Passkeys, Private Files, and Referrer Analytics
Sign in with passkeys, protect shared files with passwords, and see where your traffic comes from
Passkeys, password-protected file sharing, referrer analytics, and a bunch of security and polish work.
Passkeys
You can now sign in with passkeys instead of passwords. Add one from your security settings, then use Face ID, Touch ID, Windows Hello, or a hardware key to log in. Works across browsers.
Private file sharing
Shared files can be password-protected now. Passwords are encrypted client-side with AES-GCM before they leave the browser. You can also toggle privacy after upload and opt out of search engine indexing per file. Thumbnails are hidden for private files on sharing pages.
Referrer analytics
The dashboard now shows where your traffic is coming from. Each referrer domain gets its favicon, and sources are ranked by visit count.
File migration
You can move files between accounts and teams. The file list polls for migration status and refreshes automatically when processing finishes.
Security
- Changing your password invalidates all existing sessions
- Expired tokens redirect to login instead of showing a broken page
- Markdown content and style attributes go through stricter XSS sanitization
- Rate limit responses now return proper error messages
API
- New
/usageendpoint for checking link service usage - File uploads accept
custom_sluganddomainparameters - Swagger docs updated with Authorization headers and the new endpoints
1Password and autofill
Fixed autofill styling for 1Password users, including dark mode. 2FA code inputs work better with password managers now.
Text sharing
- Markdown is now rendered client-side with markdown-it (supports emoji, footnotes, task lists, sub/superscript, and more)
- Fixed code block text color in light mode
- Tables display properly in both themes
- Tooltips on Raw/Download/Copy buttons are no longer clipped
UI fixes
- Hover animations on CTA buttons, pricing cards, and header buttons
- Refreshed copy on login, sign-up, forgot password, and 2FA pages
- Pasted images convert to full-quality WebP, with automatic PNG fallback for browsers that don't support it (e.g. Safari)
- Clear selection button stays visible during bulk operations
- Fixed Turnstile CAPTCHA refresh issues
- Added FAQPage structured data
