All Updates

Changelog

v2026.02.1
FeatureSecurityImprovement

Passkeys, Private Files, and Referrer Analytics

Sign in with passkeys, protect shared files with passwords, and see where your traffic comes from

Passkeys, password-protected file sharing, referrer analytics, and a bunch of security and polish work.

Passkeys

You can now sign in with passkeys instead of passwords. Add one from your security settings, then use Face ID, Touch ID, Windows Hello, or a hardware key to log in. Works across browsers.

Private file sharing

Shared files can be password-protected now. Passwords are encrypted client-side with AES-GCM before they leave the browser. You can also toggle privacy after upload and opt out of search engine indexing per file. Thumbnails are hidden for private files on sharing pages.

Referrer analytics

The dashboard now shows where your traffic is coming from. Each referrer domain gets its favicon, and sources are ranked by visit count.

File migration

You can move files between accounts and teams. The file list polls for migration status and refreshes automatically when processing finishes.

Security

  • Changing your password invalidates all existing sessions
  • Expired tokens redirect to login instead of showing a broken page
  • Markdown content and style attributes go through stricter XSS sanitization
  • Rate limit responses now return proper error messages

API

  • New /usage endpoint for checking link service usage
  • File uploads accept custom_slug and domain parameters
  • Swagger docs updated with Authorization headers and the new endpoints

1Password and autofill

Fixed autofill styling for 1Password users, including dark mode. 2FA code inputs work better with password managers now.

Text sharing

  • Markdown is now rendered client-side with markdown-it (supports emoji, footnotes, task lists, sub/superscript, and more)
  • Fixed code block text color in light mode
  • Tables display properly in both themes
  • Tooltips on Raw/Download/Copy buttons are no longer clipped

UI fixes

  • Hover animations on CTA buttons, pricing cards, and header buttons
  • Refreshed copy on login, sign-up, forgot password, and 2FA pages
  • Pasted images convert to full-quality WebP, with automatic PNG fallback for browsers that don't support it (e.g. Safari)
  • Clear selection button stays visible during bulk operations
  • Fixed Turnstile CAPTCHA refresh issues
  • Added FAQPage structured data