Version 0.86.0

Creating, signing into or erasing an account while already signed in now signs you out first — and your file names and folders can no longer end up locked to the other account code.

Your file names and folders live in an encrypted list that only your account code can open, and the part of NMTS that does the encrypting holds one account’s keys at a time — typing an account code replaces those keys on the spot. Creating an account, signing in and erasing an account with the code all sit inside the signed-in shell, so the drive you came from stayed on screen behind them and its list would then be written back using the new account’s keys. The server stores those bytes and cannot read them and the write succeeds, so nothing anywhere would have noticed: the names and folders of the account you were signed in as would simply stop opening. Those three screens now end the session before they touch the keys, and the encrypting part refuses outright when the account the page believes it is working for disagrees with the keys actually loaded — which is not a defence against hostile code on the page, and cannot repair a list that was already written the wrong way.