← Changelog

October 2026

2 versions to production, 55 development entries — one backup with your identity and data, a readable copy you can export and import (also per contact and date range), short messages in push notifications, a balance history sealed to your account, deleted data that is overwritten, disappearing messages that really delete, “identity verified in person”, trusted timestamps, “Certify date”, colour labels, and sending to several contacts

Oct 1 v6.04.322 DEV A full backup now carries your account's identity as well as your data, so restoring it into a brand-new account brings everything back, and your contacts keep talking to you with no prompt
Oct 1 v6.04.322 DEV Fixed a restore hanging, an identity mismatch after the switch to the restored account, a private note leaking to a contact, and the old account taking a conversation back after a restore
Oct 1 v6.04.323 DEV Fixed a restore's progress record not being safely saved if the page was closed right away
Oct 1 v6.04.323 DEV Security: the person who sends a Pro invitation no longer creates the invited person's master key; the invited person now sets their own when they accept
Oct 1 v6.04.324 DEV Fixed a large file sent to the desktop client being unreadable after the desktop client crashed mid-receive; the transfer now resumes at the exact place and the file opens
Oct 1 v6.04.324 DEV Fixed a delivered file showing as still sending until the page was reloaded
Oct 1 v6.04.325 DEV Fixed an account with a mismatched key continuing to save data under the wrong key and then hiding real messages; the old data is now set aside intact
Oct 1 v6.04.326 DEV The confirmation texts for restoring and replacing data now say what happens to your saved data, not how it works
Oct 1 v6.04.305→327 PROD Reaches production: full backups that carry your identity and restore into a new account, deleted messages that stay deleted across all your devices, a restore that asks before deleting, account types that can never be mistaken for Admin, the “Espejo” and “Sincronizado” naming, corrected “server” wording, account deletion that clears only the device you use, new accounts that connect without a reload, safer invitations and key handling, and the Pro invitation counter, in 42 languages
Oct 1 v6.04.328 DEV The readable copy — your conversations as plain files that open without Solo2 — can now be exported and imported on the browser and the desktop app; imported messages join the chats you choose and are never sent to your contacts
Oct 1 v6.04.328 DEV There is now one backup instead of two: the identity-only export was removed, and you can leave your settings and payment history in or out when you export or restore
Oct 1 v6.04.328 DEV A new setting keeps the screen on while a chat is open (on by default, on this device only)
Oct 1 v6.04.328 DEV The desktop app now has a screen for a Pro invitation’s first password change, where the invited person creates their own key
Oct 1 v6.04.328 DEV Resuming an interrupted large-file download in the browser now continues from where it stopped, and its resume record is stored encrypted
Oct 1 v6.04.329 DEV Security: a contact could make a command look as if it came from another of your contacts; the check now happens in one place for every command, on the browser and the desktop app
Oct 2 v6.04.329 DEV Restoring a backup now asks before it deletes messages still on the device, and carries your settings, payment statement and avatar into a new account
Oct 2 v6.04.329 DEV Switching to a restored account no longer loses balance-history lines that none of your devices had received yet
Oct 2 v6.04.329 DEV Fixed the apps carrying on without a readable vault when it could not be opened; they now stop and say so
Oct 2 v6.04.329 DEV Your balance history is now sealed to your account: the server holds each line encrypted with only its month, and deletes it once two of your devices have it, or after ten days if only one does
Oct 2 v6.04.329 DEV Deleted data is now overwritten before it is removed, on the server, in the desktop app and in the browser
Oct 2 v6.04.329 DEV Account deletion now also removes your notification settings and the day’s billing line
Oct 2 v6.04.329 DEV Fixed an unused account being cleaned up while a payment for it was still on its way
Oct 2 v6.04.329 DEV When a Pro invitation is accepted, the sender’s sessions and notification subscriptions on that account are now removed
Oct 2 v6.04.329 DEV Removed the “Invite with a gift” option
Oct 2 v6.04.329 DEV Imported messages no longer count as unread, and imported chats no longer appear as connections
Oct 2 v6.04.329 DEV The readable copy’s temporary plain file is now removed from the browser’s storage after you share or download it, and when you log out
Oct 2 v6.04.330 DEV A malformed readable-copy file can no longer crash the desktop app when you import it
Oct 2 v6.04.332 DEV The delete-account page now exists in Spanish and English and lists exactly what the server keeps and for how long
Oct 2 v6.04.333 DEV Short messages can now arrive inside the push notification when you are offline, encrypted so only your device can read them; it needs both people to allow it
Oct 2 v6.04.334 DEV Fixed several problems that kept short push messages from being sent to some contacts
Oct 2 v6.04.333 DEV The desktop app now uses hardware-accelerated encryption, about a hundred times faster for large files
Oct 2 v6.04.337 DEV Fixed missing accents in several desktop app dialogs
Oct 2 v6.04.334 DEV Fixed an interrupted large-file transfer stalling when the sender started it again
Oct 2 v6.04.337 DEV Someone opening an invitation that was already used is now told so
Oct 2 v6.04.338 DEV The desktop app now asks before accepting a contact’s changed identity key, and holds the connection until you decide
Oct 2 v6.04.337 DEV Fixed desktop app menus whose click also opened the bubble underneath
Oct 2 v6.04.337 DEV Fixed the desktop app ignoring several messages from contacts — delivery and read receipts, typing, avatars — and a crash when a contact deleted the conversation
Oct 2 v6.04.339 DEV A conversation you delete is never called again by your device; if the contact calls you, they are told it was deleted
Oct 2 v6.04.338 DEV Importing a readable copy now shows its size, the free space and the date range, and is disabled until it fits
Oct 2 v6.04.338 DEV Disappearing messages now really delete: when the timer ends, the message is removed from the device — text, files (overwritten), touches, call lines and notices — on the browser and the desktop app. The timer is your own setting for what you send and is never shared with the contact
Oct 2 v6.04.338 DEV Every file now gets a content fingerprint the first time it is sent or received, on the browser and the desktop app, and backups carry it, so a restored or forwarded file can be verified
Oct 3 v6.04.339 DEV You can export a readable copy of one contact over a date range — from the browser, the desktop app and the command line
Oct 3 v6.04.339 DEV While you decide about a contact’s changed identity key, their messages are held encrypted and delivered in order if you accept; they are dropped if you refuse
Oct 3 v6.04.339 DEV The desktop app is much quieter when idle: it no longer polls and repaints constantly
Oct 3 v6.04.340 DEV You can mark a contact as “identity verified in person”: a private, encrypted note kept only on your own devices, never shown to the contact, that you can include in a readable-copy export
Oct 3 v6.04.341 DEV A small envelope next to each chat shows whether short messages in push notifications are on for you and for the contact, with the reason on tap and a notice when it changes
Oct 3 v6.04.339 DEV The server no longer keeps which account wrote to which contact in its logs, and push delivery records are deleted after 48 hours with no link to an account
Oct 3 v6.04.341 DEV A readable copy leaves out messages that have a disappearing timer, and says how many
Oct 3 v6.04.341 DEV A conversation with no messages for more than 90 days shows its time label in amber, worked out only from your own messages
Oct 3 v6.04.341 DEV A readable copy can be sealed with a trusted timestamp (off by default): independent time authorities vouch for its date, and the copy carries a guide to check it without us
Oct 3 v6.04.342 DEV “Certify date” on any file in a chat: three independent time authorities sign it, a monthly allowance depends on your plan, and you get a proof you can verify yourself
Oct 3 v6.04.342 DEV Colour labels for contacts: six colours with names, dots in the list and a one-colour filter, synced only between your own devices
Oct 3 v6.04.343 DEV A file’s date certification now lives with the file and syncs between your own devices
Oct 3 v6.04.343 DEV Every timestamp token is checked — signature, binding and certificate chain — before it counts; a forged one counts as that authority failing
Oct 3 v6.04.344 DEV Send a message or file to several contacts at once from the forward picker, with a result for each, and optionally include the date certification
Oct 3 v6.04.344 DEV An invitation link that was already used or has expired no longer shows the invitation screen
Oct 2 v6.04.327→337 PROD Reaches production: one backup that carries your identity and data, a readable copy you can export and import, a screen-on setting, short messages in push notifications, a balance history sealed to your account, deleted data that is overwritten, safer restores, the delete-account page with the full list of what we keep, hardware-accelerated encryption on desktop, and delivery receipts on desktop