A tour, a bug button, a tidier vault

A friendlier first week: a guided tour, a way to tell us when something breaks, redesigned Spaces and a vault that opens faster.

New

A short guided tour shows new people around the vault. You can replay it any time from the account menu.
Report a bug straight from the account menu, with a screenshot if you like.
Rate zcrypt from inside the app. We read every one, including the grumpy ones.
Spaces were redesigned, with clearer roles for who can view, edit or manage.
A language picker sits next to the theme toggle, with eight languages to choose from.
Pad, Send and Transfer now match the rest of the site.
Anonymous Send links are capped at 50 MB per file and 500 MB per day, and a burn-after-read file is deleted once it has been read.
The Android app checks for updates for real, instead of cheerfully saying you are up to date.
You can export your account data, delete your account, and see and sign out your signed-in devices.

Improved

The vault loads in parallel and shows what it remembers while it refreshes, so it feels quicker.
A health banner explains what is wrong with a storage connection and what to do about it.
A small pill tells you when a new desktop version is ready.
Folder links are quicker to create.
Signing in or out in one tab now carries over to your other tabs.
One click resumes an unfinished upload from the same device.

Fixed

Shared files and folders show their real names instead of placeholders.
Send replaces a storage repo that was deleted and retries, and lets a burn-after-read link be read to the end.
Dragging files onto a folder works reliably, and an ended session sends you to sign-in instead of a blank page.
Desktop uploads land in the folder you have open.
Two tabs refreshing at once no longer log you out.

Security

Two-factor authentication is now asked on every kind of login, including magic links and OAuth.
The key for a Transfer no longer passes through the relay.
Share download counts are counted by the server, so limits can't be skipped.
Desktop and Android uploads seal file names and use a keyed content hash.
Updated Next.js to patch a remote code execution vulnerability.

Get the latest

Updates are free, and the desktop app can update itself. Grab the newest build for your device.