All releases

Version 0.84.2

2026-08-21 08:26:47 UTC

HotfixBeta

Security

1
  • What your browser stores on this device no longer spells out which NMTS accounts have signed in here.

    NMTS keeps a few small preferences on the device for each account — the in-app text size, and how long you snoozed the expiry warning. Each was stored under a label containing that account’s public id, and reading the list of labels a browser holds needs no sign-in and no account code, so anyone who reached the machine could read which accounts had used this browser — NMTS’s own servers hold nothing that links two accounts, and the device did. The same rule was applied to the browser databases in July and these two were missed; the labels now use a short value computed from the account identifier which cannot be turned back into it, and preferences you already set are carried over. It does not hide how many accounts have used this browser, and nothing here could ever open a file or a wallet.

NMTS — cloud storage that encrypts in your browser