": "存在风险的应用程序 ($COUNT$)",
     "placeholders": {
       "count": {
         "content": "$1",
@@ -150,7 +153,7 @@
     "message": "总的成员"
   },
   "atRiskApplications": {
-    "message": "有风险的应用程序"
+    "message": "存在风险的应用程序"
   },
   "totalApplications": {
     "message": "总的应用程序"
@@ -474,10 +477,10 @@
     "message": "通过在父文件夹名后面添加「/」来嵌套文件夹。示例：Social/Forums"
   },
   "deleteFolderPermanently": {
-    "message": "您确定要永久删除这个文件夹吗？"
+    "message": "确定要永久删除这个文件夹吗？"
   },
   "baseDomain": {
-    "message": "基础域",
+    "message": "基础域名",
     "description": "Domain name. Example: website.com"
   },
   "domainName": {
@@ -1132,10 +1135,10 @@
     "message": "如果所有通行密钥被移除，不使用主密码您将无法登录新的设备。"
   },
   "passkeyLimitReachedInfo": {
-    "message": "通行密钥已达上限。移除一个通行密钥以添加另一个。"
+    "message": "已达到通行密钥上限。请移除一个通行密钥后再添加其他通行密钥。"
   },
   "tryAgain": {
-    "message": "请重试"
+    "message": "重试"
   },
   "createAccount": {
     "message": "创建账户"
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "登录到 Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "输入发送到您的电子邮箱的代码"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "输入来自您的验证器 App 的代码"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "按下 YubiKey 以验证身份"
+  },
   "authenticationTimeout": {
     "message": "身份验证超时"
   },
@@ -1443,17 +1455,27 @@
   "rememberMe": {
     "message": "记住我"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "30 天内在此设备上不再询问"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "再次发送验证码电子邮件"
   },
   "useAnotherTwoStepMethod": {
     "message": "使用其他两步登录方式"
   },
+  "selectAnotherMethod": {
+    "message": "选择其他方式",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "使用您的恢复代码"
+  },
   "insertYubiKey": {
     "message": "将您的 YubiKey 插入计算机的 USB 端口，然后触摸其按钮。"
   },
   "insertU2f": {
-    "message": "将您的安全钥匙插入计算机的 USB 端口。如果它有按钮，请触摸它。"
+    "message": "将您的安全密钥插入计算机的 USB 端口。如果它有按钮，请触摸它。"
   },
   "loginUnavailable": {
     "message": "登录不可用"
@@ -1462,11 +1484,14 @@
     "message": "此账户已启用两步登录，但此浏览器不支持任何已配置的两步登录提供程序。"
   },
   "noTwoStepProviders2": {
-    "message": "请使用支持的网页浏览器（例如 Chrome）和/或添加其他支持更广泛的提供程序（例如验证器 App）。"
+    "message": "请使用受支持的网页浏览器（例如 Chrome），和/或添加其他跨网页浏览器支持更好的提供程序（例如验证器 App）。"
   },
   "twoStepOptions": {
     "message": "两步登录选项"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "选择两步登录方式"
+  },
   "recoveryCodeDesc": {
     "message": "失去对您所有的双重身份验证设备的访问？请使用您的恢复代码来关闭您账户中所有的两步登录提供程序。"
   },
@@ -1481,7 +1506,7 @@
     "description": "'Bitwarden Authenticator' is a product name and should not be translated."
   },
   "yubiKeyTitleV2": {
-    "message": "Yubico OTP 安全钥匙"
+    "message": "Yubico OTP 安全密钥"
   },
   "yubiKeyDesc": {
     "message": "使用 YubiKey 4、5 或 NEO 设备。"
@@ -1491,24 +1516,27 @@
     "description": "'Duo Security' and 'Duo Mobile' are product names and should not be translated."
   },
   "duoOrganizationDesc": {
-    "message": "为您的组织使用 Duo Security 的 Duo 移动 App、短信、电话或 U2F 安全钥匙来进行验证。",
+    "message": "为您的组织使用 Duo Security 的 Duo 移动 App、短信、电话或 U2F 安全密钥来进行验证。",
     "description": "'Duo Security' and 'Duo Mobile' are product names and should not be translated."
   },
   "u2fDesc": {
-    "message": "使用任何 FIDO U2F 兼容的安全钥匙访问您的账户。"
+    "message": "使用任何 FIDO U2F 兼容的安全密钥访问您的账户。"
   },
   "u2fTitle": {
-    "message": "FIDO U2F 安全钥匙"
+    "message": "FIDO U2F 安全密钥"
   },
   "webAuthnTitle": {
     "message": "通行密钥"
   },
   "webAuthnDesc": {
-    "message": "使用您设备的生物识别或 WebAuthn 兼容的安全钥匙。"
+    "message": "使用您设备的生物识别或 FIDO2 兼容的安全密钥。"
   },
   "webAuthnMigrated": {
     "message": "（迁移自 FIDO）"
   },
+  "openInNewTab": {
+    "message": "在新标签页中打开"
+  },
   "emailTitle": {
     "message": "电子邮箱"
   },
@@ -2117,7 +2145,7 @@
     "message": "自定义"
   },
   "newCustomDomain": {
-    "message": "添加自定义域名"
+    "message": "新增自定义域名"
   },
   "newCustomDomainDesc": {
     "message": "输入用逗号分隔的域名列表。只能输入「基础」域名，不要输入子域名。例如，输入「google.com」而不是「www.google.com」。您也可以输入「androidapp://package.name」以将 Android App 与其他网站域名关联。"
@@ -2147,14 +2175,14 @@
     "message": "为您的组织启用两步登录。"
   },
   "twoStepLoginEnterpriseDescStart": {
-    "message": "要为成员实施 Bitwarden 两步登录选项，请使用 ",
+    "message": "要为成员强制实施 Bitwarden 两步登录选项，请使用 ",
     "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'Enforce Bitwarden Two-step Login options for members by using the Two-step Login Policy.'"
   },
   "twoStepLoginPolicy": {
     "message": "两步登录策略"
   },
   "twoStepLoginOrganizationDuoDesc": {
-    "message": "要实施 Duo 方式的两步登录，请使用下面的选项。"
+    "message": "要强制实施 Duo 方式的两步登录，请使用下面的选项。"
   },
   "twoStepLoginOrganizationSsoDesc": {
     "message": "如果您已设置或计划设置 SSO，两步登录可能已经通过您的身份提供程序强制实施了。"
@@ -2324,7 +2352,7 @@
     }
   },
   "webAuthnkeyX": {
-    "message": "WebAuthn 钥匙 $INDEX$",
+    "message": "WebAuthn 密钥 $INDEX$",
     "placeholders": {
       "index": {
         "content": "$1",
@@ -2336,7 +2364,7 @@
     "message": "NFC 支持"
   },
   "twoFactorYubikeySupportsNfc": {
-    "message": "我的一把钥匙支持 NFC。"
+    "message": "我的一把密钥支持 NFC。"
   },
   "twoFactorYubikeySupportsNfcDesc": {
     "message": "如果您的某个 YubiKey 支持 NFC（例如 YubiKey NEO），移动设备在检测到 NFC 可用时将提示您。"
@@ -2345,7 +2373,7 @@
     "message": "YubiKey 已更新"
   },
   "disableAllKeys": {
-    "message": "禁用全部钥匙"
+    "message": "禁用全部密钥"
   },
   "twoFactorDuoDesc": {
     "message": "输入 Duo 管理面板提供的 Bitwarden 应用程序信息。"
@@ -2372,28 +2400,28 @@
     "message": "发送电子邮件"
   },
   "twoFactorU2fAdd": {
-    "message": "添加一个 FIDO U2F 安全钥匙到您的帐户"
+    "message": "添加一个 FIDO U2F 安全密钥到您的账户"
   },
   "removeU2fConfirmation": {
-    "message": "确认要删除此安全钥匙吗？"
+    "message": "确定要移除此安全密钥吗？"
   },
   "twoFactorWebAuthnAdd": {
-    "message": "添加一个 WebAuthn 安全钥匙到您的账户"
+    "message": "添加一个 WebAuthn 安全密钥到您的账户"
   },
   "readKey": {
-    "message": "读取钥匙"
+    "message": "读取密钥"
   },
   "keyCompromised": {
-    "message": "密钥被破坏。"
+    "message": "密钥已损坏。"
   },
   "twoFactorU2fGiveName": {
-    "message": "给安全钥匙起一个友好的名称来标识它。"
+    "message": "给安全密钥起一个友好的名称来标识它。"
   },
   "twoFactorU2fPlugInReadKey": {
-    "message": "将安全钥匙插入计算机的 USB 端口，然后点击「读取钥匙」按钮。"
+    "message": "将安全密钥插入计算机的 USB 端口，然后点击「读取密钥」按钮。"
   },
   "twoFactorU2fTouchButton": {
-    "message": "如果安全钥匙有按钮，请触摸它。"
+    "message": "如果安全密钥有按钮，请触摸它。"
   },
   "twoFactorU2fSaveForm": {
     "message": "保存表单。"
@@ -2405,13 +2433,13 @@
     "message": "桌面/笔记本电脑上支持 U2F 的浏览器（开启了 FIDO U2F 的 Chrome、Opera、Vivaldi 或 Firefox）中的网页版密码库和浏览器扩展。"
   },
   "twoFactorU2fWaiting": {
-    "message": "等待您触摸安全钥匙上的按钮"
+    "message": "等待您触摸安全密钥上的按钮"
   },
   "twoFactorU2fClickSave": {
-    "message": "单击下面的「保存」按钮，以启用此安全钥匙用于两步登录。"
+    "message": "单击下面的「保存」按钮，以启用此安全密钥用于两步登录。"
   },
   "twoFactorU2fProblemReadingTryAgain": {
-    "message": "读取安全钥匙时出现问题，请重试。"
+    "message": "读取安全密钥时出现问题。请重试。"
   },
   "twoFactorWebAuthnWarning1": {
     "message": "由于平台限制，WebAuthn 不能在所有 Bitwarden 应用程序上使用。您应该启用另一个两步登录提供程序，以便在无法使用 WebAuthn 时可以访问您的账户。"
@@ -2652,7 +2680,7 @@
     "message": "泄漏报告于"
   },
   "reportError": {
-    "message": "加载报告时发生错误，请重试。"
+    "message": "加载报告时发生错误。请重试"
   },
   "billing": {
     "message": "计费"
@@ -2745,7 +2773,7 @@
     "message": "Bitwarden 家庭版计划。"
   },
   "addons": {
-    "message": "附加"
+    "message": "插件"
   },
   "premiumAccess": {
     "message": "高级会员"
@@ -2857,7 +2885,7 @@
     "message": "恢复订阅"
   },
   "reinstateConfirmation": {
-    "message": "确定要移除待处理的取消请求并恢复订阅吗？"
+    "message": "确定要移除待取消的请求并恢复订阅吗？"
   },
   "reinstated": {
     "message": "您的订阅已恢复。"
@@ -3025,7 +3053,7 @@
     "message": "必须验证您的账户电子邮箱地址。"
   },
   "newOrganizationDesc": {
-    "message": "组织允许您与他人共享您的密码库的部分内容，以及管理特定实体（例如家族、小型团队或大型公司）的相关用户。"
+    "message": "组织允许您与他人共享您的密码库的部分内容，以及管理特定实体（例如家庭、小型团队或大型公司）的相关用户。"
   },
   "generalInformation": {
     "message": "常规信息"
@@ -3315,7 +3343,7 @@
     }
   },
   "removeUserConfirmation": {
-    "message": "确实要移除此用户吗？"
+    "message": "确定要移除此用户吗？"
   },
   "removeOrgUserConfirmation": {
     "message": "移除成员后，他们将不再具有对组织数据的访问权限，并且此操作无法撤销。要将此成员添加回组织，必须再次邀请他们并加入。"
@@ -4064,7 +4092,7 @@
     "message": "电子邮箱已验证"
   },
   "emailVerifiedFailed": {
-    "message": "无法验证您的电子邮箱。尝试发送新的验证电子邮件。"
+    "message": "无法验证您的电子邮箱。请尝试发送新的验证电子邮件。"
   },
   "emailVerificationRequired": {
     "message": "需要验证电子邮箱"
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "您使用的是不受支持的 Web 浏览器。网页密码库可能无法正常运行。"
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "您有一个来自其他设备的待处理登录请求。"
+  },
+  "reviewLoginRequest": {
+    "message": "审查登录请求"
+  },
   "freeTrialEndPromptCount": {
     "message": "您的免费试用将于 $COUNT$ 天后结束。",
     "placeholders": {
@@ -4143,7 +4177,7 @@
     }
   },
   "joinOrganizationDesc": {
-    "message": "您已被邀请加入上面的组织。要接受邀请，您需要登录或者创建一个 Bitwarden 账户。"
+    "message": "您已被邀请加入上面的组织。要接受邀请，您需要登录或者创建一个新的 Bitwarden 账户。"
   },
   "finishJoiningThisOrganizationBySettingAMasterPassword": {
     "message": "通过设置主密码完成加入此组织。"
@@ -4488,7 +4522,7 @@
     }
   },
   "keyUpdateFoldersFailed": {
-    "message": "更新您的加密密钥时，无法解密您的文件夹。要继续更新，文件夹必须被删除。继续操作不会删除密码库项目。"
+    "message": "更新加密密钥时，无法解密您的文件夹。要继续更新，必须删除文件夹。继续操作不会删除任何密码库项目。"
   },
   "keyUpdated": {
     "message": "密钥已更新"
@@ -4500,7 +4534,7 @@
     "message": "为了提高安全性，我们更改了加密方案。请在下方输入您的主密码以立即更新您的加密密钥。"
   },
   "updateEncryptionKeyWarning": {
-    "message": "更新加密密钥后，您需要注销所有正在使用的 Bitwarden 应用程序（比如移动 App 或者浏览器扩展）后重新登录。注销或者重新登录（这将下载新的加密密钥）失败可能会导致数据损坏。我们会尝试自动为您注销，但是，可能会有所延迟。"
+    "message": "更新加密密钥后，您需要注销所有当前使用的 Bitwarden 应用程序（例如移动 App 或浏览器扩展）然后重新登录。注销或者重新登录（这将下载新的加密密钥）失败可能会导致数据损坏。我们会尝试自动为您注销，但可能会有所延迟。"
   },
   "updateEncryptionKeyExportWarning": {
     "message": "您保存的任何已加密导出也将变为无效。"
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "设置主密码强度要求。"
   },
+  "passwordStrengthScore": {
+    "message": "密码强度评分 $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "要求两步登录"
   },
@@ -5018,7 +5061,7 @@
     "message": "不是所有者或管理员并且已是其他组织的成员的组织成员将从您的组织中移除。"
   },
   "singleOrgPolicyMemberWarning": {
-    "message": "不符合要求的成员将被置于撤销状态，直到他们离开所有其他组织。管理员可以豁免，达到要求后，管理员可以恢复他们的成员资格。"
+    "message": "不符合要求的成员将被置于已撤销状态，直到他们退出所有其他组织，管理员不受此约束。达到要求后，管理员可以恢复他们的成员资格。"
   },
   "requireSso": {
     "message": "要求单点登录身份验证"
@@ -5036,7 +5079,7 @@
     "message": "单一组织策略未启用。"
   },
   "requireSsoExemption": {
-    "message": "组织的所有者和管理员豁免此策略。"
+    "message": "组织的所有者和管理员不受此策略的约束。"
   },
   "sendTypeFile": {
     "message": "文件"
@@ -5045,7 +5088,7 @@
     "message": "文本"
   },
   "createSend": {
-    "message": "创建 Send",
+    "message": "新增 Send",
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "editSend": {
@@ -5132,7 +5175,7 @@
     "message": "密码已移除"
   },
   "removePasswordConfirmation": {
-    "message": "确定移除此密码？"
+    "message": "确定要移除此密码吗？"
   },
   "hideEmail": {
     "message": "对接收者隐藏我的电子邮箱地址。"
@@ -5189,7 +5232,7 @@
     "message": "紧急访问"
   },
   "emergencyAccessDesc": {
-    "message": "授予和管理可信联系人的紧急访问权限。可信联系人可以在紧急情况下请求获取查看或接管您账户的权限。查阅我们的帮助页面以了解更多关于零知识共享的工作原理和细节。"
+    "message": "授予和管理可信联系人的紧急访问权限。可信联系人可以在紧急情况下请求获取查看或接管您账户的权限。请访问我们的帮助页面，了解更多关于零知识共享的工作原理和细节。"
   },
   "emergencyAccessOwnerWarning": {
     "message": "您是一个或多个组织的拥有者。如果您授予紧急联系人接管权限，他们在接管后可作为拥有者持有您的所有权限。"
@@ -5334,7 +5377,7 @@
     "message": "通过禁用个人密码库选项，要求成员将项目保存到组织。"
   },
   "personalOwnershipExemption": {
-    "message": "组织的所有者和管理员豁免此策略。"
+    "message": "组织的所有者和管理员不受此策略的约束。"
   },
   "personalOwnershipSubmitError": {
     "message": "由于某个企业策略，您不能将项目保存到您的个人密码库。将所有权选项更改为组织，并从可用的集合中选择。"
@@ -5347,7 +5390,7 @@
     "description": "'Send' is a noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "disableSendExemption": {
-    "message": "可以管理组织策略的组织成员豁免此策略。"
+    "message": "可以管理组织策略的组织成员不受此策略的约束。"
   },
   "sendDisabled": {
     "message": "Send 已禁用",
@@ -5366,7 +5409,7 @@
     "description": "'Sends' is a plural noun and the name of a feature called 'Bitwarden Send'. It should not be translated."
   },
   "sendOptionsExemption": {
-    "message": "可以管理组织策略的组织成员豁免此策略。"
+    "message": "可以管理组织策略的组织成员不受此策略的约束。"
   },
   "disableHideEmail": {
     "message": "创建或编辑 Send 时，始终向接收者显示成员的电子邮箱地址。",
@@ -5537,7 +5580,7 @@
     "message": "集中管理机密。"
   },
   "centralizeSecretsManagementDescription": {
-    "message": "在一个位置安全地存储和管理机密，以防止机密扩散到您的组织。"
+    "message": "在一个位置安全地存储和管理机密，防止机密在组织内扩散。"
   },
   "preventSecretLeaks": {
     "message": "防止机密遭泄漏。"
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "验证 WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "读取安全密钥"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "等待安全密钥交互..."
+  },
   "webAuthnNotSupported": {
     "message": "此浏览器不支持 WebAuthn。"
   },
@@ -6301,7 +6350,7 @@
     "message": "输入您的个人电子邮箱以兑换 Bitwarden 家庭"
   },
   "sponsoredFamiliesLeaveCopy": {
-    "message": "如果您移除邀请或邀请被赞助组织移除，您的家庭赞助将在下一个续费日到期。"
+    "message": "如果您移除邀请或您被从赞助组织中移除，您的家庭赞助将在下一个续费日到期。"
   },
   "acceptBitwardenFamiliesHelp": {
     "message": "接受现有组织的邀请或创建一个新的家庭组织。"
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "您的账户要求使用 Duo 两步登录。"
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "您的账户要求使用 Duo 两步登录。请按照以下步骤完成登录。"
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "按照以下步骤完成登录。"
+  },
   "launchDuo": {
     "message": "启动 Duo"
   },
@@ -7697,7 +7752,7 @@
     "message": "更新"
   },
   "plusNMore": {
-    "message": "+ $QUANTITY$ 及更多",
+    "message": "还有 $QUANTITY$ 个",
     "placeholders": {
       "quantity": {
         "content": "$1",
@@ -8395,7 +8450,7 @@
     "description": "Used as a card title description on the set password page to explain why the user is there"
   },
   "cardMetrics": {
-    "message": "总计 $TOTAL$",
+    "message": "满分 $TOTAL$",
     "placeholders": {
       "total": {
         "content": "$1",
@@ -8828,7 +8883,7 @@
     }
   },
   "addAPaymentMethod": {
-    "message": "请添加一个付款方式。",
+    "message": "请添加一个付款方式",
     "description": "This will be used as part of a larger sentence, broken up to include links. The full sentence will read 'To maintain your subscription for $ORG$, add a payment method'"
   },
   "organizationInformation": {
@@ -8852,7 +8907,7 @@
     "description": "Used as a form field label for a select input on the offboarding survey."
   },
   "anyOtherFeedback": {
-    "message": "您还有其他反馈信息要分享吗？",
+    "message": "您还有其他反馈意见要分享吗？",
     "description": "Used as a form field label for a textarea input on the offboarding survey."
   },
   "missingFeatures": {
@@ -9564,7 +9619,7 @@
     "message": "确保成员具有对合适的凭据的访问权限，以及他们的账户是安全的。使用此报告获取包含会员访问权限和账户配置的 CSV 文件 。"
   },
   "memberAccessReportPageDesc": {
-    "message": "审计组织成员在各个群组、集合和集合项目之间的访问权限。CSV 导出文件提供了每位成员的详细信息，包括集合权限和账户配置的相关信息。"
+    "message": "审计组织成员在群组、集合和集合项目中的访问权限。CSV 导出文件提供了每位成员的详细信息，包括集合权限和账户配置信息。"
   },
   "memberAccessReportNoCollection": {
     "message": "（无集合）"
@@ -10040,7 +10095,7 @@
     "message": "最大文件大小为 500 MB"
   },
   "permanentlyDeleteAttachmentConfirmation": {
-    "message": "您确定要永久删除此附件吗？"
+    "message": "确定要永久删除此附件吗？"
   },
   "manageSubscriptionFromThe": {
     "message": "管理订阅，通过",
@@ -10056,7 +10111,7 @@
     "message": "声明域名将开启单一组织策略。"
   },
   "single-org-revoked-user-warning": {
-    "message": "不符合要求的成员将被撤销。管理员可以在他们离开所有其他组织后恢复其成员资格。"
+    "message": "不符合要求的成员将被撤销。管理员可以在他们退出所有其他组织后恢复其成员资格。"
   },
   "deleteOrganizationUser": {
     "message": "删除 $NAME$",
@@ -10266,7 +10321,7 @@
     }
   },
   "updatedRevokeSponsorshipConfirmationForSentSponsorship": {
-    "message": "如果您移除 $EMAIL$，将无法兑换此家庭计划赞助，确定要继续吗？",
+    "message": "如果您移除 $EMAIL$，将无法兑换此家庭计划赞助。确定要继续吗？",
     "placeholders": {
       "email": {
         "content": "$1",
@@ -10315,7 +10370,7 @@
     "message": "已打开浏览器扩展"
   },
   "openedExtensionViewAtRiskPasswords": {
-    "message": "成功打开 Bitwarden 浏览器扩展。您现在可以审查有风险的密码了。"
+    "message": "成功打开 Bitwarden 浏览器扩展。您现在可以审查存在风险的密码了。"
   },
   "openExtensionManuallyPart1": {
     "message": "我们无法打开 Bitwarden 浏览器扩展。请从工具栏打开 Bitwarden 图标",
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "不允许成员使用 PIN 码解锁他们的账户。"
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ 计划无法访问真实的事件日志",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "升级到团队或企业计划，即可获得对组织事件日志的完整访问权限。"
+  },
+  "upgradeEventLogTitle": {
+    "message": "升级以访问真实的事件日志数据"
+  },
+  "upgradeEventLogMessage": {
+    "message": "这些事件仅为示例，并不反映您 Bitwarden 组织内的真实事件。"
   }
 }
diff --git a/apps/web/src/locales/zh_TW/messages.json b/apps/web/src/locales/zh_TW/messages.json
index 23dfe159033..caae6aebce6 100644
--- a/apps/web/src/locales/zh_TW/messages.json
+++ b/apps/web/src/locales/zh_TW/messages.json
@@ -5,6 +5,9 @@
   "criticalApplications": {
     "message": "重要應用程式"
   },
+  "noCriticalAppsAtRisk": {
+    "message": "No critical applications at risk"
+  },
   "accessIntelligence": {
     "message": "存取資訊"
   },
@@ -1161,6 +1164,15 @@
   "logInToBitwarden": {
     "message": "登入 Bitwarden"
   },
+  "enterTheCodeSentToYourEmail": {
+    "message": "Enter the code sent to your email"
+  },
+  "enterTheCodeFromYourAuthenticatorApp": {
+    "message": "Enter the code from your authenticator app"
+  },
+  "pressYourYubiKeyToAuthenticate": {
+    "message": "Press your YubiKey to authenticate"
+  },
   "authenticationTimeout": {
     "message": "驗證逾時"
   },
@@ -1443,12 +1455,22 @@
   "rememberMe": {
     "message": "記住我"
   },
+  "dontAskAgainOnThisDeviceFor30Days": {
+    "message": "Don't ask again on this device for 30 days"
+  },
   "sendVerificationCodeEmailAgain": {
     "message": "再次傳送​​包含驗證碼的電子郵件"
   },
   "useAnotherTwoStepMethod": {
     "message": "使用另一種兩步驟登入方法"
   },
+  "selectAnotherMethod": {
+    "message": "Select another method",
+    "description": "Select another two-step login method"
+  },
+  "useYourRecoveryCode": {
+    "message": "Use your recovery code"
+  },
   "insertYubiKey": {
     "message": "將您的 YubiKey 插入電腦的 USB 連接埠，然後觸摸其按鈕。"
   },
@@ -1467,6 +1489,9 @@
   "twoStepOptions": {
     "message": "兩步驟登入選項"
   },
+  "selectTwoStepLoginMethod": {
+    "message": "Select two-step login method"
+  },
   "recoveryCodeDesc": {
     "message": "無法使用任何兩步驟登入方式嗎？請使用您的復原碼停用所有兩步驟登入方式。"
   },
@@ -1509,6 +1534,9 @@
   "webAuthnMigrated": {
     "message": "（遷移自 FIDO）"
   },
+  "openInNewTab": {
+    "message": "Open in new tab"
+  },
   "emailTitle": {
     "message": "電子郵件"
   },
@@ -4081,6 +4109,12 @@
   "updateBrowserDesc": {
     "message": "未支援您使用的瀏覽器。網頁版密碼庫可能無法正常運作。"
   },
+  "youHaveAPendingLoginRequest": {
+    "message": "You have a pending login request from another device."
+  },
+  "reviewLoginRequest": {
+    "message": "Review login request"
+  },
   "freeTrialEndPromptCount": {
     "message": "您的免費試用將於 $COUNT$ 天後結束。",
     "placeholders": {
@@ -4758,6 +4792,15 @@
   "masterPassPolicyDesc": {
     "message": "設定主密碼強度要求。"
   },
+  "passwordStrengthScore": {
+    "message": "Password strength score $SCORE$",
+    "placeholders": {
+      "score": {
+        "content": "$1",
+        "example": "4"
+      }
+    }
+  },
   "twoStepLoginPolicyTitle": {
     "message": "要求兩步驟登入"
   },
@@ -5653,6 +5696,12 @@
   "webAuthnAuthenticate": {
     "message": "驗證 WebAuthn"
   },
+  "readSecurityKey": {
+    "message": "Read security key"
+  },
+  "awaitingSecurityKeyInteraction": {
+    "message": "Awaiting security key interaction..."
+  },
   "webAuthnNotSupported": {
     "message": "此瀏覽器不支援 WebAuthn。"
   },
@@ -7199,6 +7248,12 @@
   "duoRequiredByOrgForAccount": {
     "message": "Duo two-step login is required for your account."
   },
+  "duoTwoFactorRequiredPageSubtitle": {
+    "message": "Duo two-step login is required for your account. Follow the steps below to finish logging in."
+  },
+  "followTheStepsBelowToFinishLoggingIn": {
+    "message": "Follow the steps below to finish logging in."
+  },
   "launchDuo": {
     "message": "啟動 Duo"
   },
@@ -10437,5 +10492,23 @@
   },
   "removeUnlockWithPinPolicyDesc": {
     "message": "Do not allow members to unlock their account with a PIN."
+  },
+  "limitedEventLogs": {
+    "message": "$PRODUCT_TYPE$ plans do not have access to real event logs",
+    "placeholders": {
+      "product_type": {
+        "content": "$1",
+        "example": "Teams"
+      }
+    }
+  },
+  "upgradeForFullEvents": {
+    "message": "Get full access to organization event logs by upgrading to a Teams or Enterprise plan."
+  },
+  "upgradeEventLogTitle": {
+    "message": "Upgrade for real event log data"
+  },
+  "upgradeEventLogMessage": {
+    "message": "These events are examples only and do not reflect real events within your Bitwarden organization."
   }
 }

From c80019e919798cfb9c61b8f7533caa40f6659aeb Mon Sep 17 00:00:00 2001
From: Maciej Zieniuk <167752252+mzieniukbw@users.noreply.github.com>
Date: Fri, 28 Feb 2025 14:05:16 +0100
Subject: [PATCH 27/47] [PM-18680] biometric's no client key half provided for
 user (#13609)

* biometric's no client key half provided for user

Biometric's client key half can be optional (null) when the password is not required on start of the application

* improved unit test coverage

* ipc setClientKeyHalf can be null
---
 .../biometrics/biometrics.service.spec.ts     | 187 --------
 .../biometrics/desktop.biometrics.service.ts  |   2 +-
 .../main-biometrics-ipc.listener.ts           |   3 -
 .../main-biometrics.service.spec.ts           | 426 ++++++++++++++++++
 .../biometrics/main-biometrics.service.ts     |   8 +-
 .../biometrics/renderer-biometrics.service.ts |   2 +-
 apps/desktop/src/key-management/preload.ts    |   2 +-
 .../platform/services/electron-key.service.ts |   2 +-
 apps/desktop/src/types/biometric-message.ts   |  25 +-
 9 files changed, 453 insertions(+), 204 deletions(-)
 delete mode 100644 apps/desktop/src/key-management/biometrics/biometrics.service.spec.ts
 create mode 100644 apps/desktop/src/key-management/biometrics/main-biometrics.service.spec.ts

diff --git a/apps/desktop/src/key-management/biometrics/biometrics.service.spec.ts b/apps/desktop/src/key-management/biometrics/biometrics.service.spec.ts
deleted file mode 100644
index 9e5755dd579..00000000000
--- a/apps/desktop/src/key-management/biometrics/biometrics.service.spec.ts
+++ /dev/null
@@ -1,187 +0,0 @@
-import { mock, MockProxy } from "jest-mock-extended";
-
-import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
-import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
-import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
-import { UserId } from "@bitwarden/common/types/guid";
-import {
-  BiometricsService,
-  BiometricsStatus,
-  BiometricStateService,
-} from "@bitwarden/key-management";
-
-import { WindowMain } from "../../main/window.main";
-
-import { MainBiometricsService } from "./main-biometrics.service";
-import OsBiometricsServiceLinux from "./os-biometrics-linux.service";
-import OsBiometricsServiceMac from "./os-biometrics-mac.service";
-import OsBiometricsServiceWindows from "./os-biometrics-windows.service";
-import { OsBiometricService } from "./os-biometrics.service";
-
-jest.mock("@bitwarden/desktop-napi", () => {
-  return {
-    biometrics: jest.fn(),
-    passwords: jest.fn(),
-  };
-});
-
-describe("biometrics tests", function () {
-  const i18nService = mock<I18nService>();
-  const windowMain = mock<WindowMain>();
-  const logService = mock<LogService>();
-  const messagingService = mock<MessagingService>();
-  const biometricStateService = mock<BiometricStateService>();
-
-  it("Should call the platformspecific methods", async () => {
-    const sut = new MainBiometricsService(
-      i18nService,
-      windowMain,
-      logService,
-      messagingService,
-      process.platform,
-      biometricStateService,
-    );
-
-    const mockService = mock<OsBiometricService>();
-    (sut as any).osBiometricsService = mockService;
-
-    await sut.authenticateBiometric();
-    expect(mockService.authenticateBiometric).toBeCalled();
-  });
-
-  describe("Should create a platform specific service", function () {
-    it("Should create a biometrics service specific for Windows", () => {
-      const sut = new MainBiometricsService(
-        i18nService,
-        windowMain,
-        logService,
-        messagingService,
-        "win32",
-        biometricStateService,
-      );
-
-      const internalService = (sut as any).osBiometricsService;
-      expect(internalService).not.toBeNull();
-      expect(internalService).toBeInstanceOf(OsBiometricsServiceWindows);
-    });
-
-    it("Should create a biometrics service specific for MacOs", () => {
-      const sut = new MainBiometricsService(
-        i18nService,
-        windowMain,
-        logService,
-        messagingService,
-        "darwin",
-        biometricStateService,
-      );
-      const internalService = (sut as any).osBiometricsService;
-      expect(internalService).not.toBeNull();
-      expect(internalService).toBeInstanceOf(OsBiometricsServiceMac);
-    });
-
-    it("Should create a biometrics service specific for Linux", () => {
-      const sut = new MainBiometricsService(
-        i18nService,
-        windowMain,
-        logService,
-        messagingService,
-        "linux",
-        biometricStateService,
-      );
-
-      const internalService = (sut as any).osBiometricsService;
-      expect(internalService).not.toBeNull();
-      expect(internalService).toBeInstanceOf(OsBiometricsServiceLinux);
-    });
-  });
-
-  describe("can auth biometric", () => {
-    let sut: BiometricsService;
-    let innerService: MockProxy<OsBiometricService>;
-
-    beforeEach(() => {
-      sut = new MainBiometricsService(
-        i18nService,
-        windowMain,
-        logService,
-        messagingService,
-        process.platform,
-        biometricStateService,
-      );
-
-      innerService = mock();
-      (sut as any).osBiometricsService = innerService;
-    });
-
-    it("should return the correct biometric status for system status", async () => {
-      const testCases = [
-        // happy path
-        [true, false, false, BiometricsStatus.Available],
-        [false, true, true, BiometricsStatus.HardwareUnavailable],
-        [true, true, true, BiometricsStatus.AutoSetupNeeded],
-        [true, true, false, BiometricsStatus.ManualSetupNeeded],
-
-        // should not happen
-        [false, false, true, BiometricsStatus.HardwareUnavailable],
-        [true, false, true, BiometricsStatus.Available],
-        [false, true, false, BiometricsStatus.HardwareUnavailable],
-        [false, false, false, BiometricsStatus.HardwareUnavailable],
-      ];
-
-      for (const [supportsBiometric, needsSetup, canAutoSetup, expected] of testCases) {
-        innerService.osSupportsBiometric.mockResolvedValue(supportsBiometric as boolean);
-        innerService.osBiometricsNeedsSetup.mockResolvedValue(needsSetup as boolean);
-        innerService.osBiometricsCanAutoSetup.mockResolvedValue(canAutoSetup as boolean);
-
-        const actual = await sut.getBiometricsStatus();
-        expect(actual).toBe(expected);
-      }
-    });
-
-    it("should return the correct biometric status for user status", async () => {
-      const testCases = [
-        // system status, biometric unlock enabled, require password on start, has key half, result
-        [BiometricsStatus.Available, false, false, false, BiometricsStatus.NotEnabledLocally],
-        [BiometricsStatus.Available, false, true, false, BiometricsStatus.NotEnabledLocally],
-        [BiometricsStatus.Available, false, false, true, BiometricsStatus.NotEnabledLocally],
-        [BiometricsStatus.Available, false, true, true, BiometricsStatus.NotEnabledLocally],
-
-        [
-          BiometricsStatus.PlatformUnsupported,
-          true,
-          true,
-          true,
-          BiometricsStatus.PlatformUnsupported,
-        ],
-        [BiometricsStatus.ManualSetupNeeded, true, true, true, BiometricsStatus.ManualSetupNeeded],
-        [BiometricsStatus.AutoSetupNeeded, true, true, true, BiometricsStatus.AutoSetupNeeded],
-
-        [BiometricsStatus.Available, true, false, true, BiometricsStatus.Available],
-        [BiometricsStatus.Available, true, true, false, BiometricsStatus.UnlockNeeded],
-        [BiometricsStatus.Available, true, false, true, BiometricsStatus.Available],
-      ];
-
-      for (const [
-        systemStatus,
-        unlockEnabled,
-        requirePasswordOnStart,
-        hasKeyHalf,
-        expected,
-      ] of testCases) {
-        sut.getBiometricsStatus = jest.fn().mockResolvedValue(systemStatus as BiometricsStatus);
-        biometricStateService.getBiometricUnlockEnabled.mockResolvedValue(unlockEnabled as boolean);
-        biometricStateService.getRequirePasswordOnStart.mockResolvedValue(
-          requirePasswordOnStart as boolean,
-        );
-        (sut as any).clientKeyHalves = new Map();
-        const userId = "test" as UserId;
-        if (hasKeyHalf) {
-          (sut as any).clientKeyHalves.set(userId, "test");
-        }
-
-        const actual = await sut.getBiometricsStatusForUser(userId);
-        expect(actual).toBe(expected);
-      }
-    });
-  });
-});
diff --git a/apps/desktop/src/key-management/biometrics/desktop.biometrics.service.ts b/apps/desktop/src/key-management/biometrics/desktop.biometrics.service.ts
index 0c0efea78f9..6415443bfbc 100644
--- a/apps/desktop/src/key-management/biometrics/desktop.biometrics.service.ts
+++ b/apps/desktop/src/key-management/biometrics/desktop.biometrics.service.ts
@@ -11,5 +11,5 @@ export abstract class DesktopBiometricsService extends BiometricsService {
 
   abstract setupBiometrics(): Promise<void>;
 
-  abstract setClientKeyHalfForUser(userId: UserId, value: string): Promise<void>;
+  abstract setClientKeyHalfForUser(userId: UserId, value: string | null): Promise<void>;
 }
diff --git a/apps/desktop/src/key-management/biometrics/main-biometrics-ipc.listener.ts b/apps/desktop/src/key-management/biometrics/main-biometrics-ipc.listener.ts
index 1605f650e12..fe40aad54d9 100644
--- a/apps/desktop/src/key-management/biometrics/main-biometrics-ipc.listener.ts
+++ b/apps/desktop/src/key-management/biometrics/main-biometrics-ipc.listener.ts
@@ -44,9 +44,6 @@ export class MainBiometricsIPCListener {
               message.userId as UserId,
             );
           case BiometricAction.SetClientKeyHalf:
-            if (message.key == null) {
-              return;
-            }
             return await this.biometricService.setClientKeyHalfForUser(
               message.userId as UserId,
               message.key,
diff --git a/apps/desktop/src/key-management/biometrics/main-biometrics.service.spec.ts b/apps/desktop/src/key-management/biometrics/main-biometrics.service.spec.ts
new file mode 100644
index 00000000000..88dd8c60ed5
--- /dev/null
+++ b/apps/desktop/src/key-management/biometrics/main-biometrics.service.spec.ts
@@ -0,0 +1,426 @@
+import { mock, MockProxy } from "jest-mock-extended";
+
+import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
+import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
+import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
+import { EncryptionType } from "@bitwarden/common/platform/enums";
+import { Utils } from "@bitwarden/common/platform/misc/utils";
+import { UserId } from "@bitwarden/common/types/guid";
+import {
+  BiometricsService,
+  BiometricsStatus,
+  BiometricStateService,
+} from "@bitwarden/key-management";
+
+import { WindowMain } from "../../main/window.main";
+
+import { MainBiometricsService } from "./main-biometrics.service";
+import OsBiometricsServiceLinux from "./os-biometrics-linux.service";
+import OsBiometricsServiceMac from "./os-biometrics-mac.service";
+import OsBiometricsServiceWindows from "./os-biometrics-windows.service";
+import { OsBiometricService } from "./os-biometrics.service";
+
+jest.mock("@bitwarden/desktop-napi", () => {
+  return {
+    biometrics: jest.fn(),
+    passwords: jest.fn(),
+  };
+});
+
+describe("MainBiometricsService", function () {
+  const i18nService = mock<I18nService>();
+  const windowMain = mock<WindowMain>();
+  const logService = mock<LogService>();
+  const messagingService = mock<MessagingService>();
+  const biometricStateService = mock<BiometricStateService>();
+
+  it("Should call the platformspecific methods", async () => {
+    const sut = new MainBiometricsService(
+      i18nService,
+      windowMain,
+      logService,
+      messagingService,
+      process.platform,
+      biometricStateService,
+    );
+
+    const mockService = mock<OsBiometricService>();
+    (sut as any).osBiometricsService = mockService;
+
+    await sut.authenticateBiometric();
+    expect(mockService.authenticateBiometric).toBeCalled();
+  });
+
+  describe("Should create a platform specific service", function () {
+    it("Should create a biometrics service specific for Windows", () => {
+      const sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        "win32",
+        biometricStateService,
+      );
+
+      const internalService = (sut as any).osBiometricsService;
+      expect(internalService).not.toBeNull();
+      expect(internalService).toBeInstanceOf(OsBiometricsServiceWindows);
+    });
+
+    it("Should create a biometrics service specific for MacOs", () => {
+      const sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        "darwin",
+        biometricStateService,
+      );
+      const internalService = (sut as any).osBiometricsService;
+      expect(internalService).not.toBeNull();
+      expect(internalService).toBeInstanceOf(OsBiometricsServiceMac);
+    });
+
+    it("Should create a biometrics service specific for Linux", () => {
+      const sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        "linux",
+        biometricStateService,
+      );
+
+      const internalService = (sut as any).osBiometricsService;
+      expect(internalService).not.toBeNull();
+      expect(internalService).toBeInstanceOf(OsBiometricsServiceLinux);
+    });
+  });
+
+  describe("can auth biometric", () => {
+    let sut: BiometricsService;
+    let innerService: MockProxy<OsBiometricService>;
+
+    beforeEach(() => {
+      sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        process.platform,
+        biometricStateService,
+      );
+
+      innerService = mock();
+      (sut as any).osBiometricsService = innerService;
+    });
+
+    it("should return the correct biometric status for system status", async () => {
+      const testCases = [
+        // happy path
+        [true, false, false, BiometricsStatus.Available],
+        [false, true, true, BiometricsStatus.HardwareUnavailable],
+        [true, true, true, BiometricsStatus.AutoSetupNeeded],
+        [true, true, false, BiometricsStatus.ManualSetupNeeded],
+
+        // should not happen
+        [false, false, true, BiometricsStatus.HardwareUnavailable],
+        [true, false, true, BiometricsStatus.Available],
+        [false, true, false, BiometricsStatus.HardwareUnavailable],
+        [false, false, false, BiometricsStatus.HardwareUnavailable],
+      ];
+
+      for (const [supportsBiometric, needsSetup, canAutoSetup, expected] of testCases) {
+        innerService.osSupportsBiometric.mockResolvedValue(supportsBiometric as boolean);
+        innerService.osBiometricsNeedsSetup.mockResolvedValue(needsSetup as boolean);
+        innerService.osBiometricsCanAutoSetup.mockResolvedValue(canAutoSetup as boolean);
+
+        const actual = await sut.getBiometricsStatus();
+        expect(actual).toBe(expected);
+      }
+    });
+
+    it("should return the correct biometric status for user status", async () => {
+      const testCases = [
+        // system status, biometric unlock enabled, require password on start, has key half, result
+        [BiometricsStatus.Available, false, false, false, BiometricsStatus.NotEnabledLocally],
+        [BiometricsStatus.Available, false, true, false, BiometricsStatus.NotEnabledLocally],
+        [BiometricsStatus.Available, false, false, true, BiometricsStatus.NotEnabledLocally],
+        [BiometricsStatus.Available, false, true, true, BiometricsStatus.NotEnabledLocally],
+
+        [
+          BiometricsStatus.PlatformUnsupported,
+          true,
+          true,
+          true,
+          BiometricsStatus.PlatformUnsupported,
+        ],
+        [BiometricsStatus.ManualSetupNeeded, true, true, true, BiometricsStatus.ManualSetupNeeded],
+        [BiometricsStatus.AutoSetupNeeded, true, true, true, BiometricsStatus.AutoSetupNeeded],
+
+        [BiometricsStatus.Available, true, false, true, BiometricsStatus.Available],
+        [BiometricsStatus.Available, true, true, false, BiometricsStatus.UnlockNeeded],
+        [BiometricsStatus.Available, true, false, true, BiometricsStatus.Available],
+      ];
+
+      for (const [
+        systemStatus,
+        unlockEnabled,
+        requirePasswordOnStart,
+        hasKeyHalf,
+        expected,
+      ] of testCases) {
+        sut.getBiometricsStatus = jest.fn().mockResolvedValue(systemStatus as BiometricsStatus);
+        biometricStateService.getBiometricUnlockEnabled.mockResolvedValue(unlockEnabled as boolean);
+        biometricStateService.getRequirePasswordOnStart.mockResolvedValue(
+          requirePasswordOnStart as boolean,
+        );
+        (sut as any).clientKeyHalves = new Map();
+        const userId = "test" as UserId;
+        if (hasKeyHalf) {
+          (sut as any).clientKeyHalves.set(userId, "test");
+        }
+
+        const actual = await sut.getBiometricsStatusForUser(userId);
+        expect(actual).toBe(expected);
+      }
+    });
+  });
+
+  describe("setupBiometrics", () => {
+    it("should call the platform specific setup method", async () => {
+      const sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        process.platform,
+        biometricStateService,
+      );
+      const osBiometricsService = mock<OsBiometricService>();
+      (sut as any).osBiometricsService = osBiometricsService;
+
+      await sut.setupBiometrics();
+
+      expect(osBiometricsService.osBiometricsSetup).toHaveBeenCalled();
+    });
+  });
+
+  describe("setClientKeyHalfForUser", () => {
+    let sut: MainBiometricsService;
+
+    beforeEach(() => {
+      sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        process.platform,
+        biometricStateService,
+      );
+    });
+
+    it("should set the client key half for the user", async () => {
+      const userId = "test" as UserId;
+      const keyHalf = "testKeyHalf";
+
+      await sut.setClientKeyHalfForUser(userId, keyHalf);
+
+      expect((sut as any).clientKeyHalves.has(userId)).toBe(true);
+      expect((sut as any).clientKeyHalves.get(userId)).toBe(keyHalf);
+    });
+
+    it("should reset the client key half for the user", async () => {
+      const userId = "test" as UserId;
+
+      await sut.setClientKeyHalfForUser(userId, null);
+
+      expect((sut as any).clientKeyHalves.has(userId)).toBe(true);
+      expect((sut as any).clientKeyHalves.get(userId)).toBe(null);
+    });
+  });
+
+  describe("authenticateWithBiometrics", () => {
+    it("should call the platform specific authenticate method", async () => {
+      const sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        process.platform,
+        biometricStateService,
+      );
+      const osBiometricsService = mock<OsBiometricService>();
+      (sut as any).osBiometricsService = osBiometricsService;
+
+      await sut.authenticateWithBiometrics();
+
+      expect(osBiometricsService.authenticateBiometric).toHaveBeenCalled();
+    });
+  });
+
+  describe("unlockWithBiometricsForUser", () => {
+    let sut: MainBiometricsService;
+    let osBiometricsService: MockProxy<OsBiometricService>;
+
+    beforeEach(() => {
+      sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        process.platform,
+        biometricStateService,
+      );
+      osBiometricsService = mock<OsBiometricService>();
+      (sut as any).osBiometricsService = osBiometricsService;
+    });
+
+    it("should return null if no biometric key is returned ", async () => {
+      const userId = "test" as UserId;
+      (sut as any).clientKeyHalves.set(userId, "testKeyHalf");
+
+      const userKey = await sut.unlockWithBiometricsForUser(userId);
+
+      expect(userKey).toBeNull();
+      expect(osBiometricsService.getBiometricKey).toHaveBeenCalledWith(
+        "Bitwarden_biometric",
+        `${userId}_user_biometric`,
+        "testKeyHalf",
+      );
+    });
+
+    it("should return the biometric key if a valid key is returned", async () => {
+      const userId = "test" as UserId;
+      (sut as any).clientKeyHalves.set(userId, "testKeyHalf");
+      const biometricKey = Utils.fromBufferToB64(new Uint8Array(64));
+      osBiometricsService.getBiometricKey.mockResolvedValue(biometricKey);
+
+      const userKey = await sut.unlockWithBiometricsForUser(userId);
+
+      expect(userKey).not.toBeNull();
+      expect(userKey!.keyB64).toBe(biometricKey);
+      expect(userKey!.encType).toBe(EncryptionType.AesCbc256_HmacSha256_B64);
+      expect(osBiometricsService.getBiometricKey).toHaveBeenCalledWith(
+        "Bitwarden_biometric",
+        `${userId}_user_biometric`,
+        "testKeyHalf",
+      );
+    });
+  });
+
+  describe("setBiometricProtectedUnlockKeyForUser", () => {
+    let sut: MainBiometricsService;
+    let osBiometricsService: MockProxy<OsBiometricService>;
+
+    beforeEach(() => {
+      sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        process.platform,
+        biometricStateService,
+      );
+      osBiometricsService = mock<OsBiometricService>();
+      (sut as any).osBiometricsService = osBiometricsService;
+    });
+
+    it("should throw an error if no client key half is provided", async () => {
+      const userId = "test" as UserId;
+      const unlockKey = "testUnlockKey";
+
+      await expect(sut.setBiometricProtectedUnlockKeyForUser(userId, unlockKey)).rejects.toThrow(
+        "No client key half provided for user",
+      );
+    });
+
+    it("should call the platform specific setBiometricKey method", async () => {
+      const userId = "test" as UserId;
+      const unlockKey = "testUnlockKey";
+
+      (sut as any).clientKeyHalves.set(userId, "testKeyHalf");
+
+      await sut.setBiometricProtectedUnlockKeyForUser(userId, unlockKey);
+
+      expect(osBiometricsService.setBiometricKey).toHaveBeenCalledWith(
+        "Bitwarden_biometric",
+        `${userId}_user_biometric`,
+        unlockKey,
+        "testKeyHalf",
+      );
+    });
+  });
+
+  describe("deleteBiometricUnlockKeyForUser", () => {
+    it("should call the platform specific deleteBiometricKey method", async () => {
+      const sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        process.platform,
+        biometricStateService,
+      );
+      const osBiometricsService = mock<OsBiometricService>();
+      (sut as any).osBiometricsService = osBiometricsService;
+
+      const userId = "test" as UserId;
+
+      await sut.deleteBiometricUnlockKeyForUser(userId);
+
+      expect(osBiometricsService.deleteBiometricKey).toHaveBeenCalledWith(
+        "Bitwarden_biometric",
+        `${userId}_user_biometric`,
+      );
+    });
+  });
+
+  describe("setShouldAutopromptNow", () => {
+    let sut: MainBiometricsService;
+
+    beforeEach(() => {
+      sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        process.platform,
+        biometricStateService,
+      );
+    });
+
+    it("should set shouldAutopromptNow to false", async () => {
+      await sut.setShouldAutopromptNow(false);
+
+      const shouldAutoPrompt = await sut.getShouldAutopromptNow();
+
+      expect(shouldAutoPrompt).toBe(false);
+    });
+
+    it("should set shouldAutopromptNow to true", async () => {
+      await sut.setShouldAutopromptNow(true);
+
+      const shouldAutoPrompt = await sut.getShouldAutopromptNow();
+
+      expect(shouldAutoPrompt).toBe(true);
+    });
+  });
+
+  describe("getShouldAutopromptNow", () => {
+    it("defaults shouldAutoPrompt is true", async () => {
+      const sut = new MainBiometricsService(
+        i18nService,
+        windowMain,
+        logService,
+        messagingService,
+        process.platform,
+        biometricStateService,
+      );
+
+      const shouldAutoPrompt = await sut.getShouldAutopromptNow();
+
+      expect(shouldAutoPrompt).toBe(true);
+    });
+  });
+});
diff --git a/apps/desktop/src/key-management/biometrics/main-biometrics.service.ts b/apps/desktop/src/key-management/biometrics/main-biometrics.service.ts
index 013e69f118c..dd2e15a2fe8 100644
--- a/apps/desktop/src/key-management/biometrics/main-biometrics.service.ts
+++ b/apps/desktop/src/key-management/biometrics/main-biometrics.service.ts
@@ -13,7 +13,7 @@ import { OsBiometricService } from "./os-biometrics.service";
 
 export class MainBiometricsService extends DesktopBiometricsService {
   private osBiometricsService: OsBiometricService;
-  private clientKeyHalves = new Map<string, string>();
+  private clientKeyHalves = new Map<string, string | null>();
   private shouldAutoPrompt = true;
 
   constructor(
@@ -104,7 +104,7 @@ export class MainBiometricsService extends DesktopBiometricsService {
     return await this.osBiometricsService.osBiometricsSetup();
   }
 
-  async setClientKeyHalfForUser(userId: UserId, value: string): Promise<void> {
+  async setClientKeyHalfForUser(userId: UserId, value: string | null): Promise<void> {
     this.clientKeyHalves.set(userId, value);
   }
 
@@ -116,7 +116,7 @@ export class MainBiometricsService extends DesktopBiometricsService {
     const biometricKey = await this.osBiometricsService.getBiometricKey(
       "Bitwarden_biometric",
       `${userId}_user_biometric`,
-      this.clientKeyHalves.get(userId),
+      this.clientKeyHalves.get(userId) ?? undefined,
     );
     if (biometricKey == null) {
       return null;
@@ -136,7 +136,7 @@ export class MainBiometricsService extends DesktopBiometricsService {
       service,
       storageKey,
       value,
-      this.clientKeyHalves.get(userId),
+      this.clientKeyHalves.get(userId) ?? undefined,
     );
   }
 
diff --git a/apps/desktop/src/key-management/biometrics/renderer-biometrics.service.ts b/apps/desktop/src/key-management/biometrics/renderer-biometrics.service.ts
index a08e68b53f2..2a0b1282778 100644
--- a/apps/desktop/src/key-management/biometrics/renderer-biometrics.service.ts
+++ b/apps/desktop/src/key-management/biometrics/renderer-biometrics.service.ts
@@ -40,7 +40,7 @@ export class RendererBiometricsService extends DesktopBiometricsService {
     return await ipc.keyManagement.biometric.setupBiometrics();
   }
 
-  async setClientKeyHalfForUser(userId: UserId, value: string): Promise<void> {
+  async setClientKeyHalfForUser(userId: UserId, value: string | null): Promise<void> {
     return await ipc.keyManagement.biometric.setClientKeyHalf(userId, value);
   }
 
diff --git a/apps/desktop/src/key-management/preload.ts b/apps/desktop/src/key-management/preload.ts
index b73542ca725..c955571697b 100644
--- a/apps/desktop/src/key-management/preload.ts
+++ b/apps/desktop/src/key-management/preload.ts
@@ -39,7 +39,7 @@ const biometric = {
     ipcRenderer.invoke("biometric", {
       action: BiometricAction.Setup,
     } satisfies BiometricMessage),
-  setClientKeyHalf: (userId: string, value: string): Promise<void> =>
+  setClientKeyHalf: (userId: string, value: string | null): Promise<void> =>
     ipcRenderer.invoke("biometric", {
       action: BiometricAction.SetClientKeyHalf,
       userId: userId,
diff --git a/apps/desktop/src/platform/services/electron-key.service.ts b/apps/desktop/src/platform/services/electron-key.service.ts
index 4031af2873c..dceb1dea08f 100644
--- a/apps/desktop/src/platform/services/electron-key.service.ts
+++ b/apps/desktop/src/platform/services/electron-key.service.ts
@@ -81,7 +81,7 @@ export class ElectronKeyService extends DefaultKeyService {
     // May resolve to null, in which case no client key have is required
     // TODO: Move to windows implementation
     const clientEncKeyHalf = await this.getBiometricEncryptionClientKeyHalf(userKey, userId);
-    await this.biometricService.setClientKeyHalfForUser(userId, clientEncKeyHalf as string);
+    await this.biometricService.setClientKeyHalfForUser(userId, clientEncKeyHalf);
     await this.biometricService.setBiometricProtectedUnlockKeyForUser(userId, userKey.keyB64);
   }
 
diff --git a/apps/desktop/src/types/biometric-message.ts b/apps/desktop/src/types/biometric-message.ts
index 7946280e9a6..f7a7ef0c507 100644
--- a/apps/desktop/src/types/biometric-message.ts
+++ b/apps/desktop/src/types/biometric-message.ts
@@ -15,9 +15,22 @@ export enum BiometricAction {
   SetShouldAutoprompt = "setShouldAutoprompt",
 }
 
-export type BiometricMessage = {
-  action: BiometricAction;
-  key?: string;
-  userId?: string;
-  data?: any;
-};
+export type BiometricMessage =
+  | {
+      action: BiometricAction.SetClientKeyHalf;
+      userId: string;
+      key: string | null;
+    }
+  | {
+      action: BiometricAction.SetKeyForUser;
+      userId: string;
+      key: string;
+    }
+  | {
+      action: Exclude<
+        BiometricAction,
+        BiometricAction.SetClientKeyHalf | BiometricAction.SetKeyForUser
+      >;
+      userId?: string;
+      data?: any;
+    };

From 0ee2e0bf931b3870ca5989290f0b508969721b2b Mon Sep 17 00:00:00 2001
From: Bernd Schoolmann <mail@quexten.com>
Date: Fri, 28 Feb 2025 14:20:31 +0100
Subject: [PATCH 28/47] [PM-18697] Increase test coverage for encrypt service
 and symmetric crypto key (#13628)

* Increase coverage for EncryptService and SymmetricCryptoKey

* Re-add missing test
---
 .../crypto/services/encrypt.service.spec.ts   | 244 ++++++++++++++----
 .../domain/symmetric-crypto-key.spec.ts       |  21 +-
 2 files changed, 218 insertions(+), 47 deletions(-)

diff --git a/libs/common/src/key-management/crypto/services/encrypt.service.spec.ts b/libs/common/src/key-management/crypto/services/encrypt.service.spec.ts
index 8d75b528596..4593d44febe 100644
--- a/libs/common/src/key-management/crypto/services/encrypt.service.spec.ts
+++ b/libs/common/src/key-management/crypto/services/encrypt.service.spec.ts
@@ -26,11 +26,34 @@ describe("EncryptService", () => {
     encryptService = new EncryptServiceImplementation(cryptoFunctionService, logService, true);
   });
 
+  describe("encrypt", () => {
+    it("throws if no key is provided", () => {
+      return expect(encryptService.encrypt(null, null)).rejects.toThrow(
+        "No encryption key provided.",
+      );
+    });
+    it("returns null if no data is provided", async () => {
+      const key = mock<SymmetricCryptoKey>();
+      const actual = await encryptService.encrypt(null, key);
+      expect(actual).toBeNull();
+    });
+    it("creates an EncString for Aes256Cbc_HmacSha256_B64", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(64));
+      const plainValue = "data";
+      cryptoFunctionService.hmac.mockResolvedValue(makeStaticByteArray(32));
+      cryptoFunctionService.aesEncrypt.mockResolvedValue(makeStaticByteArray(32));
+      cryptoFunctionService.randomBytes.mockResolvedValue(makeStaticByteArray(16) as CsprngArray);
+      const result = await encryptService.encrypt(plainValue, key);
+      expect(cryptoFunctionService.aesEncrypt).toHaveBeenCalled();
+      expect(cryptoFunctionService.hmac).toHaveBeenCalled();
+      expect(Utils.fromB64ToArray(result.data).length).toEqual(32);
+      expect(Utils.fromB64ToArray(result.iv).length).toEqual(16);
+      expect(Utils.fromB64ToArray(result.mac).length).toEqual(32);
+    });
+  });
+
   describe("encryptToBytes", () => {
     const plainValue = makeStaticByteArray(16, 1);
-    const iv = makeStaticByteArray(16, 30);
-    const mac = makeStaticByteArray(32, 40);
-    const encryptedData = makeStaticByteArray(20, 50);
 
     it("throws if no key is provided", () => {
       return expect(encryptService.encryptToBytes(plainValue, null)).rejects.toThrow(
@@ -38,55 +61,47 @@ describe("EncryptService", () => {
       );
     });
 
-    describe("encrypts data", () => {
-      beforeEach(() => {
-        cryptoFunctionService.randomBytes.calledWith(16).mockResolvedValueOnce(iv as CsprngArray);
-        cryptoFunctionService.aesEncrypt.mockResolvedValue(encryptedData);
-      });
+    it("encrypts data with provided Aes256Cbc key and returns correct encbuffer", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(32, 0));
+      const iv = makeStaticByteArray(16, 80);
+      const cipherText = makeStaticByteArray(20, 150);
+      cryptoFunctionService.randomBytes.mockResolvedValue(iv as CsprngArray);
+      cryptoFunctionService.aesEncrypt.mockResolvedValue(cipherText);
 
-      it("using a key which supports mac", async () => {
-        const key = mock<SymmetricCryptoKey>();
-        const encType = EncryptionType.AesCbc128_HmacSha256_B64;
-        key.encType = encType;
+      const actual = await encryptService.encryptToBytes(plainValue, key);
+      const expectedBytes = new Uint8Array(1 + iv.byteLength + cipherText.byteLength);
+      expectedBytes.set([EncryptionType.AesCbc256_B64]);
+      expectedBytes.set(iv, 1);
+      expectedBytes.set(cipherText, 1 + iv.byteLength);
 
-        key.macKey = makeStaticByteArray(16, 20);
+      expect(actual.buffer).toEqualBuffer(expectedBytes);
+    });
 
-        cryptoFunctionService.hmac.mockResolvedValue(mac);
+    it("encrypts data with provided Aes256Cbc_HmacSha256 key and returns correct encbuffer", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(64, 0));
+      const iv = makeStaticByteArray(16, 80);
+      const mac = makeStaticByteArray(32, 100);
+      const cipherText = makeStaticByteArray(20, 150);
+      cryptoFunctionService.randomBytes.mockResolvedValue(iv as CsprngArray);
+      cryptoFunctionService.aesEncrypt.mockResolvedValue(cipherText);
+      cryptoFunctionService.hmac.mockResolvedValue(mac);
 
-        const actual = await encryptService.encryptToBytes(plainValue, key);
+      const actual = await encryptService.encryptToBytes(plainValue, key);
+      const expectedBytes = new Uint8Array(
+        1 + iv.byteLength + mac.byteLength + cipherText.byteLength,
+      );
+      expectedBytes.set([EncryptionType.AesCbc256_HmacSha256_B64]);
+      expectedBytes.set(iv, 1);
+      expectedBytes.set(mac, 1 + iv.byteLength);
+      expectedBytes.set(cipherText, 1 + iv.byteLength + mac.byteLength);
 
-        expect(actual.encryptionType).toEqual(encType);
-        expect(actual.ivBytes).toEqualBuffer(iv);
-        expect(actual.macBytes).toEqualBuffer(mac);
-        expect(actual.dataBytes).toEqualBuffer(encryptedData);
-        expect(actual.buffer.byteLength).toEqual(
-          1 + iv.byteLength + mac.byteLength + encryptedData.byteLength,
-        );
-      });
-
-      it("using a key which doesn't support mac", async () => {
-        const key = mock<SymmetricCryptoKey>();
-        const encType = EncryptionType.AesCbc256_B64;
-        key.encType = encType;
-
-        key.macKey = null;
-
-        const actual = await encryptService.encryptToBytes(plainValue, key);
-
-        expect(cryptoFunctionService.hmac).not.toBeCalled();
-
-        expect(actual.encryptionType).toEqual(encType);
-        expect(actual.ivBytes).toEqualBuffer(iv);
-        expect(actual.macBytes).toBeNull();
-        expect(actual.dataBytes).toEqualBuffer(encryptedData);
-        expect(actual.buffer.byteLength).toEqual(1 + iv.byteLength + encryptedData.byteLength);
-      });
+      expect(actual.buffer).toEqualBuffer(expectedBytes);
     });
   });
 
   describe("decryptToBytes", () => {
     const encType = EncryptionType.AesCbc256_HmacSha256_B64;
-    const key = new SymmetricCryptoKey(makeStaticByteArray(64, 100), encType);
+    const key = new SymmetricCryptoKey(makeStaticByteArray(64, 100));
     const computedMac = new Uint8Array(1);
     const encBuffer = new EncArrayBuffer(makeStaticByteArray(60, encType));
 
@@ -106,7 +121,28 @@ describe("EncryptService", () => {
       );
     });
 
-    it("decrypts data with provided key", async () => {
+    it("decrypts data with provided key for Aes256Cbc", async () => {
+      const decryptedBytes = makeStaticByteArray(10, 200);
+
+      cryptoFunctionService.hmac.mockResolvedValue(makeStaticByteArray(1));
+      cryptoFunctionService.compare.mockResolvedValue(true);
+      cryptoFunctionService.aesDecrypt.mockResolvedValueOnce(decryptedBytes);
+
+      const actual = await encryptService.decryptToBytes(encBuffer, key);
+
+      expect(cryptoFunctionService.aesDecrypt).toBeCalledWith(
+        expect.toEqualBuffer(encBuffer.dataBytes),
+        expect.toEqualBuffer(encBuffer.ivBytes),
+        expect.toEqualBuffer(key.encKey),
+        "cbc",
+      );
+
+      expect(actual).toEqualBuffer(decryptedBytes);
+    });
+
+    it("decrypts data with provided key for Aes256Cbc", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(32, 0));
+      const encBuffer = new EncArrayBuffer(makeStaticByteArray(60, EncryptionType.AesCbc256_B64));
       const decryptedBytes = makeStaticByteArray(10, 200);
 
       cryptoFunctionService.hmac.mockResolvedValue(makeStaticByteArray(1));
@@ -155,8 +191,17 @@ describe("EncryptService", () => {
       expect(actual).toBeNull();
     });
 
-    it("returns null if encTypes don't match", async () => {
-      key.encType = EncryptionType.AesCbc256_B64;
+    it("returns null if mac could not be calculated", async () => {
+      cryptoFunctionService.hmac.mockResolvedValue(null);
+
+      const actual = await encryptService.decryptToBytes(encBuffer, key);
+      expect(cryptoFunctionService.hmac).toHaveBeenCalled();
+      expect(cryptoFunctionService.aesDecrypt).not.toHaveBeenCalled();
+      expect(actual).toBeNull();
+    });
+
+    it("returns null if key is Aes256Cbc but encbuffer is Aes256Cbc_HmacSha256", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(32, 0));
       cryptoFunctionService.compare.mockResolvedValue(true);
 
       const actual = await encryptService.decryptToBytes(encBuffer, key);
@@ -164,6 +209,88 @@ describe("EncryptService", () => {
       expect(actual).toBeNull();
       expect(cryptoFunctionService.aesDecrypt).not.toHaveBeenCalled();
     });
+
+    it("returns null if key is Aes256Cbc_HmacSha256 but encbuffer is Aes256Cbc", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(64, 0));
+      cryptoFunctionService.compare.mockResolvedValue(true);
+      const buffer = new EncArrayBuffer(makeStaticByteArray(200, EncryptionType.AesCbc256_B64));
+      const actual = await encryptService.decryptToBytes(buffer, key);
+
+      expect(actual).toBeNull();
+      expect(cryptoFunctionService.aesDecrypt).not.toHaveBeenCalled();
+    });
+  });
+
+  describe("decryptToUtf8", () => {
+    it("throws if no key is provided", () => {
+      return expect(encryptService.decryptToUtf8(null, null)).rejects.toThrow(
+        "No key provided for decryption.",
+      );
+    });
+
+    it("decrypts data with provided key for Aes256Cbc_HmacSha256", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(64, 0));
+      const encString = new EncString(EncryptionType.AesCbc256_HmacSha256_B64, "data", "iv", "mac");
+      cryptoFunctionService.aesDecryptFastParameters.mockReturnValue({
+        macData: makeStaticByteArray(32, 0),
+        macKey: makeStaticByteArray(32, 0),
+        mac: makeStaticByteArray(32, 0),
+      } as any);
+      cryptoFunctionService.hmacFast.mockResolvedValue(makeStaticByteArray(32, 0));
+      cryptoFunctionService.compareFast.mockResolvedValue(true);
+      cryptoFunctionService.aesDecryptFast.mockResolvedValue("data");
+
+      const actual = await encryptService.decryptToUtf8(encString, key);
+      expect(actual).toEqual("data");
+      expect(cryptoFunctionService.compareFast).toHaveBeenCalled();
+    });
+
+    it("decrypts data with provided key for Aes256Cbc", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(32, 0));
+      const encString = new EncString(EncryptionType.AesCbc256_B64, "data");
+      cryptoFunctionService.aesDecryptFastParameters.mockReturnValue({} as any);
+      cryptoFunctionService.hmacFast.mockResolvedValue(makeStaticByteArray(32, 0));
+      cryptoFunctionService.compareFast.mockResolvedValue(true);
+      cryptoFunctionService.aesDecryptFast.mockResolvedValue("data");
+
+      const actual = await encryptService.decryptToUtf8(encString, key);
+      expect(actual).toEqual("data");
+      expect(cryptoFunctionService.compareFast).not.toHaveBeenCalled();
+    });
+
+    it("returns null if key is Aes256Cbc_HmacSha256 but EncString is Aes256Cbc", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(64, 0));
+      const encString = new EncString(EncryptionType.AesCbc256_B64, "data");
+
+      const actual = await encryptService.decryptToUtf8(encString, key);
+      expect(actual).toBeNull();
+      expect(logService.error).toHaveBeenCalled();
+    });
+
+    it("returns null if key is Aes256Cbc but encstring is AesCbc256_HmacSha256", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(32, 0));
+      const encString = new EncString(EncryptionType.AesCbc256_HmacSha256_B64, "data", "iv", "mac");
+
+      const actual = await encryptService.decryptToUtf8(encString, key);
+      expect(actual).toBeNull();
+      expect(logService.error).toHaveBeenCalled();
+    });
+
+    it("returns null if macs don't match", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(64, 0));
+      const encString = new EncString(EncryptionType.AesCbc256_HmacSha256_B64, "data", "iv", "mac");
+      cryptoFunctionService.aesDecryptFastParameters.mockReturnValue({
+        macData: makeStaticByteArray(32, 0),
+        macKey: makeStaticByteArray(32, 0),
+        mac: makeStaticByteArray(32, 0),
+      } as any);
+      cryptoFunctionService.hmacFast.mockResolvedValue(makeStaticByteArray(32, 0));
+      cryptoFunctionService.compareFast.mockResolvedValue(false);
+      cryptoFunctionService.aesDecryptFast.mockResolvedValue("data");
+
+      const actual = await encryptService.decryptToUtf8(encString, key);
+      expect(actual).toBeNull();
+    });
   });
 
   describe("rsa", () => {
@@ -262,4 +389,31 @@ describe("EncryptService", () => {
       expect(actual).toEqual(key);
     });
   });
+
+  describe("hash", () => {
+    it("hashes a string and returns b64", async () => {
+      cryptoFunctionService.hash.mockResolvedValue(Uint8Array.from([1, 2, 3]));
+      expect(await encryptService.hash("test", "sha256")).toEqual("AQID");
+      expect(cryptoFunctionService.hash).toHaveBeenCalledWith("test", "sha256");
+    });
+  });
+
+  describe("decryptItems", () => {
+    it("returns empty array if no items are provided", async () => {
+      const key = mock<SymmetricCryptoKey>();
+      const actual = await encryptService.decryptItems(null, key);
+      expect(actual).toEqual([]);
+    });
+
+    it("returns items decrypted with provided key", async () => {
+      const key = mock<SymmetricCryptoKey>();
+      const decryptable = {
+        decrypt: jest.fn().mockResolvedValue("decrypted"),
+      };
+      const items = [decryptable];
+      const actual = await encryptService.decryptItems(items as any, key);
+      expect(actual).toEqual(["decrypted"]);
+      expect(decryptable.decrypt).toHaveBeenCalledWith(key);
+    });
+  });
 });
diff --git a/libs/common/src/platform/models/domain/symmetric-crypto-key.spec.ts b/libs/common/src/platform/models/domain/symmetric-crypto-key.spec.ts
index f39b298a27d..e4c43264eaf 100644
--- a/libs/common/src/platform/models/domain/symmetric-crypto-key.spec.ts
+++ b/libs/common/src/platform/models/domain/symmetric-crypto-key.spec.ts
@@ -20,7 +20,7 @@ describe("SymmetricCryptoKey", () => {
       expect(cryptoKey).toEqual({
         encKey: key,
         encKeyB64: "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8=",
-        encType: 0,
+        encType: EncryptionType.AesCbc256_B64,
         key: key,
         keyB64: "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8=",
         macKey: null,
@@ -49,7 +49,7 @@ describe("SymmetricCryptoKey", () => {
       expect(cryptoKey).toEqual({
         encKey: key.slice(0, 32),
         encKeyB64: "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8=",
-        encType: 2,
+        encType: EncryptionType.AesCbc256_HmacSha256_B64,
         key: key,
         keyB64:
           "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+Pw==",
@@ -83,4 +83,21 @@ describe("SymmetricCryptoKey", () => {
     expect(actual).toEqual(expected);
     expect(actual).toBeInstanceOf(SymmetricCryptoKey);
   });
+
+  describe("fromString", () => {
+    it("null string returns null", () => {
+      const actual = SymmetricCryptoKey.fromString(null);
+
+      expect(actual).toBeNull();
+    });
+
+    it("base64 string creates object", () => {
+      const key = makeStaticByteArray(64);
+      const expected = new SymmetricCryptoKey(key);
+      const actual = SymmetricCryptoKey.fromString(expected.keyB64);
+
+      expect(actual).toEqual(expected);
+      expect(actual).toBeInstanceOf(SymmetricCryptoKey);
+    });
+  });
 });

From 43f5423e78484bb1fe87ea02c9e82da2e2da4300 Mon Sep 17 00:00:00 2001
From: Jake Fink <jfink@bitwarden.com>
Date: Fri, 28 Feb 2025 08:55:03 -0600
Subject: [PATCH 29/47] [PM-12606] Move Vault Timeout and Vault Timeout
 Settings to KM (#13405)

* move vault timeout and vault timeout settings to km

* move browser vault timeout service to km

* fix cli import

* fix imports

* fix some relative imports

* use relative imports within common

* fix imports

* fix new imports

* Fix new imports

* fix spec imports
---
 .../account-switcher.component.ts             |  8 ++--
 .../account-security.component.spec.ts        | 10 +++--
 .../settings/account-security.component.ts    | 16 ++++----
 apps/browser/src/autofill/types/index.ts      |  3 +-
 .../src/background/commands.background.ts     |  2 +-
 .../browser/src/background/idle.background.ts | 10 +++--
 .../browser/src/background/main.background.ts | 14 ++++---
 .../extension-lock-component.service.spec.ts  |  2 +-
 .../foreground-vault-timeout.service.ts       |  2 +-
 .../vault-timeout/vault-timeout.service.ts    |  2 +-
 .../src/popup/services/services.module.ts     |  8 ++--
 apps/cli/src/auth/commands/lock.command.ts    |  2 +-
 .../src/platform/services/node-api.service.ts |  2 +-
 .../service-container/service-container.ts    | 14 ++++---
 .../app/accounts/settings.component.spec.ts   |  8 ++--
 .../src/app/accounts/settings.component.ts    | 14 +++----
 apps/desktop/src/app/app.component.ts         | 11 +++--
 apps/desktop/src/app/services/init.service.ts |  4 +-
 .../src/app/services/services.module.ts       |  6 ++-
 .../desktop-lock-component.service.spec.ts    |  2 +-
 apps/web/src/app/app.component.ts             |  2 +-
 apps/web/src/app/core/core.module.ts          |  5 ++-
 apps/web/src/app/core/init.service.ts         |  4 +-
 .../layouts/header/web-header.component.ts    |  6 ++-
 .../app/layouts/header/web-header.stories.ts  |  6 ++-
 .../src/app/settings/preferences.component.ts | 14 +++----
 .../maximum-vault-timeout.component.ts        |  2 +-
 .../src/auth/guards/lock.guard.spec.ts        |  2 +-
 libs/angular/src/auth/guards/lock.guard.ts    |  2 +-
 libs/angular/src/services/injection-tokens.ts |  2 +-
 .../src/services/jslib-services.module.ts     | 30 +++++++-------
 .../vault-timeout-input.component.spec.ts     |  6 ++-
 .../vault-timeout-input.component.ts          |  9 +++--
 .../auth-request-login.strategy.spec.ts       |  6 ++-
 .../login-strategies/login.strategy.spec.ts   |  6 ++-
 .../common/login-strategies/login.strategy.ts |  6 ++-
 .../password-login.strategy.spec.ts           |  6 ++-
 .../sso-login.strategy.spec.ts                |  6 ++-
 .../user-api-login.strategy.spec.ts           |  6 ++-
 .../user-api-login.strategy.ts                |  2 +-
 .../webauthn-login.strategy.spec.ts           |  6 ++-
 .../common/services/accounts/lock.service.ts  |  2 +-
 .../services/accounts/lock.services.spec.ts   |  2 +-
 .../login-strategy.service.spec.ts            |  6 ++-
 .../login-strategy.service.ts                 |  2 +-
 .../src/auth/abstractions/token.service.ts    |  3 +-
 .../src/auth/services/token.service.spec.ts   |  9 ++++-
 .../common/src/auth/services/token.service.ts |  7 +++-
 .../user-verification.service.spec.ts         |  2 +-
 .../default-process-reload.service.ts         |  6 ++-
 .../vault-timeout-settings.service.ts         |  6 +--
 .../abstractions}/vault-timeout.service.ts    |  0
 .../enums/vault-timeout-action.enum.ts        |  0
 .../src/key-management/vault-timeout/index.ts | 10 +++++
 .../vault-timeout-settings.service.spec.ts    | 27 ++++++-------
 .../vault-timeout-settings.service.ts         | 22 +++++-----
 .../vault-timeout-settings.state.spec.ts      |  6 +--
 .../services}/vault-timeout-settings.state.ts |  6 +--
 .../services}/vault-timeout.service.spec.ts   | 40 ++++++++++---------
 .../services}/vault-timeout.service.ts        | 34 ++++++++--------
 .../types/vault-timeout.type.ts               |  0
 libs/common/src/services/api.service.ts       |  4 +-
 libs/key-management/src/key.service.spec.ts   |  4 +-
 libs/key-management/src/key.service.ts        |  4 +-
 64 files changed, 273 insertions(+), 203 deletions(-)
 rename apps/browser/src/{services => key-management}/vault-timeout/foreground-vault-timeout.service.ts (90%)
 rename apps/browser/src/{services => key-management}/vault-timeout/vault-timeout.service.ts (93%)
 rename libs/common/src/{abstractions/vault-timeout => key-management/vault-timeout/abstractions}/vault-timeout-settings.service.ts (92%)
 rename libs/common/src/{abstractions/vault-timeout => key-management/vault-timeout/abstractions}/vault-timeout.service.ts (100%)
 rename libs/common/src/{ => key-management/vault-timeout}/enums/vault-timeout-action.enum.ts (100%)
 create mode 100644 libs/common/src/key-management/vault-timeout/index.ts
 rename libs/common/src/{services/vault-timeout => key-management/vault-timeout/services}/vault-timeout-settings.service.spec.ts (94%)
 rename libs/common/src/{services/vault-timeout => key-management/vault-timeout/services}/vault-timeout-settings.service.ts (93%)
 rename libs/common/src/{services/vault-timeout => key-management/vault-timeout/services}/vault-timeout-settings.state.spec.ts (84%)
 rename libs/common/src/{services/vault-timeout => key-management/vault-timeout/services}/vault-timeout-settings.state.ts (83%)
 rename libs/common/src/{services/vault-timeout => key-management/vault-timeout/services}/vault-timeout.service.spec.ts (91%)
 rename libs/common/src/{services/vault-timeout => key-management/vault-timeout/services}/vault-timeout.service.ts (85%)
 rename libs/common/src/{ => key-management/vault-timeout}/types/vault-timeout.type.ts (100%)

diff --git a/apps/browser/src/auth/popup/account-switching/account-switcher.component.ts b/apps/browser/src/auth/popup/account-switching/account-switcher.component.ts
index 25e1b2ae83f..19490642278 100644
--- a/apps/browser/src/auth/popup/account-switching/account-switcher.component.ts
+++ b/apps/browser/src/auth/popup/account-switching/account-switcher.component.ts
@@ -5,12 +5,14 @@ import { Subject, firstValueFrom, map, of, startWith, switchMap } from "rxjs";
 
 import { JslibModule } from "@bitwarden/angular/jslib.module";
 import { LockService } from "@bitwarden/auth/common";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
-import { VaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { AuthService } from "@bitwarden/common/auth/abstractions/auth.service";
 import { AuthenticationStatus } from "@bitwarden/common/auth/enums/authentication-status";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutService,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { UserId } from "@bitwarden/common/types/guid";
 import {
   AvatarModule,
diff --git a/apps/browser/src/auth/popup/settings/account-security.component.spec.ts b/apps/browser/src/auth/popup/settings/account-security.component.spec.ts
index e68edd64e03..60b38570482 100644
--- a/apps/browser/src/auth/popup/settings/account-security.component.spec.ts
+++ b/apps/browser/src/auth/popup/settings/account-security.component.spec.ts
@@ -5,14 +5,17 @@ import { mock } from "jest-mock-extended";
 import { firstValueFrom, of } from "rxjs";
 
 import { PinServiceAbstraction } from "@bitwarden/auth/common";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
-import { VaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { PolicyType } from "@bitwarden/common/admin-console/enums";
 import { Policy } from "@bitwarden/common/admin-console/models/domain/policy";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { UserVerificationService } from "@bitwarden/common/auth/abstractions/user-verification/user-verification.service.abstraction";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import {
+  VaultTimeoutSettingsService,
+  VaultTimeoutService,
+  VaultTimeoutStringType,
+  VaultTimeoutAction,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
@@ -21,7 +24,6 @@ import { MessageSender } from "@bitwarden/common/platform/messaging";
 import { Utils } from "@bitwarden/common/platform/misc/utils";
 import { FakeAccountService, mockAccountServiceWith } from "@bitwarden/common/spec";
 import { UserId } from "@bitwarden/common/types/guid";
-import { VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 import { DialogService, ToastService } from "@bitwarden/components";
 import { BiometricStateService, BiometricsService, KeyService } from "@bitwarden/key-management";
 
diff --git a/apps/browser/src/auth/popup/settings/account-security.component.ts b/apps/browser/src/auth/popup/settings/account-security.component.ts
index 4a64783c78c..871d1b3014d 100644
--- a/apps/browser/src/auth/popup/settings/account-security.component.ts
+++ b/apps/browser/src/auth/popup/settings/account-security.component.ts
@@ -25,24 +25,24 @@ import {
 import { JslibModule } from "@bitwarden/angular/jslib.module";
 import { FingerprintDialogComponent, VaultTimeoutInputComponent } from "@bitwarden/auth/angular";
 import { PinServiceAbstraction } from "@bitwarden/auth/common";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
-import { VaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { PolicyType } from "@bitwarden/common/admin-console/enums";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { UserVerificationService } from "@bitwarden/common/auth/abstractions/user-verification/user-verification.service.abstraction";
 import { DeviceType } from "@bitwarden/common/enums";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import {
+  VaultTimeout,
+  VaultTimeoutAction,
+  VaultTimeoutOption,
+  VaultTimeoutService,
+  VaultTimeoutSettingsService,
+  VaultTimeoutStringType,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
 import { StateService } from "@bitwarden/common/platform/abstractions/state.service";
-import {
-  VaultTimeout,
-  VaultTimeoutOption,
-  VaultTimeoutStringType,
-} from "@bitwarden/common/types/vault-timeout.type";
 import {
   CardComponent,
   CheckboxModule,
diff --git a/apps/browser/src/autofill/types/index.ts b/apps/browser/src/autofill/types/index.ts
index 58ac95e7edf..30ebf38fef5 100644
--- a/apps/browser/src/autofill/types/index.ts
+++ b/apps/browser/src/autofill/types/index.ts
@@ -1,6 +1,5 @@
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import { VaultTimeout, VaultTimeoutAction } from "@bitwarden/common/key-management/vault-timeout";
 import { Region } from "@bitwarden/common/platform/abstractions/environment.service";
-import { VaultTimeout } from "@bitwarden/common/types/vault-timeout.type";
 import { CipherType } from "@bitwarden/common/vault/enums";
 
 export type UserSettings = {
diff --git a/apps/browser/src/background/commands.background.ts b/apps/browser/src/background/commands.background.ts
index 5cf58b1653f..f09ebb6c8a1 100644
--- a/apps/browser/src/background/commands.background.ts
+++ b/apps/browser/src/background/commands.background.ts
@@ -1,9 +1,9 @@
 // FIXME: Update this file to be type safe and remove this and next line
 // @ts-strict-ignore
-import { VaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
 import { AuthService } from "@bitwarden/common/auth/abstractions/auth.service";
 import { AuthenticationStatus } from "@bitwarden/common/auth/enums/authentication-status";
 import { ExtensionCommand, ExtensionCommandType } from "@bitwarden/common/autofill/constants";
+import { VaultTimeoutService } from "@bitwarden/common/key-management/vault-timeout";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
 
 import { openUnlockPopout } from "../auth/popup/utils/auth-popout-window";
diff --git a/apps/browser/src/background/idle.background.ts b/apps/browser/src/background/idle.background.ts
index 08d4b9fc00c..8dccc933375 100644
--- a/apps/browser/src/background/idle.background.ts
+++ b/apps/browser/src/background/idle.background.ts
@@ -2,12 +2,14 @@
 // @ts-strict-ignore
 import { firstValueFrom } from "rxjs";
 
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
-import { VaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutService,
+  VaultTimeoutSettingsService,
+  VaultTimeoutStringType,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { NotificationsService } from "@bitwarden/common/platform/notifications";
-import { VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 
 const IdleInterval = 60 * 5; // 5 minutes
 
diff --git a/apps/browser/src/background/main.background.ts b/apps/browser/src/background/main.background.ts
index 914938ba130..7251dea0580 100644
--- a/apps/browser/src/background/main.background.ts
+++ b/apps/browser/src/background/main.background.ts
@@ -21,7 +21,6 @@ import { AuditService as AuditServiceAbstraction } from "@bitwarden/common/abstr
 import { EventCollectionService as EventCollectionServiceAbstraction } from "@bitwarden/common/abstractions/event/event-collection.service";
 import { EventUploadService as EventUploadServiceAbstraction } from "@bitwarden/common/abstractions/event/event-upload.service";
 import { SearchService as SearchServiceAbstraction } from "@bitwarden/common/abstractions/search.service";
-import { VaultTimeoutSettingsService as VaultTimeoutSettingsServiceAbstraction } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { InternalOrganizationServiceAbstraction } from "@bitwarden/common/admin-console/abstractions/organization/organization.service.abstraction";
 import { PolicyApiServiceAbstraction } from "@bitwarden/common/admin-console/abstractions/policy/policy-api.service.abstraction";
 import { InternalPolicyService as InternalPolicyServiceAbstraction } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
@@ -84,6 +83,11 @@ import { EncryptServiceImplementation } from "@bitwarden/common/key-management/c
 import { FallbackBulkEncryptService } from "@bitwarden/common/key-management/crypto/services/fallback-bulk-encrypt.service";
 import { MultithreadEncryptServiceImplementation } from "@bitwarden/common/key-management/crypto/services/multithread-encrypt.service.implementation";
 import { DefaultProcessReloadService } from "@bitwarden/common/key-management/services/default-process-reload.service";
+import {
+  DefaultVaultTimeoutSettingsService,
+  VaultTimeoutSettingsService,
+  VaultTimeoutStringType,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService as AppIdServiceAbstraction } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { ConfigApiServiceAbstraction } from "@bitwarden/common/platform/abstractions/config/config-api.service.abstraction";
 import { ConfigService } from "@bitwarden/common/platform/abstractions/config/config.service";
@@ -171,7 +175,6 @@ import { AuditService } from "@bitwarden/common/services/audit.service";
 import { EventCollectionService } from "@bitwarden/common/services/event/event-collection.service";
 import { EventUploadService } from "@bitwarden/common/services/event/event-upload.service";
 import { SearchService } from "@bitwarden/common/services/search.service";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/services/vault-timeout/vault-timeout-settings.service";
 import {
   PasswordStrengthService,
   PasswordStrengthServiceAbstraction,
@@ -182,7 +185,6 @@ import { SendStateProvider } from "@bitwarden/common/tools/send/services/send-st
 import { SendService } from "@bitwarden/common/tools/send/services/send.service";
 import { InternalSendService as InternalSendServiceAbstraction } from "@bitwarden/common/tools/send/services/send.service.abstraction";
 import { UserId } from "@bitwarden/common/types/guid";
-import { VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 import { CipherService as CipherServiceAbstraction } from "@bitwarden/common/vault/abstractions/cipher.service";
 import { CipherFileUploadService as CipherFileUploadServiceAbstraction } from "@bitwarden/common/vault/abstractions/file-upload/cipher-file-upload.service";
 import { FolderApiServiceAbstraction } from "@bitwarden/common/vault/abstractions/folder/folder-api.service.abstraction";
@@ -254,6 +256,7 @@ import AutofillService from "../autofill/services/autofill.service";
 import { InlineMenuFieldQualificationService } from "../autofill/services/inline-menu-field-qualification.service";
 import { SafariApp } from "../browser/safariApp";
 import { BackgroundBrowserBiometricsService } from "../key-management/biometrics/background-browser-biometrics.service";
+import VaultTimeoutService from "../key-management/vault-timeout/vault-timeout.service";
 import { BrowserApi } from "../platform/browser/browser-api";
 import { flagEnabled } from "../platform/flags";
 import { UpdateBadge } from "../platform/listeners/update-badge";
@@ -279,7 +282,6 @@ import { BrowserStorageServiceProvider } from "../platform/storage/browser-stora
 import { OffscreenStorageService } from "../platform/storage/offscreen-storage.service";
 import { SyncServiceListener } from "../platform/sync/sync-service.listener";
 import { fromChromeRuntimeMessaging } from "../platform/utils/from-chrome-runtime-messaging";
-import VaultTimeoutService from "../services/vault-timeout/vault-timeout.service";
 import { VaultFilterService } from "../vault/services/vault-filter.service";
 
 import CommandsBackground from "./commands.background";
@@ -310,7 +312,7 @@ export default class MainBackground {
   userDecryptionOptionsService: InternalUserDecryptionOptionsServiceAbstraction;
   collectionService: CollectionService;
   vaultTimeoutService?: VaultTimeoutService;
-  vaultTimeoutSettingsService: VaultTimeoutSettingsServiceAbstraction;
+  vaultTimeoutSettingsService: VaultTimeoutSettingsService;
   passwordGenerationService: PasswordGenerationServiceAbstraction;
   syncService: SyncService;
   passwordStrengthService: PasswordStrengthServiceAbstraction;
@@ -684,7 +686,7 @@ export default class MainBackground {
     this.organizationService = new DefaultOrganizationService(this.stateProvider);
     this.policyService = new PolicyService(this.stateProvider, this.organizationService);
 
-    this.vaultTimeoutSettingsService = new VaultTimeoutSettingsService(
+    this.vaultTimeoutSettingsService = new DefaultVaultTimeoutSettingsService(
       this.accountService,
       this.pinService,
       this.userDecryptionOptionsService,
diff --git a/apps/browser/src/key-management/lock/services/extension-lock-component.service.spec.ts b/apps/browser/src/key-management/lock/services/extension-lock-component.service.spec.ts
index faf5036d0f7..9afc723825c 100644
--- a/apps/browser/src/key-management/lock/services/extension-lock-component.service.spec.ts
+++ b/apps/browser/src/key-management/lock/services/extension-lock-component.service.spec.ts
@@ -6,7 +6,7 @@ import {
   PinServiceAbstraction,
   UserDecryptionOptionsServiceAbstraction,
 } from "@bitwarden/auth/common";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
+import { VaultTimeoutSettingsService } from "@bitwarden/common/key-management/vault-timeout";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
 import { UserId } from "@bitwarden/common/types/guid";
 import {
diff --git a/apps/browser/src/services/vault-timeout/foreground-vault-timeout.service.ts b/apps/browser/src/key-management/vault-timeout/foreground-vault-timeout.service.ts
similarity index 90%
rename from apps/browser/src/services/vault-timeout/foreground-vault-timeout.service.ts
rename to apps/browser/src/key-management/vault-timeout/foreground-vault-timeout.service.ts
index 0d49595d2eb..5003dfd5b29 100644
--- a/apps/browser/src/services/vault-timeout/foreground-vault-timeout.service.ts
+++ b/apps/browser/src/key-management/vault-timeout/foreground-vault-timeout.service.ts
@@ -1,6 +1,6 @@
 // FIXME: Update this file to be type safe and remove this and next line
 // @ts-strict-ignore
-import { VaultTimeoutService as BaseVaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
+import { VaultTimeoutService as BaseVaultTimeoutService } from "@bitwarden/common/key-management/vault-timeout/abstractions/vault-timeout.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { UserId } from "@bitwarden/common/types/guid";
 
diff --git a/apps/browser/src/services/vault-timeout/vault-timeout.service.ts b/apps/browser/src/key-management/vault-timeout/vault-timeout.service.ts
similarity index 93%
rename from apps/browser/src/services/vault-timeout/vault-timeout.service.ts
rename to apps/browser/src/key-management/vault-timeout/vault-timeout.service.ts
index e0b9db5422b..51f90fb98a6 100644
--- a/apps/browser/src/services/vault-timeout/vault-timeout.service.ts
+++ b/apps/browser/src/key-management/vault-timeout/vault-timeout.service.ts
@@ -1,4 +1,4 @@
-import { VaultTimeoutService as BaseVaultTimeoutService } from "@bitwarden/common/services/vault-timeout/vault-timeout.service";
+import { VaultTimeoutService as BaseVaultTimeoutService } from "@bitwarden/common/key-management/vault-timeout/services/vault-timeout.service";
 
 import { SafariApp } from "../../browser/safariApp";
 
diff --git a/apps/browser/src/popup/services/services.module.ts b/apps/browser/src/popup/services/services.module.ts
index 3bdb3b79d1c..9d59cdee36a 100644
--- a/apps/browser/src/popup/services/services.module.ts
+++ b/apps/browser/src/popup/services/services.module.ts
@@ -40,7 +40,6 @@ import {
 } from "@bitwarden/auth/common";
 import { ApiService } from "@bitwarden/common/abstractions/api.service";
 import { EventCollectionService as EventCollectionServiceAbstraction } from "@bitwarden/common/abstractions/event/event-collection.service";
-import { VaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { DefaultOrganizationService } from "@bitwarden/common/admin-console/services/organization/default-organization.service";
 import {
@@ -66,6 +65,10 @@ import {
 import { BillingAccountProfileStateService } from "@bitwarden/common/billing/abstractions/account/billing-account-profile-state.service";
 import { ClientType } from "@bitwarden/common/enums";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeoutService,
+  VaultTimeoutStringType,
+} from "@bitwarden/common/key-management/vault-timeout";
 import {
   AnimationControlService,
   DefaultAnimationControlService,
@@ -109,7 +112,6 @@ import { WindowStorageService } from "@bitwarden/common/platform/storage/window-
 import { SyncService } from "@bitwarden/common/platform/sync";
 import { SendApiService } from "@bitwarden/common/tools/send/services/send-api.service.abstraction";
 import { InternalSendService } from "@bitwarden/common/tools/send/services/send.service.abstraction";
-import { VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 import { CipherService } from "@bitwarden/common/vault/abstractions/cipher.service";
 import { FolderApiServiceAbstraction } from "@bitwarden/common/vault/abstractions/folder/folder-api.service.abstraction";
 import {
@@ -143,6 +145,7 @@ import AutofillService from "../../autofill/services/autofill.service";
 import { InlineMenuFieldQualificationService } from "../../autofill/services/inline-menu-field-qualification.service";
 import { ForegroundBrowserBiometricsService } from "../../key-management/biometrics/foreground-browser-biometrics";
 import { ExtensionLockComponentService } from "../../key-management/lock/services/extension-lock-component.service";
+import { ForegroundVaultTimeoutService } from "../../key-management/vault-timeout/foreground-vault-timeout.service";
 import { BrowserApi } from "../../platform/browser/browser-api";
 import { runInsideAngular } from "../../platform/browser/run-inside-angular.operator";
 /* eslint-disable no-restricted-imports */
@@ -167,7 +170,6 @@ import { BrowserStorageServiceProvider } from "../../platform/storage/browser-st
 import { ForegroundMemoryStorageService } from "../../platform/storage/foreground-memory-storage.service";
 import { ForegroundSyncService } from "../../platform/sync/foreground-sync.service";
 import { fromChromeRuntimeMessaging } from "../../platform/utils/from-chrome-runtime-messaging";
-import { ForegroundVaultTimeoutService } from "../../services/vault-timeout/foreground-vault-timeout.service";
 import { FilePopoutUtilsService } from "../../tools/popup/services/file-popout-utils.service";
 import { Fido2UserVerificationService } from "../../vault/services/fido2-user-verification.service";
 import { VaultBrowserStateService } from "../../vault/services/vault-browser-state.service";
diff --git a/apps/cli/src/auth/commands/lock.command.ts b/apps/cli/src/auth/commands/lock.command.ts
index 809d3c6a881..f3b8018f40e 100644
--- a/apps/cli/src/auth/commands/lock.command.ts
+++ b/apps/cli/src/auth/commands/lock.command.ts
@@ -1,6 +1,6 @@
 // FIXME: Update this file to be type safe and remove this and next line
 // @ts-strict-ignore
-import { VaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
+import { VaultTimeoutService } from "@bitwarden/common/key-management/vault-timeout";
 
 import { Response } from "../../models/response";
 import { MessageResponse } from "../../models/response/message.response";
diff --git a/apps/cli/src/platform/services/node-api.service.ts b/apps/cli/src/platform/services/node-api.service.ts
index f4d1d30e8b1..8c7629fb3d9 100644
--- a/apps/cli/src/platform/services/node-api.service.ts
+++ b/apps/cli/src/platform/services/node-api.service.ts
@@ -4,8 +4,8 @@ import * as FormData from "form-data";
 import { HttpsProxyAgent } from "https-proxy-agent";
 import * as fe from "node-fetch";
 
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { TokenService } from "@bitwarden/common/auth/abstractions/token.service";
+import { VaultTimeoutSettingsService } from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
diff --git a/apps/cli/src/service-container/service-container.ts b/apps/cli/src/service-container/service-container.ts
index fcf18fd508f..67237e46f33 100644
--- a/apps/cli/src/service-container/service-container.ts
+++ b/apps/cli/src/service-container/service-container.ts
@@ -64,6 +64,13 @@ import { DefaultBillingAccountProfileStateService } from "@bitwarden/common/bill
 import { ClientType } from "@bitwarden/common/enums";
 import { EncryptServiceImplementation } from "@bitwarden/common/key-management/crypto/services/encrypt.service.implementation";
 import { FallbackBulkEncryptService } from "@bitwarden/common/key-management/crypto/services/fallback-bulk-encrypt.service";
+import {
+  DefaultVaultTimeoutService,
+  DefaultVaultTimeoutSettingsService,
+  VaultTimeoutService,
+  VaultTimeoutSettingsService,
+  VaultTimeoutStringType,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { ConfigApiServiceAbstraction } from "@bitwarden/common/platform/abstractions/config/config-api.service.abstraction";
 import { ConfigService } from "@bitwarden/common/platform/abstractions/config/config.service";
 import {
@@ -122,8 +129,6 @@ import { AuditService } from "@bitwarden/common/services/audit.service";
 import { EventCollectionService } from "@bitwarden/common/services/event/event-collection.service";
 import { EventUploadService } from "@bitwarden/common/services/event/event-upload.service";
 import { SearchService } from "@bitwarden/common/services/search.service";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/services/vault-timeout/vault-timeout-settings.service";
-import { VaultTimeoutService } from "@bitwarden/common/services/vault-timeout/vault-timeout.service";
 import {
   PasswordStrengthService,
   PasswordStrengthServiceAbstraction,
@@ -132,7 +137,6 @@ import { SendApiService } from "@bitwarden/common/tools/send/services/send-api.s
 import { SendStateProvider } from "@bitwarden/common/tools/send/services/send-state.provider";
 import { SendService } from "@bitwarden/common/tools/send/services/send.service";
 import { UserId } from "@bitwarden/common/types/guid";
-import { VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 import { InternalFolderService } from "@bitwarden/common/vault/abstractions/folder/folder.service.abstraction";
 import {
   CipherAuthorizationService,
@@ -464,7 +468,7 @@ export class ServiceContainer {
     this.organizationService = new DefaultOrganizationService(this.stateProvider);
     this.policyService = new PolicyService(this.stateProvider, this.organizationService);
 
-    this.vaultTimeoutSettingsService = new VaultTimeoutSettingsService(
+    this.vaultTimeoutSettingsService = new DefaultVaultTimeoutSettingsService(
       this.accountService,
       this.pinService,
       this.userDecryptionOptionsService,
@@ -712,7 +716,7 @@ export class ServiceContainer {
 
     const biometricService = new CliBiometricsService();
 
-    this.vaultTimeoutService = new VaultTimeoutService(
+    this.vaultTimeoutService = new DefaultVaultTimeoutService(
       this.accountService,
       this.masterPasswordService,
       this.cipherService,
diff --git a/apps/desktop/src/app/accounts/settings.component.spec.ts b/apps/desktop/src/app/accounts/settings.component.spec.ts
index 3caad4d5af8..342d4717511 100644
--- a/apps/desktop/src/app/accounts/settings.component.spec.ts
+++ b/apps/desktop/src/app/accounts/settings.component.spec.ts
@@ -6,7 +6,6 @@ import { firstValueFrom, of } from "rxjs";
 
 import { I18nPipe } from "@bitwarden/angular/platform/pipes/i18n.pipe";
 import { PinServiceAbstraction } from "@bitwarden/auth/common";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { PolicyType } from "@bitwarden/common/admin-console/enums";
 import { Policy } from "@bitwarden/common/admin-console/models/domain/policy";
@@ -15,7 +14,11 @@ import { UserVerificationService } from "@bitwarden/common/auth/abstractions/use
 import { AutofillSettingsServiceAbstraction } from "@bitwarden/common/autofill/services/autofill-settings.service";
 import { DomainSettingsService } from "@bitwarden/common/autofill/services/domain-settings.service";
 import { DeviceType } from "@bitwarden/common/enums";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import {
+  VaultTimeoutSettingsService,
+  VaultTimeoutStringType,
+  VaultTimeoutAction,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { ConfigService } from "@bitwarden/common/platform/abstractions/config/config.service";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
@@ -27,7 +30,6 @@ import { Utils } from "@bitwarden/common/platform/misc/utils";
 import { ThemeStateService } from "@bitwarden/common/platform/theming/theme-state.service";
 import { FakeAccountService, mockAccountServiceWith } from "@bitwarden/common/spec";
 import { UserId } from "@bitwarden/common/types/guid";
-import { VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 import { DialogService } from "@bitwarden/components";
 import { BiometricStateService, BiometricsStatus, KeyService } from "@bitwarden/key-management";
 
diff --git a/apps/desktop/src/app/accounts/settings.component.ts b/apps/desktop/src/app/accounts/settings.component.ts
index 136036de68e..51d1f4cfa4f 100644
--- a/apps/desktop/src/app/accounts/settings.component.ts
+++ b/apps/desktop/src/app/accounts/settings.component.ts
@@ -15,7 +15,6 @@ import {
 } from "rxjs/operators";
 
 import { PinServiceAbstraction } from "@bitwarden/auth/common";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { PolicyType } from "@bitwarden/common/admin-console/enums";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
@@ -24,7 +23,13 @@ import { AutofillSettingsServiceAbstraction } from "@bitwarden/common/autofill/s
 import { DomainSettingsService } from "@bitwarden/common/autofill/services/domain-settings.service";
 import { DeviceType } from "@bitwarden/common/enums";
 import { FeatureFlag } from "@bitwarden/common/enums/feature-flag.enum";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import {
+  VaultTimeout,
+  VaultTimeoutAction,
+  VaultTimeoutOption,
+  VaultTimeoutSettingsService,
+  VaultTimeoutStringType,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { ConfigService } from "@bitwarden/common/platform/abstractions/config/config.service";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
@@ -35,11 +40,6 @@ import { ThemeType } from "@bitwarden/common/platform/enums/theme-type.enum";
 import { Utils } from "@bitwarden/common/platform/misc/utils";
 import { ThemeStateService } from "@bitwarden/common/platform/theming/theme-state.service";
 import { UserId } from "@bitwarden/common/types/guid";
-import {
-  VaultTimeout,
-  VaultTimeoutOption,
-  VaultTimeoutStringType,
-} from "@bitwarden/common/types/vault-timeout.type";
 import { DialogService } from "@bitwarden/components";
 import { KeyService, BiometricStateService, BiometricsStatus } from "@bitwarden/key-management";
 
diff --git a/apps/desktop/src/app/app.component.ts b/apps/desktop/src/app/app.component.ts
index f19f508d4ba..ea18617daf0 100644
--- a/apps/desktop/src/app/app.component.ts
+++ b/apps/desktop/src/app/app.component.ts
@@ -20,8 +20,6 @@ import { FingerprintDialogComponent, LoginApprovalComponent } from "@bitwarden/a
 import { DESKTOP_SSO_CALLBACK, LogoutReason } from "@bitwarden/auth/common";
 import { EventUploadService } from "@bitwarden/common/abstractions/event/event-upload.service";
 import { SearchService } from "@bitwarden/common/abstractions/search.service";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
-import { VaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
 import { OrganizationService } from "@bitwarden/common/admin-console/abstractions/organization/organization.service.abstraction";
 import { InternalPolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
@@ -33,8 +31,14 @@ import { AuthenticationStatus } from "@bitwarden/common/auth/enums/authenticatio
 import { ForceSetPasswordReason } from "@bitwarden/common/auth/models/domain/force-set-password-reason";
 import { getUserId } from "@bitwarden/common/auth/services/account.service";
 import { FeatureFlag } from "@bitwarden/common/enums/feature-flag.enum";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
 import { ProcessReloadServiceAbstraction } from "@bitwarden/common/key-management/abstractions/process-reload.service";
+import {
+  VaultTimeout,
+  VaultTimeoutAction,
+  VaultTimeoutService,
+  VaultTimeoutSettingsService,
+  VaultTimeoutStringType,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { BroadcasterService } from "@bitwarden/common/platform/abstractions/broadcaster.service";
 import { ConfigService } from "@bitwarden/common/platform/abstractions/config/config.service";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
@@ -48,7 +52,6 @@ import { NotificationsService } from "@bitwarden/common/platform/notifications";
 import { StateEventRunnerService } from "@bitwarden/common/platform/state";
 import { SyncService } from "@bitwarden/common/platform/sync";
 import { UserId } from "@bitwarden/common/types/guid";
-import { VaultTimeout, VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 import { CipherService } from "@bitwarden/common/vault/abstractions/cipher.service";
 import { InternalFolderService } from "@bitwarden/common/vault/abstractions/folder/folder.service.abstraction";
 import { CipherType } from "@bitwarden/common/vault/enums";
diff --git a/apps/desktop/src/app/services/init.service.ts b/apps/desktop/src/app/services/init.service.ts
index 5e00e406360..3c831ae11dd 100644
--- a/apps/desktop/src/app/services/init.service.ts
+++ b/apps/desktop/src/app/services/init.service.ts
@@ -8,6 +8,7 @@ import { EventUploadService as EventUploadServiceAbstraction } from "@bitwarden/
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { TwoFactorService as TwoFactorServiceAbstraction } from "@bitwarden/common/auth/abstractions/two-factor.service";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import { DefaultVaultTimeoutService } from "@bitwarden/common/key-management/vault-timeout";
 import { I18nService as I18nServiceAbstraction } from "@bitwarden/common/platform/abstractions/i18n.service";
 import { PlatformUtilsService as PlatformUtilsServiceAbstraction } from "@bitwarden/common/platform/abstractions/platform-utils.service";
 import { SdkLoadService } from "@bitwarden/common/platform/abstractions/sdk/sdk-load.service";
@@ -17,7 +18,6 @@ import { ContainerService } from "@bitwarden/common/platform/services/container.
 import { UserAutoUnlockKeyService } from "@bitwarden/common/platform/services/user-auto-unlock-key.service";
 import { SyncService as SyncServiceAbstraction } from "@bitwarden/common/platform/sync";
 import { EventUploadService } from "@bitwarden/common/services/event/event-upload.service";
-import { VaultTimeoutService } from "@bitwarden/common/services/vault-timeout/vault-timeout.service";
 import { UserId } from "@bitwarden/common/types/guid";
 import { KeyService as KeyServiceAbstraction } from "@bitwarden/key-management";
 
@@ -32,7 +32,7 @@ export class InitService {
   constructor(
     @Inject(WINDOW) private win: Window,
     private syncService: SyncServiceAbstraction,
-    private vaultTimeoutService: VaultTimeoutService,
+    private vaultTimeoutService: DefaultVaultTimeoutService,
     private i18nService: I18nServiceAbstraction,
     private eventUploadService: EventUploadServiceAbstraction,
     private twoFactorService: TwoFactorServiceAbstraction,
diff --git a/apps/desktop/src/app/services/services.module.ts b/apps/desktop/src/app/services/services.module.ts
index 83a2c6bad5c..23a207c8cb4 100644
--- a/apps/desktop/src/app/services/services.module.ts
+++ b/apps/desktop/src/app/services/services.module.ts
@@ -36,7 +36,6 @@ import {
   SsoUrlService,
 } from "@bitwarden/auth/common";
 import { ApiService } from "@bitwarden/common/abstractions/api.service";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { OrganizationApiServiceAbstraction } from "@bitwarden/common/admin-console/abstractions/organization/organization-api.service.abstraction";
 import { PolicyService as PolicyServiceAbstraction } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import {
@@ -54,6 +53,10 @@ import { ClientType } from "@bitwarden/common/enums";
 import { ProcessReloadServiceAbstraction } from "@bitwarden/common/key-management/abstractions/process-reload.service";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
 import { DefaultProcessReloadService } from "@bitwarden/common/key-management/services/default-process-reload.service";
+import {
+  VaultTimeoutSettingsService,
+  VaultTimeoutStringType,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { ConfigService } from "@bitwarden/common/platform/abstractions/config/config.service";
 import { CryptoFunctionService as CryptoFunctionServiceAbstraction } from "@bitwarden/common/platform/abstractions/crypto-function.service";
 import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
@@ -89,7 +92,6 @@ import { GlobalStateProvider, StateProvider } from "@bitwarden/common/platform/s
 import { MemoryStorageService as MemoryStorageServiceForStateProviders } from "@bitwarden/common/platform/state/storage/memory-storage.service";
 import { SyncService } from "@bitwarden/common/platform/sync";
 import { ThemeStateService } from "@bitwarden/common/platform/theming/theme-state.service";
-import { VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 import { CipherService as CipherServiceAbstraction } from "@bitwarden/common/vault/abstractions/cipher.service";
 import { DialogService, ToastService } from "@bitwarden/components";
 import { PasswordGenerationServiceAbstraction } from "@bitwarden/generator-legacy";
diff --git a/apps/desktop/src/key-management/lock/services/desktop-lock-component.service.spec.ts b/apps/desktop/src/key-management/lock/services/desktop-lock-component.service.spec.ts
index 56f28bde0ef..6bfbc803e87 100644
--- a/apps/desktop/src/key-management/lock/services/desktop-lock-component.service.spec.ts
+++ b/apps/desktop/src/key-management/lock/services/desktop-lock-component.service.spec.ts
@@ -6,8 +6,8 @@ import {
   PinServiceAbstraction,
   UserDecryptionOptionsServiceAbstraction,
 } from "@bitwarden/auth/common";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { DeviceType } from "@bitwarden/common/enums";
+import { VaultTimeoutSettingsService } from "@bitwarden/common/key-management/vault-timeout";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
 import { UserId } from "@bitwarden/common/types/guid";
 import { KeyService, BiometricsService, BiometricsStatus } from "@bitwarden/key-management";
diff --git a/apps/web/src/app/app.component.ts b/apps/web/src/app/app.component.ts
index fe92cdcd3af..078884d9413 100644
--- a/apps/web/src/app/app.component.ts
+++ b/apps/web/src/app/app.component.ts
@@ -10,7 +10,6 @@ import { CollectionService } from "@bitwarden/admin-console/common";
 import { ApiService } from "@bitwarden/common/abstractions/api.service";
 import { EventUploadService } from "@bitwarden/common/abstractions/event/event-upload.service";
 import { SearchService } from "@bitwarden/common/abstractions/search.service";
-import { VaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
 import { InternalOrganizationServiceAbstraction } from "@bitwarden/common/admin-console/abstractions/organization/organization.service.abstraction";
 import { InternalPolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
@@ -19,6 +18,7 @@ import { KeyConnectorService } from "@bitwarden/common/auth/abstractions/key-con
 import { AuthenticationStatus } from "@bitwarden/common/auth/enums/authentication-status";
 import { getUserId } from "@bitwarden/common/auth/services/account.service";
 import { ProcessReloadServiceAbstraction } from "@bitwarden/common/key-management/abstractions/process-reload.service";
+import { VaultTimeoutService } from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { BroadcasterService } from "@bitwarden/common/platform/abstractions/broadcaster.service";
 import { ConfigService } from "@bitwarden/common/platform/abstractions/config/config.service";
diff --git a/apps/web/src/app/core/core.module.ts b/apps/web/src/app/core/core.module.ts
index 56f79661b97..c835e504b5a 100644
--- a/apps/web/src/app/core/core.module.ts
+++ b/apps/web/src/app/core/core.module.ts
@@ -55,6 +55,10 @@ import { SsoLoginServiceAbstraction } from "@bitwarden/common/auth/abstractions/
 import { ClientType } from "@bitwarden/common/enums";
 import { ProcessReloadServiceAbstraction } from "@bitwarden/common/key-management/abstractions/process-reload.service";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeout,
+  VaultTimeoutStringType,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { ConfigService } from "@bitwarden/common/platform/abstractions/config/config.service";
 import { CryptoFunctionService } from "@bitwarden/common/platform/abstractions/crypto-function.service";
@@ -94,7 +98,6 @@ import {
   DefaultThemeStateService,
   ThemeStateService,
 } from "@bitwarden/common/platform/theming/theme-state.service";
-import { VaultTimeout, VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 import { PasswordGenerationServiceAbstraction } from "@bitwarden/generator-legacy";
 import {
   KdfConfigService,
diff --git a/apps/web/src/app/core/init.service.ts b/apps/web/src/app/core/init.service.ts
index 307eed4c1e4..1990ce1e1ce 100644
--- a/apps/web/src/app/core/init.service.ts
+++ b/apps/web/src/app/core/init.service.ts
@@ -8,6 +8,7 @@ import { EventUploadService as EventUploadServiceAbstraction } from "@bitwarden/
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { TwoFactorService as TwoFactorServiceAbstraction } from "@bitwarden/common/auth/abstractions/two-factor.service";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import { DefaultVaultTimeoutService } from "@bitwarden/common/key-management/vault-timeout";
 import { I18nService as I18nServiceAbstraction } from "@bitwarden/common/platform/abstractions/i18n.service";
 import { SdkLoadService } from "@bitwarden/common/platform/abstractions/sdk/sdk-load.service";
 import { StateService as StateServiceAbstraction } from "@bitwarden/common/platform/abstractions/state.service";
@@ -15,7 +16,6 @@ import { NotificationsService } from "@bitwarden/common/platform/notifications";
 import { ContainerService } from "@bitwarden/common/platform/services/container.service";
 import { UserAutoUnlockKeyService } from "@bitwarden/common/platform/services/user-auto-unlock-key.service";
 import { EventUploadService } from "@bitwarden/common/services/event/event-upload.service";
-import { VaultTimeoutService } from "@bitwarden/common/services/vault-timeout/vault-timeout.service";
 import { KeyService as KeyServiceAbstraction } from "@bitwarden/key-management";
 
 import { VersionService } from "../platform/version.service";
@@ -25,7 +25,7 @@ export class InitService {
   constructor(
     @Inject(WINDOW) private win: Window,
     private notificationsService: NotificationsService,
-    private vaultTimeoutService: VaultTimeoutService,
+    private vaultTimeoutService: DefaultVaultTimeoutService,
     private i18nService: I18nServiceAbstraction,
     private eventUploadService: EventUploadServiceAbstraction,
     private twoFactorService: TwoFactorServiceAbstraction,
diff --git a/apps/web/src/app/layouts/header/web-header.component.ts b/apps/web/src/app/layouts/header/web-header.component.ts
index 2f0c9d4772b..e17d059160f 100644
--- a/apps/web/src/app/layouts/header/web-header.component.ts
+++ b/apps/web/src/app/layouts/header/web-header.component.ts
@@ -5,9 +5,11 @@ import { ActivatedRoute } from "@angular/router";
 import { map, Observable } from "rxjs";
 
 import { User } from "@bitwarden/angular/pipes/user-name.pipe";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
 import { UserId } from "@bitwarden/common/types/guid";
diff --git a/apps/web/src/app/layouts/header/web-header.stories.ts b/apps/web/src/app/layouts/header/web-header.stories.ts
index 80e98ba7a57..571e78aab59 100644
--- a/apps/web/src/app/layouts/header/web-header.stories.ts
+++ b/apps/web/src/app/layouts/header/web-header.stories.ts
@@ -11,9 +11,11 @@ import {
 import { BehaviorSubject, combineLatest, map, of } from "rxjs";
 
 import { JslibModule } from "@bitwarden/angular/jslib.module";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
 import { StateService } from "@bitwarden/common/platform/abstractions/state.service";
diff --git a/apps/web/src/app/settings/preferences.component.ts b/apps/web/src/app/settings/preferences.component.ts
index 09dc7a3287b..2b3dba3f4bf 100644
--- a/apps/web/src/app/settings/preferences.component.ts
+++ b/apps/web/src/app/settings/preferences.component.ts
@@ -4,22 +4,22 @@ import { Component, OnDestroy, OnInit } from "@angular/core";
 import { FormBuilder } from "@angular/forms";
 import { concatMap, filter, firstValueFrom, map, Observable, Subject, takeUntil, tap } from "rxjs";
 
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { PolicyType } from "@bitwarden/common/admin-console/enums";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { DomainSettingsService } from "@bitwarden/common/autofill/services/domain-settings.service";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import {
+  VaultTimeout,
+  VaultTimeoutAction,
+  VaultTimeoutOption,
+  VaultTimeoutSettingsService,
+  VaultTimeoutStringType,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
 import { ThemeType } from "@bitwarden/common/platform/enums";
 import { Utils } from "@bitwarden/common/platform/misc/utils";
 import { ThemeStateService } from "@bitwarden/common/platform/theming/theme-state.service";
-import {
-  VaultTimeout,
-  VaultTimeoutOption,
-  VaultTimeoutStringType,
-} from "@bitwarden/common/types/vault-timeout.type";
 import { DialogService } from "@bitwarden/components";
 
 @Component({
diff --git a/bitwarden_license/bit-web/src/app/admin-console/policies/maximum-vault-timeout.component.ts b/bitwarden_license/bit-web/src/app/admin-console/policies/maximum-vault-timeout.component.ts
index a0ad1cd3010..9d09ead800e 100644
--- a/bitwarden_license/bit-web/src/app/admin-console/policies/maximum-vault-timeout.component.ts
+++ b/bitwarden_license/bit-web/src/app/admin-console/policies/maximum-vault-timeout.component.ts
@@ -5,7 +5,7 @@ import { FormBuilder, FormControl } from "@angular/forms";
 
 import { PolicyType } from "@bitwarden/common/admin-console/enums";
 import { PolicyRequest } from "@bitwarden/common/admin-console/models/request/policy.request";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import { VaultTimeoutAction } from "@bitwarden/common/key-management/vault-timeout";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
 import {
   BasePolicy,
diff --git a/libs/angular/src/auth/guards/lock.guard.spec.ts b/libs/angular/src/auth/guards/lock.guard.spec.ts
index d801ef0f8f9..1b09a415999 100644
--- a/libs/angular/src/auth/guards/lock.guard.spec.ts
+++ b/libs/angular/src/auth/guards/lock.guard.spec.ts
@@ -5,7 +5,6 @@ import { MockProxy, mock } from "jest-mock-extended";
 import { BehaviorSubject, of } from "rxjs";
 
 import { EmptyComponent } from "@bitwarden/angular/platform/guard/feature-flag.guard.spec";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import {
   Account,
   AccountInfo,
@@ -16,6 +15,7 @@ import { DeviceTrustServiceAbstraction } from "@bitwarden/common/auth/abstractio
 import { UserVerificationService } from "@bitwarden/common/auth/abstractions/user-verification/user-verification.service.abstraction";
 import { AuthenticationStatus } from "@bitwarden/common/auth/enums/authentication-status";
 import { ClientType } from "@bitwarden/common/enums";
+import { VaultTimeoutSettingsService } from "@bitwarden/common/key-management/vault-timeout";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
 import { UserId } from "@bitwarden/common/types/guid";
diff --git a/libs/angular/src/auth/guards/lock.guard.ts b/libs/angular/src/auth/guards/lock.guard.ts
index 244e9935281..c7627442c69 100644
--- a/libs/angular/src/auth/guards/lock.guard.ts
+++ b/libs/angular/src/auth/guards/lock.guard.ts
@@ -7,13 +7,13 @@ import {
 } from "@angular/router";
 import { firstValueFrom } from "rxjs";
 
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { AuthService } from "@bitwarden/common/auth/abstractions/auth.service";
 import { DeviceTrustServiceAbstraction } from "@bitwarden/common/auth/abstractions/device-trust.service.abstraction";
 import { UserVerificationService } from "@bitwarden/common/auth/abstractions/user-verification/user-verification.service.abstraction";
 import { AuthenticationStatus } from "@bitwarden/common/auth/enums/authentication-status";
 import { ClientType } from "@bitwarden/common/enums";
+import { VaultTimeoutSettingsService } from "@bitwarden/common/key-management/vault-timeout";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
 import { KeyService } from "@bitwarden/key-management";
diff --git a/libs/angular/src/services/injection-tokens.ts b/libs/angular/src/services/injection-tokens.ts
index 2c740d5bb42..a63d862b0d8 100644
--- a/libs/angular/src/services/injection-tokens.ts
+++ b/libs/angular/src/services/injection-tokens.ts
@@ -4,6 +4,7 @@ import { Observable, Subject } from "rxjs";
 
 import { LogoutReason } from "@bitwarden/auth/common";
 import { ClientType } from "@bitwarden/common/enums";
+import { VaultTimeout } from "@bitwarden/common/key-management/vault-timeout";
 import { RegionConfig } from "@bitwarden/common/platform/abstractions/environment.service";
 import {
   AbstractStorageService,
@@ -12,7 +13,6 @@ import {
 import { Theme } from "@bitwarden/common/platform/enums";
 import { StateFactory } from "@bitwarden/common/platform/factories/state-factory";
 import { Message } from "@bitwarden/common/platform/messaging";
-import { VaultTimeout } from "@bitwarden/common/types/vault-timeout.type";
 import { SafeInjectionToken } from "@bitwarden/ui-common";
 // Re-export the SafeInjectionToken from ui-common
 export { SafeInjectionToken } from "@bitwarden/ui-common";
diff --git a/libs/angular/src/services/jslib-services.module.ts b/libs/angular/src/services/jslib-services.module.ts
index 10f3f32fb85..3fb578ff7a9 100644
--- a/libs/angular/src/services/jslib-services.module.ts
+++ b/libs/angular/src/services/jslib-services.module.ts
@@ -54,8 +54,6 @@ import { AuditService as AuditServiceAbstraction } from "@bitwarden/common/abstr
 import { EventCollectionService as EventCollectionServiceAbstraction } from "@bitwarden/common/abstractions/event/event-collection.service";
 import { EventUploadService as EventUploadServiceAbstraction } from "@bitwarden/common/abstractions/event/event-upload.service";
 import { SearchService as SearchServiceAbstraction } from "@bitwarden/common/abstractions/search.service";
-import { VaultTimeoutSettingsService as VaultTimeoutSettingsServiceAbstraction } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
-import { VaultTimeoutService as VaultTimeoutServiceAbstraction } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
 import { OrganizationApiServiceAbstraction } from "@bitwarden/common/admin-console/abstractions/organization/organization-api.service.abstraction";
 import {
   InternalOrganizationServiceAbstraction,
@@ -157,6 +155,12 @@ import { BulkEncryptService } from "@bitwarden/common/key-management/crypto/abst
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
 import { BulkEncryptServiceImplementation } from "@bitwarden/common/key-management/crypto/services/bulk-encrypt.service.implementation";
 import { MultithreadEncryptServiceImplementation } from "@bitwarden/common/key-management/crypto/services/multithread-encrypt.service.implementation";
+import {
+  DefaultVaultTimeoutService,
+  DefaultVaultTimeoutSettingsService,
+  VaultTimeoutService,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService as AppIdServiceAbstraction } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { BroadcasterService } from "@bitwarden/common/platform/abstractions/broadcaster.service";
 import { ConfigApiServiceAbstraction } from "@bitwarden/common/platform/abstractions/config/config-api.service.abstraction";
@@ -243,8 +247,6 @@ import { AuditService } from "@bitwarden/common/services/audit.service";
 import { EventCollectionService } from "@bitwarden/common/services/event/event-collection.service";
 import { EventUploadService } from "@bitwarden/common/services/event/event-upload.service";
 import { SearchService } from "@bitwarden/common/services/search.service";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/services/vault-timeout/vault-timeout-settings.service";
-import { VaultTimeoutService } from "@bitwarden/common/services/vault-timeout/vault-timeout.service";
 import {
   PasswordStrengthService,
   PasswordStrengthServiceAbstraction,
@@ -463,7 +465,7 @@ const safeProviders: SafeProvider[] = [
       InternalUserDecryptionOptionsServiceAbstraction,
       GlobalStateProvider,
       BillingAccountProfileStateService,
-      VaultTimeoutSettingsServiceAbstraction,
+      VaultTimeoutSettingsService,
       KdfConfigService,
       TaskSchedulerService,
     ],
@@ -697,7 +699,7 @@ const safeProviders: SafeProvider[] = [
       REFRESH_ACCESS_TOKEN_ERROR_CALLBACK,
       LogService,
       LOGOUT_CALLBACK,
-      VaultTimeoutSettingsServiceAbstraction,
+      VaultTimeoutSettingsService,
     ],
   }),
   safeProvider({
@@ -762,8 +764,8 @@ const safeProviders: SafeProvider[] = [
     deps: [MessageListener],
   }),
   safeProvider({
-    provide: VaultTimeoutSettingsServiceAbstraction,
-    useClass: VaultTimeoutSettingsService,
+    provide: VaultTimeoutSettingsService,
+    useClass: DefaultVaultTimeoutSettingsService,
     deps: [
       AccountServiceAbstraction,
       PinServiceAbstraction,
@@ -778,8 +780,8 @@ const safeProviders: SafeProvider[] = [
     ],
   }),
   safeProvider({
-    provide: VaultTimeoutService,
-    useClass: VaultTimeoutService,
+    provide: DefaultVaultTimeoutService,
+    useClass: DefaultVaultTimeoutService,
     deps: [
       AccountServiceAbstraction,
       InternalMasterPasswordServiceAbstraction,
@@ -791,7 +793,7 @@ const safeProviders: SafeProvider[] = [
       SearchServiceAbstraction,
       StateServiceAbstraction,
       AuthServiceAbstraction,
-      VaultTimeoutSettingsServiceAbstraction,
+      VaultTimeoutSettingsService,
       StateEventRunnerService,
       TaskSchedulerService,
       LogService,
@@ -801,8 +803,8 @@ const safeProviders: SafeProvider[] = [
     ],
   }),
   safeProvider({
-    provide: VaultTimeoutServiceAbstraction,
-    useExisting: VaultTimeoutService,
+    provide: VaultTimeoutService,
+    useExisting: DefaultVaultTimeoutService,
   }),
   safeProvider({
     provide: SsoLoginServiceAbstraction,
@@ -1480,7 +1482,7 @@ const safeProviders: SafeProvider[] = [
       TwoFactorServiceAbstraction,
       InternalUserDecryptionOptionsServiceAbstraction,
       BillingAccountProfileStateService,
-      VaultTimeoutSettingsServiceAbstraction,
+      VaultTimeoutSettingsService,
       KdfConfigService,
     ],
   }),
diff --git a/libs/auth/src/angular/vault-timeout-input/vault-timeout-input.component.spec.ts b/libs/auth/src/angular/vault-timeout-input/vault-timeout-input.component.spec.ts
index 6b39c90fc9b..d510d671d69 100644
--- a/libs/auth/src/angular/vault-timeout-input/vault-timeout-input.component.spec.ts
+++ b/libs/auth/src/angular/vault-timeout-input/vault-timeout-input.component.spec.ts
@@ -1,10 +1,12 @@
 import { ComponentFixture, TestBed } from "@angular/core/testing";
 import { BehaviorSubject } from "rxjs";
 
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
+import {
+  VaultTimeoutSettingsService,
+  VaultTimeoutStringType,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
-import { VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 
 import { VaultTimeoutInputComponent } from "./vault-timeout-input.component";
 
diff --git a/libs/auth/src/angular/vault-timeout-input/vault-timeout-input.component.ts b/libs/auth/src/angular/vault-timeout-input/vault-timeout-input.component.ts
index f7199d06499..91af1e8adbe 100644
--- a/libs/auth/src/angular/vault-timeout-input/vault-timeout-input.component.ts
+++ b/libs/auth/src/angular/vault-timeout-input/vault-timeout-input.component.ts
@@ -17,13 +17,16 @@ import {
 import { filter, map, Observable, Subject, takeUntil } from "rxjs";
 
 import { JslibModule } from "@bitwarden/angular/jslib.module";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { PolicyType } from "@bitwarden/common/admin-console/enums";
 import { Policy } from "@bitwarden/common/admin-console/models/domain/policy";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import {
+  VaultTimeout,
+  VaultTimeoutAction,
+  VaultTimeoutOption,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
-import { VaultTimeout, VaultTimeoutOption } from "@bitwarden/common/types/vault-timeout.type";
 import { FormFieldModule, SelectModule } from "@bitwarden/components";
 
 type VaultTimeoutForm = FormGroup<{
diff --git a/libs/auth/src/common/login-strategies/auth-request-login.strategy.spec.ts b/libs/auth/src/common/login-strategies/auth-request-login.strategy.spec.ts
index 7c56e2a58c8..ec0918b4197 100644
--- a/libs/auth/src/common/login-strategies/auth-request-login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/auth-request-login.strategy.spec.ts
@@ -8,8 +8,11 @@ import { TwoFactorService } from "@bitwarden/common/auth/abstractions/two-factor
 import { IdentityTokenResponse } from "@bitwarden/common/auth/models/response/identity-token.response";
 import { FakeMasterPasswordService } from "@bitwarden/common/auth/services/master-password/fake-master-password.service";
 import { BillingAccountProfileStateService } from "@bitwarden/common/billing/abstractions/account/billing-account-profile-state.service";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
@@ -17,7 +20,6 @@ import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/pl
 import { StateService } from "@bitwarden/common/platform/abstractions/state.service";
 import { Utils } from "@bitwarden/common/platform/misc/utils";
 import { SymmetricCryptoKey } from "@bitwarden/common/platform/models/domain/symmetric-crypto-key";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/services/vault-timeout/vault-timeout-settings.service";
 import { FakeAccountService, mockAccountServiceWith } from "@bitwarden/common/spec";
 import { CsprngArray } from "@bitwarden/common/types/csprng";
 import { UserId } from "@bitwarden/common/types/guid";
diff --git a/libs/auth/src/common/login-strategies/login.strategy.spec.ts b/libs/auth/src/common/login-strategies/login.strategy.spec.ts
index fbd6b79f19d..e1558a3de8b 100644
--- a/libs/auth/src/common/login-strategies/login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/login.strategy.spec.ts
@@ -2,7 +2,6 @@ import { mock, MockProxy } from "jest-mock-extended";
 import { BehaviorSubject } from "rxjs";
 
 import { ApiService } from "@bitwarden/common/abstractions/api.service";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { TokenService } from "@bitwarden/common/auth/abstractions/token.service";
@@ -20,8 +19,11 @@ import { MasterPasswordPolicyResponse } from "@bitwarden/common/auth/models/resp
 import { IUserDecryptionOptionsServerResponse } from "@bitwarden/common/auth/models/response/user-decryption-options/user-decryption-options.response";
 import { FakeMasterPasswordService } from "@bitwarden/common/auth/services/master-password/fake-master-password.service";
 import { BillingAccountProfileStateService } from "@bitwarden/common/billing/abstractions/account/billing-account-profile-state.service";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
diff --git a/libs/auth/src/common/login-strategies/login.strategy.ts b/libs/auth/src/common/login-strategies/login.strategy.ts
index b4eef1a0276..a7299c7f0d0 100644
--- a/libs/auth/src/common/login-strategies/login.strategy.ts
+++ b/libs/auth/src/common/login-strategies/login.strategy.ts
@@ -1,7 +1,6 @@
 import { BehaviorSubject, filter, firstValueFrom, timeout, Observable } from "rxjs";
 
 import { ApiService } from "@bitwarden/common/abstractions/api.service";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { InternalMasterPasswordServiceAbstraction } from "@bitwarden/common/auth/abstractions/master-password.service.abstraction";
 import { TokenService } from "@bitwarden/common/auth/abstractions/token.service";
@@ -21,8 +20,11 @@ import { IdentityTokenResponse } from "@bitwarden/common/auth/models/response/id
 import { IdentityTwoFactorResponse } from "@bitwarden/common/auth/models/response/identity-two-factor.response";
 import { BillingAccountProfileStateService } from "@bitwarden/common/billing/abstractions/account/billing-account-profile-state.service";
 import { ClientType } from "@bitwarden/common/enums";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { KeysRequest } from "@bitwarden/common/models/request/keys.request";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
diff --git a/libs/auth/src/common/login-strategies/password-login.strategy.spec.ts b/libs/auth/src/common/login-strategies/password-login.strategy.spec.ts
index 1b0613d4da3..78fad4443c3 100644
--- a/libs/auth/src/common/login-strategies/password-login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/password-login.strategy.spec.ts
@@ -12,8 +12,11 @@ import { IdentityTwoFactorResponse } from "@bitwarden/common/auth/models/respons
 import { MasterPasswordPolicyResponse } from "@bitwarden/common/auth/models/response/master-password-policy.response";
 import { FakeMasterPasswordService } from "@bitwarden/common/auth/services/master-password/fake-master-password.service";
 import { BillingAccountProfileStateService } from "@bitwarden/common/billing/abstractions/account/billing-account-profile-state.service";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
@@ -22,7 +25,6 @@ import { StateService } from "@bitwarden/common/platform/abstractions/state.serv
 import { HashPurpose } from "@bitwarden/common/platform/enums";
 import { Utils } from "@bitwarden/common/platform/misc/utils";
 import { SymmetricCryptoKey } from "@bitwarden/common/platform/models/domain/symmetric-crypto-key";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/services/vault-timeout/vault-timeout-settings.service";
 import { FakeAccountService, mockAccountServiceWith } from "@bitwarden/common/spec";
 import {
   PasswordStrengthServiceAbstraction,
diff --git a/libs/auth/src/common/login-strategies/sso-login.strategy.spec.ts b/libs/auth/src/common/login-strategies/sso-login.strategy.spec.ts
index 96b08e98e37..5c508dd0c56 100644
--- a/libs/auth/src/common/login-strategies/sso-login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/sso-login.strategy.spec.ts
@@ -12,8 +12,11 @@ import { IdentityTokenResponse } from "@bitwarden/common/auth/models/response/id
 import { IUserDecryptionOptionsServerResponse } from "@bitwarden/common/auth/models/response/user-decryption-options/user-decryption-options.response";
 import { FakeMasterPasswordService } from "@bitwarden/common/auth/services/master-password/fake-master-password.service";
 import { BillingAccountProfileStateService } from "@bitwarden/common/billing/abstractions/account/billing-account-profile-state.service";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { ErrorResponse } from "@bitwarden/common/models/response/error.response";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
@@ -23,7 +26,6 @@ import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/pl
 import { StateService } from "@bitwarden/common/platform/abstractions/state.service";
 import { Utils } from "@bitwarden/common/platform/misc/utils";
 import { SymmetricCryptoKey } from "@bitwarden/common/platform/models/domain/symmetric-crypto-key";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/services/vault-timeout/vault-timeout-settings.service";
 import { FakeAccountService, mockAccountServiceWith } from "@bitwarden/common/spec";
 import { CsprngArray } from "@bitwarden/common/types/csprng";
 import { UserId } from "@bitwarden/common/types/guid";
diff --git a/libs/auth/src/common/login-strategies/user-api-login.strategy.spec.ts b/libs/auth/src/common/login-strategies/user-api-login.strategy.spec.ts
index dd3e7f0134d..de411c06b6b 100644
--- a/libs/auth/src/common/login-strategies/user-api-login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/user-api-login.strategy.spec.ts
@@ -7,8 +7,11 @@ import { TokenService } from "@bitwarden/common/auth/abstractions/token.service"
 import { TwoFactorService } from "@bitwarden/common/auth/abstractions/two-factor.service";
 import { FakeMasterPasswordService } from "@bitwarden/common/auth/services/master-password/fake-master-password.service";
 import { BillingAccountProfileStateService } from "@bitwarden/common/billing/abstractions/account/billing-account-profile-state.service";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
 import {
   Environment,
@@ -20,7 +23,6 @@ import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/pl
 import { StateService } from "@bitwarden/common/platform/abstractions/state.service";
 import { Utils } from "@bitwarden/common/platform/misc/utils";
 import { SymmetricCryptoKey } from "@bitwarden/common/platform/models/domain/symmetric-crypto-key";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/services/vault-timeout/vault-timeout-settings.service";
 import { FakeAccountService, mockAccountServiceWith } from "@bitwarden/common/spec";
 import { CsprngArray } from "@bitwarden/common/types/csprng";
 import { UserId } from "@bitwarden/common/types/guid";
diff --git a/libs/auth/src/common/login-strategies/user-api-login.strategy.ts b/libs/auth/src/common/login-strategies/user-api-login.strategy.ts
index ef13e631300..4f6352b5d74 100644
--- a/libs/auth/src/common/login-strategies/user-api-login.strategy.ts
+++ b/libs/auth/src/common/login-strategies/user-api-login.strategy.ts
@@ -6,7 +6,7 @@ import { Jsonify } from "type-fest";
 import { KeyConnectorService } from "@bitwarden/common/auth/abstractions/key-connector.service";
 import { UserApiTokenRequest } from "@bitwarden/common/auth/models/request/identity-token/user-api-token.request";
 import { IdentityTokenResponse } from "@bitwarden/common/auth/models/response/identity-token.response";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
+import { VaultTimeoutAction } from "@bitwarden/common/key-management/vault-timeout";
 import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { UserId } from "@bitwarden/common/types/guid";
 
diff --git a/libs/auth/src/common/login-strategies/webauthn-login.strategy.spec.ts b/libs/auth/src/common/login-strategies/webauthn-login.strategy.spec.ts
index fd8817a8c21..f4282a4b4df 100644
--- a/libs/auth/src/common/login-strategies/webauthn-login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/webauthn-login.strategy.spec.ts
@@ -10,8 +10,11 @@ import { IUserDecryptionOptionsServerResponse } from "@bitwarden/common/auth/mod
 import { FakeMasterPasswordService } from "@bitwarden/common/auth/services/master-password/fake-master-password.service";
 import { WebAuthnLoginAssertionResponseRequest } from "@bitwarden/common/auth/services/webauthn-login/request/webauthn-login-assertion-response.request";
 import { BillingAccountProfileStateService } from "@bitwarden/common/billing/abstractions/account/billing-account-profile-state.service";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
@@ -19,7 +22,6 @@ import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/pl
 import { StateService } from "@bitwarden/common/platform/abstractions/state.service";
 import { Utils } from "@bitwarden/common/platform/misc/utils";
 import { SymmetricCryptoKey } from "@bitwarden/common/platform/models/domain/symmetric-crypto-key";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/services/vault-timeout/vault-timeout-settings.service";
 import { FakeAccountService, mockAccountServiceWith } from "@bitwarden/common/spec";
 import { UserId } from "@bitwarden/common/types/guid";
 import { PrfKey, UserKey } from "@bitwarden/common/types/key";
diff --git a/libs/auth/src/common/services/accounts/lock.service.ts b/libs/auth/src/common/services/accounts/lock.service.ts
index 334a795f7bc..1f42873408d 100644
--- a/libs/auth/src/common/services/accounts/lock.service.ts
+++ b/libs/auth/src/common/services/accounts/lock.service.ts
@@ -1,7 +1,7 @@
 import { combineLatest, firstValueFrom, map } from "rxjs";
 
-import { VaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
+import { VaultTimeoutService } from "@bitwarden/common/key-management/vault-timeout";
 import { UserId } from "@bitwarden/common/types/guid";
 
 export abstract class LockService {
diff --git a/libs/auth/src/common/services/accounts/lock.services.spec.ts b/libs/auth/src/common/services/accounts/lock.services.spec.ts
index eecc3dd787f..27310298028 100644
--- a/libs/auth/src/common/services/accounts/lock.services.spec.ts
+++ b/libs/auth/src/common/services/accounts/lock.services.spec.ts
@@ -1,6 +1,6 @@
 import { mock } from "jest-mock-extended";
 
-import { VaultTimeoutService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout.service";
+import { VaultTimeoutService } from "@bitwarden/common/key-management/vault-timeout";
 import { mockAccountServiceWith } from "@bitwarden/common/spec";
 import { UserId } from "@bitwarden/common/types/guid";
 
diff --git a/libs/auth/src/common/services/login-strategies/login-strategy.service.spec.ts b/libs/auth/src/common/services/login-strategies/login-strategy.service.spec.ts
index 117e5c1f864..d8d16fa3701 100644
--- a/libs/auth/src/common/services/login-strategies/login-strategy.service.spec.ts
+++ b/libs/auth/src/common/services/login-strategies/login-strategy.service.spec.ts
@@ -2,7 +2,6 @@ import { MockProxy, mock } from "jest-mock-extended";
 import { BehaviorSubject } from "rxjs";
 
 import { ApiService } from "@bitwarden/common/abstractions/api.service";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { DeviceTrustServiceAbstraction } from "@bitwarden/common/auth/abstractions/device-trust.service.abstraction";
 import { KeyConnectorService } from "@bitwarden/common/auth/abstractions/key-connector.service";
@@ -16,8 +15,11 @@ import { IdentityTwoFactorResponse } from "@bitwarden/common/auth/models/respons
 import { PreloginResponse } from "@bitwarden/common/auth/models/response/prelogin.response";
 import { FakeMasterPasswordService } from "@bitwarden/common/auth/services/master-password/fake-master-password.service";
 import { BillingAccountProfileStateService } from "@bitwarden/common/billing/abstractions/account/billing-account-profile-state.service";
-import { VaultTimeoutAction } from "@bitwarden/common/enums/vault-timeout-action.enum";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutSettingsService,
+} from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
 import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
diff --git a/libs/auth/src/common/services/login-strategies/login-strategy.service.ts b/libs/auth/src/common/services/login-strategies/login-strategy.service.ts
index 849b8e5eba1..20410c76f1f 100644
--- a/libs/auth/src/common/services/login-strategies/login-strategy.service.ts
+++ b/libs/auth/src/common/services/login-strategies/login-strategy.service.ts
@@ -10,7 +10,6 @@ import {
 } from "rxjs";
 
 import { ApiService } from "@bitwarden/common/abstractions/api.service";
-import { VaultTimeoutSettingsService } from "@bitwarden/common/abstractions/vault-timeout/vault-timeout-settings.service";
 import { PolicyService } from "@bitwarden/common/admin-console/abstractions/policy/policy.service.abstraction";
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { DeviceTrustServiceAbstraction } from "@bitwarden/common/auth/abstractions/device-trust.service.abstraction";
@@ -23,6 +22,7 @@ import { AuthResult } from "@bitwarden/common/auth/models/domain/auth-result";
 import { TokenTwoFactorRequest } from "@bitwarden/common/auth/models/request/identity-token/token-two-factor.request";
 import { BillingAccountProfileStateService } from "@bitwarden/common/billing/abstractions/account/billing-account-profile-state.service";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import { VaultTimeoutSettingsService } from "@bitwarden/common/key-management/vault-timeout";
 import { PreloginRequest } from "@bitwarden/common/models/request/prelogin.request";
 import { ErrorResponse } from "@bitwarden/common/models/response/error.response";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
diff --git a/libs/common/src/auth/abstractions/token.service.ts b/libs/common/src/auth/abstractions/token.service.ts
index 4695e45e658..0c8db6fdcd1 100644
--- a/libs/common/src/auth/abstractions/token.service.ts
+++ b/libs/common/src/auth/abstractions/token.service.ts
@@ -2,9 +2,8 @@
 // @ts-strict-ignore
 import { Observable } from "rxjs";
 
-import { VaultTimeoutAction } from "../../enums/vault-timeout-action.enum";
+import { VaultTimeout, VaultTimeoutAction } from "../../key-management/vault-timeout";
 import { UserId } from "../../types/guid";
-import { VaultTimeout } from "../../types/vault-timeout.type";
 import { SetTokensResult } from "../models/domain/set-tokens-result";
 import { DecodedAccessToken } from "../services/token.service";
 
diff --git a/libs/common/src/auth/services/token.service.spec.ts b/libs/common/src/auth/services/token.service.spec.ts
index 339f570a003..449f5d17ad1 100644
--- a/libs/common/src/auth/services/token.service.spec.ts
+++ b/libs/common/src/auth/services/token.service.spec.ts
@@ -1,11 +1,17 @@
+// FIXME: Update this file to be type safe and remove this and next line
+// @ts-strict-ignore
 import { MockProxy, mock } from "jest-mock-extended";
 import { firstValueFrom } from "rxjs";
 
 import { LogoutReason } from "@bitwarden/auth/common";
 
 import { FakeSingleUserStateProvider, FakeGlobalStateProvider } from "../../../spec";
-import { VaultTimeoutAction } from "../../enums/vault-timeout-action.enum";
 import { EncryptService } from "../../key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeout,
+  VaultTimeoutAction,
+  VaultTimeoutStringType,
+} from "../../key-management/vault-timeout";
 import { KeyGenerationService } from "../../platform/abstractions/key-generation.service";
 import { LogService } from "../../platform/abstractions/log.service";
 import { AbstractStorageService } from "../../platform/abstractions/storage.service";
@@ -14,7 +20,6 @@ import { StorageOptions } from "../../platform/models/domain/storage-options";
 import { SymmetricCryptoKey } from "../../platform/models/domain/symmetric-crypto-key";
 import { CsprngArray } from "../../types/csprng";
 import { UserId } from "../../types/guid";
-import { VaultTimeout, VaultTimeoutStringType } from "../../types/vault-timeout.type";
 import { SetTokensResult } from "../models/domain/set-tokens-result";
 
 import { ACCOUNT_ACTIVE_ACCOUNT_ID } from "./account.service";
diff --git a/libs/common/src/auth/services/token.service.ts b/libs/common/src/auth/services/token.service.ts
index 72e082f2002..7b87e55cfc7 100644
--- a/libs/common/src/auth/services/token.service.ts
+++ b/libs/common/src/auth/services/token.service.ts
@@ -5,8 +5,12 @@ import { Opaque } from "type-fest";
 
 import { LogoutReason, decodeJwtTokenToJson } from "@bitwarden/auth/common";
 
-import { VaultTimeoutAction } from "../../enums/vault-timeout-action.enum";
 import { EncryptService } from "../../key-management/crypto/abstractions/encrypt.service";
+import {
+  VaultTimeout,
+  VaultTimeoutAction,
+  VaultTimeoutStringType,
+} from "../../key-management/vault-timeout";
 import { KeyGenerationService } from "../../platform/abstractions/key-generation.service";
 import { LogService } from "../../platform/abstractions/log.service";
 import { AbstractStorageService } from "../../platform/abstractions/storage.service";
@@ -22,7 +26,6 @@ import {
   UserKeyDefinition,
 } from "../../platform/state";
 import { UserId } from "../../types/guid";
-import { VaultTimeout, VaultTimeoutStringType } from "../../types/vault-timeout.type";
 import { TokenService as TokenServiceAbstraction } from "../abstractions/token.service";
 import { SetTokensResult } from "../models/domain/set-tokens-result";
 
diff --git a/libs/common/src/auth/services/user-verification/user-verification.service.spec.ts b/libs/common/src/auth/services/user-verification/user-verification.service.spec.ts
index 677b6ff4499..8660b9428a1 100644
--- a/libs/common/src/auth/services/user-verification/user-verification.service.spec.ts
+++ b/libs/common/src/auth/services/user-verification/user-verification.service.spec.ts
@@ -16,7 +16,7 @@ import {
 } from "@bitwarden/key-management";
 
 import { FakeAccountService, mockAccountServiceWith } from "../../../../spec";
-import { VaultTimeoutSettingsService } from "../../../abstractions/vault-timeout/vault-timeout-settings.service";
+import { VaultTimeoutSettingsService } from "../../../key-management/vault-timeout";
 import { I18nService } from "../../../platform/abstractions/i18n.service";
 import { HashPurpose } from "../../../platform/enums";
 import { Utils } from "../../../platform/misc/utils";
diff --git a/libs/common/src/key-management/services/default-process-reload.service.ts b/libs/common/src/key-management/services/default-process-reload.service.ts
index 09fe4e7e10c..860dac54855 100644
--- a/libs/common/src/key-management/services/default-process-reload.service.ts
+++ b/libs/common/src/key-management/services/default-process-reload.service.ts
@@ -5,11 +5,13 @@ import { firstValueFrom, map, timeout } from "rxjs";
 import { PinServiceAbstraction } from "@bitwarden/auth/common";
 import { BiometricStateService } from "@bitwarden/key-management";
 
-import { VaultTimeoutSettingsService } from "../../abstractions/vault-timeout/vault-timeout-settings.service";
 import { AccountService } from "../../auth/abstractions/account.service";
 import { AuthService } from "../../auth/abstractions/auth.service";
 import { AuthenticationStatus } from "../../auth/enums/authentication-status";
-import { VaultTimeoutAction } from "../../enums/vault-timeout-action.enum";
+import {
+  VaultTimeoutAction,
+  VaultTimeoutSettingsService,
+} from "../../key-management/vault-timeout";
 import { LogService } from "../../platform/abstractions/log.service";
 import { MessagingService } from "../../platform/abstractions/messaging.service";
 import { UserId } from "../../types/guid";
diff --git a/libs/common/src/abstractions/vault-timeout/vault-timeout-settings.service.ts b/libs/common/src/key-management/vault-timeout/abstractions/vault-timeout-settings.service.ts
similarity index 92%
rename from libs/common/src/abstractions/vault-timeout/vault-timeout-settings.service.ts
rename to libs/common/src/key-management/vault-timeout/abstractions/vault-timeout-settings.service.ts
index e1d91462876..7094a2c2f83 100644
--- a/libs/common/src/abstractions/vault-timeout/vault-timeout-settings.service.ts
+++ b/libs/common/src/key-management/vault-timeout/abstractions/vault-timeout-settings.service.ts
@@ -2,9 +2,9 @@
 // @ts-strict-ignore
 import { Observable } from "rxjs";
 
-import { VaultTimeoutAction } from "../../enums/vault-timeout-action.enum";
-import { UserId } from "../../types/guid";
-import { VaultTimeout } from "../../types/vault-timeout.type";
+import { UserId } from "../../../types/guid";
+import { VaultTimeoutAction } from "../enums/vault-timeout-action.enum";
+import { VaultTimeout } from "../types/vault-timeout.type";
 
 export abstract class VaultTimeoutSettingsService {
   /**
diff --git a/libs/common/src/abstractions/vault-timeout/vault-timeout.service.ts b/libs/common/src/key-management/vault-timeout/abstractions/vault-timeout.service.ts
similarity index 100%
rename from libs/common/src/abstractions/vault-timeout/vault-timeout.service.ts
rename to libs/common/src/key-management/vault-timeout/abstractions/vault-timeout.service.ts
diff --git a/libs/common/src/enums/vault-timeout-action.enum.ts b/libs/common/src/key-management/vault-timeout/enums/vault-timeout-action.enum.ts
similarity index 100%
rename from libs/common/src/enums/vault-timeout-action.enum.ts
rename to libs/common/src/key-management/vault-timeout/enums/vault-timeout-action.enum.ts
diff --git a/libs/common/src/key-management/vault-timeout/index.ts b/libs/common/src/key-management/vault-timeout/index.ts
new file mode 100644
index 00000000000..7741752a351
--- /dev/null
+++ b/libs/common/src/key-management/vault-timeout/index.ts
@@ -0,0 +1,10 @@
+export { VaultTimeoutSettingsService } from "./abstractions/vault-timeout-settings.service";
+export { VaultTimeoutSettingsService as DefaultVaultTimeoutSettingsService } from "./services/vault-timeout-settings.service";
+export { VaultTimeoutService } from "./abstractions/vault-timeout.service";
+export { VaultTimeoutService as DefaultVaultTimeoutService } from "./services/vault-timeout.service";
+export { VaultTimeoutAction } from "./enums/vault-timeout-action.enum";
+export {
+  VaultTimeout,
+  VaultTimeoutOption,
+  VaultTimeoutStringType,
+} from "./types/vault-timeout.type";
diff --git a/libs/common/src/services/vault-timeout/vault-timeout-settings.service.spec.ts b/libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.service.spec.ts
similarity index 94%
rename from libs/common/src/services/vault-timeout/vault-timeout-settings.service.spec.ts
rename to libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.service.spec.ts
index 78c0bc43331..454a748344f 100644
--- a/libs/common/src/services/vault-timeout/vault-timeout-settings.service.spec.ts
+++ b/libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.service.spec.ts
@@ -1,3 +1,5 @@
+// FIXME: Update this file to be type safe and remove this and next line
+// @ts-strict-ignore
 import { mock, MockProxy } from "jest-mock-extended";
 import { BehaviorSubject, firstValueFrom, map, of } from "rxjs";
 
@@ -8,22 +10,19 @@ import {
 } from "@bitwarden/auth/common";
 import { BiometricStateService, KeyService } from "@bitwarden/key-management";
 
-import { FakeAccountService, mockAccountServiceWith, FakeStateProvider } from "../../../spec";
-import { VaultTimeoutSettingsService as VaultTimeoutSettingsServiceAbstraction } from "../../abstractions/vault-timeout/vault-timeout-settings.service";
-import { PolicyService } from "../../admin-console/abstractions/policy/policy.service.abstraction";
-import { Policy } from "../../admin-console/models/domain/policy";
-import { TokenService } from "../../auth/abstractions/token.service";
-import { VaultTimeoutAction } from "../../enums/vault-timeout-action.enum";
-import { LogService } from "../../platform/abstractions/log.service";
-import { Utils } from "../../platform/misc/utils";
-import {
-  VAULT_TIMEOUT,
-  VAULT_TIMEOUT_ACTION,
-} from "../../services/vault-timeout/vault-timeout-settings.state";
-import { UserId } from "../../types/guid";
-import { VaultTimeout, VaultTimeoutStringType } from "../../types/vault-timeout.type";
+import { FakeAccountService, FakeStateProvider, mockAccountServiceWith } from "../../../../spec";
+import { PolicyService } from "../../../admin-console/abstractions/policy/policy.service.abstraction";
+import { Policy } from "../../../admin-console/models/domain/policy";
+import { TokenService } from "../../../auth/services/token.service";
+import { LogService } from "../../../platform/abstractions/log.service";
+import { Utils } from "../../../platform/misc/utils";
+import { UserId } from "../../../types/guid";
+import { VaultTimeoutSettingsService as VaultTimeoutSettingsServiceAbstraction } from "../abstractions/vault-timeout-settings.service";
+import { VaultTimeoutAction } from "../enums/vault-timeout-action.enum";
+import { VaultTimeout, VaultTimeoutStringType } from "../types/vault-timeout.type";
 
 import { VaultTimeoutSettingsService } from "./vault-timeout-settings.service";
+import { VAULT_TIMEOUT, VAULT_TIMEOUT_ACTION } from "./vault-timeout-settings.state";
 
 describe("VaultTimeoutSettingsService", () => {
   let accountService: FakeAccountService;
diff --git a/libs/common/src/services/vault-timeout/vault-timeout-settings.service.ts b/libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.service.ts
similarity index 93%
rename from libs/common/src/services/vault-timeout/vault-timeout-settings.service.ts
rename to libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.service.ts
index 813f187043b..f29687bd9cf 100644
--- a/libs/common/src/services/vault-timeout/vault-timeout-settings.service.ts
+++ b/libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.service.ts
@@ -21,17 +21,17 @@ import {
 } from "@bitwarden/auth/common";
 import { BiometricStateService, KeyService } from "@bitwarden/key-management";
 
-import { VaultTimeoutSettingsService as VaultTimeoutSettingsServiceAbstraction } from "../../abstractions/vault-timeout/vault-timeout-settings.service";
-import { PolicyService } from "../../admin-console/abstractions/policy/policy.service.abstraction";
-import { PolicyType } from "../../admin-console/enums";
-import { Policy } from "../../admin-console/models/domain/policy";
-import { AccountService } from "../../auth/abstractions/account.service";
-import { TokenService } from "../../auth/abstractions/token.service";
-import { VaultTimeoutAction } from "../../enums/vault-timeout-action.enum";
-import { LogService } from "../../platform/abstractions/log.service";
-import { StateProvider } from "../../platform/state";
-import { UserId } from "../../types/guid";
-import { VaultTimeout, VaultTimeoutStringType } from "../../types/vault-timeout.type";
+import { PolicyService } from "../../../admin-console/abstractions/policy/policy.service.abstraction";
+import { PolicyType } from "../../../admin-console/enums";
+import { Policy } from "../../../admin-console/models/domain/policy";
+import { AccountService } from "../../../auth/abstractions/account.service";
+import { TokenService } from "../../../auth/abstractions/token.service";
+import { LogService } from "../../../platform/abstractions/log.service";
+import { StateProvider } from "../../../platform/state";
+import { UserId } from "../../../types/guid";
+import { VaultTimeoutSettingsService as VaultTimeoutSettingsServiceAbstraction } from "../abstractions/vault-timeout-settings.service";
+import { VaultTimeoutAction } from "../enums/vault-timeout-action.enum";
+import { VaultTimeout, VaultTimeoutStringType } from "../types/vault-timeout.type";
 
 import { VAULT_TIMEOUT, VAULT_TIMEOUT_ACTION } from "./vault-timeout-settings.state";
 
diff --git a/libs/common/src/services/vault-timeout/vault-timeout-settings.state.spec.ts b/libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.state.spec.ts
similarity index 84%
rename from libs/common/src/services/vault-timeout/vault-timeout-settings.state.spec.ts
rename to libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.state.spec.ts
index 42a82e67ee3..fa8df244793 100644
--- a/libs/common/src/services/vault-timeout/vault-timeout-settings.state.spec.ts
+++ b/libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.state.spec.ts
@@ -1,6 +1,6 @@
-import { VaultTimeoutAction } from "../../enums/vault-timeout-action.enum";
-import { UserKeyDefinition } from "../../platform/state";
-import { VaultTimeout } from "../../types/vault-timeout.type";
+import { UserKeyDefinition } from "../../../platform/state";
+import { VaultTimeoutAction } from "../enums/vault-timeout-action.enum";
+import { VaultTimeout } from "../types/vault-timeout.type";
 
 import { VAULT_TIMEOUT, VAULT_TIMEOUT_ACTION } from "./vault-timeout-settings.state";
 
diff --git a/libs/common/src/services/vault-timeout/vault-timeout-settings.state.ts b/libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.state.ts
similarity index 83%
rename from libs/common/src/services/vault-timeout/vault-timeout-settings.state.ts
rename to libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.state.ts
index 46097d6a4cc..4d8a0de654a 100644
--- a/libs/common/src/services/vault-timeout/vault-timeout-settings.state.ts
+++ b/libs/common/src/key-management/vault-timeout/services/vault-timeout-settings.state.ts
@@ -1,6 +1,6 @@
-import { VaultTimeoutAction } from "../../enums/vault-timeout-action.enum";
-import { UserKeyDefinition, VAULT_TIMEOUT_SETTINGS_DISK_LOCAL } from "../../platform/state";
-import { VaultTimeout } from "../../types/vault-timeout.type";
+import { UserKeyDefinition, VAULT_TIMEOUT_SETTINGS_DISK_LOCAL } from "../../../platform/state";
+import { VaultTimeoutAction } from "../enums/vault-timeout-action.enum";
+import { VaultTimeout } from "../types/vault-timeout.type";
 
 /**
  * Settings use disk storage and local storage on web so settings can persist after logout
diff --git a/libs/common/src/services/vault-timeout/vault-timeout.service.spec.ts b/libs/common/src/key-management/vault-timeout/services/vault-timeout.service.spec.ts
similarity index 91%
rename from libs/common/src/services/vault-timeout/vault-timeout.service.spec.ts
rename to libs/common/src/key-management/vault-timeout/services/vault-timeout.service.spec.ts
index 986bbbf95a4..0be7daa3f6f 100644
--- a/libs/common/src/services/vault-timeout/vault-timeout.service.spec.ts
+++ b/libs/common/src/key-management/vault-timeout/services/vault-timeout.service.spec.ts
@@ -1,3 +1,5 @@
+// FIXME: Update this file to be type safe and remove this and next line
+// @ts-strict-ignore
 import { MockProxy, any, mock } from "jest-mock-extended";
 import { BehaviorSubject, from, of } from "rxjs";
 
@@ -5,26 +7,26 @@ import { CollectionService } from "@bitwarden/admin-console/common";
 import { LogoutReason } from "@bitwarden/auth/common";
 import { BiometricsService } from "@bitwarden/key-management";
 
-import { FakeAccountService, mockAccountServiceWith } from "../../../spec/fake-account-service";
-import { SearchService } from "../../abstractions/search.service";
-import { VaultTimeoutSettingsService } from "../../abstractions/vault-timeout/vault-timeout-settings.service";
-import { AccountInfo } from "../../auth/abstractions/account.service";
-import { AuthService } from "../../auth/abstractions/auth.service";
-import { AuthenticationStatus } from "../../auth/enums/authentication-status";
-import { FakeMasterPasswordService } from "../../auth/services/master-password/fake-master-password.service";
-import { VaultTimeoutAction } from "../../enums/vault-timeout-action.enum";
-import { LogService } from "../../platform/abstractions/log.service";
-import { MessagingService } from "../../platform/abstractions/messaging.service";
-import { PlatformUtilsService } from "../../platform/abstractions/platform-utils.service";
-import { StateService } from "../../platform/abstractions/state.service";
-import { Utils } from "../../platform/misc/utils";
-import { TaskSchedulerService } from "../../platform/scheduling";
-import { StateEventRunnerService } from "../../platform/state";
-import { UserId } from "../../types/guid";
-import { VaultTimeout, VaultTimeoutStringType } from "../../types/vault-timeout.type";
-import { CipherService } from "../../vault/abstractions/cipher.service";
-import { FolderService } from "../../vault/abstractions/folder/folder.service.abstraction";
+import { FakeAccountService, mockAccountServiceWith } from "../../../../spec";
+import { SearchService } from "../../../abstractions/search.service";
+import { AccountInfo } from "../../../auth/abstractions/account.service";
+import { AuthService } from "../../../auth/abstractions/auth.service";
+import { AuthenticationStatus } from "../../../auth/enums/authentication-status";
+import { FakeMasterPasswordService } from "../../../auth/services/master-password/fake-master-password.service";
+import { LogService } from "../../../platform/abstractions/log.service";
+import { MessagingService } from "../../../platform/abstractions/messaging.service";
+import { PlatformUtilsService } from "../../../platform/abstractions/platform-utils.service";
+import { StateService } from "../../../platform/abstractions/state.service";
+import { Utils } from "../../../platform/misc/utils";
+import { TaskSchedulerService } from "../../../platform/scheduling";
+import { StateEventRunnerService } from "../../../platform/state";
+import { UserId } from "../../../types/guid";
+import { CipherService } from "../../../vault/abstractions/cipher.service";
+import { FolderService } from "../../../vault/abstractions/folder/folder.service.abstraction";
+import { VaultTimeoutAction } from "../enums/vault-timeout-action.enum";
+import { VaultTimeout, VaultTimeoutStringType } from "../types/vault-timeout.type";
 
+import { VaultTimeoutSettingsService } from "./vault-timeout-settings.service";
 import { VaultTimeoutService } from "./vault-timeout.service";
 
 describe("VaultTimeoutService", () => {
diff --git a/libs/common/src/services/vault-timeout/vault-timeout.service.ts b/libs/common/src/key-management/vault-timeout/services/vault-timeout.service.ts
similarity index 85%
rename from libs/common/src/services/vault-timeout/vault-timeout.service.ts
rename to libs/common/src/key-management/vault-timeout/services/vault-timeout.service.ts
index 08dc02bb1ab..efe8f081b6f 100644
--- a/libs/common/src/services/vault-timeout/vault-timeout.service.ts
+++ b/libs/common/src/key-management/vault-timeout/services/vault-timeout.service.ts
@@ -6,23 +6,23 @@ import { CollectionService } from "@bitwarden/admin-console/common";
 import { LogoutReason } from "@bitwarden/auth/common";
 import { BiometricsService } from "@bitwarden/key-management";
 
-import { SearchService } from "../../abstractions/search.service";
-import { VaultTimeoutSettingsService } from "../../abstractions/vault-timeout/vault-timeout-settings.service";
-import { VaultTimeoutService as VaultTimeoutServiceAbstraction } from "../../abstractions/vault-timeout/vault-timeout.service";
-import { AccountService } from "../../auth/abstractions/account.service";
-import { AuthService } from "../../auth/abstractions/auth.service";
-import { InternalMasterPasswordServiceAbstraction } from "../../auth/abstractions/master-password.service.abstraction";
-import { AuthenticationStatus } from "../../auth/enums/authentication-status";
-import { VaultTimeoutAction } from "../../enums/vault-timeout-action.enum";
-import { LogService } from "../../platform/abstractions/log.service";
-import { MessagingService } from "../../platform/abstractions/messaging.service";
-import { PlatformUtilsService } from "../../platform/abstractions/platform-utils.service";
-import { StateService } from "../../platform/abstractions/state.service";
-import { TaskSchedulerService, ScheduledTaskNames } from "../../platform/scheduling";
-import { StateEventRunnerService } from "../../platform/state";
-import { UserId } from "../../types/guid";
-import { CipherService } from "../../vault/abstractions/cipher.service";
-import { FolderService } from "../../vault/abstractions/folder/folder.service.abstraction";
+import { SearchService } from "../../../abstractions/search.service";
+import { AccountService } from "../../../auth/abstractions/account.service";
+import { AuthService } from "../../../auth/abstractions/auth.service";
+import { InternalMasterPasswordServiceAbstraction } from "../../../auth/abstractions/master-password.service.abstraction";
+import { AuthenticationStatus } from "../../../auth/enums/authentication-status";
+import { LogService } from "../../../platform/abstractions/log.service";
+import { MessagingService } from "../../../platform/abstractions/messaging.service";
+import { PlatformUtilsService } from "../../../platform/abstractions/platform-utils.service";
+import { StateService } from "../../../platform/abstractions/state.service";
+import { TaskSchedulerService, ScheduledTaskNames } from "../../../platform/scheduling";
+import { StateEventRunnerService } from "../../../platform/state";
+import { UserId } from "../../../types/guid";
+import { CipherService } from "../../../vault/abstractions/cipher.service";
+import { FolderService } from "../../../vault/abstractions/folder/folder.service.abstraction";
+import { VaultTimeoutSettingsService } from "../abstractions/vault-timeout-settings.service";
+import { VaultTimeoutService as VaultTimeoutServiceAbstraction } from "../abstractions/vault-timeout.service";
+import { VaultTimeoutAction } from "../enums/vault-timeout-action.enum";
 
 export class VaultTimeoutService implements VaultTimeoutServiceAbstraction {
   private inited = false;
diff --git a/libs/common/src/types/vault-timeout.type.ts b/libs/common/src/key-management/vault-timeout/types/vault-timeout.type.ts
similarity index 100%
rename from libs/common/src/types/vault-timeout.type.ts
rename to libs/common/src/key-management/vault-timeout/types/vault-timeout.type.ts
diff --git a/libs/common/src/services/api.service.ts b/libs/common/src/services/api.service.ts
index 6d90f2ac253..7a43daccf6e 100644
--- a/libs/common/src/services/api.service.ts
+++ b/libs/common/src/services/api.service.ts
@@ -11,7 +11,6 @@ import {
 import { LogoutReason } from "@bitwarden/auth/common";
 
 import { ApiService as ApiServiceAbstraction } from "../abstractions/api.service";
-import { VaultTimeoutSettingsService } from "../abstractions/vault-timeout/vault-timeout-settings.service";
 import { OrganizationConnectionType } from "../admin-console/enums";
 import { OrganizationSponsorshipCreateRequest } from "../admin-console/models/request/organization/organization-sponsorship-create.request";
 import { OrganizationSponsorshipRedeemRequest } from "../admin-console/models/request/organization/organization-sponsorship-redeem.request";
@@ -105,7 +104,8 @@ import { PlanResponse } from "../billing/models/response/plan.response";
 import { SubscriptionResponse } from "../billing/models/response/subscription.response";
 import { TaxInfoResponse } from "../billing/models/response/tax-info.response";
 import { DeviceType } from "../enums";
-import { VaultTimeoutAction } from "../enums/vault-timeout-action.enum";
+import { VaultTimeoutSettingsService } from "../key-management/vault-timeout";
+import { VaultTimeoutAction } from "../key-management/vault-timeout/enums/vault-timeout-action.enum";
 import { CollectionBulkDeleteRequest } from "../models/request/collection-bulk-delete.request";
 import { DeleteRecoverRequest } from "../models/request/delete-recover.request";
 import { EventRequest } from "../models/request/event.request";
diff --git a/libs/key-management/src/key.service.spec.ts b/libs/key-management/src/key.service.spec.ts
index 0b56273d3bd..ca14f31a229 100644
--- a/libs/key-management/src/key.service.spec.ts
+++ b/libs/key-management/src/key.service.spec.ts
@@ -5,6 +5,8 @@ import { PinServiceAbstraction } from "@bitwarden/auth/common";
 import { EncryptedOrganizationKeyData } from "@bitwarden/common/admin-console/models/data/encrypted-organization-key.data";
 import { FakeMasterPasswordService } from "@bitwarden/common/auth/services/master-password/fake-master-password.service";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import { VaultTimeoutStringType } from "@bitwarden/common/key-management/vault-timeout";
+import { VAULT_TIMEOUT } from "@bitwarden/common/key-management/vault-timeout/services/vault-timeout-settings.state";
 import { CryptoFunctionService } from "@bitwarden/common/platform/abstractions/crypto-function.service";
 import { KeyGenerationService } from "@bitwarden/common/platform/abstractions/key-generation.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
@@ -22,7 +24,6 @@ import {
   USER_KEY,
 } from "@bitwarden/common/platform/services/key-state/user-key.state";
 import { UserKeyDefinition } from "@bitwarden/common/platform/state";
-import { VAULT_TIMEOUT } from "@bitwarden/common/services/vault-timeout/vault-timeout-settings.state";
 import {
   awaitAsync,
   makeEncString,
@@ -37,7 +38,6 @@ import {
 import { CsprngArray } from "@bitwarden/common/types/csprng";
 import { OrganizationId, UserId } from "@bitwarden/common/types/guid";
 import { UserKey, MasterKey } from "@bitwarden/common/types/key";
-import { VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 
 import { KdfConfigService } from "./abstractions/kdf-config.service";
 import { UserPrivateKeyDecryptionFailedError } from "./abstractions/key.service";
diff --git a/libs/key-management/src/key.service.ts b/libs/key-management/src/key.service.ts
index b174087b766..129c33f1e80 100644
--- a/libs/key-management/src/key.service.ts
+++ b/libs/key-management/src/key.service.ts
@@ -19,6 +19,8 @@ import { ProfileProviderResponse } from "@bitwarden/common/admin-console/models/
 import { AccountService } from "@bitwarden/common/auth/abstractions/account.service";
 import { InternalMasterPasswordServiceAbstraction } from "@bitwarden/common/auth/abstractions/master-password.service.abstraction";
 import { EncryptService } from "@bitwarden/common/key-management/crypto/abstractions/encrypt.service";
+import { VaultTimeoutStringType } from "@bitwarden/common/key-management/vault-timeout";
+import { VAULT_TIMEOUT } from "@bitwarden/common/key-management/vault-timeout/services/vault-timeout-settings.state";
 import { CryptoFunctionService } from "@bitwarden/common/platform/abstractions/crypto-function.service";
 import { KeyGenerationService } from "@bitwarden/common/platform/abstractions/key-generation.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
@@ -38,7 +40,6 @@ import {
   USER_KEY,
 } from "@bitwarden/common/platform/services/key-state/user-key.state";
 import { ActiveUserState, StateProvider } from "@bitwarden/common/platform/state";
-import { VAULT_TIMEOUT } from "@bitwarden/common/services/vault-timeout/vault-timeout-settings.state";
 import { CsprngArray } from "@bitwarden/common/types/csprng";
 import { OrganizationId, ProviderId, UserId } from "@bitwarden/common/types/guid";
 import {
@@ -50,7 +51,6 @@ import {
   UserPrivateKey,
   UserPublicKey,
 } from "@bitwarden/common/types/key";
-import { VaultTimeoutStringType } from "@bitwarden/common/types/vault-timeout.type";
 
 import { KdfConfigService } from "./abstractions/kdf-config.service";
 import {

From a4ff5436bf861d322c8ee25dcc1af250b1af9582 Mon Sep 17 00:00:00 2001
From: Todd Martin <106564991+trmartin4@users.noreply.github.com>
Date: Fri, 28 Feb 2025 10:14:36 -0500
Subject: [PATCH 30/47] [PM-18617] Revert Firefox back to build Mv2 (#13620)

* Revert changes to build Mv3 on Firefox.

* Revert script changes.
---
 .github/workflows/build-browser.yml | 6 +++++-
 apps/browser/package.json           | 2 +-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build-browser.yml b/.github/workflows/build-browser.yml
index b9a26f68eeb..4748a6a9f15 100644
--- a/.github/workflows/build-browser.yml
+++ b/.github/workflows/build-browser.yml
@@ -200,10 +200,14 @@ jobs:
             npm_command: "dist:edge"
             archive_name: "dist-edge.zip"
             artifact_name: "dist-edge-MV3"
+          - name: "firefox"
+            npm_command: "dist:firefox"
+            archive_name: "dist-firefox.zip"
+            artifact_name: "dist-firefox"
           - name: "firefox-mv3"
             npm_command: "dist:firefox:mv3"
             archive_name: "dist-firefox.zip"
-            artifact_name: "dist-firefox-MV3"
+            artifact_name: "DO-NOT-USE-FOR-PROD-dist-firefox-MV3"
           - name: "opera-mv3"
             npm_command: "dist:opera:mv3"
             archive_name: "dist-opera.zip"
diff --git a/apps/browser/package.json b/apps/browser/package.json
index 69f6bb2f89f..21784167b9e 100644
--- a/apps/browser/package.json
+++ b/apps/browser/package.json
@@ -5,7 +5,7 @@
     "build": "npm run build:chrome",
     "build:chrome": "cross-env BROWSER=chrome MANIFEST_VERSION=3 NODE_OPTIONS=\"--max-old-space-size=8192\" webpack",
     "build:edge": "cross-env BROWSER=edge MANIFEST_VERSION=3 NODE_OPTIONS=\"--max-old-space-size=8192\" webpack",
-    "build:firefox": "cross-env BROWSER=firefox MANIFEST_VERSION=3 NODE_OPTIONS=\"--max-old-space-size=8192\" webpack",
+    "build:firefox": "cross-env BROWSER=firefox NODE_OPTIONS=\"--max-old-space-size=8192\" webpack",
     "build:opera": "cross-env BROWSER=opera MANIFEST_VERSION=3 NODE_OPTIONS=\"--max-old-space-size=8192\" webpack",
     "build:safari": "cross-env BROWSER=safari NODE_OPTIONS=\"--max-old-space-size=8192\" webpack",
     "build:watch": "npm run build:watch:chrome",

From f12e8ed583f8429dcc93dfeba91c4750de085e4c Mon Sep 17 00:00:00 2001
From: Jared Snider <116684653+JaredSnider-Bitwarden@users.noreply.github.com>
Date: Fri, 28 Feb 2025 10:44:48 -0500
Subject: [PATCH 31/47] feat(ExtensionCurrentAccountComponent): [Auth/PM-12766]
 adjust screen reader text per ticket (#13541)

---
 apps/browser/src/_locales/en/messages.json                     | 3 +++
 .../popup/account-switching/current-account.component.html     | 3 +--
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/apps/browser/src/_locales/en/messages.json b/apps/browser/src/_locales/en/messages.json
index 0c25288fb9a..4f19b4d880f 100644
--- a/apps/browser/src/_locales/en/messages.json
+++ b/apps/browser/src/_locales/en/messages.json
@@ -4077,6 +4077,9 @@
   "activeAccount": {
     "message": "Active account"
   },
+  "bitwardenAccount": {
+    "message": "Bitwarden account"
+  },
   "availableAccounts": {
     "message": "Available accounts"
   },
diff --git a/apps/browser/src/auth/popup/account-switching/current-account.component.html b/apps/browser/src/auth/popup/account-switching/current-account.component.html
index dacf4b34be5..f59a2b08fdd 100644
--- a/apps/browser/src/auth/popup/account-switching/current-account.component.html
+++ b/apps/browser/src/auth/popup/account-switching/current-account.component.html
@@ -5,8 +5,7 @@
     class="tw-rounded-full hover:tw-outline hover:tw-outline-1 hover:tw-outline-offset-1"
     (click)="currentAccountClicked()"
   >
-    <span class="tw-sr-only">{{ "switchAccounts" | i18n }}:</span>
-    <span class="tw-sr-only"> {{ "activeAccount" | i18n }} {{ currentAccount.email }}</span>
+    <span class="tw-sr-only"> {{ "bitwardenAccount" | i18n }} {{ currentAccount.email }}</span>
     <bit-avatar
       [id]="currentAccount.id"
       [text]="currentAccount.name"

From a3f692ee59dcf0480c8bee244a24e9498d01ed4f Mon Sep 17 00:00:00 2001
From: Jared Snider <116684653+JaredSnider-Bitwarden@users.noreply.github.com>
Date: Fri, 28 Feb 2025 10:46:16 -0500
Subject: [PATCH 32/47] Fix(ExtensionAccountSwitcherComponent): [Auth/PM-11684]
 Fix missing typography import (#13544)

---
 .../popup/account-switching/account-switcher.component.html     | 2 +-
 .../auth/popup/account-switching/account-switcher.component.ts  | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/apps/browser/src/auth/popup/account-switching/account-switcher.component.html b/apps/browser/src/auth/popup/account-switching/account-switcher.component.html
index 0152cd1c7ff..de8ab4c7b08 100644
--- a/apps/browser/src/auth/popup/account-switching/account-switcher.component.html
+++ b/apps/browser/src/auth/popup/account-switching/account-switcher.component.html
@@ -15,7 +15,7 @@
 
         <ng-container *ngIf="enableAccountSwitching">
           <bit-section-header *ngIf="isFirst">
-            <h2 bitTypography="h6" class="tw-font-semibold">{{ "availableAccounts" | i18n }}</h2>
+            <h2 bitTypography="h6">{{ "availableAccounts" | i18n }}</h2>
           </bit-section-header>
 
           <div *ngIf="!availableAccount.isActive">
diff --git a/apps/browser/src/auth/popup/account-switching/account-switcher.component.ts b/apps/browser/src/auth/popup/account-switching/account-switcher.component.ts
index 19490642278..78bee121afb 100644
--- a/apps/browser/src/auth/popup/account-switching/account-switcher.component.ts
+++ b/apps/browser/src/auth/popup/account-switching/account-switcher.component.ts
@@ -21,6 +21,7 @@ import {
   ItemModule,
   SectionComponent,
   SectionHeaderComponent,
+  TypographyModule,
 } from "@bitwarden/components";
 
 import { enableAccountSwitching } from "../../../platform/flags";
@@ -48,6 +49,7 @@ import { AccountSwitcherService } from "./services/account-switcher.service";
     AccountComponent,
     SectionComponent,
     SectionHeaderComponent,
+    TypographyModule,
   ],
 })
 export class AccountSwitcherComponent implements OnInit, OnDestroy {

From c9e20687ef1d13dd6ff3d4dfa01663364c418951 Mon Sep 17 00:00:00 2001
From: Jared Snider <116684653+JaredSnider-Bitwarden@users.noreply.github.com>
Date: Fri, 28 Feb 2025 10:51:15 -0500
Subject: [PATCH 33/47] fix(ExtensionAnonLayoutWrapperComponent):
 [Auth/PM-18574] add inline flex to logo so it vertically centers (#13546)

---
 .../extension-anon-layout-wrapper.component.html                | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/browser/src/auth/popup/extension-anon-layout-wrapper/extension-anon-layout-wrapper.component.html b/apps/browser/src/auth/popup/extension-anon-layout-wrapper/extension-anon-layout-wrapper.component.html
index 8893697da17..88a3b1c3076 100644
--- a/apps/browser/src/auth/popup/extension-anon-layout-wrapper/extension-anon-layout-wrapper.component.html
+++ b/apps/browser/src/auth/popup/extension-anon-layout-wrapper/extension-anon-layout-wrapper.component.html
@@ -5,7 +5,7 @@
     [showBackButton]="showBackButton"
     [pageTitle]="''"
   >
-    <bit-icon *ngIf="showLogo" [icon]="logo"></bit-icon>
+    <bit-icon *ngIf="showLogo" class="tw-inline-flex" [icon]="logo"></bit-icon>
 
     <ng-container slot="end">
       <app-pop-out></app-pop-out>

From 7ba8dd98e68e3f3a7c9b9db7e90ea3266b9751d6 Mon Sep 17 00:00:00 2001
From: Bernd Schoolmann <mail@quexten.com>
Date: Fri, 28 Feb 2025 17:15:06 +0100
Subject: [PATCH 34/47] Validate parameters in encrypt service tests (#13630)

---
 .../crypto/services/encrypt.service.spec.ts   | 42 ++++++++++++++++---
 1 file changed, 37 insertions(+), 5 deletions(-)

diff --git a/libs/common/src/key-management/crypto/services/encrypt.service.spec.ts b/libs/common/src/key-management/crypto/services/encrypt.service.spec.ts
index 4593d44febe..cff695f4829 100644
--- a/libs/common/src/key-management/crypto/services/encrypt.service.spec.ts
+++ b/libs/common/src/key-management/crypto/services/encrypt.service.spec.ts
@@ -37,16 +37,45 @@ describe("EncryptService", () => {
       const actual = await encryptService.encrypt(null, key);
       expect(actual).toBeNull();
     });
+    it("creates an EncString for Aes256Cbc", async () => {
+      const key = new SymmetricCryptoKey(makeStaticByteArray(32));
+      const plainValue = "data";
+      cryptoFunctionService.aesEncrypt.mockResolvedValue(makeStaticByteArray(4, 100));
+      cryptoFunctionService.randomBytes.mockResolvedValue(makeStaticByteArray(16) as CsprngArray);
+      const result = await encryptService.encrypt(plainValue, key);
+      expect(cryptoFunctionService.aesEncrypt).toHaveBeenCalledWith(
+        Utils.fromByteStringToArray(plainValue),
+        makeStaticByteArray(16),
+        makeStaticByteArray(32),
+      );
+      expect(cryptoFunctionService.hmac).not.toHaveBeenCalled();
+
+      expect(Utils.fromB64ToArray(result.data).length).toEqual(4);
+      expect(Utils.fromB64ToArray(result.iv).length).toEqual(16);
+    });
     it("creates an EncString for Aes256Cbc_HmacSha256_B64", async () => {
       const key = new SymmetricCryptoKey(makeStaticByteArray(64));
       const plainValue = "data";
       cryptoFunctionService.hmac.mockResolvedValue(makeStaticByteArray(32));
-      cryptoFunctionService.aesEncrypt.mockResolvedValue(makeStaticByteArray(32));
+      cryptoFunctionService.aesEncrypt.mockResolvedValue(makeStaticByteArray(4, 100));
       cryptoFunctionService.randomBytes.mockResolvedValue(makeStaticByteArray(16) as CsprngArray);
       const result = await encryptService.encrypt(plainValue, key);
-      expect(cryptoFunctionService.aesEncrypt).toHaveBeenCalled();
-      expect(cryptoFunctionService.hmac).toHaveBeenCalled();
-      expect(Utils.fromB64ToArray(result.data).length).toEqual(32);
+      expect(cryptoFunctionService.aesEncrypt).toHaveBeenCalledWith(
+        Utils.fromByteStringToArray(plainValue),
+        makeStaticByteArray(16),
+        makeStaticByteArray(32),
+      );
+
+      const macData = new Uint8Array(16 + 4);
+      macData.set(makeStaticByteArray(16));
+      macData.set(makeStaticByteArray(4, 100), 16);
+      expect(cryptoFunctionService.hmac).toHaveBeenCalledWith(
+        macData,
+        makeStaticByteArray(32, 32),
+        "sha256",
+      );
+
+      expect(Utils.fromB64ToArray(result.data).length).toEqual(4);
       expect(Utils.fromB64ToArray(result.iv).length).toEqual(16);
       expect(Utils.fromB64ToArray(result.mac).length).toEqual(32);
     });
@@ -242,7 +271,10 @@ describe("EncryptService", () => {
 
       const actual = await encryptService.decryptToUtf8(encString, key);
       expect(actual).toEqual("data");
-      expect(cryptoFunctionService.compareFast).toHaveBeenCalled();
+      expect(cryptoFunctionService.compareFast).toHaveBeenCalledWith(
+        makeStaticByteArray(32, 0),
+        makeStaticByteArray(32, 0),
+      );
     });
 
     it("decrypts data with provided key for Aes256Cbc", async () => {

From 24410cd672677942cad2d19cd2f4d676558c2905 Mon Sep 17 00:00:00 2001
From: Brandon Treston <btreston@bitwarden.com>
Date: Fri, 28 Feb 2025 12:03:54 -0500
Subject: [PATCH 35/47] replace icon buttons with text buttons (#13615)

---
 .../member-dialog.component.html              | 20 ++++++++++---------
 apps/web/src/locales/en/messages.json         |  5 ++++-
 2 files changed, 15 insertions(+), 10 deletions(-)

diff --git a/apps/web/src/app/admin-console/organizations/members/components/member-dialog/member-dialog.component.html b/apps/web/src/app/admin-console/organizations/members/components/member-dialog/member-dialog.component.html
index bef479c231b..44c9d8319cb 100644
--- a/apps/web/src/app/admin-console/organizations/members/components/member-dialog/member-dialog.component.html
+++ b/apps/web/src/app/admin-console/organizations/members/components/member-dialog/member-dialog.component.html
@@ -245,7 +245,7 @@
       >
         {{ "cancel" | i18n }}
       </button>
-      <div class="tw-ml-auto">
+      <div class="tw-flex tw-gap-2 tw-ml-auto">
         <button
           *ngIf="editMode && isRevoked"
           type="button"
@@ -255,7 +255,7 @@
           [bitAction]="restore"
           [disabled]="loading"
         >
-          {{ "restoreAccess" | i18n }}
+          {{ "restore" | i18n }}
         </button>
         <button
           *ngIf="editMode && !isRevoked"
@@ -266,7 +266,7 @@
           [bitAction]="revoke"
           [disabled]="loading"
         >
-          {{ "revokeAccess" | i18n }}
+          {{ "revoke" | i18n }}
         </button>
         <button
           *ngIf="
@@ -275,13 +275,14 @@
               !(editParams$ | async)?.managedByOrganization)
           "
           type="button"
-          bitIconButton="bwi-close"
           buttonType="danger"
+          bitButton
           bitFormButton
-          [appA11yTitle]="'remove' | i18n"
           [bitAction]="remove"
           [disabled]="loading"
-        ></button>
+        >
+          {{ "remove" | i18n }}
+        </button>
         <button
           *ngIf="
             this.editMode &&
@@ -289,13 +290,14 @@
             (editParams$ | async)?.managedByOrganization
           "
           type="button"
-          bitIconButton="bwi-trash"
           buttonType="danger"
+          bitButton
           bitFormButton
-          [appA11yTitle]="'delete' | i18n"
           [bitAction]="delete"
           [disabled]="loading"
-        ></button>
+        >
+          {{ "delete" | i18n }}
+        </button>
       </div>
     </ng-container>
   </bit-dialog>
diff --git a/apps/web/src/locales/en/messages.json b/apps/web/src/locales/en/messages.json
index 75cca17d3f8..22a67cbff28 100644
--- a/apps/web/src/locales/en/messages.json
+++ b/apps/web/src/locales/en/messages.json
@@ -1491,7 +1491,7 @@
   },
   "useYourRecoveryCode": {
     "message": "Use your recovery code"
-  }, 
+  },
   "insertYubiKey": {
     "message": "Insert your YubiKey into your computer's USB port, then touch its button."
   },
@@ -2273,6 +2273,9 @@
   "revokeAccess": {
     "message": "Revoke access"
   },
+  "revoke": {
+    "message": "Revoke"
+  },
   "twoStepLoginProviderEnabled": {
     "message": "This two-step login provider is active on your account."
   },

From 7da329da45cb08e69c8ef544ef4d39852364b8b7 Mon Sep 17 00:00:00 2001
From: Alec Rippberger <127791530+alec-livefront@users.noreply.github.com>
Date: Fri, 28 Feb 2025 11:39:50 -0600
Subject: [PATCH 36/47] fix(ui): [PM-18719] fix endless spinner on read key
 button

This resolves an issue where the WebAuthn setup component's read key button would show a loading spinner indefinitely. The fix addresses problems with Signal handling for the bitButton component's disabled/loading states.

JIRA: PM-18719
---
 .../two-factor/two-factor-setup-webauthn.component.html     | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/apps/web/src/app/auth/settings/two-factor/two-factor-setup-webauthn.component.html b/apps/web/src/app/auth/settings/two-factor/two-factor-setup-webauthn.component.html
index 8e7a789d9d0..4d505161631 100644
--- a/apps/web/src/app/auth/settings/two-factor/two-factor-setup-webauthn.component.html
+++ b/apps/web/src/app/auth/settings/two-factor/two-factor-setup-webauthn.component.html
@@ -63,16 +63,16 @@
         type="button"
         [bitAction]="readKey"
         buttonType="secondary"
-        [disabled]="$any(readKeyBtn).loading || webAuthnListening || !keyIdAvailable"
+        [disabled]="$any(readKeyBtn).loading() || webAuthnListening || !keyIdAvailable"
         class="tw-mr-2"
         #readKeyBtn
       >
         {{ "readKey" | i18n }}
       </button>
-      <ng-container *ngIf="$any(readKeyBtn).loading">
+      <ng-container *ngIf="$any(readKeyBtn).loading()">
         <i class="bwi bwi-spinner bwi-spin tw-text-muted" aria-hidden="true"></i>
       </ng-container>
-      <ng-container *ngIf="!$any(readKeyBtn).loading">
+      <ng-container *ngIf="!$any(readKeyBtn).loading()">
         <ng-container *ngIf="webAuthnListening">
           <i class="bwi bwi-spinner bwi-spin tw-text-muted" aria-hidden="true"></i>
           {{ "twoFactorU2fWaiting" | i18n }}...

From 40f7a0d73f904c7726dafa3c85b68d6647adf370 Mon Sep 17 00:00:00 2001
From: Matt Gibson <mgibson@bitwarden.com>
Date: Fri, 28 Feb 2025 09:53:43 -0800
Subject: [PATCH 37/47] Parse web push payload JSON (#13594)

---
 .../src/models/response/notification.response.ts      | 11 ++++++++++-
 .../internal/worker-webpush-connection.service.ts     |  4 +++-
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/libs/common/src/models/response/notification.response.ts b/libs/common/src/models/response/notification.response.ts
index 894a00ee885..aa0ecc97b58 100644
--- a/libs/common/src/models/response/notification.response.ts
+++ b/libs/common/src/models/response/notification.response.ts
@@ -12,7 +12,16 @@ export class NotificationResponse extends BaseResponse {
     this.contextId = this.getResponseProperty("ContextId");
     this.type = this.getResponseProperty("Type");
 
-    const payload = this.getResponseProperty("Payload");
+    let payload = this.getResponseProperty("Payload");
+
+    if (typeof payload === "string") {
+      try {
+        payload = JSON.parse(payload);
+      } catch {
+        // guess it was a string
+      }
+    }
+
     switch (this.type) {
       case NotificationType.SyncCipherCreate:
       case NotificationType.SyncCipherDelete:
diff --git a/libs/common/src/platform/notifications/internal/worker-webpush-connection.service.ts b/libs/common/src/platform/notifications/internal/worker-webpush-connection.service.ts
index 631c624d667..74981b6782f 100644
--- a/libs/common/src/platform/notifications/internal/worker-webpush-connection.service.ts
+++ b/libs/common/src/platform/notifications/internal/worker-webpush-connection.service.ts
@@ -124,7 +124,9 @@ class MyWebPushConnector implements WebPushConnector {
           return this.webPushApiService.putSubscription(subscription.toJSON());
         }).pipe(
           switchMap(() => this.pushEvent$),
-          map((e) => new NotificationResponse(e.data.json().data)),
+          map((e) => {
+            return new NotificationResponse(e.data.json().data);
+          }),
         );
       }),
     );

From f12456bd3e8af71cfed5c9e1dccf1a70994ee9bd Mon Sep 17 00:00:00 2001
From: Daniel Riera <driera@livefront.com>
Date: Fri, 28 Feb 2025 13:14:15 -0500
Subject: [PATCH 38/47] Pm 18493 pass relevant cipher name into confirmation UI
 (#13570)

* PM-18276-wip

* update typing

* dynamically retrieve messages, resolve theme in function

* five second timeout after save or update

* adjust timeout to five seconds

* negligible performance gain-revert

* sacrifice contorl for to remove event listeners-revert

* PM-18493 initial wip commit

* fix types and story

* edit tests to account for sendmessagewithdata

* add tests and return id on new add/save

* function name
---
 apps/browser/src/_locales/en/messages.json    | 18 +++++++++++
 .../abstractions/notification.background.ts   |  1 +
 .../notification.background.spec.ts           | 32 +++++++++++++++----
 .../background/notification.background.ts     | 25 ++++++++++++---
 .../notification/confirmation.lit-stories.ts  |  2 +-
 .../notification/confirmation-container.ts    | 18 +++++++++--
 .../components/notification/confirmation.ts   |  8 +++--
 .../src/autofill/content/notification-bar.ts  |  2 ++
 .../abstractions/notification-bar.ts          |  3 +-
 apps/browser/src/autofill/notification/bar.ts | 16 ++++++++--
 10 files changed, 102 insertions(+), 23 deletions(-)

diff --git a/apps/browser/src/_locales/en/messages.json b/apps/browser/src/_locales/en/messages.json
index 4f19b4d880f..b6c44405ffa 100644
--- a/apps/browser/src/_locales/en/messages.json
+++ b/apps/browser/src/_locales/en/messages.json
@@ -1070,6 +1070,24 @@
   "notificationAddSave": {
     "message": "Save"
   },
+  "loginSaveSuccessDetails": {
+    "message": "$USERNAME$ saved to Bitwarden.",
+      "placeholders": {
+        "username": {
+          "content": "$1"
+        }
+      },
+      "description": "Shown to user after login is saved."
+  },
+  "loginUpdatedSuccessDetails": {
+    "message": "$USERNAME$ updated in Bitwarden.",
+      "placeholders": {
+        "username": {
+          "content": "$1"
+        }
+      },
+      "description": "Shown to user after login is updated."
+  },
   "enableChangedPasswordNotification": {
     "message": "Ask to update existing login"
   },
diff --git a/apps/browser/src/autofill/background/abstractions/notification.background.ts b/apps/browser/src/autofill/background/abstractions/notification.background.ts
index 1b989283112..851f07576dd 100644
--- a/apps/browser/src/autofill/background/abstractions/notification.background.ts
+++ b/apps/browser/src/autofill/background/abstractions/notification.background.ts
@@ -100,6 +100,7 @@ type NotificationBackgroundExtensionMessageHandlers = {
   bgChangedPassword: ({ message, sender }: BackgroundOnMessageHandlerParams) => Promise<void>;
   bgRemoveTabFromNotificationQueue: ({ sender }: BackgroundSenderParam) => void;
   bgSaveCipher: ({ message, sender }: BackgroundOnMessageHandlerParams) => void;
+  bgOpenVault: ({ message, sender }: BackgroundOnMessageHandlerParams) => Promise<void>;
   bgNeverSave: ({ sender }: BackgroundSenderParam) => Promise<void>;
   bgUnlockPopoutOpened: ({ message, sender }: BackgroundOnMessageHandlerParams) => Promise<void>;
   bgReopenUnlockPopout: ({ sender }: BackgroundSenderParam) => Promise<void>;
diff --git a/apps/browser/src/autofill/background/notification.background.spec.ts b/apps/browser/src/autofill/background/notification.background.spec.ts
index 40c4d07cadf..e02e3d8d951 100644
--- a/apps/browser/src/autofill/background/notification.background.spec.ts
+++ b/apps/browser/src/autofill/background/notification.background.spec.ts
@@ -812,7 +812,10 @@ describe("NotificationBackground", () => {
             newPassword: "newPassword",
           });
           notificationBackground["notificationQueue"] = [queueMessage];
-          const cipherView = mock<CipherView>();
+          const cipherView = mock<CipherView>({
+            id: "testId",
+            login: { username: "testUser" },
+          });
           getDecryptedCipherByIdSpy.mockResolvedValueOnce(cipherView);
 
           sendMockExtensionMessage(message, sender);
@@ -828,9 +831,14 @@ describe("NotificationBackground", () => {
             "testId",
           );
           expect(updateWithServerSpy).toHaveBeenCalled();
-          expect(tabSendMessageSpy).toHaveBeenCalledWith(sender.tab, {
-            command: "saveCipherAttemptCompleted",
-          });
+          expect(tabSendMessageDataSpy).toHaveBeenCalledWith(
+            sender.tab,
+            "saveCipherAttemptCompleted",
+            {
+              username: cipherView.login.username,
+              cipherId: cipherView.id,
+            },
+          );
         });
 
         it("updates the cipher password if the queue message was locked and an existing cipher has the same username as the message", async () => {
@@ -976,11 +984,16 @@ describe("NotificationBackground", () => {
           });
           notificationBackground["notificationQueue"] = [queueMessage];
           const cipherView = mock<CipherView>({
+            id: "testId",
             login: { username: "test", password: "password" },
           });
           folderExistsSpy.mockResolvedValueOnce(false);
           convertAddLoginQueueMessageToCipherViewSpy.mockReturnValueOnce(cipherView);
           editItemSpy.mockResolvedValueOnce(undefined);
+          cipherEncryptSpy.mockResolvedValueOnce({
+            ...cipherView,
+            id: "testId",
+          });
 
           sendMockExtensionMessage(message, sender);
           await flushPromises();
@@ -991,9 +1004,14 @@ describe("NotificationBackground", () => {
           );
           expect(cipherEncryptSpy).toHaveBeenCalledWith(cipherView, "testId");
           expect(createWithServerSpy).toHaveBeenCalled();
-          expect(tabSendMessageSpy).toHaveBeenCalledWith(sender.tab, {
-            command: "saveCipherAttemptCompleted",
-          });
+          expect(tabSendMessageDataSpy).toHaveBeenCalledWith(
+            sender.tab,
+            "saveCipherAttemptCompleted",
+            {
+              username: cipherView.login.username,
+              cipherId: cipherView.id,
+            },
+          );
           expect(tabSendMessageSpy).toHaveBeenCalledWith(sender.tab, { command: "addedCipher" });
         });
 
diff --git a/apps/browser/src/autofill/background/notification.background.ts b/apps/browser/src/autofill/background/notification.background.ts
index 1a99425b7de..11037e7e261 100644
--- a/apps/browser/src/autofill/background/notification.background.ts
+++ b/apps/browser/src/autofill/background/notification.background.ts
@@ -87,6 +87,7 @@ export default class NotificationBackground {
     getWebVaultUrlForNotification: () => this.getWebVaultUrl(),
     notificationRefreshFlagValue: () => this.getNotificationFlag(),
     bgGetDecryptedCiphers: () => this.getNotificationCipherData(),
+    bgOpenVault: ({ message, sender }) => this.openVault(message, sender.tab),
   };
 
   constructor(
@@ -594,7 +595,10 @@ export default class NotificationBackground {
       const cipher = await this.cipherService.encrypt(newCipher, activeUserId);
       try {
         await this.cipherService.createWithServer(cipher);
-        await BrowserApi.tabSendMessage(tab, { command: "saveCipherAttemptCompleted" });
+        await BrowserApi.tabSendMessageData(tab, "saveCipherAttemptCompleted", {
+          username: String(queueMessage?.username),
+          cipherId: String(cipher?.id),
+        });
         await BrowserApi.tabSendMessage(tab, { command: "addedCipher" });
       } catch (error) {
         await BrowserApi.tabSendMessageData(tab, "saveCipherAttemptCompleted", {
@@ -630,15 +634,16 @@ export default class NotificationBackground {
       await BrowserApi.tabSendMessage(tab, { command: "editedCipher" });
       return;
     }
-
     const cipher = await this.cipherService.encrypt(cipherView, userId);
     try {
-      // We've only updated the password, no need to broadcast editedCipher message
       await this.cipherService.updateWithServer(cipher);
-      await BrowserApi.tabSendMessage(tab, { command: "saveCipherAttemptCompleted" });
+      await BrowserApi.tabSendMessageData(tab, "saveCipherAttemptCompleted", {
+        username: String(cipherView?.login?.username),
+        cipherId: String(cipherView?.id),
+      });
     } catch (error) {
       await BrowserApi.tabSendMessageData(tab, "saveCipherAttemptCompleted", {
-        error: String(error.message),
+        error: String(error?.message),
       });
     }
   }
@@ -663,6 +668,16 @@ export default class NotificationBackground {
     await this.openAddEditVaultItemPopout(senderTab, { cipherId: cipherView.id });
   }
 
+  private async openVault(
+    message: NotificationBackgroundExtensionMessage,
+    senderTab: chrome.tabs.Tab,
+  ) {
+    if (!message.cipherId) {
+      await this.openAddEditVaultItemPopout(senderTab);
+    }
+    await this.openAddEditVaultItemPopout(senderTab, { cipherId: message.cipherId });
+  }
+
   private async folderExists(folderId: string, userId: UserId) {
     if (Utils.isNullOrWhitespace(folderId) || folderId === "null") {
       return false;
diff --git a/apps/browser/src/autofill/content/components/lit-stories/notification/confirmation.lit-stories.ts b/apps/browser/src/autofill/content/components/lit-stories/notification/confirmation.lit-stories.ts
index 94dbaace9aa..b3dee95efd0 100644
--- a/apps/browser/src/autofill/content/components/lit-stories/notification/confirmation.lit-stories.ts
+++ b/apps/browser/src/autofill/content/components/lit-stories/notification/confirmation.lit-stories.ts
@@ -7,7 +7,7 @@ import { NotificationConfirmationBody } from "../../notification/confirmation";
 type Args = {
   buttonText: string;
   confirmationMessage: string;
-  handleClick: () => void;
+  handleOpenVault: () => void;
   theme: Theme;
   error: string;
 };
diff --git a/apps/browser/src/autofill/content/components/notification/confirmation-container.ts b/apps/browser/src/autofill/content/components/notification/confirmation-container.ts
index 4fda95986db..8fdc5474486 100644
--- a/apps/browser/src/autofill/content/components/notification/confirmation-container.ts
+++ b/apps/browser/src/autofill/content/components/notification/confirmation-container.ts
@@ -19,18 +19,22 @@ import {
 export function NotificationConfirmationContainer({
   error,
   handleCloseNotification,
+  handleOpenVault,
   i18n,
   theme = ThemeTypes.Light,
   type,
+  username,
 }: NotificationBarIframeInitData & {
   handleCloseNotification: (e: Event) => void;
+  handleOpenVault: (e: Event) => void;
 } & {
   error: string;
   i18n: { [key: string]: string };
   type: NotificationType;
+  username: string;
 }) {
   const headerMessage = getHeaderMessage(i18n, type, error);
-  const confirmationMessage = getConfirmationMessage(i18n, type, error);
+  const confirmationMessage = getConfirmationMessage(i18n, username, type, error);
   const buttonText = error ? i18n.newItem : i18n.view;
 
   return html`
@@ -41,9 +45,10 @@ export function NotificationConfirmationContainer({
         theme,
       })}
       ${NotificationConfirmationBody({
-        error: error,
         buttonText,
         confirmationMessage,
+        error: error,
+        handleOpenVault,
         theme,
       })}
     </div>
@@ -68,14 +73,21 @@ const notificationContainerStyles = (theme: Theme) => css`
 
 function getConfirmationMessage(
   i18n: { [key: string]: string },
+  username: string,
   type?: NotificationType,
   error?: string,
 ) {
+  const loginSaveSuccessDetails = chrome.i18n.getMessage("loginSaveSuccessDetails", [username]);
+  const loginUpdatedSuccessDetails = chrome.i18n.getMessage("loginUpdatedSuccessDetails", [
+    username,
+  ]);
+
   if (error) {
     return i18n.saveFailureDetails;
   }
-  return type === "add" ? i18n.loginSaveSuccessDetails : i18n.loginUpdateSuccessDetails;
+  return type === "add" ? loginSaveSuccessDetails : loginUpdatedSuccessDetails;
 }
+
 function getHeaderMessage(
   i18n: { [key: string]: string },
   type?: NotificationType,
diff --git a/apps/browser/src/autofill/content/components/notification/confirmation.ts b/apps/browser/src/autofill/content/components/notification/confirmation.ts
index 0c389f75eb6..13d6c970731 100644
--- a/apps/browser/src/autofill/content/components/notification/confirmation.ts
+++ b/apps/browser/src/autofill/content/components/notification/confirmation.ts
@@ -1,7 +1,7 @@
 import createEmotion from "@emotion/css/create-instance";
 import { html } from "lit";
 
-import { Theme, ThemeTypes } from "@bitwarden/common/platform/enums";
+import { Theme } from "@bitwarden/common/platform/enums";
 
 import { themes } from "../constants/styles";
 import { PartyHorn, Warning } from "../icons";
@@ -18,12 +18,14 @@ export function NotificationConfirmationBody({
   buttonText,
   error,
   confirmationMessage,
-  theme = ThemeTypes.Light,
+  theme,
+  handleOpenVault,
 }: {
   error?: string;
   buttonText: string;
   confirmationMessage: string;
   theme: Theme;
+  handleOpenVault: (e: Event) => void;
 }) {
   const IconComponent = !error ? PartyHorn : Warning;
   return html`
@@ -31,7 +33,7 @@ export function NotificationConfirmationBody({
       <div class=${iconContainerStyles(error)}>${IconComponent({ theme })}</div>
       ${confirmationMessage && buttonText
         ? NotificationConfirmationMessage({
-            handleClick: () => {},
+            handleClick: handleOpenVault,
             confirmationMessage,
             theme,
             buttonText,
diff --git a/apps/browser/src/autofill/content/notification-bar.ts b/apps/browser/src/autofill/content/notification-bar.ts
index 8c6251b7030..58480cd6d83 100644
--- a/apps/browser/src/autofill/content/notification-bar.ts
+++ b/apps/browser/src/autofill/content/notification-bar.ts
@@ -193,6 +193,8 @@ async function loadNotificationBar() {
         {
           command: "saveCipherAttemptCompleted",
           error: msg.data?.error,
+          username: msg.data?.username,
+          cipherId: msg.data?.cipherId,
         },
         "*",
       );
diff --git a/apps/browser/src/autofill/notification/abstractions/notification-bar.ts b/apps/browser/src/autofill/notification/abstractions/notification-bar.ts
index 53948a26a2e..cb14a86dffa 100644
--- a/apps/browser/src/autofill/notification/abstractions/notification-bar.ts
+++ b/apps/browser/src/autofill/notification/abstractions/notification-bar.ts
@@ -19,10 +19,11 @@ type NotificationBarIframeInitData = {
 };
 
 type NotificationBarWindowMessage = {
-  [key: string]: any;
   command: string;
   error?: string;
   initData?: NotificationBarIframeInitData;
+  username?: string;
+  cipherId?: string;
 };
 
 type NotificationBarWindowMessageHandlers = {
diff --git a/apps/browser/src/autofill/notification/bar.ts b/apps/browser/src/autofill/notification/bar.ts
index 8c4c8a3e229..a31f1b4fdbc 100644
--- a/apps/browser/src/autofill/notification/bar.ts
+++ b/apps/browser/src/autofill/notification/bar.ts
@@ -55,6 +55,8 @@ function getI18n() {
     close: chrome.i18n.getMessage("close"),
     never: chrome.i18n.getMessage("never"),
     folder: chrome.i18n.getMessage("folder"),
+    loginSaveSuccessDetails: chrome.i18n.getMessage("loginSaveSuccessDetails"),
+    loginUpdateSuccessDetails: chrome.i18n.getMessage("loginUpdatedSuccessDetails"),
     notificationAddSave: chrome.i18n.getMessage("notificationAddSave"),
     notificationAddDesc: chrome.i18n.getMessage("notificationAddDesc"),
     notificationEdit: chrome.i18n.getMessage("edit"),
@@ -70,9 +72,7 @@ function getI18n() {
     saveLoginPrompt: "Save login?",
     updateLoginPrompt: "Update existing login?",
     loginSaveSuccess: "Login saved",
-    loginSaveSuccessDetails: "Login saved to Bitwarden.",
     loginUpdateSuccess: "Login updated",
-    loginUpdateSuccessDetails: "Login updated in Bitwarden.",
     saveFailure: "Error saving",
     saveFailureDetails: "Oh no! We couldn't save this. Try entering the details as a New item",
     newItem: "New item",
@@ -289,9 +289,17 @@ function handleSaveCipherAttemptCompletedMessage(message: NotificationBarWindowM
   );
 }
 
+function openViewVaultItemPopout(e: Event, cipherId: string) {
+  e.preventDefault();
+  sendPlatformMessage({
+    command: "bgOpenVault",
+    cipherId,
+  });
+}
+
 function handleSaveCipherConfirmation(message: NotificationBarWindowMessage) {
   const { theme, type } = notificationBarIframeInitData;
-  const { error } = message;
+  const { error, username, cipherId } = message;
   const i18n = getI18n();
   const resolvedTheme = getResolvedTheme(theme);
 
@@ -305,6 +313,8 @@ function handleSaveCipherConfirmation(message: NotificationBarWindowMessage) {
       handleCloseNotification,
       i18n,
       error,
+      username,
+      handleOpenVault: (e) => openViewVaultItemPopout(e, cipherId),
     }),
     document.body,
   );

From 37cf88d04135f3718ccfbdc17eeb630f34f9cd06 Mon Sep 17 00:00:00 2001
From: Oscar Hinton <Hinton@users.noreply.github.com>
Date: Fri, 28 Feb 2025 20:02:03 +0100
Subject: [PATCH 39/47] [CL-604] Add ngPreserveWhitespace to fix badge padding
 (#13626)

---
 .../organizations/policies/policies.component.html              | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/web/src/app/admin-console/organizations/policies/policies.component.html b/apps/web/src/app/admin-console/organizations/policies/policies.component.html
index 8f1e925034f..24021bb765f 100644
--- a/apps/web/src/app/admin-console/organizations/policies/policies.component.html
+++ b/apps/web/src/app/admin-console/organizations/policies/policies.component.html
@@ -12,7 +12,7 @@
   <bit-table *ngIf="!loading">
     <ng-template body>
       <tr bitRow *ngFor="let p of policies">
-        <td bitCell *ngIf="p.display(organization)">
+        <td bitCell *ngIf="p.display(organization)" ngPreserveWhitespaces>
           <button type="button" bitLink (click)="edit(p)">{{ p.name | i18n }}</button>
           <span bitBadge variant="success" *ngIf="policiesEnabledMap.get(p.type)">{{
             "on" | i18n

From 45fa07c89b43e27abb4a7077ae8c1745dc85bd37 Mon Sep 17 00:00:00 2001
From: Daniel Riera <driera@livefront.com>
Date: Fri, 28 Feb 2025 14:21:27 -0500
Subject: [PATCH 40/47] PM-18522 Adjust Confirmation UI text to accommodate
 truncating (#13639)

* PM-18522 adjust styling

* add text to action button

* address type errors and fix storybook
---
 .../lit-stories/notification/footer.lit-stories.ts        | 6 ++++++
 .../components/lit-stories/rows/button-row.lit-stories.ts | 3 +++
 .../components/notification/confirmation-message.ts       | 1 -
 .../content/components/notification/confirmation.ts       | 1 -
 .../autofill/content/components/notification/container.ts | 1 +
 .../autofill/content/components/notification/footer.ts    | 8 +++++---
 .../src/autofill/content/components/rows/button-row.ts    | 4 +++-
 7 files changed, 18 insertions(+), 6 deletions(-)

diff --git a/apps/browser/src/autofill/content/components/lit-stories/notification/footer.lit-stories.ts b/apps/browser/src/autofill/content/components/lit-stories/notification/footer.lit-stories.ts
index b03aeeae311..5ad0a5a2aca 100644
--- a/apps/browser/src/autofill/content/components/lit-stories/notification/footer.lit-stories.ts
+++ b/apps/browser/src/autofill/content/components/lit-stories/notification/footer.lit-stories.ts
@@ -9,6 +9,7 @@ type Args = {
   notificationType: NotificationType;
   theme: Theme;
   handleSaveAction: (e: Event) => void;
+  i18n: { [key: string]: string };
 };
 
 export default {
@@ -23,6 +24,11 @@ export default {
   args: {
     theme: ThemeTypes.Light,
     notificationType: "add",
+    i18n: {
+      saveAsNewLoginAction: "Save as New Login",
+      saveAction: "Save",
+    },
+    handleSaveAction: () => alert("Save action triggered"),
   },
   parameters: {
     design: {
diff --git a/apps/browser/src/autofill/content/components/lit-stories/rows/button-row.lit-stories.ts b/apps/browser/src/autofill/content/components/lit-stories/rows/button-row.lit-stories.ts
index ffef4751627..7f833f2a1f6 100644
--- a/apps/browser/src/autofill/content/components/lit-stories/rows/button-row.lit-stories.ts
+++ b/apps/browser/src/autofill/content/components/lit-stories/rows/button-row.lit-stories.ts
@@ -7,15 +7,18 @@ import { ButtonRow } from "../../rows/button-row";
 type Args = {
   theme: Theme;
   buttonAction: (e: Event) => void;
+  buttonText: string;
 };
 
 export default {
   title: "Components/Rows/Button Row",
   argTypes: {
     theme: { control: "select", options: [...Object.values(ThemeTypes)] },
+    buttonText: { control: "text" },
   },
   args: {
     theme: ThemeTypes.Light,
+    buttonText: "Action",
   },
 } as Meta<Args>;
 
diff --git a/apps/browser/src/autofill/content/components/notification/confirmation-message.ts b/apps/browser/src/autofill/content/components/notification/confirmation-message.ts
index 745899481dd..d6f7ba3024d 100644
--- a/apps/browser/src/autofill/content/components/notification/confirmation-message.ts
+++ b/apps/browser/src/autofill/content/components/notification/confirmation-message.ts
@@ -35,7 +35,6 @@ const baseTextStyles = css`
   text-align: left;
   text-overflow: ellipsis;
   line-height: 24px;
-  white-space: nowrap;
   font-family: "DM Sans", sans-serif;
   font-size: 16px;
 `;
diff --git a/apps/browser/src/autofill/content/components/notification/confirmation.ts b/apps/browser/src/autofill/content/components/notification/confirmation.ts
index 13d6c970731..8c213a7663f 100644
--- a/apps/browser/src/autofill/content/components/notification/confirmation.ts
+++ b/apps/browser/src/autofill/content/components/notification/confirmation.ts
@@ -56,5 +56,4 @@ const notificationConfirmationBodyStyles = ({ theme }: { theme: Theme }) => css`
   justify-content: flex-start;
   background-color: ${themes[theme].background.alt};
   padding: 12px;
-  white-space: nowrap;
 `;
diff --git a/apps/browser/src/autofill/content/components/notification/container.ts b/apps/browser/src/autofill/content/components/notification/container.ts
index 1cdde3ec3ed..f98ef795749 100644
--- a/apps/browser/src/autofill/content/components/notification/container.ts
+++ b/apps/browser/src/autofill/content/components/notification/container.ts
@@ -58,6 +58,7 @@ export function NotificationContainer({
         handleSaveAction,
         theme,
         notificationType: type,
+        i18n,
       })}
     </div>
   `;
diff --git a/apps/browser/src/autofill/content/components/notification/footer.ts b/apps/browser/src/autofill/content/components/notification/footer.ts
index edc6d6f6e00..6de4a333dfe 100644
--- a/apps/browser/src/autofill/content/components/notification/footer.ts
+++ b/apps/browser/src/autofill/content/components/notification/footer.ts
@@ -15,14 +15,16 @@ export function NotificationFooter({
   handleSaveAction,
   notificationType,
   theme,
+  i18n,
 }: {
   handleSaveAction: (e: Event) => void;
+  i18n: { [key: string]: string };
   notificationType?: NotificationType;
   theme: Theme;
 }) {
   const isChangeNotification = notificationType === NotificationTypes.Change;
-  // @TODO localize
-  const saveNewItemText = "Save as new login";
+  const saveNewItemText = i18n.saveAsNewLoginAction;
+  const buttonText = i18n.saveAction;
 
   return html`
     <div class=${notificationFooterStyles({ theme })}>
@@ -32,7 +34,7 @@ export function NotificationFooter({
             handleAction: handleSaveAction,
             theme,
           })
-        : ButtonRow({ theme, buttonAction: handleSaveAction })}
+        : ButtonRow({ theme, buttonAction: handleSaveAction, buttonText })}
     </div>
   `;
 }
diff --git a/apps/browser/src/autofill/content/components/rows/button-row.ts b/apps/browser/src/autofill/content/components/rows/button-row.ts
index 942c8dd55fe..1feef016a81 100644
--- a/apps/browser/src/autofill/content/components/rows/button-row.ts
+++ b/apps/browser/src/autofill/content/components/rows/button-row.ts
@@ -11,16 +11,18 @@ import { DropdownMenu } from "../dropdown-menu";
 export function ButtonRow({
   theme,
   buttonAction,
+  buttonText,
 }: {
   theme: Theme;
   buttonAction: (e: Event) => void;
+  buttonText: string;
 }) {
   return html`
     <div class=${buttonRowStyles}>
       ${[
         ActionButton({
           buttonAction: buttonAction,
-          buttonText: "Action Button",
+          buttonText,
           theme,
         }),
         DropdownContainer({

From 98008149aec5b565ed3fefc2cdefd3593f27cdea Mon Sep 17 00:00:00 2001
From: cyprain-okeke <108260115+cyprain-okeke@users.noreply.github.com>
Date: Sat, 1 Mar 2025 07:18:12 +0100
Subject: [PATCH 41/47] resolve the tailwind css class issue (#13629)

---
 .../organizations/manage/events.component.html              | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/apps/web/src/app/admin-console/organizations/manage/events.component.html b/apps/web/src/app/admin-console/organizations/manage/events.component.html
index 4aa0bc8b296..4a48ae1ead7 100644
--- a/apps/web/src/app/admin-console/organizations/manage/events.component.html
+++ b/apps/web/src/app/admin-console/organizations/manage/events.component.html
@@ -114,11 +114,11 @@
     class="tw-relative tw--top-72 tw-bg-[#ffffff] tw-bg-opacity-90 tw-pb-5 tw-flex tw-items-center tw-justify-center"
   >
     <div
-      class="tw-bg-[#ffffff] tw-max-w-xl tw-flex-col tw-justify-center tw-text-center tw-p-5 tw-px-10 tw-rounded tw-border-0 tw-border-b tw-border-secondary-300 tw-border-solid mt-5"
+      class="tw-bg-[#ffffff] tw-max-w-xl tw-flex-col tw-justify-center tw-text-center tw-p-5 tw-px-10 tw-rounded tw-border-0 tw-border-b tw-border-secondary-300 tw-border-solid tw-mt-5"
     >
-      <i class="bwi bwi-2x bwi-business text-primary"></i>
+      <i class="bwi bwi-2x bwi-business tw-text-primary-600"></i>
 
-      <p class="tw-font-bold mt-2">
+      <p class="tw-font-bold tw-mt-2">
         {{ "limitedEventLogs" | i18n: ProductTierType[organization?.productTierType] }}
       </p>
       <p>

From 08b6da3f4e6be47b5e728dea547bcbe9b5174c84 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Mar 2025 12:26:38 +0100
Subject: [PATCH 42/47] [deps]: Update dtolnay/rust-toolchain digest to c5a29dd
 (#13659)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel García <dani-garcia@users.noreply.github.com>
---
 .github/workflows/test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 8c214b99ed3..c41fcfa3afd 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -152,7 +152,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install rust
-        uses: dtolnay/rust-toolchain@a54c7afa936fefeb4456b2dd8068152669aa8203 # stable
+        uses: dtolnay/rust-toolchain@c5a29ddb4d9d194e7c84ec8c3fba61b1c31fee8c # stable
         with:
           toolchain: stable
           components: llvm-tools

From a7a5a2771eb0d39d8f5d32ca7dad4be6443c6dfd Mon Sep 17 00:00:00 2001
From: Oscar Hinton <Hinton@users.noreply.github.com>
Date: Mon, 3 Mar 2025 16:51:08 +0100
Subject: [PATCH 43/47] Remove runOnlyPendingTimers (#13581)

---
 libs/common/src/platform/services/config/config.service.spec.ts | 2 --
 1 file changed, 2 deletions(-)

diff --git a/libs/common/src/platform/services/config/config.service.spec.ts b/libs/common/src/platform/services/config/config.service.spec.ts
index 369338f945f..ea3b56a32f1 100644
--- a/libs/common/src/platform/services/config/config.service.spec.ts
+++ b/libs/common/src/platform/services/config/config.service.spec.ts
@@ -361,8 +361,6 @@ describe("ConfigService", () => {
 
       const configs = await firstValueFrom(sut.serverConfig$.pipe(bufferCount(2)));
 
-      await jest.runOnlyPendingTimersAsync();
-
       expect(configs[0].gitHash).toBe("existing-data");
       expect(configs[1].gitHash).toBe("slow-response");
     });

From 325fdc3f3a3087a35b09e445df3ce34b7e4e0bf6 Mon Sep 17 00:00:00 2001
From: Oscar Hinton <Hinton@users.noreply.github.com>
Date: Mon, 3 Mar 2025 16:59:50 +0100
Subject: [PATCH 44/47] [PM-18659] Remove console logs from importers unit
 tests (#13583)

* Remove console logs from importers unit tests

* Add fixme
---
 libs/importer/src/importers/base-importer.ts                 | 1 +
 .../src/importers/passsordxp/passwordxp-csv-importer.spec.ts | 2 ++
 libs/importer/src/importers/roboform-csv-importer.spec.ts    | 5 +++++
 libs/importer/src/importers/securesafe-csv-importer.spec.ts  | 5 +++++
 4 files changed, 13 insertions(+)

diff --git a/libs/importer/src/importers/base-importer.ts b/libs/importer/src/importers/base-importer.ts
index 1992f676e29..90af5344cfc 100644
--- a/libs/importer/src/importers/base-importer.ts
+++ b/libs/importer/src/importers/base-importer.ts
@@ -20,6 +20,7 @@ import { ImportResult } from "../models/import-result";
 export abstract class BaseImporter {
   organizationId: string = null;
 
+  // FIXME: This should be replaced by injecting the log service.
   protected logService: LogService = new ConsoleLogService(false);
 
   protected newLineRegex = /(?:\r\n|\r|\n)/;
diff --git a/libs/importer/src/importers/passsordxp/passwordxp-csv-importer.spec.ts b/libs/importer/src/importers/passsordxp/passwordxp-csv-importer.spec.ts
index 1bcc79723ab..0decd1e2830 100644
--- a/libs/importer/src/importers/passsordxp/passwordxp-csv-importer.spec.ts
+++ b/libs/importer/src/importers/passsordxp/passwordxp-csv-importer.spec.ts
@@ -48,6 +48,8 @@ describe("PasswordXPCsvImporter", () => {
 
   beforeEach(() => {
     importer = new PasswordXPCsvImporter();
+    // Importers currently create their own ConsoleLogService. This should be replaced by injecting a test log service.
+    jest.spyOn(console, "warn").mockImplementation();
   });
 
   it("should return success false if CSV data is null", async () => {
diff --git a/libs/importer/src/importers/roboform-csv-importer.spec.ts b/libs/importer/src/importers/roboform-csv-importer.spec.ts
index 2779a9ddb64..dd385e10b8d 100644
--- a/libs/importer/src/importers/roboform-csv-importer.spec.ts
+++ b/libs/importer/src/importers/roboform-csv-importer.spec.ts
@@ -5,6 +5,11 @@ import { data as dataNoFolder } from "./spec-data/roboform-csv/empty-folders";
 import { data as dataFolder } from "./spec-data/roboform-csv/with-folders";
 
 describe("Roboform CSV Importer", () => {
+  beforeEach(() => {
+    // Importers currently create their own ConsoleLogService. This should be replaced by injecting a test log service.
+    jest.spyOn(console, "warn").mockImplementation();
+  });
+
   it("should parse CSV data", async () => {
     const importer = new RoboFormCsvImporter();
     const result = await importer.parse(dataNoFolder);
diff --git a/libs/importer/src/importers/securesafe-csv-importer.spec.ts b/libs/importer/src/importers/securesafe-csv-importer.spec.ts
index 799c3c6e9d5..e5ddbf75382 100644
--- a/libs/importer/src/importers/securesafe-csv-importer.spec.ts
+++ b/libs/importer/src/importers/securesafe-csv-importer.spec.ts
@@ -51,6 +51,11 @@ const CipherData = [
 ];
 
 describe("SecureSafe CSV Importer", () => {
+  beforeEach(() => {
+    // Importers currently create their own ConsoleLogService. This should be replaced by injecting a test log service.
+    jest.spyOn(console, "warn").mockImplementation();
+  });
+
   CipherData.forEach((data) => {
     it(data.title, async () => {
       const importer = new SecureSafeCsvImporter();

From 5b215cf193bb19d5001db4fb98ab87d73d781f72 Mon Sep 17 00:00:00 2001
From: Shane Melton <smelton@bitwarden.com>
Date: Mon, 3 Mar 2025 08:33:48 -0800
Subject: [PATCH 45/47] [PM-18707] Fix desktop live sync (#13624)

* [PM-18707] Remove redundant cipherService subscription

* [PM-18707] Add artificial tick delay to cipherService to allow for ElectronStore storage service to fully save before continuing
---
 .../vault/components/vault-items.component.ts | 20 ++-----------------
 .../src/vault/services/cipher.service.ts      | 11 ++++++++--
 2 files changed, 11 insertions(+), 20 deletions(-)

diff --git a/libs/angular/src/vault/components/vault-items.component.ts b/libs/angular/src/vault/components/vault-items.component.ts
index fb76ff500eb..fa25bfc8254 100644
--- a/libs/angular/src/vault/components/vault-items.component.ts
+++ b/libs/angular/src/vault/components/vault-items.component.ts
@@ -1,8 +1,7 @@
 // FIXME: Update this file to be type safe and remove this and next line
 // @ts-strict-ignore
 import { Directive, EventEmitter, Input, OnDestroy, OnInit, Output } from "@angular/core";
-import { takeUntilDestroyed } from "@angular/core/rxjs-interop";
-import { BehaviorSubject, Subject, firstValueFrom, from, map, switchMap, takeUntil } from "rxjs";
+import { BehaviorSubject, Subject, firstValueFrom, from, switchMap, takeUntil } from "rxjs";
 
 import { SearchService } from "@bitwarden/common/abstractions/search.service";
 import { Organization } from "@bitwarden/common/admin-console/models/domain/organization";
@@ -22,11 +21,9 @@ export class VaultItemsComponent implements OnInit, OnDestroy {
 
   loaded = false;
   ciphers: CipherView[] = [];
-  searchPlaceholder: string = null;
   filter: (cipher: CipherView) => boolean = null;
   deleted = false;
   organization: Organization;
-  accessEvents = false;
 
   protected searchPending = false;
 
@@ -45,20 +42,7 @@ export class VaultItemsComponent implements OnInit, OnDestroy {
     protected searchService: SearchService,
     protected cipherService: CipherService,
     protected accountService: AccountService,
-  ) {
-    this.accountService.activeAccount$
-      .pipe(
-        getUserId,
-        switchMap((userId) =>
-          this.cipherService.cipherViews$(userId).pipe(map((ciphers) => ({ userId, ciphers }))),
-        ),
-        takeUntilDestroyed(),
-      )
-      .subscribe(({ userId, ciphers }) => {
-        void this.doSearch(ciphers, userId);
-        this.loaded = true;
-      });
-  }
+  ) {}
 
   ngOnInit(): void {
     this._searchText$
diff --git a/libs/common/src/vault/services/cipher.service.ts b/libs/common/src/vault/services/cipher.service.ts
index e66b6be0524..05c875e7546 100644
--- a/libs/common/src/vault/services/cipher.service.ts
+++ b/libs/common/src/vault/services/cipher.service.ts
@@ -980,10 +980,14 @@ export class CipherService implements CipherServiceAbstraction {
 
   async upsert(cipher: CipherData | CipherData[]): Promise<Record<CipherId, CipherData>> {
     const ciphers = cipher instanceof CipherData ? [cipher] : cipher;
-    return await this.updateEncryptedCipherState((current) => {
+    const res = await this.updateEncryptedCipherState((current) => {
       ciphers.forEach((c) => (current[c.id as CipherId] = c));
       return current;
     });
+    // Some state storage providers (e.g. Electron) don't update the state immediately, wait for next tick
+    // Otherwise, subscribers to cipherViews$ can get stale data
+    await new Promise((resolve) => setTimeout(resolve, 0));
+    return res;
   }
 
   async replace(ciphers: { [id: string]: CipherData }, userId: UserId): Promise<any> {
@@ -1000,13 +1004,16 @@ export class CipherService implements CipherServiceAbstraction {
     userId: UserId = null,
   ): Promise<Record<CipherId, CipherData>> {
     userId ||= await firstValueFrom(this.stateProvider.activeUserId$);
-    await this.clearDecryptedCiphersState(userId);
+    await this.clearCache(userId);
     const updatedCiphers = await this.stateProvider
       .getUser(userId, ENCRYPTED_CIPHERS)
       .update((current) => {
         const result = update(current ?? {});
         return result;
       });
+    // Some state storage providers (e.g. Electron) don't update the state immediately, wait for next tick
+    // Otherwise, subscribers to cipherViews$ can get stale data
+    await new Promise((resolve) => setTimeout(resolve, 0));
     return updatedCiphers;
   }
 

From b5b791f414914849b449107fa77299b41f74188e Mon Sep 17 00:00:00 2001
From: Daniel Riera <driera@livefront.com>
Date: Mon, 3 Mar 2025 11:36:31 -0500
Subject: [PATCH 46/47] PM-18471-migrated all messages to catalog (#13618)

* PM-18471-migrated all messages to catalog

* updated error message
---
 apps/browser/src/_locales/en/messages.json    | 32 +++++++++++++++++++
 apps/browser/src/autofill/notification/bar.ts | 32 +++++++++----------
 2 files changed, 47 insertions(+), 17 deletions(-)

diff --git a/apps/browser/src/_locales/en/messages.json b/apps/browser/src/_locales/en/messages.json
index b6c44405ffa..e9602ae96c0 100644
--- a/apps/browser/src/_locales/en/messages.json
+++ b/apps/browser/src/_locales/en/messages.json
@@ -1088,6 +1088,38 @@
       },
       "description": "Shown to user after login is updated."
   },
+  "saveAsNewLoginAction": {
+    "message": "Save as new login",
+    "description": "Button text for saving login details as a new entry."
+  },
+  "updateLoginAction": {
+    "message": "Update login",
+    "description": "Button text for updating an existing login entry."
+  },
+  "saveLoginPrompt": {
+    "message": "Save login?",
+    "description": "Prompt asking the user if they want to save their login details."
+  },
+  "updateLoginPrompt": {
+    "message": "Update existing login?",
+    "description": "Prompt asking the user if they want to update an existing login entry."
+  },
+  "loginSaveSuccess": {
+    "message": "Login saved",
+    "description": "Message displayed when login details are successfully saved."
+  },
+  "loginUpdateSuccess": {
+    "message": "Login updated",
+    "description": "Message displayed when login details are successfully updated."
+  },
+  "saveFailure": {
+    "message": "Error saving",
+    "description": "Error message shown when the system fails to save login details."
+  },
+  "saveFailureDetails": {
+    "message": "Oh no! We couldn't save this. Try entering the details manually.",
+    "description": "Detailed error message shown when saving login details fails."
+  },
   "enableChangedPasswordNotification": {
     "message": "Ask to update existing login"
   },
diff --git a/apps/browser/src/autofill/notification/bar.ts b/apps/browser/src/autofill/notification/bar.ts
index a31f1b4fdbc..c3f29e1332f 100644
--- a/apps/browser/src/autofill/notification/bar.ts
+++ b/apps/browser/src/autofill/notification/bar.ts
@@ -53,30 +53,28 @@ function getI18n() {
   return {
     appName: chrome.i18n.getMessage("appName"),
     close: chrome.i18n.getMessage("close"),
-    never: chrome.i18n.getMessage("never"),
     folder: chrome.i18n.getMessage("folder"),
+    loginSaveSuccess: chrome.i18n.getMessage("loginSaveSuccess"),
     loginSaveSuccessDetails: chrome.i18n.getMessage("loginSaveSuccessDetails"),
+    loginUpdateSuccess: chrome.i18n.getMessage("loginUpdateSuccess"),
     loginUpdateSuccessDetails: chrome.i18n.getMessage("loginUpdatedSuccessDetails"),
-    notificationAddSave: chrome.i18n.getMessage("notificationAddSave"),
+    newItem: chrome.i18n.getMessage("newItem"),
+    never: chrome.i18n.getMessage("never"),
     notificationAddDesc: chrome.i18n.getMessage("notificationAddDesc"),
-    notificationEdit: chrome.i18n.getMessage("edit"),
-    notificationChangeSave: chrome.i18n.getMessage("notificationChangeSave"),
+    notificationAddSave: chrome.i18n.getMessage("notificationAddSave"),
     notificationChangeDesc: chrome.i18n.getMessage("notificationChangeDesc"),
+    notificationChangeSave: chrome.i18n.getMessage("notificationChangeSave"),
+    notificationEdit: chrome.i18n.getMessage("edit"),
     notificationUnlock: chrome.i18n.getMessage("notificationUnlock"),
     notificationUnlockDesc: chrome.i18n.getMessage("notificationUnlockDesc"),
-
-    // @TODO move values to message catalog
-    saveAction: "Save",
-    saveAsNewLoginAction: "Save as new login",
-    updateLoginAction: "Update login",
-    saveLoginPrompt: "Save login?",
-    updateLoginPrompt: "Update existing login?",
-    loginSaveSuccess: "Login saved",
-    loginUpdateSuccess: "Login updated",
-    saveFailure: "Error saving",
-    saveFailureDetails: "Oh no! We couldn't save this. Try entering the details as a New item",
-    newItem: "New item",
-    view: "View",
+    saveAction: chrome.i18n.getMessage("notificationAddSave"),
+    saveAsNewLoginAction: chrome.i18n.getMessage("saveAsNewLoginAction"),
+    saveFailure: chrome.i18n.getMessage("saveFailure"),
+    saveFailureDetails: chrome.i18n.getMessage("saveFailureDetails"),
+    saveLoginPrompt: chrome.i18n.getMessage("saveLoginPrompt"),
+    updateLoginAction: chrome.i18n.getMessage("updateLoginAction"),
+    updateLoginPrompt: chrome.i18n.getMessage("updateLoginPrompt"),
+    view: chrome.i18n.getMessage("view"),
   };
 }
 

From 92f027af5e88a900473ef82282a8a4c6ddac273a Mon Sep 17 00:00:00 2001
From: Jared Snider <116684653+JaredSnider-Bitwarden@users.noreply.github.com>
Date: Mon, 3 Mar 2025 12:09:35 -0500
Subject: [PATCH 47/47] fix(LoginComp + LoginStrategies): [Auth/PM-18654]
 Refreshed UI - Desktop TDE JIT provisioned user creation errors with missing
 org SSO id (#13619)

* PM-18654 - State Service & Login Strategy Refactor - move env seeding into login strategy so that new accounts always load w/ the correct environment

* PM-18654 - SSO Comp - just use user id from auth result

* PM-18654 - Config Service - (1) don't allow cascading calls to the renewConfig by using a private promise (2) Replace shareReplay with share configured with manual timer

* PM-18654 - LoginComponents - detail issue and possible fix

* PM-18654 - DesktopLoginV1Comp - use correct destroy hook

* PM-18654 - LoginComp - clean up no longer correct comment

* PM-18654 - New Device Verification Component - Remove unused PasswordLoginStrategy dependency

* PM-18654 - Browser Home Component - fix qParam logic

* PM-18654 - DefaultConfigService - revert changes as they aren't necessary to fix the bug.

* PM-18654 - DefaultConfigService - remove commented code

* PM-18654 - LoginStrategy - add comment

* PM-18654 - Fix login strat tests
---
 apps/browser/src/auth/popup/home.component.ts |  4 ++-
 .../src/auth/login/login-v1.component.ts      |  9 ++---
 .../src/services/jslib-services.module.ts     | 33 -------------------
 .../auth/src/angular/login/login.component.ts |  3 +-
 .../new-device-verification.component.ts      |  2 --
 libs/auth/src/angular/sso/sso.component.ts    |  8 ++---
 .../auth-request-login.strategy.spec.ts       |  4 +++
 .../login-strategies/login.strategy.spec.ts   |  6 ++++
 .../common/login-strategies/login.strategy.ts |  6 ++++
 .../password-login.strategy.spec.ts           |  4 +++
 .../sso-login.strategy.spec.ts                |  4 +++
 .../user-api-login.strategy.spec.ts           |  2 +-
 .../user-api-login.strategy.ts                |  2 --
 .../webauthn-login.strategy.spec.ts           |  4 +++
 .../login-strategy.service.ts                 |  2 +-
 .../src/platform/services/state.service.ts    |  1 -
 16 files changed, 44 insertions(+), 50 deletions(-)

diff --git a/apps/browser/src/auth/popup/home.component.ts b/apps/browser/src/auth/popup/home.component.ts
index dbdcf7d5aa8..0c4510204d1 100644
--- a/apps/browser/src/auth/popup/home.component.ts
+++ b/apps/browser/src/auth/popup/home.component.ts
@@ -81,8 +81,10 @@ export class HomeComponent implements OnInit, OnDestroy {
         tap(async (flag) => {
           // If the flag is turned ON, we must force a reload to ensure the correct UI is shown
           if (flag) {
+            const qParams = await firstValueFrom(this.route.queryParams);
+
             const uniqueQueryParams = {
-              ...this.route.queryParams,
+              ...qParams,
               // adding a unique timestamp to the query params to force a reload
               t: new Date().getTime().toString(),
             };
diff --git a/apps/desktop/src/auth/login/login-v1.component.ts b/apps/desktop/src/auth/login/login-v1.component.ts
index 5d1a1d818d5..ff8688353be 100644
--- a/apps/desktop/src/auth/login/login-v1.component.ts
+++ b/apps/desktop/src/auth/login/login-v1.component.ts
@@ -3,7 +3,7 @@
 import { Component, NgZone, OnDestroy, OnInit, ViewChild, ViewContainerRef } from "@angular/core";
 import { FormBuilder } from "@angular/forms";
 import { ActivatedRoute, Router } from "@angular/router";
-import { Subject, takeUntil, tap } from "rxjs";
+import { Subject, firstValueFrom, takeUntil, tap } from "rxjs";
 
 import { LoginComponentV1 as BaseLoginComponent } from "@bitwarden/angular/auth/components/login-v1.component";
 import { FormValidationErrorsService } from "@bitwarden/angular/platform/abstractions/form-validation-errors.service";
@@ -143,10 +143,11 @@ export class LoginComponentV1 extends BaseLoginComponent implements OnInit, OnDe
       .getFeatureFlag$(FeatureFlag.UnauthenticatedExtensionUIRefresh)
       .pipe(
         tap(async (flag) => {
-          // If the flag is turned ON, we must force a reload to ensure the correct UI is shown
           if (flag) {
+            const qParams = await firstValueFrom(this.route.queryParams);
+
             const uniqueQueryParams = {
-              ...this.route.queryParams,
+              ...qParams,
               // adding a unique timestamp to the query params to force a reload
               t: new Date().getTime().toString(),
             };
@@ -156,7 +157,7 @@ export class LoginComponentV1 extends BaseLoginComponent implements OnInit, OnDe
             });
           }
         }),
-        takeUntil(this.destroy$),
+        takeUntil(this.componentDestroyed$),
       )
       .subscribe();
   }
diff --git a/libs/angular/src/services/jslib-services.module.ts b/libs/angular/src/services/jslib-services.module.ts
index 3fb578ff7a9..dc6c049101a 100644
--- a/libs/angular/src/services/jslib-services.module.ts
+++ b/libs/angular/src/services/jslib-services.module.ts
@@ -45,8 +45,6 @@ import {
   DefaultAuthRequestApiService,
   DefaultLoginSuccessHandlerService,
   LoginSuccessHandlerService,
-  PasswordLoginStrategy,
-  PasswordLoginStrategyData,
   LoginApprovalComponentServiceAbstraction,
 } from "@bitwarden/auth/common";
 import { ApiService as ApiServiceAbstraction } from "@bitwarden/common/abstractions/api.service";
@@ -1460,37 +1458,6 @@ const safeProviders: SafeProvider[] = [
     useClass: DefaultLoginSuccessHandlerService,
     deps: [SyncService, UserAsymmetricKeysRegenerationService],
   }),
-  safeProvider({
-    provide: PasswordLoginStrategy,
-    useClass: PasswordLoginStrategy,
-    deps: [
-      PasswordLoginStrategyData,
-      PasswordStrengthServiceAbstraction,
-      PolicyServiceAbstraction,
-      LoginStrategyServiceAbstraction,
-      AccountServiceAbstraction,
-      InternalMasterPasswordServiceAbstraction,
-      KeyService,
-      EncryptService,
-      ApiServiceAbstraction,
-      TokenServiceAbstraction,
-      AppIdServiceAbstraction,
-      PlatformUtilsServiceAbstraction,
-      MessagingServiceAbstraction,
-      LogService,
-      StateServiceAbstraction,
-      TwoFactorServiceAbstraction,
-      InternalUserDecryptionOptionsServiceAbstraction,
-      BillingAccountProfileStateService,
-      VaultTimeoutSettingsService,
-      KdfConfigService,
-    ],
-  }),
-  safeProvider({
-    provide: PasswordLoginStrategyData,
-    useClass: PasswordLoginStrategyData,
-    deps: [],
-  }),
   safeProvider({
     provide: TaskService,
     useClass: DefaultTaskService,
diff --git a/libs/auth/src/angular/login/login.component.ts b/libs/auth/src/angular/login/login.component.ts
index a84fb93bd23..c291a64a8c5 100644
--- a/libs/auth/src/angular/login/login.component.ts
+++ b/libs/auth/src/angular/login/login.component.ts
@@ -161,8 +161,9 @@ export class LoginComponent implements OnInit, OnDestroy {
         tap(async (flag) => {
           // If the flag is turned OFF, we must force a reload to ensure the correct UI is shown
           if (!flag) {
+            const qParams = await firstValueFrom(this.activatedRoute.queryParams);
             const uniqueQueryParams = {
-              ...this.activatedRoute.queryParams,
+              ...qParams,
               // adding a unique timestamp to the query params to force a reload
               t: new Date().getTime().toString(), // Adding a unique timestamp as a query parameter
             };
diff --git a/libs/auth/src/angular/new-device-verification/new-device-verification.component.ts b/libs/auth/src/angular/new-device-verification/new-device-verification.component.ts
index 6e0f9eec05e..6c48a471d08 100644
--- a/libs/auth/src/angular/new-device-verification/new-device-verification.component.ts
+++ b/libs/auth/src/angular/new-device-verification/new-device-verification.component.ts
@@ -20,7 +20,6 @@ import {
 
 import { LoginEmailServiceAbstraction } from "../../common/abstractions/login-email.service";
 import { LoginStrategyServiceAbstraction } from "../../common/abstractions/login-strategy.service";
-import { PasswordLoginStrategy } from "../../common/login-strategies/password-login.strategy";
 
 /**
  * Component for verifying a new device via a one-time password (OTP).
@@ -58,7 +57,6 @@ export class NewDeviceVerificationComponent implements OnInit, OnDestroy {
   constructor(
     private router: Router,
     private formBuilder: FormBuilder,
-    private passwordLoginStrategy: PasswordLoginStrategy,
     private apiService: ApiService,
     private loginStrategyService: LoginStrategyServiceAbstraction,
     private logService: LogService,
diff --git a/libs/auth/src/angular/sso/sso.component.ts b/libs/auth/src/angular/sso/sso.component.ts
index cc9e5f83c01..ce63769ffca 100644
--- a/libs/auth/src/angular/sso/sso.component.ts
+++ b/libs/auth/src/angular/sso/sso.component.ts
@@ -427,7 +427,6 @@ export class SsoComponent implements OnInit {
       );
       this.formPromise = this.loginStrategyService.logIn(credentials);
       const authResult = await this.formPromise;
-
       if (authResult.requiresTwoFactor) {
         return await this.handleTwoFactorRequired(orgSsoIdentifier);
       }
@@ -441,9 +440,10 @@ export class SsoComponent implements OnInit {
       // - Browser SSO on extension open
       // Note: you cannot set this in state before 2FA b/c there won't be an account in state.
 
-      // Grabbing the active user id right before making the state set to ensure it exists.
-      const userId = (await firstValueFrom(this.accountService.activeAccount$))?.id;
-      await this.ssoLoginService.setActiveUserOrganizationSsoIdentifier(orgSsoIdentifier, userId);
+      await this.ssoLoginService.setActiveUserOrganizationSsoIdentifier(
+        orgSsoIdentifier,
+        authResult.userId,
+      );
 
       // must come after 2fa check since user decryption options aren't available if 2fa is required
       const userDecryptionOpts = await firstValueFrom(
diff --git a/libs/auth/src/common/login-strategies/auth-request-login.strategy.spec.ts b/libs/auth/src/common/login-strategies/auth-request-login.strategy.spec.ts
index ec0918b4197..0646da4862b 100644
--- a/libs/auth/src/common/login-strategies/auth-request-login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/auth-request-login.strategy.spec.ts
@@ -14,6 +14,7 @@ import {
   VaultTimeoutSettingsService,
 } from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
+import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
@@ -53,6 +54,7 @@ describe("AuthRequestLoginStrategy", () => {
   let billingAccountProfileStateService: MockProxy<BillingAccountProfileStateService>;
   let vaultTimeoutSettingsService: MockProxy<VaultTimeoutSettingsService>;
   let kdfConfigService: MockProxy<KdfConfigService>;
+  let environmentService: MockProxy<EnvironmentService>;
 
   const mockUserId = Utils.newGuid() as UserId;
   let accountService: FakeAccountService;
@@ -88,6 +90,7 @@ describe("AuthRequestLoginStrategy", () => {
     billingAccountProfileStateService = mock<BillingAccountProfileStateService>();
     vaultTimeoutSettingsService = mock<VaultTimeoutSettingsService>();
     kdfConfigService = mock<KdfConfigService>();
+    environmentService = mock<EnvironmentService>();
 
     accountService = mockAccountServiceWith(mockUserId);
     masterPasswordService = new FakeMasterPasswordService();
@@ -117,6 +120,7 @@ describe("AuthRequestLoginStrategy", () => {
       billingAccountProfileStateService,
       vaultTimeoutSettingsService,
       kdfConfigService,
+      environmentService,
     );
 
     tokenResponse = identityTokenResponseFactory();
diff --git a/libs/auth/src/common/login-strategies/login.strategy.spec.ts b/libs/auth/src/common/login-strategies/login.strategy.spec.ts
index e1558a3de8b..b4a1e6a77d9 100644
--- a/libs/auth/src/common/login-strategies/login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/login.strategy.spec.ts
@@ -25,6 +25,7 @@ import {
   VaultTimeoutSettingsService,
 } from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
+import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
@@ -123,6 +124,7 @@ describe("LoginStrategy", () => {
   let billingAccountProfileStateService: MockProxy<BillingAccountProfileStateService>;
   let vaultTimeoutSettingsService: MockProxy<VaultTimeoutSettingsService>;
   let kdfConfigService: MockProxy<KdfConfigService>;
+  let environmentService: MockProxy<EnvironmentService>;
 
   let passwordLoginStrategy: PasswordLoginStrategy;
   let credentials: PasswordLoginCredentials;
@@ -147,6 +149,7 @@ describe("LoginStrategy", () => {
     policyService = mock<PolicyService>();
     passwordStrengthService = mock<PasswordStrengthService>();
     billingAccountProfileStateService = mock<BillingAccountProfileStateService>();
+    environmentService = mock<EnvironmentService>();
 
     vaultTimeoutSettingsService = mock<VaultTimeoutSettingsService>();
 
@@ -175,6 +178,7 @@ describe("LoginStrategy", () => {
       billingAccountProfileStateService,
       vaultTimeoutSettingsService,
       kdfConfigService,
+      environmentService,
     );
     credentials = new PasswordLoginCredentials(email, masterPassword);
   });
@@ -496,6 +500,7 @@ describe("LoginStrategy", () => {
         billingAccountProfileStateService,
         vaultTimeoutSettingsService,
         kdfConfigService,
+        environmentService,
       );
 
       apiService.postIdentityToken.mockResolvedValue(identityTokenResponseFactory());
@@ -559,6 +564,7 @@ describe("LoginStrategy", () => {
         billingAccountProfileStateService,
         vaultTimeoutSettingsService,
         kdfConfigService,
+        environmentService,
       );
 
       const result = await passwordLoginStrategy.logIn(credentials);
diff --git a/libs/auth/src/common/login-strategies/login.strategy.ts b/libs/auth/src/common/login-strategies/login.strategy.ts
index a7299c7f0d0..89802c609c0 100644
--- a/libs/auth/src/common/login-strategies/login.strategy.ts
+++ b/libs/auth/src/common/login-strategies/login.strategy.ts
@@ -27,6 +27,7 @@ import {
 } from "@bitwarden/common/key-management/vault-timeout";
 import { KeysRequest } from "@bitwarden/common/models/request/keys.request";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
+import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
@@ -93,6 +94,7 @@ export abstract class LoginStrategy {
     protected billingAccountProfileStateService: BillingAccountProfileStateService,
     protected vaultTimeoutSettingsService: VaultTimeoutSettingsService,
     protected KdfConfigService: KdfConfigService,
+    protected environmentService: EnvironmentService,
   ) {}
 
   abstract exportCache(): CacheData;
@@ -196,6 +198,10 @@ export abstract class LoginStrategy {
       emailVerified: accountInformation.email_verified ?? false,
     });
 
+    // User env must be seeded from currently set env before switching to the account
+    // to avoid any incorrect emissions of the global default env.
+    await this.environmentService.seedUserEnvironment(userId);
+
     await this.accountService.switchAccount(userId);
 
     await this.stateService.addAccount(
diff --git a/libs/auth/src/common/login-strategies/password-login.strategy.spec.ts b/libs/auth/src/common/login-strategies/password-login.strategy.spec.ts
index 78fad4443c3..0821405e535 100644
--- a/libs/auth/src/common/login-strategies/password-login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/password-login.strategy.spec.ts
@@ -18,6 +18,7 @@ import {
   VaultTimeoutSettingsService,
 } from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
+import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
@@ -80,6 +81,7 @@ describe("PasswordLoginStrategy", () => {
   let billingAccountProfileStateService: MockProxy<BillingAccountProfileStateService>;
   let vaultTimeoutSettingsService: MockProxy<VaultTimeoutSettingsService>;
   let kdfConfigService: MockProxy<KdfConfigService>;
+  let environmentService: MockProxy<EnvironmentService>;
 
   let passwordLoginStrategy: PasswordLoginStrategy;
   let credentials: PasswordLoginCredentials;
@@ -106,6 +108,7 @@ describe("PasswordLoginStrategy", () => {
     billingAccountProfileStateService = mock<BillingAccountProfileStateService>();
     vaultTimeoutSettingsService = mock<VaultTimeoutSettingsService>();
     kdfConfigService = mock<KdfConfigService>();
+    environmentService = mock<EnvironmentService>();
 
     appIdService.getAppId.mockResolvedValue(deviceId);
     tokenService.decodeAccessToken.mockResolvedValue({
@@ -144,6 +147,7 @@ describe("PasswordLoginStrategy", () => {
       billingAccountProfileStateService,
       vaultTimeoutSettingsService,
       kdfConfigService,
+      environmentService,
     );
     credentials = new PasswordLoginCredentials(email, masterPassword);
     tokenResponse = identityTokenResponseFactory(masterPasswordPolicy);
diff --git a/libs/auth/src/common/login-strategies/sso-login.strategy.spec.ts b/libs/auth/src/common/login-strategies/sso-login.strategy.spec.ts
index 5c508dd0c56..6efb17a8d26 100644
--- a/libs/auth/src/common/login-strategies/sso-login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/sso-login.strategy.spec.ts
@@ -19,6 +19,7 @@ import {
 } from "@bitwarden/common/key-management/vault-timeout";
 import { ErrorResponse } from "@bitwarden/common/models/response/error.response";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
+import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { I18nService } from "@bitwarden/common/platform/abstractions/i18n.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
@@ -63,6 +64,7 @@ describe("SsoLoginStrategy", () => {
   let billingAccountProfileStateService: MockProxy<BillingAccountProfileStateService>;
   let vaultTimeoutSettingsService: MockProxy<VaultTimeoutSettingsService>;
   let kdfConfigService: MockProxy<KdfConfigService>;
+  let environmentService: MockProxy<EnvironmentService>;
 
   let ssoLoginStrategy: SsoLoginStrategy;
   let credentials: SsoLoginCredentials;
@@ -98,6 +100,7 @@ describe("SsoLoginStrategy", () => {
     billingAccountProfileStateService = mock<BillingAccountProfileStateService>();
     vaultTimeoutSettingsService = mock<VaultTimeoutSettingsService>();
     kdfConfigService = mock<KdfConfigService>();
+    environmentService = mock<EnvironmentService>();
 
     tokenService.getTwoFactorToken.mockResolvedValue(null);
     appIdService.getAppId.mockResolvedValue(deviceId);
@@ -142,6 +145,7 @@ describe("SsoLoginStrategy", () => {
       billingAccountProfileStateService,
       vaultTimeoutSettingsService,
       kdfConfigService,
+      environmentService,
     );
     credentials = new SsoLoginCredentials(ssoCode, ssoCodeVerifier, ssoRedirectUrl, ssoOrgId);
   });
diff --git a/libs/auth/src/common/login-strategies/user-api-login.strategy.spec.ts b/libs/auth/src/common/login-strategies/user-api-login.strategy.spec.ts
index de411c06b6b..c0c7e828b68 100644
--- a/libs/auth/src/common/login-strategies/user-api-login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/user-api-login.strategy.spec.ts
@@ -97,7 +97,6 @@ describe("UserApiLoginStrategy", () => {
 
     apiLogInStrategy = new UserApiLoginStrategy(
       cache,
-      environmentService,
       keyConnectorService,
       accountService,
       masterPasswordService,
@@ -115,6 +114,7 @@ describe("UserApiLoginStrategy", () => {
       billingAccountProfileStateService,
       vaultTimeoutSettingsService,
       kdfConfigService,
+      environmentService,
     );
 
     credentials = new UserApiLoginCredentials(apiClientId, apiClientSecret);
diff --git a/libs/auth/src/common/login-strategies/user-api-login.strategy.ts b/libs/auth/src/common/login-strategies/user-api-login.strategy.ts
index 4f6352b5d74..0bff20b4a65 100644
--- a/libs/auth/src/common/login-strategies/user-api-login.strategy.ts
+++ b/libs/auth/src/common/login-strategies/user-api-login.strategy.ts
@@ -7,7 +7,6 @@ import { KeyConnectorService } from "@bitwarden/common/auth/abstractions/key-con
 import { UserApiTokenRequest } from "@bitwarden/common/auth/models/request/identity-token/user-api-token.request";
 import { IdentityTokenResponse } from "@bitwarden/common/auth/models/response/identity-token.response";
 import { VaultTimeoutAction } from "@bitwarden/common/key-management/vault-timeout";
-import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { UserId } from "@bitwarden/common/types/guid";
 
 import { UserApiLoginCredentials } from "../models/domain/login-credentials";
@@ -31,7 +30,6 @@ export class UserApiLoginStrategy extends LoginStrategy {
 
   constructor(
     data: UserApiLoginStrategyData,
-    private environmentService: EnvironmentService,
     private keyConnectorService: KeyConnectorService,
     ...sharedDeps: ConstructorParameters<typeof LoginStrategy>
   ) {
diff --git a/libs/auth/src/common/login-strategies/webauthn-login.strategy.spec.ts b/libs/auth/src/common/login-strategies/webauthn-login.strategy.spec.ts
index f4282a4b4df..837c6a2a910 100644
--- a/libs/auth/src/common/login-strategies/webauthn-login.strategy.spec.ts
+++ b/libs/auth/src/common/login-strategies/webauthn-login.strategy.spec.ts
@@ -16,6 +16,7 @@ import {
   VaultTimeoutSettingsService,
 } from "@bitwarden/common/key-management/vault-timeout";
 import { AppIdService } from "@bitwarden/common/platform/abstractions/app-id.service";
+import { EnvironmentService } from "@bitwarden/common/platform/abstractions/environment.service";
 import { LogService } from "@bitwarden/common/platform/abstractions/log.service";
 import { MessagingService } from "@bitwarden/common/platform/abstractions/messaging.service";
 import { PlatformUtilsService } from "@bitwarden/common/platform/abstractions/platform-utils.service";
@@ -52,6 +53,7 @@ describe("WebAuthnLoginStrategy", () => {
   let billingAccountProfileStateService: MockProxy<BillingAccountProfileStateService>;
   let vaultTimeoutSettingsService: MockProxy<VaultTimeoutSettingsService>;
   let kdfConfigService: MockProxy<KdfConfigService>;
+  let environmentService: MockProxy<EnvironmentService>;
 
   let webAuthnLoginStrategy!: WebAuthnLoginStrategy;
 
@@ -95,6 +97,7 @@ describe("WebAuthnLoginStrategy", () => {
     billingAccountProfileStateService = mock<BillingAccountProfileStateService>();
     vaultTimeoutSettingsService = mock<VaultTimeoutSettingsService>();
     kdfConfigService = mock<KdfConfigService>();
+    environmentService = mock<EnvironmentService>();
 
     tokenService.getTwoFactorToken.mockResolvedValue(null);
     appIdService.getAppId.mockResolvedValue(deviceId);
@@ -120,6 +123,7 @@ describe("WebAuthnLoginStrategy", () => {
       billingAccountProfileStateService,
       vaultTimeoutSettingsService,
       kdfConfigService,
+      environmentService,
     );
 
     // Create credentials
diff --git a/libs/auth/src/common/services/login-strategies/login-strategy.service.ts b/libs/auth/src/common/services/login-strategies/login-strategy.service.ts
index 20410c76f1f..4068c09338b 100644
--- a/libs/auth/src/common/services/login-strategies/login-strategy.service.ts
+++ b/libs/auth/src/common/services/login-strategies/login-strategy.service.ts
@@ -402,6 +402,7 @@ export class LoginStrategyService implements LoginStrategyServiceAbstraction {
       this.billingAccountProfileStateService,
       this.vaultTimeoutSettingsService,
       this.kdfConfigService,
+      this.environmentService,
     ];
 
     return source.pipe(
@@ -430,7 +431,6 @@ export class LoginStrategyService implements LoginStrategyServiceAbstraction {
           case AuthenticationType.UserApiKey:
             return new UserApiLoginStrategy(
               data?.userApiKey ?? new UserApiLoginStrategyData(),
-              this.environmentService,
               this.keyConnectorService,
               ...sharedDeps,
             );
diff --git a/libs/common/src/platform/services/state.service.ts b/libs/common/src/platform/services/state.service.ts
index d452732aa3d..a78a9b37a8c 100644
--- a/libs/common/src/platform/services/state.service.ts
+++ b/libs/common/src/platform/services/state.service.ts
@@ -134,7 +134,6 @@ export class StateService<
   }
 
   async addAccount(account: TAccount) {
-    await this.environmentService.seedUserEnvironment(account.profile.userId as UserId);
     await this.updateState(async (state) => {
       state.accounts[account.profile.userId] = account;
       return state;