Skip to content

Changelog

Product updates

v0.1.0
Initial release candidate
  • Browser-side AES-256-GCM encryption with HKDF-SHA256 key separation and 256-byte padding.
  • Passphrase protection with Argon2id and server-verifiable proofs — wrong passphrases never consume a secret.
  • Transactional, concurrency-safe one-time redemption; multi-view links on paid plans.
  • Private receipt links to check status or destroy a secret before it is read.
  • Optional accounts: email verification, password reset, passkeys, TOTP two-factor, session management.
  • Dashboard with metadata-only history, search, filters and notifications.
  • REST API v1 with OpenAPI spec, hashed API keys with scopes, idempotency keys and live/test environments.
  • HMAC-signed webhooks with retries; CLI for creating and opening secrets from the terminal.
  • Organizations with invitations and roles; Stripe billing integration (when configured).