[ Deploy Log // full_history ]

Every deploy, every patch.

Public changelog. Nothing hidden.

2026.09.11
feature0.7.0Extension v0.7.0 — clearer free plan
The popup now shows what the free plan covers: one paired browser and autofill for your first 25 logins. Everything else stays visible and copyable, and Settings lists your paired browsers so you can release one.
- ›Free plan: one paired browser, autofill for the first 25 logins
- ›Paired browsers can be viewed and unpaired from Settings
- ›Burner alias creation in the extension is a paid feature; existing aliases still work
- ›Download page leads with the store installs — hand-installed copies never auto-update
2026.09.04
featurev3.0Paid plans are live
Plus, Pro, Family Plus, Family Pro and Enterprise license packs are now billable, with a self-serve billing portal.
- ›Checkout, upgrades and cancellations run through the payment provider with server-validated prices
- ›Self-serve billing portal for plan changes, payment methods and invoices
- ›Refunds and chargebacks revoke access immediately; failed payments keep access for a 14-day grace period
- ›Entitlements always resolve to the highest tier across personal, family and enterprise access
2026.09.02
feature0.6.9Extension v0.6.9
Dark-theme readability overhaul: higher-contrast text across all dark themes, unified dropdowns and form controls, and browser-aware update wording so Firefox no longer references Chrome.
2026.09.02
featurev0.6.8Site logos across the vault
Saved logins, 2FA codes and the autofill menu now show each site's logo, fetched through SPCTR's own icon proxy so no icon service ever learns what is in your vault.
- ›Logins, keys and cards show the site logo in the web app and extension popup, with an initials tile fallback.
- ›2FA codes show the issuer logo.
- ›The in-page autofill dropdown shows a logo per suggestion.
- ›Icons are proxied and cached by SPCTR, so your browser never contacts a third-party icon service.
2026.09.01
feature0.6.7Extension v0.6.7
Adoption metrics for the browser extension.
- ›Anonymous install heartbeat: a random local id, browser name and version only - no page data, URLs or vault material.
- ›Ops Center now shows installs vs. accounts, active installs, and installs that never signed in.
2026.08.27
fixv0.6.6Extension v0.6.6
The in-field autofill icon now reliably disappears once you sign in or leave the form.
- ›Fixed a style conflict that kept the autofill icon visible even after the extension had hidden it
- ›Icon now clears after login, form removal, and single-page navigation
- ›No change to vault data, keys, or permissions
2026.08.26
fixv0.6.5Extension v0.6.5 — autofill icon cleanup
The in-form SPCTR icon no longer lingers in random spots on the page.
- ›Icon hides when the field is scrolled out of a container or covered by a header/modal
- ›Icon clears on SPA route changes, tab switches and back/forward navigation
- ›Tighter viewport bounds checks so the marker never floats over unrelated content
2026.08.25
fixv0.6.4Extension v0.6.4 — durable sessions
Extension sessions now survive token refreshes without repairs.
- ›Durable extension sessions via a dedicated session endpoint
- ›Storage-based mutex prevents concurrent refreshes from invalidating the session
- ›Fewer "session expired" prompts after browser or extension updates
2026.08.24
fixv0.6.3Extension v0.6.3 — update transparency
The popup now says whether you are running the Chrome Web Store build or a manually loaded copy, and clicking the version line forces the browser to check for a new release right away.
- ›Popup labels the build as store or manually loaded
- ›Clicking the version line forces an immediate update check
- ›Clearer messaging when the browser is already up to date
2026.08.21
featurev0.6.2Extension v0.6.2
Vault entries now show the account email or username next to each item, and search plus right-click autofill match on it too.
- ›Vault entries show the account email or username
- ›Search matches on username as well as site name
- ›Right-click autofill picks the right account
2026.08.21
fixv0.6.1Extension v0.6.1 — theme, auto-lock and pairing fixes
Themes now actually apply and can be chosen before pairing, the auto-lock timeout saves and confirms, the passkey list is tucked behind a count, pairing opens the new Settings pairing card directly, and browser updates no longer force a re-pair.
- ›Themes apply immediately and can be chosen before pairing
- ›Auto-lock timeout saves and confirms
- ›Passkey list collapsed behind a count on the Account tab
- ›Pairing link opens the new Settings pairing card
- ›Browser updates no longer force a re-pair
2026.08.18
featurev0.6.0Extension v0.6.0 — theme sync
The popup can now follow the theme you pick in the web app, or use its own theme just for that browser. Default look stays until you opt in.
- ›Popup can follow the web app theme
- ›Optional separate theme just for the browser
- ›Default look stays until you opt in
2026.08.17
featurev0.5.9Session timeout controls
Pick how long the vault stays unlocked while idle — in the web app settings and in the extension Account tab. Settings are now grouped into categories.
- ›Choose how long the vault stays unlocked while idle
- ›Timeout options from 1 minute to 4 hours
- ›Settings page grouped into tabbed categories
2026.08.17
featurev0.5.8Extension v0.5.8
Autofill marker clears as soon as the form field leaves the page, and passkey vault unlock needs one tap or scan instead of several.
- ›Autofill marker disappears with the form field
- ›Passkey vault unlock takes one tap or scan
2026.08.17
featurev0.5.7Extension v0.5.7 — search your one-time codes
The TOTP tab now has a search bar so you can filter codes by name or issuer, matching the vault and notes tabs. The web app 2FA screen gained the same search plus the circular countdown ring used in the extension.
- ›Search bar on the extension TOTP tab
- ›Same search in the web app 2FA screen
- ›Circular countdown ring replaces the old bar
2026.08.17
fix0.5.6Extension v0.5.6
The extension stays paired through a temporary token-refresh hiccup, and two parts of the extension refreshing at once no longer signs the browser out.
- ›Extension survives a temporary token-refresh hiccup
- ›Concurrent refreshes no longer sign the browser out
2026.08.17
fix0.5.5Extension v0.5.5
Expired extension sessions now refresh and retry automatically instead of failing with JWT expired.
- ›Expired sessions refresh and retry automatically
- ›No more JWT expired errors mid-session
2026.08.17
fix0.5.4Extension v0.5.4
Packaged builds, the version shown in the popup and the Firefox update manifest are back in step, so self-hosted installs pick up the current build automatically.
- ›Packaged builds, popup version and update manifest back in step
- ›Self-hosted installs pick up the current build
2026.08.17
featurev2.55Enterprise license packs
Company workspaces now buy fixed license packs (10, 25, 50 or 100 users) instead of open-ended seats. License usage, member setup status and a change history are visible in Settings, and removing a member frees their license immediately.
- ›Fixed license packs of 10, 25, 50 or 100 users
- ›License usage and member setup status in Settings
- ›Change history log
- ›Removing a member frees the license immediately
2026.08.17
fixv2.54Extension v0.5.3
The extension now reads your account key material fresh at every unlock and supports Argon2id vaults, so the passphrase works after a re-key and the full vault loads instead of a partial list.
- ›Key material re-read fresh at every unlock
- ›Argon2id vaults supported in the extension
- ›Full vault loads instead of a partial list
2026.08.14
securityv2.53Public threat model & encrypted backups
A public security page documenting exactly what the server can see, plus verifiable encrypted vault export and restore.
- ›Public security page describing what the server can see
- ›Verifiable encrypted vault export
- ›Restore from an encrypted backup file
2026.08.13
securityv2.52YubiKey support
Hardware security keys can now unlock the vault directly using portable key derivation.
- ›Hardware security keys unlock the vault directly
- ›Portable key derivation across browsers
2026.08.12
featurev2.51Extension v0.5.2
Save-password prompts stay on screen until you answer them, and the extension now tells you when a newer version is out.
2026.08.11
featurev2.50Family Plus & Family Pro
The family plan now has Plus and Pro tiers, with organizer-only management of members and the family name.
2026.08.10
featurev2.49Readability controls
Persistent text-size, brightness and contrast controls so the app is legible without browser zoom.
2026.08.09
featurev2.48Extension v0.5.1
Secure notes, TOTP autofill and one-time-code filling landed in the extension.
2026.08.08
featurev2.47Extension v0.5.0 — passkey provider
SPCTR can now create and use passkeys directly from the extension, with vault health checks built in.
2026.08.07
featurev2.46Extension v0.4.3
Store-review hardening: clearer data-collection disclosure and the autofill icon now disappears with the form it was attached to.
2026.08.06
featurev2.45Extension v0.4.1
Extension manifest fixed for Chrome MV3 and Firefox, and the breach shield now unlocks together with the rest of the vault.
2026.08.05
featurev2.44Family plan
One subscription covers six people — separate vaults, shared collections, per-member masks, and a family breach view.
2026.08.05
securityv2.42Argon2id key hardening
Memory-hard Argon2id (64 MiB) now wraps the existing data key. No vault re-encryption, no data loss, instant rollback.
2026.08.03
featurev2.43Item types in the vault
Secure notes and key/token items sit alongside logins, each with its own fields, search, and filters.
2026.08.03
featurev2.40Extension v0.4.0
Save-password prompt on submit, mask creation, password generator, and passkey vault unlock.
2026.08.02
featurev2.38Mobile app shell
Packaged builds of the web vault for iOS and Android.
2026.07.28
featurev2.32Support portal & ticketing
Standalone passkey-only support desk with email intake, threaded replies, knowledge base, and SOPs.
2026.07.27
securityv2.31Email delivery fix
Fixed outgoing beta and alert emails and published the complete scrollable changelog.
2026.07.25
featurev2.30Reply from your mask
Replies to forwarded mail now leave from your mask address, and forwarded mail carries a mask banner.
2026.07.22
launchv2.28Dynamic web experience
Rebuilt marketing and app shell on a modern stack. Same zero-knowledge core.
2026.07.20
featurev2.27Custom mask names
Plus, Pro, and beta members choose their own mask name; free accounts stay randomly generated.
2026.07.18
betav2.26Beta invite & activation workflow
Per-code beta durations, grace periods, and hardened redemption.
2026.07.16
securityv2.24Passkey vault recovery
Fail-safe recovery: prove ownership with a passkey to start a fresh vault if a passphrase is lost.
2026.07.13
featurev2.22Confirmation email polish
Cleaner beta confirmation email + copy pass.
2026.07.12
featurev2.20Plain-language interface
Every screen now pairs its technical label with a one-line plain-English explanation.
2026.07.11
featurev2.19Extension autofill
Extension v0.2 fills saved logins, masks, and generated passwords straight into sign-in forms.
2026.07.09
securityv2.17Real breach checks
Shield now scans saved logins and any address you enter against live breach data.
2026.07.07
featurev2.15Tool hub redesign
Vault, Masks, 2FA, and Shield became tappable cards with a live activity log.
2026.07.05
featurev2.13Mobile layout pass
Rebuilt navigation and tool cards so everything fits the screen on phones without zooming.
2026.07.02
securityv2.11Codebase security audit
Full audit pass — no findings above informational.
2026.06.19
featurev2.08Theme system
Five interface themes, saved to your profile and applied on every device you sign in from.
2026.06.15
securityv2.05Passkey support
Register passkeys per device and sign in with Face ID, Touch ID, or a security key.
2026.06.11
securityv2.02Passwordless sign-in
Magic links and passkeys replace passwords for account access. Vault unlock stays local.
2026.06.07
launchv2.00Cross-browser extension
SPCTR extension for Chrome, Firefox, and Safari.
2026.05.05
featurev1.80Vault import
Bring in credentials from other password managers via CSV and JSON, parsed and encrypted on your device.
2026.04.21
securityv1.70Mask relay hardening
Inbound mask forwarding moved to a verified sending domain with abuse controls.
2026.04.07
securityv1.60Login alerts
Email notifications for new device sign-ins and unusual login locations.
2026.03.24
featurev1.50Account tiers and billing
Free, Plus, and Pro tiers with self-serve upgrades and billing management.
2026.03.10
securityv1.40Breach monitoring
Breach alarm checks your addresses against public breach data and flags exposed accounts.
2026.02.25
featurev1.30Email masks
Throwaway addresses on spctrmail.com that forward to your real inbox and can be shut off any time.
2026.02.11
featurev1.20Two-factor code generator
Built-in rotating 2FA codes so authenticator codes live beside their logins.
2026.01.28
securityv1.10Encrypted vault sync
Vault entries sync as opaque encrypted blobs. The server never sees plaintext or your passphrase.
2026.01.14
launchv1.00SPCTR launch
First public release: zero-knowledge password vault with local encryption and encrypted cloud sync.