Changelog

Killswitch now automatically manages inactive accounts to keep your data secure and our platform efficient.

What's new:
- Accounts without an active subscription are automatically scheduled for deletion after 90 days
- You'll receive email warnings at 30, 15, 7, and 1 day before deletion so you never lose data by surprise
- Resubscribing at any time cancels the scheduled deletion and restores full access immediately
- All associated data (encrypted files, notes, deadman switches, shares) is permanently removed upon deletion

Legal updates:
- FAQ updated to reflect the 90-day data retention policy
- Terms of Service sections 12 and 13 updated with automatic deletion details and warning schedule

This feature runs daily via an Oban cron job. Accounts with active, trial, beta, or past_due subscriptions are never affected.

Introducing Video Messages — a new way to leave personal, heartfelt messages for the people who matter most.

• Record videos directly in your browser — No apps or downloads needed
• Attach to notes or send standalone — Add video messages to your encrypted notes, or create standalone video messages delivered on their own
• Deliver to specific beneficiaries — Choose exactly who receives each video message when a deadman switch triggers
• Same zero-knowledge encryption — Videos are encrypted client-side before upload, just like your documents and notes

Video Messages are available on all paid plans. Head to your dashboard to start recording.

Documents, notes, and video messages that are attached to a deadman switch can no longer be accidentally deleted. Attempting to delete an attached item now shows a clear error message explaining why and how to remove it from the switch first.

Similarly, documents and video messages attached to a note are now protected from deletion until detached.

Additionally, deleting a document now shows a confirmation modal — matching the existing behavior for notes and video messages — so all delete flows are consistent across the app.

Killswitch now supports feature flags powered by FunWithFlags. This allows us to progressively roll out new features to specific users or groups before making them available to everyone. Feature flags give us fine-grained control over feature availability, enabling safer deployments and the ability to quickly disable features if issues arise.

Completely refreshed the landing page with new messaging, visuals, and layout focused on protecting your family.

• New hero messaging — "Protect What Matters. Automatically." with a family-focused value proposition
• Interactive feature carousel — Three core features showcased in a sliding carousel with video demos, swipe support on mobile, and auto-advance
• Simplified "How It Works" section — 3-step breakdown: Upload Your Documents, Add Your Beneficiaries, Set Your Check-In
• Family-focused personas — Highlighting who Killswitch is built for: parents, spouses, and small business owners
• Updated SEO & meta tags — All page titles, descriptions, and social cards match the new messaging
• Added Partner Program page to the sitemap

Improved the security of our master key API endpoints based on a responsible disclosure from a security researcher.

• Credential-based master key retrieval now uses POST requests exclusively, preventing sensitive data from appearing in URL query strings or server logs
• Added strict rate limiting (5 attempts per 15 minutes) on all credential-based API paths
• Added bot defense tracking for anomaly detection on authentication endpoints

Thank you to Pramod Kumar Ravela for the responsible disclosure.

Improved the resilience and security of several backend services.

• Hardened API input validation across sharing endpoints to properly reject malformed or incomplete requests instead of returning server errors.

• Fixed a race condition in an internal caching layer that could intermittently cause login failures under concurrent load.

• Raised test coverage to 77% with new validation and resilience tests. Coverage threshold is now enforced in CI.

You can now see and manage every device signed in to your account.

• Session tracking — Every login records the device, browser, OS, IP address, and approximate location
• Active session management — View all active sessions at a glance with "This device" indicator for your current browser
• Revoke individual sessions — See an unfamiliar session? Revoke it with one click to immediately sign out that device
• Sign Out Everywhere — One button to revoke all sessions across every device and browser
• Session verification on every page — Revoked sessions are checked on every LiveView navigation, not just full page reloads
• Past session history — Revoked and expired sessions kept for 90 days for login history review
• Admin session management — Admins can view and revoke sessions for any user from the admin panel

Fixed several infrastructure security vulnerabilities:

• Blocked direct IP access - Added nginx default server block to reject requests sent directly to the server IP address. Previously, these requests were redirected to the domain, exposing backend infrastructure accessibility.

• Secured PostgreSQL access - Removed public port exposure for the database. PostgreSQL is now only accessible within the Docker internal network, eliminating risk of brute-force attacks and unauthorized access attempts.

• Secured application port - Removed public port 4000 exposure. The Phoenix application is now only accessible through nginx, reducing attack surface.

These changes follow security best practices by ensuring only nginx (ports 80/443) is publicly accessible, while all other services communicate through Docker's internal network.

Fixed a critical vulnerability in the Two-Factor Authentication (2FA) flow that could allow authentication bypass.

What was fixed:
• The `/auth/2fa/complete` endpoint now requires a cryptographically signed verification token
• Tokens are only generated after successful code validation with our verification service
• Tokens are time-limited (5 minutes) and tied to the specific user
• Bypass attempts are now logged and blocked

Impact:
Previously, an attacker with knowledge of a user's password could bypass 2FA by directly navigating to the completion endpoint. This is now prevented.

• Enhanced logout to revoke all active session tokens, not just the current session
• Added no-cache headers to prevent browsers from storing authenticated pages
• Sessions are now fully invalidated when signing out, preventing session replay attacks

Enhanced the registration flow to protect user privacy and prevent email enumeration attacks.

• Email enumeration protection: Registration no longer reveals whether an email is already registered
• Security notification emails: If someone tries to register with your email, you'll receive a notification letting you know your account is secure
• Consistent user experience: Registration provides identical responses regardless of whether an email exists

Strengthened session security to ensure all active sessions are properly terminated when you change your password.

• All session tokens are now revoked when you change your password
• Trusted device cookies (used for 2FA bypass) are now revoked on password change
• Added comprehensive test coverage for session invalidation behavior

Added WhatsApp as a messaging channel and introduced device trust to reduce authentication friction.

WhatsApp Messaging:
• Added WhatsApp as a delivery channel for notifications and 2FA verification codes
• Unified messaging preference — one setting controls both notifications and 2FA delivery
• International numbers automatically use WhatsApp for reliable delivery
• US/Canada numbers default to SMS, with option to prefer WhatsApp in Settings → Notifications
• Automatic fallback: if WhatsApp delivery fails, domestic numbers fall back to SMS

Remember This Device (30-Day Trust):
• New "Remember this device" checkbox during 2FA verification
• Trusted devices skip 2FA for 30 days while maintaining session security
• Each device token is unique and tied to the specific browser/device
• Revoke device trust anytime via Security settings ("Sign out everywhere")

Strengthened security controls across several account management features.

• Added email verification requirements for sensitive account actions
• Enhanced protection for two-factor authentication setup
• Improved security controls for password management
• Added additional verification for recovery code generation
• Updated account deletion flow with enhanced verification

• New /security/bounty page describing our bug bounty program, reward tiers, scope, and how to report vulnerabilities
• New /security/acknowledgments page recognizing security researchers who responsibly disclose issues
• Added "Security" link to footer across all public pages

We've made several behind-the-scenes security improvements to strengthen account protection:

Enhanced Session Management:
• Improved how sessions are handled during sensitive account operations
• Sessions are now properly invalidated when security settings change
• Sign-out now fully revokes authentication tokens

Admin Session Controls:
• Admins can now force-revoke all sessions for any user from the admin panel
• Useful for responding to compromised accounts or security incidents
• All admin actions are logged in the activity feed

Infrastructure Hardening:
• Reduced information disclosure in server responses
• Improved input validation on authentication endpoints

These changes work silently in the background to keep your account more secure. No action is required on your part.

Get a summary of all product updates delivered to your inbox once a week.

• Weekly digest sent every Monday at 9 AM UTC
• Updates grouped by category: Security, Features, Improvements, Bug Fixes, Announcements
• Version badges for easy reference
• Only sent when there are updates to share
• Respects your Product Updates notification preferences

Stay informed when we publish new articles without needing to check the blog manually.

• Automatic notifications when new blog posts are published
• Email includes a preview excerpt of the article
• One-click link to read the full post
• Respects your Product Updates notification preferences

After months of development, testing, and refinement, Killswitch is officially out of beta.

• Version 1.0.0 — Our first stable, production-ready release
• Public launch — Killswitch is now open to everyone
• Stability improvements — Extensive testing and bug fixes across the entire platform
• Performance optimizations — Faster uploads, quicker page loads, smoother deadman switch scheduling

Thank you to everyone who tested during beta, reported bugs, and provided feedback.

Launch Offer: Use code PRODUCTHUNT for 20% off any plan. Valid for the next 2 weeks.

Smart reminder emails to help you complete your Killswitch setup journey.

• Confirmation Reminders: If you haven't confirmed your email after 2 days, we'll send a reminder with a fresh confirmation link
• Setup Progress Nudges: Targeted emails encourage you to upload your first file, add a beneficiary, create a deadman switch, or add your phone number
• Smart Timing: Emails respect a 3-day cooldown between nudges and each type is only sent once
• Short URLs: Confirmation links now use our URL shortener for cleaner email delivery
• Nudges follow a priority order based on setup progress
• Users can opt out via notification preferences

Killswitch is now easier to discover through search engines and AI assistants.

• Dynamic Sitemap: Added /sitemap.xml endpoint that automatically generates a sitemap including all public pages, blog posts, and documentation
• AI-Friendly Content: Added /llms.txt file following the emerging standard for AI assistants
• robots.txt Updates: Configured to allow search engine crawling while protecting private routes

Launched a public blog for sharing insights on digital estate planning, security best practices, and product updates.

• New /blog section accessible from the main navigation
• Full markdown support for rich content with images
• Tag filtering to browse posts by topic
• SEO-optimized with Open Graph meta tags for beautiful link previews
• Admin interface for creating and managing posts with image uploads

Added the ability to collapse the sidebar to an icon-only view for more screen space.

• Click the collapse button at the bottom of the sidebar to minimize it to icons only
• Hover over icons to see tooltips with menu item names
• Your preference is saved automatically and persists across sessions
• Desktop only — mobile continues to use the existing drawer overlay pattern

Fixed an issue where users who navigated away during the recovery codes step of registration would lose their progress when returning.

• Registration progress now persists if you leave to save recovery codes elsewhere
• Returning to /register after completing setup now shows the completion screen with a "Go to Dashboard" button
• Recovery codes are temporarily cached in your browser session so page refreshes don't reset the form
• Login credentials are preserved through the registration completion flow

Launched the Killswitch Partner Program, powered by Dub.co.

• 20% commission on referred subscriptions
• 10% discount for your referrals on their first year
• Real-time partner dashboard with click and conversion tracking
• 30-day cookie window for attribution
• Global payouts via Stripe
• Visit killswitch.app/affiliate from your dashboard to apply
• Available exclusively to existing Killswitch subscribers

Completely rebuilt how deadman switches are scheduled and triggered, moving from a polling-based system to pre-scheduled individual jobs for each switch.

• Each switch now has dedicated Oban jobs scheduled at exact trigger and reminder times
• Reminders sent at strategic intervals: 1 day before due, grace period start, halfway through grace, and 3/2/1 days before trigger
• Jobs are automatically rescheduled when you check in
• Added hourly backup monitoring with admin alerts if scheduled jobs fail
• Improved test mode to use the same scheduling system as production (just with minutes instead of days)

Expanded subscription options with multi-year plans for more flexibility and savings.

• 1-Year Plan: Standard annual billing at base price
• 2-Year Plan: Lock in your rate and save 10% compared to yearly billing
• 3-Year Plan: Maximum savings with 15% off compared to yearly billing

Added SMS-based two-factor authentication to protect your encrypted vault with an extra layer of verification.

• SMS Verification at Login — After entering your password, you'll receive a 6-digit code via text message
• Easy Setup — Enable 2FA from Settings → Security with just your phone number
• Flexible Control — Disable 2FA anytime from security settings (requires password confirmation)
• Session Timeout — Verification codes expire after 10 minutes with easy resend option

Overhauled how tags work to make organizing your encrypted documents and notes faster and more intuitive.

• Personalized Tags — Tags are now unique to each user instead of generic across the platform
• Quick Add Suggestions — Your most-used tags appear as one-click buttons based on actual usage patterns
• Create Tags Directly — Add new tags from the Manage Tags page without needing to attach them to a document first
• Tag Merging — Combine duplicate or similar tags into one, automatically reassigning all linked items
• Live Usage Counts — See exactly how many documents and notes use each tag
• Smart Sorting — Tags sorted by usage frequency

Migration Note: Due to architectural changes for personalized tags, existing tags will need to be re-added to your documents and notes.

Implemented an in-app URL shortener to make sharing links cleaner and more privacy-friendly.

• Compact share URLs using a short /s/abc12XYZ format instead of long URLs with embedded tokens
• Shorter SMS messages that fit easily in a single text message
• Persistent check-in links — Each deadman switch gets one stable short URL that updates with new tokens
• Encrypted at rest using our Cloak vault, maintaining zero-knowledge security
• Access tracking with counts and last-accessed timestamps
• Automatic expiration respecting underlying share or check-in dates

All system emails now use a cleaner, modern design with better dark mode support.

• New card-based layout with clean white card design and centered logo
• Full dark mode support across Apple Mail, Gmail, and Outlook
• Green accent buttons for primary actions using our brand color

A guided onboarding experience to help you plan your digital estate, with an interactive checklist and helpful email reminders.

• Planning Guide Checklist: An interactive checklist on your dashboard with 30 items across 6 categories (Essential Documents, Financial Information, Digital Assets, Business & Work, Personal Wishes, and Access & Security)
• 8-Email Drip Campaign: Helpful emails over 60 days with guidance on each category
- Day 0: Welcome to planning your digital estate
- Day 3: Essential Documents (will, POA, healthcare directives)
- Day 7: Financial Information (accounts, investments, debts)
- Day 14: Digital Assets (passwords, emails, social media)
- Day 21: Personal Wishes (messages, funeral, pets)
- Day 30: Ready for your first deadman switch
- Day 45: Progress check-in
- Day 60: Completion and final tips
• Your grid/list view preference is now saved across sessions for Documents, Notes, and Deadman Switches
• New "Dashboard Reminders" section in Settings → Notifications to control which reminder banners appear

• Added "New Switch" button to the Dashboard Quick Actions section
• The deadman switch creation wizard now opens directly from the dashboard as a slide-out drawer
• Streamlined button labels (Upload Doc, Note, Switch, Check-In) for a cleaner 4-button layout
• Full wizard functionality available without navigating away from the dashboard

• One-click check-in from email/SMS — Check-in links now automatically reset your deadman switch timer without requiring login
• IP geolocation with timezone detection — Activity logs now capture geographic location and automatically detect your timezone
• Fixed document/note filtering — Documents and notes now properly filter to show only unassigned items when creating a new deadman switch
• Other minor UI fixes and improvements

Test switches have been completely unified with production switches. You are now treated as a real beneficiary when testing, receiving the exact same emails your beneficiaries would receive when a switch triggers.

• Unified test/production code path — Test switches now use the same TriggerWorker logic as production switches
• Self-beneficiary for test switches — You're automatically added as a beneficiary marked with "YOU" so you receive real triggered emails
• Consolidated emails — Instead of separate emails for each shared item, beneficiaries receive a single email listing all shared documents and notes with individual access links
• Document names in emails — Triggered emails now display your document's actual name instead of generic "Document" text
• Note attachment support — Notes with attachments now properly include attachment metadata when sharing through deadman switches

Killswitch now has a complete payment system. Subscriptions, upgrades, downgrades, and billing management are fully integrated.

• Stripe Checkout: Subscribe to Starter, Pro, or Legacy plans through secure Stripe-hosted checkout
• Plan switching: Upgrade or downgrade between plans at any time with automatic proration
• Free trials: New users get a 7-day trial on the Starter plan (one trial per user)
• Billing Portal: Manage payment methods, view invoices, and cancel subscriptions through Stripe's portal
• Webhook integration: Real-time subscription status sync when payments succeed, fail, or subscriptions change
• Settings billing info: View your current plan, next billing date, and trial status on the Settings page

Added infrastructure to seamlessly transition from beta testing to a paid subscription model at launch.

• New users registering during beta automatically receive full access as beta testers
• When beta mode is turned off at launch, beta users will be prompted to subscribe
• Admin settings now control the beta mode toggle for the entire platform
• Subscription status properly tracks beta vs. paid user states

Invested in testing infrastructure for a more reliable experience.

• Added comprehensive automated test suites across the application
• Implemented CI quality gates to catch issues before release
• Fixed several edge cases discovered during testing

Improved how document sharing is displayed so you can instantly understand how each share works.

• Share types are now clearly labeled with badges:
• Instant (green badge) — Recipients have immediate access
• Deadman Switch (blue badge) — Recipients will only receive access if the switch triggers

Killswitch has a brand new logo! We got tired of the current trend of flat, minimalist logos that all blur together—so we went the opposite direction. The new isometric padlock design gives off Tron vibes (or 90s vibes, depending on who you ask) with both the "K" and "S" from Killswitch integrated into the lock's geometry—K on the left, S on the right.
It's bold, it's different, and it actually looks like something worth remembering. Security software doesn't have to look boring.

All dates and times throughout Killswitch now display in your local timezone. No more mental math converting from UTC!

Times are also now shown in 12-hour format (e.g., 2:30 PM) for easier reading.

Bug Fixes
• Flash messages now automatically disappear after a few seconds
• Fixed beneficiary avatar alignment
• Improved button visibility in light mode
• Fixed printing recovery codes on some browsers
• Various admin panel stability improvements

Fixed several issues affecting notification delivery when deadman switches trigger.

• Trigger checks now run every 15 minutes (was hourly) — notifications arrive faster after grace period ends
• Fixed duplicate emails being sent to beneficiaries
• Fixed SMS notifications not being sent despite valid phone numbers
• Owner trigger alerts now always send regardless of email preferences
• Beneficiaries with phone numbers now receive SMS when you share documents

Fixed an issue where users who experienced an interruption during account registration (particularly on mobile browsers) could end up with an account but without encryption set up.

• Added automatic detection of accounts missing encryption setup
• Users without encryption are now gracefully redirected to complete setup when accessing encrypted features
• New streamlined setup flow for existing users — just enter your password once to enable encryption
• Server-side password verification ensures secure setup completion
• Improved error handling prevents silent failures during encryption setup

Redesigned reminder notification schedule to be less frequent while ensuring you never miss a critical check-in.

• Before check-in deadline: Now just a single reminder 1 day before (previously sent at 5, 2, and 1 days)
• Grace period reminders now scale with length:
- Notification when grace period starts
- Reminder at the halfway point
- Daily reminders only in the final 3 days
- Result: A 14-day grace period now sends ~6-7 reminders instead of 14 daily messages

Fixed several issues with the deadman switch share repair functionality:

• Fixed duplicate shares being created when clicking "Repair Shares" button - the repair modal was being rendered twice, causing shares to be created in duplicate
• Fixed note shares created with wrong trigger_type - notes shared via deadman switch were incorrectly getting trigger_type: "immediate" instead of trigger_type: "deadman_switch"
• Fixed notes with attachments failing to create shares - the attachment data wasn't being properly loaded before JSON encoding
• Added missing duplicate prevention to the note share controller API endpoint, matching the existing logic in the document share controller

We've made share links for deadman switches more reliable and self-healing. Your beneficiaries will always get access to your files when it matters most.

• Automatic share repair — If share links are ever missing, we'll detect and recreate them automatically when you add items or beneficiaries
• No more duplicates — Adding the same item multiple times won't create duplicate share links cluttering your switch
• Cleaner document deletion — When you delete a document, any orphaned share links and switch associations are automatically cleaned up
• Visual status indicators — See at a glance which items and beneficiaries have their share links ready with new "Secured" badges

Behind the scenes, we've also added comprehensive test coverage for all the new share link logic to ensure everything works reliably.

SMS notifications are now live!

Get text message reminders for your deadman switches:
• All Reminder Levels - Receive SMS for every check-in reminder (5 days, 2 days, 1 day before due)
• Grace Period Alerts - Critical notifications when you miss a check-in
• One-Click Check-In - Tap the link in the SMS to check in instantly
• Easy Setup - Just add your phone number in Settings > Notifications

SMS works alongside email notifications to ensure you never miss an important check-in. Enable it in your notification settings today!

We've completely redesigned the landing page with a modern, conversion-focused layout. The new design puts product videos front and center to show you exactly what Killswitch does.

• New scroll-triggered animations that bring the page to life
• Auto-playing feature videos that play as you scroll through each section
• Responsive glass/shimmer effects on video placeholders
• Redesigned problem/solution messaging focused on peace of mind
• Streamlined "How It Works" section with step-by-step cards

Added four new product demonstration videos to the landing page, walking through each core feature:

• Hero video: "See Killswitch in Action" - full product overview
• Feature 1: "Zero-Knowledge Encryption" - shows the upload and encryption process
•Feature 2: "Secure Notes Demo" - demonstrates rich text notes with attachments
• Feature 3: "Deadman Switch Setup" - configuring check-in schedules
• Feature 4: "What Happens When..." - automatic transfer flow to beneficiaries
• "How It Works" video: complete walkthrough of the signup experience

Updated the navigation bar with scroll-aware behavior and improved accessibility across all pages.

• Navbar now hides when scrolling down and reappears when scrolling up
• Added aria-labels to interactive elements (toggle buttons, collapse menus)
• Improved form field labeling for screen readers
• Fixed color contrast issues on avatar badges and error text
• Added proper heading hierarchy throughout the site

The Under the Hood (/under-the-hood) page now shares the same navigation and footer styling as the rest of the site for a consistent experience. Technical details about our encryption architecture remain unchanged.

Resolved issues preventing deadman switch shares from being created properly when the master key wasn't cached in session.

• Added password prompt when master key is not available in session storage
• Fixed password trimming to prevent authentication failures from copy-paste whitespace
• Applied whitespace fix across all password input flows (sharing, note encryption/decryption)

Improved the file upload experience to make encryption more visible and trustworthy. During file uploads, a new animated encryption indicator shows a glowing lock icon with spinning rings while your files are being encrypted in-browser, followed by a bouncing upload indicator during the secure transfer.

• Animated encryption stage with glowing lock icon and dual spinning rings
• Animated upload stage with pulsing glow and bouncing arrow
• Visual progress bar tracks both encryption and upload phases
• Lock icons added to files and notes in collection views indicate encryption status
• Documents and notes now sort with most recent items first
• Increased file upload limit to 200MB for Business plan users
• Fixed dashboard crash when selecting documents for notes
• Fixed deadman switch countdown timer display in urgent mode

Deadman switches now support a second trigger action: permanent file deletion. Previously, all switches would share files with beneficiaries when triggered. Now you can choose what happens when you don't check in.

• Share (default) — Files are securely shared with your designated beneficiaries
• Delete — Files are permanently deleted from both the database and cloud storage
• Choose trigger action when creating a switch — "Share with beneficiaries" or "Delete permanently"
• Beneficiaries are optional for delete switches — add them if you want others notified that files were deleted
• Owner receives confirmation email listing all deleted files
• Delete switches show a red "Delete" badge throughout the UI
• Full dark mode support for all notification emails

Note: Delete switches in test mode will actually delete your files. We recommend uploading test files specifically for testing delete switches.

SMS notifications are coming soon! We're currently waiting for A2P 10DLC carrier approval.

• "SMS Coming Soon" banner in the sidebar to keep you informed
• Direct link to notification settings at /settings/notifications
• Add your phone number now so you're ready when we launch
• Full opt-in documentation for carrier compliance
• Improved phone number validation using Google's libphonenumber
• Consolidated phone validation code for better maintainability
• New CDN support for product screenshots

Fixed crash when pausing/resuming deadman switches. When resuming a switch that has been paused past its trigger date (grace period expired), the timer is now automatically reset to give you a fresh countdown instead of triggering immediately. You'll see a message confirming the timer was reset. Switches resumed while still within the grace period will continue their countdown from where they left off.

Implemented complete account deletion functionality that permanently removes all user data from the system. When a user deletes their account, all associated data including files, notes, shares, deadman switches, and recovery codes are automatically cascaded and permanently deleted. An audit log entry is created before deletion to maintain a record that the account existed and was removed by the user.

We've added a changelog feature so you can stay up-to-date with all the latest improvements and updates to Killswitch.

• Browse all product updates in one place
• Filter by category (features, improvements, bug fixes, security, announcements)
• Version badges for easy reference
• Accessible from the sidebar and footer

Check out the full history of updates to see how far we've come!

Fixed an issue where updating beneficiaries on existing deadman switches wasn't saving correctly. Changes to beneficiary email addresses and names now persist properly when editing a switch.

Never lose your work again! We've added automatic form state recovery across the application.

Key features:
- Auto-save form data every few seconds to browser storage
- Automatic recovery after page refresh or browser crash
- Works on file uploads, notes, deadman switches, and settings
- Recovery prompt appears when unsaved data is detected
- One-click restore or dismiss options

Fixed several issues with the mobile experience:
- Improved responsive layouts
- PWA installation support
- Service worker for socket connection
- Touch-friendly navigation

Welcome to the Killswitch beta! We're excited to have you testing our zero-knowledge encrypted document storage with deadman switch functionality.

Core features in this release:
- Zero-knowledge encrypted document storage
- Secure notes with rich text editing
- Deadman switch system with automatic beneficiary notifications
- Recovery code system for account recovery
- PWA support for mobile devices

Thank you for being part of our beta program!

New admin tools for better platform management:
- Comprehensive activity logging with filtering
- User management dashboard
- Beta whitelist management
- Deadman switch monitoring
- System settings control

Account recovery is now possible even with zero-knowledge encryption:
- Generate recovery codes during setup
- Regenerate codes at any time from settings
- Use codes to recover access if you forget your password
- Each code can only be used once for security

Several security improvements have been implemented:
- Honeypot defense against automated attacks
- IP-based rate limiting
- Maintenance mode for planned downtime
- Improved CSP (Content Security Policy)
- Paraxial security monitoring integration

Share encrypted documents securely with anyone:
- Generate password-protected share links
- Set expiration dates for shares
- Email notifications to recipients
- Revoke access at any time
- Track when shares are accessed

The core deadman switch functionality is now live:
- Create switches with custom check-in intervals
- Attach documents and notes to switches
- Add multiple beneficiaries
- Automatic email notifications when triggered
- Countdown timer with grace period

Industry-standard encryption for your documents:
- Client-side AES-256-GCM encryption
- Wrapped master key architecture (same as 1Password, Bitwarden)
- Server never sees your encryption keys
- Fast password changes without re-encrypting files
- PDF and image preview for encrypted files

Rich text notes with full encryption:
- Trix editor for formatting
- Attach documents to notes
- Tag organization
- Share notes as encrypted files