Changelog

Every release of the CLI, the web app and the security model.

  1. v0.2.3
    Launch
    • Security

      Onboarding asks before you leave with an unconfirmed recovery phrase, and the unlock page explains what to do if you lost it.

    • Security

      Deleting your account frees your username and removes every sign in method, so nobody can sign in to a deleted account.

  2. v0.2.2
    Signed writes
    • Security

      Writer signatures: every value is signed by the device that wrote it and checked before use. storeenv run and copy refuse unsigned or untrusted values.

    • Security

      Releases come from the open-source client repository with build provenance on every archive and npm provenance.

  3. v0.1.0
    First release
    • Security

      End-to-end encryption: one key per secret, AES-256-GCM, wrapped per reader with X25519.

    • Security

      CLI login uses a one-time exchange code. Tokens never appear in a URL.