All releases

Version 0.90.9

2026-08-22 15:06:32 UTC

HotfixBeta

Security

1
  • Nobody else can close the door you use to delete your account.

    Repeated wrong sign-ins lock an account, and that lock is counted twice: once for the address doing the trying, and once for the account as a whole. The second can be tripped by anyone who has seen your account identifier, and deleting your account with your account code went through the same check — so a stranger’s wrong guesses closed the one door built to let a person we have stopped serving leave. Only the address-based lock can refuse there now. Signing in is still refused while the account is locked and both counters still record the failure, so this is not a cheaper way to guess at a code.

NMTS — cloud storage that encrypts in your browser