Release notes

Redesigned home screen: cleaner token cards with larger issuer icons, glanceable countdowns, and native search.

Reorganized navigation: Settings is a full-screen hub for Privacy, iCloud Sync, Appearance, Data, Help, and About.

Add Token and Edit Token are rebuilt as native forms, with PhotosPicker for QR screenshots and standard alerts. Account is optional, and the code on the Edit screen updates live as you change its settings.

SHA-256 and SHA-512 can now be selected when adding or editing a code, not just SHA-1 — some services (myGov, for example) require SHA-256 and would previously reject every code.

App Lock with Face ID / Touch ID — locks on launch and after 30 seconds in the background, with passcode fallback.

Codes are covered while the screen is being recorded or mirrored to another display, alongside the existing app-switcher and background protection.

Tokens, preferences, and pending deletions now live in the Keychain, so your accounts and settings survive reinstalling the app — and a code you deleted cannot come back afterwards.

Password-encrypted backups: AES-GCM files protected by your own password, alongside the existing plain backup option.

Import from more authenticators: unencrypted Aegis, andOTP, and 2FAS backup files.

Copied codes and setup keys automatically clear from the clipboard after 60 seconds.

Pin the codes you use most to the top of the list, and drag the rest into whatever order suits you.

A deleted code is kept in “Recently Deleted” for 7 days, so a wrong tap is recoverable — restore it, or remove it for good straight away.

Optional accent tints keep the default Autheris look unless you pick a theme.

Fresh onboarding that matches the new design, with Reduce Motion support.

The app is now named Autheris on your home screen, matching the name it uses in the App Store.

Fixed a crash a malformed setup link or backup file could trigger, by validating a code’s digit count and refresh period rather than trusting them.

Polish pass: dark-mode contrast fixes, Dynamic Type, and accessibility improvements.

Optional iCloud Sync in Settings — off by default, and iCloud is never contacted until you turn it on. Tokens sync across your own devices through your private iCloud database.

Your secrets stay protected: label, account, secret, and ring color are end-to-end encrypted by CloudKit and are never stored in a readable form.

Adds, edits, and deletes sync automatically. The newest edit wins, and deletes use tombstones so a token deleted on one device can’t reappear from another device that was offline.

Settings shows live sync status — Synced with “last updated,” Syncing, paused when offline, or Sign in to iCloud — and turning sync off asks whether to keep tokens on this device or delete them from iCloud first.

Long-press a token and choose “View Secret” to see its setup key. The key is masked by default — tap it (or use the eye icon) to reveal, with Copy to grab it quickly.

Secret edits happen in the same sheet and require an explicit Save; changes are validated as a Base32 key first, and canceling with unsaved edits asks before discarding.

The Edit sheet keeps its original scope — service name, account, and ring color — with the same unsaved-changes guard.

QR export uses compact JSON (no extra whitespace) and QR error-correction level L so more accounts fit in a single code.

If the encoded URL still exceeds what a QR code can hold, the app stops loading indefinitely and explains the limit, with guidance to use Backup for file-based transfer.

Countdown ring color can be customized per token in Edit: use the system color picker, or “Use service default” to follow the automatic issuer color.

Settings shows marketing version and build from the bundle. Release notes live here under Changelog in the main menu.

First release of Autheris: TOTP codes, search, backup and restore, QR import, privacy blur and app-switcher hiding, and issuer-aware visuals.