Keylane

Open Beta Update 1.0.3: security fixes from our internal review of the app, a guided first run, and many improvements requested by beta testers. NEW • Step-by-step setup: choose your name, photo and PIN, with a clear explanation of what the PIN protects. • Simplified Chinese, plus missing translations filled in for the other languages. • Send without notification: long-press the send button. • Sending an invite opens the chat with that person and shows whether the invitation is pending or declined. The new-chat picker has an "Invite new person" tile. • A chat whose contact was deleted now says so and offers to delete the chat. • Auto-delete now runs even while the app is closed, and catches up whenever you open or unlock the app. • Auto-delete periods now run from 24 hours to 2 weeks, and 2 weeks is the new default. Longer existing settings are shortened to 2 weeks; an update never makes your history last longer. IMPROVED • The day label stays pinned to the top of a chat while you scroll. • Chat font: a text size for chat threads, applied on top of your system text size. • Your avatar now appears on the Profile tab, and cropping saves exactly what the circle shows. • Notebook: notes show their first attachment as a tile. "Save to new note" keeps the text, and sent attachments keep their file names. • Redesigned PIN keypad with larger letter keys. The keypad always opens on numbers, so it never shows whether your PIN contains letters. • The whole app now works on smaller iPhones and at large text sizes. • Taking a photo or picking media no longer locks the app behind the picker. Recording a video gets five minutes before the app locks. • Turning several protections off in a row asks for your PIN once, then accepts further changes for 30 seconds. • The voice recorder no longer jitters under your thumb. • Face ID no longer freezes the unlock screen. There's no black screen after Face ID on first launch, Home no longer freezes when you return to it, and tab bar icons no longer jump. SECURITY • Every message command is checked against its verified sender, so no one can send a command that appears to come from someone else. • Safety numbers to verify a contact, and a warning when a contact's key changes. • Wrong PIN limit: choose a maximum (3 to 10, default 5), with growing delays and an option to erase the app's data after the last attempt. Weakening a security setting asks for your PIN again. • Downloaded attachments are checked against a hash declared by the sender. • Stored encryption sessions are now encrypted, and your long-term private key is no longer kept inside them. • The database zeroes deleted content and clears its write-ahead log every time the app locks. Queued uploads are stored encrypted, and leftover temporary files are removed at startup. • The account store and attachments use Apple's strictest Data Protection class, so they can't be read while your iPhone is locked. Keylane data is excluded from device backups and transfers to a new iPhone. • An incoming call no longer opens a locked app, and app content is hidden in the app switcher. • A call link opened while the app was locked no longer dials by itself after you unlock. • The incoming-call screen never shows a caller name supplied by the server, and Keylane calls stay out of the Phone app's Recents. • Passwords copied from the notebook stay on this iPhone (no Universal Clipboard) and clear from the clipboard after 60 seconds. • The app keeps no logs in release builds. • A malformed message can no longer crash the app. • Attachments and lookups for contacts on other servers now go through your own server, so other servers never see your device's address. Full release notes: keylane.app/changelog