Skip to content

Changelog

What's changed

RSS feed

Release v2026.08.2

· Android

Highlights

  • Codes stopped being rejected the day after a clock repair. The in-app time repair wrote a drift offset that code *generation* used but the validity *check* did not, so once the stored offset aged past its freshness window the app went on producing codes while reporting its clock as "Ok". To the user this looked like the repair working and then silently coming undone about a day later.
  • The "clock is off" warning can be dismissed again. Its close button did nothing.
  • Complimentary Premium while Play billing is unavailable. Play's payments profile is unapproved, so the Premium purchase was a dead end; a 90-day grant is offered instead, driven by a remote policy so it can be ended or extended without shipping a build.
  • The Premium screens are localised into all ten supported languages, and a Premium button that was nearly invisible in dark mode was fixed.

Fixes

  • Codes rejected as invalid/expired for about a day after repairing the device clock (Android). TotpGenerator.check() did not apply the stored drift offset's staleness rule that code generation applied, so a stale offset produced codes the server rejected while the app still displayed its time as correct. Turning on automatic date and time in the phone's settings always worked around it, and still remains the durable fix; 2.1.2 removes the case where the in-app repair itself stopped holding.
  • The "clock is off" banner's close button did nothing, so the warning could not be dismissed once shown.
  • A button on the Premium screen was almost invisible in dark mode.
  • An expired complimentary grant kept advertising itself as available, and a grant whose policy window had already closed could still be offered.

Features

  • Complimentary 90-day Premium grant while Google Play billing is unavailable, controlled by a remote policy document rather than a shipped constant.
  • Premium screens localised into every language the app supports.

auth v2026.08 — first production release

Highlights

  • Import from Google Authenticator, 2FAS, Aegis, .nexora backups and plain otpauth:// lists, by drag-drop, paste or multi-file QR
  • Account edit and delete, labels with automatic issuer categorization and grouping
  • Real issuer icons plus custom icons, encrypted on your device before upload
  • Three-state dark mode, sort/filter/search, drag and keyboard reorder, row context menus with tap-to-reveal
  • Clipboard auto-clear, account QR display behind a two-step reveal
  • Vault password reset via recovery key, and a /restore history view
  • Device clock-drift detection and duplicate-account warnings Two deliberate differences from mobile, both stated in the UI rather than silently missing: custom icons require Pro, and HOTP is not supported (a firm decision, not a temporary gap).

Fixes

  • Free-tier vaults now persist properly instead of being lost on refresh.
  • Deletions now propagate between devices. Previously a deleted account could reappear on the next sync. Deletion records live inside the encrypted snapshot, so the server never learns that a deletion happened.
  • A sync that would drop more than half your accounts, or five or more, without matching evidence now routes to a conflict screen instead of committing.
  • Cross-device sync data loss for Pro accounts fixed.
  • Cloud snapshots now survive a backend restart. Before this they were held in memory only.
  • A lapsing Pro account is no longer worse off than a free one — vault data is never paywalled, including recovery, export and restore.

Release v2026.08.1

· Android

Highlights

  • Fixed a code-display bug on narrower Android screens. On some device widths, a layout container was claiming too much of the account row, leaving the code truncated. Rows now lay out correctly across screen sizes.
  • Account list redesigned to match iOS — coloured letter avatars (same account = same colour on both platforms), a countdown ring that now actually shows time *remaining* instead of elapsed, code text that reddens in the last 5 seconds, row separators, and labelled section headers with counts.
  • Per-account menu (⋮ or long-press): Copy, Edit, Select Label, Add/Remove from widget, Push to Browser, Delete — iOS has had this for a while; Android now does too.
  • Undo after deleting an account, with a short window to bring it back before the deletion is final.
  • Deleting an account now actually removes it everywhere, including from home-screen widgets — previously a deleted account kept generating live codes (and kept its secret on disk) until the widget was manually re-curated.
  • In-app changelog is now available in all 10 supported languages (previously only English, Japanese and Chinese; the other seven silently fell back to English).
  • Fixed several freezes and crashes: the app no longer freezes while starting up, scrolling a long account list no longer freezes, Google Drive sync no longer crashes outside the US, importing a large backup (300+ accounts) no longer crashes the preview screen, and app lock no longer crashes on older Android versions (9 and 10).
  • Updated our in-app payment system to stay compliant with Google Play's requirements. If you already own Premium, you keep it — no need to buy it again.
  • Fixed the top toolbar not reaching the edges of the screen on phones with curved-edge displays.
  • Smaller app size — the download is now about 9% smaller.

Fixes

  • Codes not displaying on some smaller Android phones (the fix above).
  • Toolbar background not reaching the screen edges on curved-display phones.
  • Fixed several causes of the app freezing when opening or scrolling the account list.
  • Google Drive sync crashing for anyone outside the US time zone.
  • Crash when previewing a large import (300+ accounts) from Aegis, 2FAS, or Google Authenticator.
  • App lock crashing on Android 9 and 10 for some fingerprint or face-unlock setups.
  • Deleted accounts no longer linger in home-screen widgets, generating codes after deletion.
  • A newly added account no longer loses its label colour; the drag handle now shows on every row while reordering; adding a second account from the row menu no longer drops the first one from the widget.
  • Manual-entry Save button now stays reachable above the keyboard instead of scrolling off screen.
  • Better support for large screens and rotation, and faster-loading account icons.
  • Fixed a handful of rare crashes, including one related to the rate-this-app prompt and one when importing very large files.

Features

  • Per-account overflow/long-press context menu (iOS parity).
  • Account list visual parity with iOS (avatars, countdown ring, code colour, separators, section headers).
  • Undo after deleting an account.
  • In-app changelog localised to all 10 languages.
  • Support emails now carry app version, build, OS and device automatically, to make bug reports reproducible.

Release v2026.08

· Android · iOS

Highlights

  • Your codes are now encrypted on the device, with an optional high-security mode that binds the vault to your device unlock.
  • Import from other authenticators. Google Authenticator exports, Aegis encrypted vaults, 2FAS backups, and plain otpauth:// lists can all be brought across, with a new intro screen explaining each path.
  • Cloud sync is faster and more reliable. Drive sync now runs in both directions and merges changes across your devices, so additions, edits and deletions made on one device show up correctly on the others.
  • Recovery snapshots. Point-in-time vault snapshots you can restore from if something goes wrong.
  • Japanese and Simplified Chinese join the supported languages.
  • Time-drift repair, so codes keep working when the device clock is wrong.

Fixes

  • Widget: refresh icon rendered black instead of white; the lock icon showed the opposite state to the code it described; widgets could not be resized narrower than their placement width.
  • Widgets could crash and copy the wrong code.
  • Drive sync crashes and silent data loss fixed; sync history no longer crashes on vaults with many snapshots.
  • Sync no longer fires off a burst of rapid writes in a row, edits made mid-sync are no longer dropped, and the sync icon now spins for every sync, not just when you tap it in the toolbar.
  • Restoring a purchase now lands on cloud-sync setup, matching the buy path.
  • Toolbar icons pack correctly so hidden ones leave no gap.
  • Crash on corrupt or cross-platform account data.
  • Notifications were silently broken on Android 13 and newer due to a missing permission request.
  • Fixed a crash when denying or partially granting a permission request.
  • Fixed manual account entry rejecting some valid codes and cutting off long ones.
  • Stricter validation of scanned QR codes.
  • Fixed a bug that could show incorrect dates and cause errors on launch.
  • Improved account list loading speed and responsiveness.
  • Fixed a memory leak in the QR scanner.

Features

  • Clipboard auto-clear for copied codes.

Release v2026.07 — iOS 1.24 + supporting services

· iOS

Highlights

  • Stronger on-device protection for your codes, with a carefully staged migration for existing accounts.
  • Import from other authenticators. Bring your accounts across from a plain otpauth:// list, a Google Authenticator export QR code (including multi-part exports), an Aegis encrypted backup, or a 2FAS backup — with a preview step, duplicate detection, and a check for anything we can't import.
  • More reliable sync. Fixed a rare bug where syncing on two devices at once could lose an edit, and another where sync could silently delete accounts it shouldn't have. Account recovery now keeps a history of snapshots you can restore from, with undo after deleting. A missing backup file is now automatically re-created instead of just failing quietly.
  • Widgets rebuilt for iOS 18. Codes are now hidden on the lock screen when app lock is on, accounts using less common code formats now generate the right code, and a clock-drift issue affecting widgets can now be fixed with one tap.
  • App Store compliance updates behind the scenes to keep the app meeting Apple's latest privacy requirements.
  • Smaller improvements: view an account's QR code again for re-scanning or moving to another device (protected by Face ID/Touch ID); import a QR code image from Files, not just Photos; search now matches on multiple words at once; accounts can be automatically sorted into categories by service, with a preview before it's applied; and copied codes now clear from the clipboard automatically.

Fixes (iOS)

  • Data loss and recovery: fixed a class of bugs where an account could disappear after an app update; restoring a backup no longer creates duplicate accounts; syncing no longer loses an account's code format, custom image, or category; and several safeguards were added so an account's secret can never be accidentally wiped.
  • Code accuracy: fixed several edge cases where adding an account by link or QR code could silently generate the wrong code, or accept a code that wasn't actually valid. Unsupported or invalid secret keys are now rejected with a clear message instead of quietly producing wrong codes.
  • Sync compatibility: restoring a backup across different app versions or platforms is more reliable, and accounts are no longer accidentally removed during sync.
  • Purchases: Premium no longer briefly appears disabled when opening the app offline, and a clearer message now shows if a purchase isn't available.
  • App lock: the app now locks properly even after being backgrounded from Control Center, turning off app lock now requires authentication, and several widget and import crashes are fixed.