Release notes

Added

• Any code can have its own picture: choose a photo, or pick an emoji from a list. Pictures sync with iCloud Sync and go into backups, and emoji work even with service logos turned off. A picture is never sent to the Apple Watch or to logo.dev, and it is not included in Transfer QR codes.
• Folders sort your tokens. Turn them on in Settings, then give each folder a name and an optional colour, shown on its chip above the list. Tap a chip to see that folder, arrange each folder in its own order without changing All, and in Edit drag a token onto a chip to file it. With iCloud Sync on, folders and the tokens in them sync to your other devices. Folders are not included in backups, Transfer QR codes or the Apple Watch.
• iCloud Sync has a Sync Now button, to sync straight away instead of waiting for the next change.
• Appearance can be System, Light or Dark, and there are three more accent colours: blue, violet and orange.

Changed

• Settings is redesigned for iPhone and iPad. Each group — Privacy, iCloud Sync, Appearance, Data and Help — now has its own page instead of one long list, with a side-by-side layout on iPad. Nothing moved or changed, only where it’s shown.

Security

• An unencrypted backup now warns that anyone who opens the file can generate every code, and that a shared copy can’t be taken back.
• Backup, Transfer QR codes and setup keys now ask for Face ID, Touch ID or your passcode even when App Lock is off, since they show every code.
• App Lock now protects your codes where they are stored, not only the screen. With it on, the iPhone asks for Face ID, Touch ID or your passcode before the codes can be read, and turning App Lock on or off asks you to authenticate.

Fixed

• The countdown bar no longer moves when the number drops from two digits to one.

Added

• A redesigned welcome for new installs. It explains what Autheris does and how it treats your privacy, and has a privacy page with the switches that decide it: service logos, sending codes to Apple Watch (when a watch is paired), App Lock, and the privacy screen. It also names every way your setup keys can leave the device — iCloud Sync, Apple Watch, backups and the Transfer QR code. A last page sums up what you chose.
• Settings › Privacy has a new switch, Send codes to Apple Watch. Your codes, setup keys included, go to the Autheris watch app only while it’s on, and turning it off removes them from the watch, which then says so. It’s on unless you turn it off, so your watch keeps working after the update. It’s also on the welcome’s privacy page when a watch is paired.

Changed

• On a new install, service logos are off until you turn them on, on the welcome’s privacy page or in Settings › Privacy. Looking a logo up sends the service’s name to logo.dev, which tells it which services you use. If you’re updating from an earlier version, logos stay as they were.

Security

• Delete Tokens from iCloud now waits for any sync already running and lets no new one start until it’s done. A sync that had read your codes just before the delete could upload them all again straight afterwards, while the delete reported success. Tapping it twice now runs one delete, and Settings shows “Deleting from iCloud…” while it works. A record another device had already deleted no longer makes the delete report a failure, and records that failed to load are deleted too. If the sync it is waiting for hasn’t finished after 30 seconds, it stops without deleting anything and says to try again.
• The dialog for deleting from iCloud now says to turn off iCloud Sync on your other devices first. Deleting from iCloud doesn’t reach into them, and any device that still has sync on uploads its codes again.
• The privacy screen now covers everything Autheris shows. It used to cover only the code list, so the app switcher, or a screen recording, could show an open setup key, the Transfer QR code, or a code being edited.
• Creating an unencrypted backup now asks first, and says that the file holds every setup key as plain text.
• On Mac, every window — including a sheet such as the Transfer QR code — is kept out of screen recordings when that setting is on, not only the main window.
• Deleting and reinstalling the Apple Watch app no longer brings back the codes it had before. They were kept on the watch and shown again until your iPhone sent a new list.

Fixed

• A counter-based (HOTP) code never goes back to a counter you’ve already used. Syncing, editing, restoring a backup, and a sync that had to retry because another device wrote first all keep the higher counter. Each lower one is a code that has been shown and may already have been accepted.
• An edit made while a sync is running is no longer undone when the sync finishes.
• Editing a code, or its setup key, now changes only what you changed, applied to the code as it is now. A rename, pin or counter change from another device while the screen was open is no longer overwritten, and on iPhone it no longer closes the screen and loses what you’d typed.
• Restoring a backup that lists the same code twice no longer makes Autheris quit at the next sync. Repeats are dropped, and backups are written without them.
• Apple Watch no longer stops updating after your iPhone’s clock was set ahead. It used to ignore every list sent after the clock was corrected, so deleted codes stayed on the watch.
• Codes with unusual settings, such as a 10-second period or 5 digits, keep them when you edit the code or fix a scanned setup key by hand. They used to be changed to fit the steppers, which changed every code. The period now steps through multiples of 15 seconds from any value, and the steppers stop at their ends instead of overflowing.
• iOS no longer offers to save a setup key as a password.
• An encrypted backup whose password has accented letters now opens however those letters were typed.
• An import file with no codes in it now says so. Google Authenticator exports with very large counters import correctly, and a counter-based account whose counter is negative is left out rather than imported at 0, where its codes would all be rejected.
• The lock screen only offers Face ID or Touch ID when it’s available, and says “Unlock” otherwise.
• iCloud sync status, and several messages that were English everywhere, now appear in your language. The status no longer reads “not configured for iCloud” for ordinary errors, and recognises CloudKit’s messages in any language.
• Setup links keep a literal percent sign in the issuer’s name, and setup keys that end in = padding, as some services write them, are now accepted.
• An Autheris backup or transfer that includes a code with an empty or broken setup key imports the rest and leaves that one out. A Transfer QR code with a code whose period is unusually long no longer fails to import altogether.
• Service icons are kept in memory and fetched only for codes on screen. Turning on Fetch service logos now shows them straight away, instead of only after Autheris was reopened.
• On Mac, Settings waits until you’ve finished the welcome, so a switch changed there can’t be overwritten by the welcome’s choices.
• Your codes, iCloud sync and settings are exactly where you left them.

Added

• Other apps can now offer an “Add to Autheris” button. When you turn on two-factor authentication in an app that has one, a single tap opens Autheris with the new code, instead of a QR code you can’t scan from the same phone. As with every link since 2.8, Autheris shows the code, waits behind App Lock if it’s on, and adds nothing until you tap Import. Developers: see Add to Autheris.

Security

• “Blur when backgrounded”, “Hide codes in app switcher” and “Hide codes while recording or mirroring” are on again. Since 2.0, all three could switch themselves off on the second launch for anyone who had never changed them, which left codes visible in the app switcher and in screen recordings. That can’t be told apart from turning them off yourself, so 3.0 turns all three back on once. If you had turned one off on purpose, turn it off again in Settings › Privacy and it will stay off.
• Codes can no longer be lost when iCloud sync wakes Autheris in the background while your iPhone is locked. Autheris can’t read its Keychain then, but it took that to mean you had no codes: it could send an empty list to Apple Watch, and your next change after unlocking saved that list over the real one. It now waits until the iPhone is unlocked before it loads, saves, syncs or updates the watch.
• Restoring an encrypted backup now asks before it replaces your codes, as restoring an unencrypted one always did. It used to go straight from the password to replacing everything. Codes that aren’t in the backup now go to Recently Deleted instead of disappearing, so restoring the wrong backup can be undone.
• Scanning a transfer QR code or a Google Authenticator export now shows the codes it would add and waits for you to tap Import, the same as a link does since 2.8. It used to add them all as soon as it was scanned, so a QR code on someone else’s page could fill your list.
• Turning on App Lock now needs a passcode or password on the device. Without one, App Lock could be turned on and then never unlocked, leaving Autheris on the lock screen at every launch. If that already happened to you, Autheris now opens, and App Lock turns itself off rather than staying on with nothing to ask for.
• If Autheris can’t read your codes from the Keychain, it now says so and leaves them untouched until it can. Codes it couldn’t read could be replaced with an empty list by your next change. If they’re stored in a form this version can’t read, you can set them aside — they stay on the device — and start over, then restore a backup or let iCloud sync bring your codes back.
• With iCloud sync on, a device that was behind now notices when another device has changed a code since it last looked, instead of overwriting the newer change. A deleted code’s iCloud record is also now cleared of its encrypted details, including records deleted by earlier versions.

Fixed

• Two codes with the same service name and account no longer lose one of them. Renaming a code to a name another code already has is now refused; it used to save, and one of the two was dropped. Names are now compared the same way everywhere, ignoring capitals, so “GitHub / alice” can’t be added next to “github / Alice” and then lost on the next launch.
• Setup links and QR codes that put only the account in the path, such as otpauth://totp/alice@example.com?issuer=GitHub, now keep the account. It used to be dropped, so a second account at the same service couldn’t be added.
• Importing from 2FAS now keeps each code’s account, so a second account at the same service is imported instead of dropped.
• Adding a code that’s already on your device now says so. The scanner and the form used to close as if it had been added.
• The Transfer QR Code now holds far more codes: typically 50 to 130, depending on how long their names and setup keys are, instead of 8. From the 9th code on it used to say the export was too large for a QR code. A transfer small enough for the old format still uses it, so an older version of Autheris can import it; a bigger one needs Autheris 3.0 on the other device.
• Creating or opening an encrypted backup no longer freezes the app while the password is checked.
• The import review no longer switches the whole app to light mode while it’s open, and codes from a scanned QR code now wait behind App Lock like codes from a link. On iPad and Mac, an import now shows in the window it arrived in, rather than in every open window.
• Your codes, iCloud sync and settings are exactly where you left them, apart from the three privacy switches above.

Security

• Links that add codes — autheris://import, otpauth:// and otpauth-migration:// — now always show what they would add and wait for you to tap Import. They used to add codes the moment they arrived, and while App Lock was on, so another app or a web page could quietly plant entries in your list. A link that arrives while Autheris is locked now waits until you unlock it. (GHSA-75h3-q43q-9338)
• On the Mac, the Settings window now shows the lock screen while Autheris is locked. It used to open with ⌘, without asking for Touch ID or your password, which gave access to QR transfer (every secret), unencrypted backups and the App Lock toggle itself. The Settings window is also now kept out of screen capture when “Hide codes while recording or mirroring” is on, like the main window.
• On the Mac, App Lock now re-locks 30 seconds after you switch to another app, as the Privacy settings say. It used to start counting only when Autheris was hidden or minimised, so switching away and back left it unlocked however long you were gone.
• Backups you create in Backup & Restore now stay on this device. They used to be copied into iCloud Backup and Finder backups along with the rest of the app’s documents, so an unencrypted backup put every secret into those backups in plain text. Backups made by earlier versions get the same protection the next time Autheris opens.
• When there are too many codes to send to Apple Watch in one message, the temporary file they are sent in is now encrypted while your iPhone is locked, and is deleted once the transfer finishes rather than at the next large transfer.
• Encrypted backups now take much longer to guess the password of. Their key is derived with 600,000 rounds of PBKDF2 instead of 120,000, and a new encrypted backup needs a password of at least 10 characters. Encrypted backups made by earlier versions still restore.
• With App Lock on, Autheris now asks for Face ID, Touch ID or your passcode again before turning App Lock off, opening Backup, transferring codes by QR code, or showing a setup key. Because of the 30-second grace period, someone holding a phone you had just unlocked could otherwise export every code.

Fixed

• Importing codes from another app, an Autheris link or a transfer QR code now reports how many were really added. Codes it skipped could be counted as added. Imported codes also get a new identity on this device, so an import can no longer clash with a code you already have or override your other devices’ changes during sync.
• Restoring a backup you picked with “Import Backup from File” now works reliably. Picking one from Files or iCloud Drive could fail with “Incorrect password or corrupted backup” even when the password was right.
• With iCloud sync on, deleting a code on one device now removes it from your other devices too. The other devices used to put it straight back. A code you deleted, re-added or restored from Recently Deleted while a sync was running could also be undone when that sync finished; it now stays the way you left it.
• With iCloud sync on, restoring a backup now brings back codes you had deleted since it was made. They used to disappear again at the next sync, because the deletion looked newer than the copy in the backup.
• With iCloud sync on, a change you make while a sync is already running is now uploaded as soon as that sync finishes. It used to wait until you next opened the app or another device made a change.
• Thanks to @NotAFlightRisk for finding and responsibly reporting the link issue.
• Your codes, iCloud sync and settings are exactly where you left them.

• This release changes how Autheris looks in the App Store, not how it works — the listing now carries a new set of screenshots for iPhone, iPad, Mac and Apple Watch.
• Nothing else changed: no new settings, no new permissions, and no new network requests.
• Your codes, iCloud sync and settings are exactly where you left them.

• Autheris can now generate counter-based codes as well as the time-based ones it has always used. Some services hand you a counter instead of a code that changes on a timer: that code stays the same until you ask for the next one, and its card shows which counter it is on, with a Next button beside it.
• Scanning one of those codes used to add it as a time-based one, so its codes were always rejected and nothing on screen explained why. It now adds the right kind of code.
• Importing got the same fix. Counter-based accounts in a Google Authenticator export used to be skipped without a word, and Aegis and andOTP backups now bring their counters across too.
• The Apple Watch shows counter-based codes as well, with the counter where the countdown would be. The watch stays read-only, so you advance the counter on your iPhone.
• Settings → Privacy has a new switch, Fetch service logos. It controls the one request Autheris can make over the network — looking a service’s icon up by name at logo.dev, which tells that logo service which brands you have. With it off, nothing is looked up and every service falls back to its letter.
• Autheris now speaks Spanish, French, German, Japanese, Simplified Chinese and Brazilian Portuguese — the same six languages the App Store listing has been translated into — including the camera and Face ID permission prompts and the Apple Watch app. If your device is set to one of them, the app opens in it.
• Your codes, iCloud sync and settings are exactly where you left them.

• Autheris now speaks Spanish, French, German, Japanese, Simplified Chinese and Brazilian Portuguese — the same six languages the App Store listing has been translated into since 2.4. If your device is set to one of them, the app opens in it.
• The Apple Watch app speaks them too, so the codes on your wrist read in the same language as the ones in your pocket.
• The camera and Face ID permission prompts are translated as well. Those come from the system rather than the app, so they were the last English a translated app still showed.
• Your codes, iCloud sync and settings are exactly where you left them.

• Autheris now has an Apple Watch app. Your codes are on your wrist — one at a time, a swipe or a turn of the Digital Crown apart, each with its own countdown.
• The watch app is deliberately read-only: there is no copy, no editing and no settings on the watch. Adding, changing and deleting codes still happens on your iPhone, and the iPhone sends the list over. Installing the watch app is what turns that on — if you never install it, nothing is sent.
• Codes are generated on the watch itself, so they keep counting down with your iPhone out of reach or switched off. A code you add on your iPhone appears on the watch within seconds, and a code you delete disappears just as quickly.
• The watch is a viewer, not a second vault to keep in step. Its copy of your codes gets the same protection the iPhone’s does, and it is never edited there.
• Your codes, iCloud sync and settings are exactly where you left them.

• Autheris can now ask for an App Store rating. Settings has a Rate Autheris row under Help for whenever you want to leave one, and the app will ask by itself once, after you change a setting — never on launch, and at most once per version.
• On the Mac, the app is now named Autheris everywhere — it previously installed as Vaultic, so the Dock, the menu bar and your Applications folder called it something else. They now match the name the app already uses in the App Store.
• Your codes, iCloud sync and settings are exactly where you left them.
• If an older copy named Vaultic is still in your Applications folder, you can move it to the Trash — Autheris is the app from here on.

• Autheris now runs on the Mac — a real Mac app rather than a phone app stretched across the desktop. Your codes, sync and settings are unchanged: add an account on your iPhone and it is there on your Mac.
• Settings on the Mac is a proper preferences window. Open it from the gear or with ⌘, and find everything grouped into General, Privacy, iCloud, Data and Help.
• Scan QR codes with your Mac’s built-in or attached camera, including Google Authenticator transfer codes.
• App Lock works on the Mac: Touch ID where your Mac has it, and your login password where it does not.
• Codes are hidden from screen sharing and recording, so a call or a demo cannot put your codes on someone else’s screen.
• The small things a Mac expects: switch controls use the system’s own blue, accent colours sit in a row rather than a scroller, lists reorder by dragging a row directly, search lives in the window toolbar, and copied codes are marked as concealed so they do not travel to your other devices through Universal Clipboard.
• Support on the Mac opens your own mail app with the troubleshooting details already filled in.
• Fixed a set of Mac teething problems: some sheets opened as an empty box, several could not be closed at all, Recently Deleted had no way back, and the buttons in Settings did not respond everywhere they looked like they should.
• Fixed a crash when starting the Mac’s QR scanner.
• Fixed a startup crash in builds where iCloud is unavailable — the app now opens normally and explains that sync is unavailable, instead of refusing to start.

• Autheris now runs on iPad as well as iPhone. Your codes, sync and settings are unchanged — the app is simply built for the larger screen too.
• The token list is a grid on iPad — two codes per row, with a larger code and countdown on each card — instead of a single column stretched across the screen.
• Tap Edit and drag a card by its grabber handle — the same control as on iPhone. The other codes move out of the way as you carry one past them, and it settles where you let go.
• Onboarding, the import summary, and Settings are sized for the larger screen rather than stretched across it.
• Settings opens as a sheet, and the layout follows the window through Split View, Slide Over, and Stage Manager.

• Redesigned home screen: cleaner token cards with larger issuer icons, glanceable countdowns, and native search.
• Reorganized navigation: Settings is a full-screen hub for Privacy, iCloud Sync, Appearance, Data, Help, and About.
• Add Token and Edit Token are rebuilt as native forms, with PhotosPicker for QR screenshots and standard alerts. Account is optional, and the code on the Edit screen updates live as you change its settings.
• SHA-256 and SHA-512 can now be selected when adding or editing a code, not just SHA-1 — some services (myGov, for example) require SHA-256 and would previously reject every code.
• App Lock with Face ID / Touch ID — locks on launch and after 30 seconds in the background, with passcode fallback.
• Codes are covered while the screen is being recorded or mirrored to another display, alongside the existing app-switcher and background protection.
• Tokens, preferences, and pending deletions now live in the Keychain, so your accounts and settings survive reinstalling the app — and a code you deleted cannot come back afterwards.
• Password-encrypted backups: AES-GCM files protected by your own password, alongside the existing plain backup option.
• Import from more authenticators: unencrypted Aegis, andOTP, and 2FAS backup files.
• Copied codes and setup keys automatically clear from the clipboard after 60 seconds.
• Pin the codes you use most to the top of the list, and drag the rest into whatever order suits you.
• A deleted code is kept in “Recently Deleted” for 7 days, so a wrong tap is recoverable — restore it, or remove it for good straight away.
• Optional accent tints keep the default Autheris look unless you pick a theme.
• Fresh onboarding that matches the new design, with Reduce Motion support.
• The app is now named Autheris on your home screen, matching the name it uses in the App Store.
• Fixed a crash a malformed setup link or backup file could trigger, by validating a code’s digit count and refresh period rather than trusting them.
• Polish pass: dark-mode contrast fixes, Dynamic Type, and accessibility improvements.

• Optional iCloud Sync in Settings — off by default, and iCloud is never contacted until you turn it on. Tokens sync across your own devices through your private iCloud database.
• Your secrets stay protected: label, account, secret, and ring color are end-to-end encrypted by CloudKit and are never stored in a readable form.
• Adds, edits, and deletes sync automatically. The newest edit wins, and deletes use tombstones so a token deleted on one device can’t reappear from another device that was offline.
• Settings shows live sync status — Synced with “last updated,” Syncing, paused when offline, or Sign in to iCloud — and turning sync off asks whether to keep tokens on this device or delete them from iCloud first.

• Long-press a token and choose “View Secret” to see its setup key. The key is masked by default — tap it (or use the eye icon) to reveal, with Copy to grab it quickly.
• Secret edits happen in the same sheet and require an explicit Save; changes are validated as a Base32 key first, and canceling with unsaved edits asks before discarding.
• The Edit sheet keeps its original scope — service name, account, and ring color — with the same unsaved-changes guard.

• QR export uses compact JSON (no extra whitespace) and QR error-correction level L so more accounts fit in a single code.
• If the encoded URL still exceeds what a QR code can hold, the app stops loading indefinitely and explains the limit, with guidance to use Backup for file-based transfer.
• Countdown ring color can be customized per token in Edit: use the system color picker, or “Use service default” to follow the automatic issuer color.
• Settings shows marketing version and build from the bundle. Release notes live here under Changelog in the main menu.

• First release of Autheris: TOTP codes, search, backup and restore, QR import, privacy blur and app-switcher hiding, and issuer-aware visuals.