KeyNesta changelog

Newest first. Current as of 2026-10-10.

User-visible changes only, each dated by the commit that landed it on our main branch (or, for 13 September, by the audit recorded in STATUS.md). The web app at app.keynesta.com updates when a build is deployed, which can be a few days after the date shown, and this page does not track deploys. The iPhone and Android apps are built but not yet released, so entries about them are about code, not something you can install.

5 October 2026

• Website: Clean URLs and a new blog index. Pages are served without .html, and the blog got topic pages and a clearer index. (7b6ca40)

3 October 2026

• Website: Help center, comparison pages and platform pages. A question-titled help center, a 2FA app comparison matrix with one page per competitor, and pages for web, iPhone and Android. (8384203)

2 October 2026

• Web app: Profile, and a name that syncs across devices. The sync account shows as a person (photo or initials, name, email). The name is stored in the vault settings, so it syncs end-to-end encrypted. (90f3993, d290418)
• Web app: Sign in with Apple. Added next to Google on the sign-in screen. Restore from a backup file moved to the device-only vault screen. (5ed348a)
• Web app: Moving codes in bulk. Multi-select, a move dialog, drag and drop onto spaces and groups, and a group menu. (59a3088)
• Web app: The lock and the sync token. The master key is cleared from memory when you lock. The vault locks after the tab has been hidden past the auto-lock time. The sync token is stored encrypted. The command palette clears the clipboard and respects tap-to-reveal. New passphrases need at least 12 characters. (59a3088, d9ecc06)
• Sync: Authenticated deletions, and encryption bound to the version. A deletion record is encrypted and verified on pull, and a remote delete moves an entry to Trash instead of erasing it. Each object binds its version into its encryption, so a server cannot replay an older copy as newer. (d9ecc06)
• Server: Account and sign-in hardening. Social sign-ins link to an existing account only when its email is verified. A password reset revokes all devices and a password change revokes the others. Forgot-password answers the same way whether the address exists or not. Request size limits and per-account quotas added. (da94a30)
• Sync: Stopped a sync loop. The web and mobile app synced every couple of seconds instead of every 60. Measured against a mocked API, 13 pulls in 20 seconds fell to 1. (f2c0550)
• iPhone: Native redesign (not yet released). The iPhone app was redesigned natively. It is built and awaiting App Store release; it is not available to install yet. (d00fb2b)

21 September 2026

• Website: Launch pages. Features, encryption architecture, pricing, about, lost-phone recovery and the two persona pages. (34d63e2)

13 September 2026

• Web app: Delete your sync account in the app. Settings, Sync, Delete sync account: password and a typed DELETE confirmation, then every device, object and key slot for the account is removed. (STATUS.md)
• Web app: Command palette, and your own sync account details. A Cmd/Ctrl+K palette searches codes. Account email and password can be changed from Settings. Native dropdowns were replaced with a keyboard-friendly themed list. (STATUS.md)

What has not shipped

Nothing on this list implies passkeys, hardware security keys, shared or team vaults, an open-source release or an independent audit. None of those exist. Features lists what is built and what is not.