Changelog

The app feels snappier on long-haul connections (Asia, Europe) where round-trips to our SF server used to add 200–360ms to every click.

• Modals and drawers now open and close instantly client-side. The server still runs cleanup in the background, but you no longer wait on the network for the UI to react.
• Notebook entry sidebar opens by default on desktop and toggles instantly.
• Form fields debounce typing across the deadman wizard, video form, tag rename / create, and admin maintenance message.
• Switching between notebook entries patches in place instead of fully remounting — saves ~1s per click on cross-Pacific links.
• Lightweight /health endpoint replaces home-page hits from uptime monitors and the proxy healthcheck.

The blog index just got a refresh:

• Search — find posts by title, summary, body, or tag with a single search box at the top of /blog. Results update as you type, and the URL reflects your query so you can share or bookmark a search.
• Pagination — 10 posts per page with numbered navigation and Previous / Next links. Each page is its own crawlable URL so older posts don't get buried.
• Cleaner tag filter — tags now sort by post count, the row is clipped to a single line, and a "Show all tags" toggle reveals the full list. Your active tag stays pinned so it's never out of sight.

Filters combine: search within a tag, jump between pages, share a link to any view.

The Tawk.to chat widget no longer loads on routes that can carry sensitive tokens in their URL, including authentication callbacks, email confirmation, account recovery, quick check-in, short links, and admin pages.

Backend hardening changes based on a responsible disclosure report:

• Hardened the master key write API to validate input, refuse to overwrite an existing wrapped key, and emit a security alert email on every write.
• Tightened our Content Security Policy — scoped third-party script allowances with Subresource Integrity and removed overly broad entries.
• Normalized error responses across anonymous sharing flows so they no longer reveal resource type or sharing state.

Notebooks are here. Capture your thoughts, journal your days, and record video messages alongside your most important documents — all protected by the same zero-knowledge encryption that guards the rest of Killswitch.

What's in the box
• Rich text entries — a full writing experience with headings, lists, task lists, quotes, code blocks, and alignment.
• Inline encrypted media — drop images and videos straight into an entry; they're encrypted client-side and decrypted only when you view them.
• Video entries — record a video message directly into a notebook with one click.
• Auto-save — changes persist every few seconds in the background; keep writing, we've got it.
• Sidebar navigation — jump between entries in a notebook without losing your place.

Sharing & delivery
• Share an entire notebook or a single entry with anyone via an email share link.
• Tie a notebook to a deadman switch so your beneficiaries receive it automatically if you miss a check-in.
• Every share is end-to-end encrypted — we never see the plaintext.

Zero-knowledge by default
• Titles, content, and inline media are encrypted in your browser before they ever touch our servers.
• The new shared unlock gate (shipped in v1.1.6) keeps your content safe if your session expires mid-edit.

Head to /notebooks to create your first one.

Fixed a rare but serious bug where a notebook entry could be auto-saved with placeholder content before decryption finished — overwriting your real encrypted data with blanks or the word "Decrypting…".

What we changed
• Added a single shared unlock modal that appears the moment we detect a missing master key — no more silent failures or browser password prompts.
• The notebook editor now stays locked (title read-only, editor hidden) until decryption succeeds. Typing is blocked while we're waiting on your password, so auto-save can't fire with stale or placeholder values.
• Decryption is never attempted without a master key. Every file, note, notebook entry, inline image/video, and share regeneration now funnels through the same unlock gate.
• Decryption failures preserve the ciphertext on disk instead of clearing the editor fields.

Why it matters
• Your encrypted notebook entries are safe — even edge cases like an expired browser session, a cleared cache, or a cancelled unlock prompt can no longer cause content loss.
• Unlocking is consistent across the app: one modal, one password prompt, one promise-based flow that every feature respects.

No action required on your end. Existing entries are untouched.

Killswitch now includes a full in-app notification center and polishes the mobile PWA experience end-to-end.

Notification Center
• New bell dropdown in the navbar shows your latest notifications with an unread count badge
• Real-time updates via PubSub — no page reload needed
• Mark individual notifications as read, clear a single notification, or clear all at once
• Inbox entries are created for check-in reminders, triggered switches, and test deliveries

Mobile & PWA Polish
• Check-in button is now always visible on mobile so you can reset any switch with one tap
• New bottom navigation bar on mobile for Dashboard, Documents, Switches, and Beneficiaries
• Install-to-home-screen prompt with a custom banner so you can add Killswitch to your home screen or dock
• Dark-background app icon for a cleaner look in your dock and home screen
• PWA session now persists for 60 days across app restarts — no more re-login every time you quit

New health check system for deadman switches that validates your entire delivery pipeline before you need it.

Health Checks
• Validates items, beneficiaries, shares, and storage integrity in one click
• Async per-document S3 storage verification with live-streaming status updates
• Sequential animated reveal UI with tooltips and pass/fail/warning indicators

Test Delivery
• Send yourself the exact same email a beneficiary would receive when a switch triggers
• Verify your share links work and files decrypt correctly end-to-end
• Now also sends an SMS/WhatsApp notification if you have a phone number and SMS reminders enabled
• Modal clearly shows whether you'll receive SMS based on your account settings

Killswitch now has over 80% automated test coverage across the codebase.

• Expanded test suites covering authentication flows, encryption edge cases, deadman switch scheduling, and share link logic
• CI coverage threshold raised to 80% — builds fail if coverage drops below this floor
• Focused on integration-level tests that reflect real user journeys, not just unit-level coverage inflation

This milestone reflects our ongoing commitment to shipping reliable, well-tested software for something as critical as protecting your family's most important documents.

We've strengthened our zero-knowledge encryption across Notes and Video Messages:

• Notes now use full client-side encryption for titles, content, and previews — previously some metadata was handled server-side
• Video Message titles and descriptions are now encrypted client-side before upload, matching the same standard as file data
• Sharing and deadman switch delivery now correctly preserve decrypted filenames — shared video downloads show the original title instead of a generic name
• Various improvements to the encryption flow when sharing notes and videos with beneficiaries

These changes ensure that every piece of your data is encrypted before it ever leaves your browser.

Killswitch now automatically manages inactive accounts to keep your data secure and our platform efficient.

What's new:
- Accounts without an active subscription are automatically scheduled for deletion after 90 days
- You'll receive email warnings at 30, 15, 7, and 1 day before deletion so you never lose data by surprise
- Resubscribing at any time cancels the scheduled deletion and restores full access immediately
- All associated data (encrypted files, notes, deadman switches, shares) is permanently removed upon deletion

Legal updates:
- FAQ updated to reflect the 90-day data retention policy
- Terms of Service sections 12 and 13 updated with automatic deletion details and warning schedule

This feature runs daily via an Oban cron job. Accounts with active, trial, beta, or past_due subscriptions are never affected.

Introducing Video Messages — a new way to leave personal, heartfelt messages for the people who matter most.

• Record videos directly in your browser — No apps or downloads needed
• Attach to notes or send standalone — Add video messages to your encrypted notes, or create standalone video messages delivered on their own
• Deliver to specific beneficiaries — Choose exactly who receives each video message when a deadman switch triggers
• Same zero-knowledge encryption — Videos are encrypted client-side before upload, just like your documents and notes

Video Messages are available on all paid plans. Head to your dashboard to start recording.

Documents, notes, and video messages that are attached to a deadman switch can no longer be accidentally deleted. Attempting to delete an attached item now shows a clear error message explaining why and how to remove it from the switch first.

Similarly, documents and video messages attached to a note are now protected from deletion until detached.

Additionally, deleting a document now shows a confirmation modal — matching the existing behavior for notes and video messages — so all delete flows are consistent across the app.

Killswitch now supports feature flags powered by FunWithFlags. This allows us to progressively roll out new features to specific users or groups before making them available to everyone. Feature flags give us fine-grained control over feature availability, enabling safer deployments and the ability to quickly disable features if issues arise.

Completely refreshed the landing page with new messaging, visuals, and layout focused on protecting your family.

• New hero messaging — "Protect What Matters. Automatically." with a family-focused value proposition
• Interactive feature carousel — Three core features showcased in a sliding carousel with video demos, swipe support on mobile, and auto-advance
• Simplified "How It Works" section — 3-step breakdown: Upload Your Documents, Add Your Beneficiaries, Set Your Check-In
• Family-focused personas — Highlighting who Killswitch is built for: parents, spouses, and small business owners
• Updated SEO & meta tags — All page titles, descriptions, and social cards match the new messaging
• Added Partner Program page to the sitemap

Improved the security of our master key API endpoints based on a responsible disclosure from a security researcher.

• Credential-based master key retrieval now uses POST requests exclusively, preventing sensitive data from appearing in URL query strings or server logs
• Added strict rate limiting (5 attempts per 15 minutes) on all credential-based API paths
• Added bot defense tracking for anomaly detection on authentication endpoints

Thank you to Pramod Kumar Ravela for the responsible disclosure.

Improved the resilience and security of several backend services.

• Hardened API input validation across sharing endpoints to properly reject malformed or incomplete requests instead of returning server errors.

• Fixed a race condition in an internal caching layer that could intermittently cause login failures under concurrent load.

• Raised test coverage to 77% with new validation and resilience tests. Coverage threshold is now enforced in CI.

You can now see and manage every device signed in to your account.

• Session tracking — Every login records the device, browser, OS, IP address, and approximate location
• Active session management — View all active sessions at a glance with "This device" indicator for your current browser
• Revoke individual sessions — See an unfamiliar session? Revoke it with one click to immediately sign out that device
• Sign Out Everywhere — One button to revoke all sessions across every device and browser
• Session verification on every page — Revoked sessions are checked on every LiveView navigation, not just full page reloads
• Past session history — Revoked and expired sessions kept for 90 days for login history review
• Admin session management — Admins can view and revoke sessions for any user from the admin panel

Fixed several infrastructure security vulnerabilities:

• Blocked direct IP access - Added nginx default server block to reject requests sent directly to the server IP address. Previously, these requests were redirected to the domain, exposing backend infrastructure accessibility.

• Secured PostgreSQL access - Removed public port exposure for the database. PostgreSQL is now only accessible within the Docker internal network, eliminating risk of brute-force attacks and unauthorized access attempts.

• Secured application port - Removed public port 4000 exposure. The Phoenix application is now only accessible through nginx, reducing attack surface.

These changes follow security best practices by ensuring only nginx (ports 80/443) is publicly accessible, while all other services communicate through Docker's internal network.

Fixed a critical vulnerability in the Two-Factor Authentication (2FA) flow that could allow authentication bypass.

What was fixed:
• The `/auth/2fa/complete` endpoint now requires a cryptographically signed verification token
• Tokens are only generated after successful code validation with our verification service
• Tokens are time-limited (5 minutes) and tied to the specific user
• Bypass attempts are now logged and blocked

Impact:
Previously, an attacker with knowledge of a user's password could bypass 2FA by directly navigating to the completion endpoint. This is now prevented.

• Enhanced logout to revoke all active session tokens, not just the current session
• Added no-cache headers to prevent browsers from storing authenticated pages
• Sessions are now fully invalidated when signing out, preventing session replay attacks

Enhanced the registration flow to protect user privacy and prevent email enumeration attacks.

• Email enumeration protection: Registration no longer reveals whether an email is already registered
• Security notification emails: If someone tries to register with your email, you'll receive a notification letting you know your account is secure
• Consistent user experience: Registration provides identical responses regardless of whether an email exists

Strengthened session security to ensure all active sessions are properly terminated when you change your password.

• All session tokens are now revoked when you change your password
• Trusted device cookies (used for 2FA bypass) are now revoked on password change
• Added comprehensive test coverage for session invalidation behavior

Added WhatsApp as a messaging channel and introduced device trust to reduce authentication friction.

WhatsApp Messaging:
• Added WhatsApp as a delivery channel for notifications and 2FA verification codes
• Unified messaging preference — one setting controls both notifications and 2FA delivery
• International numbers automatically use WhatsApp for reliable delivery
• US/Canada numbers default to SMS, with option to prefer WhatsApp in Settings → Notifications
• Automatic fallback: if WhatsApp delivery fails, domestic numbers fall back to SMS

Remember This Device (30-Day Trust):
• New "Remember this device" checkbox during 2FA verification
• Trusted devices skip 2FA for 30 days while maintaining session security
• Each device token is unique and tied to the specific browser/device
• Revoke device trust anytime via Security settings ("Sign out everywhere")

Strengthened security controls across several account management features.

• Added email verification requirements for sensitive account actions
• Enhanced protection for two-factor authentication setup
• Improved security controls for password management
• Added additional verification for recovery code generation
• Updated account deletion flow with enhanced verification

• New /security/bounty page describing our bug bounty program, reward tiers, scope, and how to report vulnerabilities
• New /security/acknowledgments page recognizing security researchers who responsibly disclose issues
• Added "Security" link to footer across all public pages

We've made several behind-the-scenes security improvements to strengthen account protection:

Enhanced Session Management:
• Improved how sessions are handled during sensitive account operations
• Sessions are now properly invalidated when security settings change
• Sign-out now fully revokes authentication tokens

Admin Session Controls:
• Admins can now force-revoke all sessions for any user from the admin panel
• Useful for responding to compromised accounts or security incidents
• All admin actions are logged in the activity feed

Infrastructure Hardening:
• Reduced information disclosure in server responses
• Improved input validation on authentication endpoints

These changes work silently in the background to keep your account more secure. No action is required on your part.

Get a summary of all product updates delivered to your inbox once a week.

• Weekly digest sent every Monday at 9 AM UTC
• Updates grouped by category: Security, Features, Improvements, Bug Fixes, Announcements
• Version badges for easy reference
• Only sent when there are updates to share
• Respects your Product Updates notification preferences

Stay informed when we publish new articles without needing to check the blog manually.

• Automatic notifications when new blog posts are published
• Email includes a preview excerpt of the article
• One-click link to read the full post
• Respects your Product Updates notification preferences

After months of development, testing, and refinement, Killswitch is officially out of beta.

• Version 1.0.0 — Our first stable, production-ready release
• Public launch — Killswitch is now open to everyone
• Stability improvements — Extensive testing and bug fixes across the entire platform
• Performance optimizations — Faster uploads, quicker page loads, smoother deadman switch scheduling

Thank you to everyone who tested during beta, reported bugs, and provided feedback.

Launch Offer: Use code PRODUCTHUNT for 20% off any plan. Valid for the next 2 weeks.

Smart reminder emails to help you complete your Killswitch setup journey.

• Confirmation Reminders: If you haven't confirmed your email after 2 days, we'll send a reminder with a fresh confirmation link
• Setup Progress Nudges: Targeted emails encourage you to upload your first file, add a beneficiary, create a deadman switch, or add your phone number
• Smart Timing: Emails respect a 3-day cooldown between nudges and each type is only sent once
• Short URLs: Confirmation links now use our URL shortener for cleaner email delivery
• Nudges follow a priority order based on setup progress
• Users can opt out via notification preferences

Killswitch is now easier to discover through search engines and AI assistants.

• Dynamic Sitemap: Added /sitemap.xml endpoint that automatically generates a sitemap including all public pages, blog posts, and documentation
• AI-Friendly Content: Added /llms.txt file following the emerging standard for AI assistants
• robots.txt Updates: Configured to allow search engine crawling while protecting private routes

Launched a public blog for sharing insights on digital estate planning, security best practices, and product updates.

• New /blog section accessible from the main navigation
• Full markdown support for rich content with images
• Tag filtering to browse posts by topic
• SEO-optimized with Open Graph meta tags for beautiful link previews
• Admin interface for creating and managing posts with image uploads

Added the ability to collapse the sidebar to an icon-only view for more screen space.

• Click the collapse button at the bottom of the sidebar to minimize it to icons only
• Hover over icons to see tooltips with menu item names
• Your preference is saved automatically and persists across sessions
• Desktop only — mobile continues to use the existing drawer overlay pattern

Fixed an issue where users who navigated away during the recovery codes step of registration would lose their progress when returning.

• Registration progress now persists if you leave to save recovery codes elsewhere
• Returning to /register after completing setup now shows the completion screen with a "Go to Dashboard" button
• Recovery codes are temporarily cached in your browser session so page refreshes don't reset the form
• Login credentials are preserved through the registration completion flow

Launched the Killswitch Partner Program, powered by Dub.co.

• 20% commission on referred subscriptions
• 10% discount for your referrals on their first year
• Real-time partner dashboard with click and conversion tracking
• 30-day cookie window for attribution
• Global payouts via Stripe
• Visit killswitch.app/affiliate from your dashboard to apply
• Available exclusively to existing Killswitch subscribers

Completely rebuilt how deadman switches are scheduled and triggered, moving from a polling-based system to pre-scheduled individual jobs for each switch.

• Each switch now has dedicated Oban jobs scheduled at exact trigger and reminder times
• Reminders sent at strategic intervals: 1 day before due, grace period start, halfway through grace, and 3/2/1 days before trigger
• Jobs are automatically rescheduled when you check in
• Added hourly backup monitoring with admin alerts if scheduled jobs fail
• Improved test mode to use the same scheduling system as production (just with minutes instead of days)

Expanded subscription options with multi-year plans for more flexibility and savings.

• 1-Year Plan: Standard annual billing at base price
• 2-Year Plan: Lock in your rate and save 10% compared to yearly billing
• 3-Year Plan: Maximum savings with 15% off compared to yearly billing

Added SMS-based two-factor authentication to protect your encrypted vault with an extra layer of verification.

• SMS Verification at Login — After entering your password, you'll receive a 6-digit code via text message
• Easy Setup — Enable 2FA from Settings → Security with just your phone number
• Flexible Control — Disable 2FA anytime from security settings (requires password confirmation)
• Session Timeout — Verification codes expire after 10 minutes with easy resend option

Overhauled how tags work to make organizing your encrypted documents and notes faster and more intuitive.

• Personalized Tags — Tags are now unique to each user instead of generic across the platform
• Quick Add Suggestions — Your most-used tags appear as one-click buttons based on actual usage patterns
• Create Tags Directly — Add new tags from the Manage Tags page without needing to attach them to a document first
• Tag Merging — Combine duplicate or similar tags into one, automatically reassigning all linked items
• Live Usage Counts — See exactly how many documents and notes use each tag
• Smart Sorting — Tags sorted by usage frequency

Migration Note: Due to architectural changes for personalized tags, existing tags will need to be re-added to your documents and notes.

Implemented an in-app URL shortener to make sharing links cleaner and more privacy-friendly.

• Compact share URLs using a short /s/abc12XYZ format instead of long URLs with embedded tokens
• Shorter SMS messages that fit easily in a single text message
• Persistent check-in links — Each deadman switch gets one stable short URL that updates with new tokens
• Encrypted at rest using our Cloak vault, maintaining zero-knowledge security
• Access tracking with counts and last-accessed timestamps
• Automatic expiration respecting underlying share or check-in dates

All system emails now use a cleaner, modern design with better dark mode support.

• New card-based layout with clean white card design and centered logo
• Full dark mode support across Apple Mail, Gmail, and Outlook
• Green accent buttons for primary actions using our brand color

A guided onboarding experience to help you plan your digital estate, with an interactive checklist and helpful email reminders.

• Planning Guide Checklist: An interactive checklist on your dashboard with 30 items across 6 categories (Essential Documents, Financial Information, Digital Assets, Business & Work, Personal Wishes, and Access & Security)
• 8-Email Drip Campaign: Helpful emails over 60 days with guidance on each category
- Day 0: Welcome to planning your digital estate
- Day 3: Essential Documents (will, POA, healthcare directives)
- Day 7: Financial Information (accounts, investments, debts)
- Day 14: Digital Assets (passwords, emails, social media)
- Day 21: Personal Wishes (messages, funeral, pets)
- Day 30: Ready for your first deadman switch
- Day 45: Progress check-in
- Day 60: Completion and final tips
• Your grid/list view preference is now saved across sessions for Documents, Notes, and Deadman Switches
• New "Dashboard Reminders" section in Settings → Notifications to control which reminder banners appear

• Added "New Switch" button to the Dashboard Quick Actions section
• The deadman switch creation wizard now opens directly from the dashboard as a slide-out drawer
• Streamlined button labels (Upload Doc, Note, Switch, Check-In) for a cleaner 4-button layout
• Full wizard functionality available without navigating away from the dashboard

• One-click check-in from email/SMS — Check-in links now automatically reset your deadman switch timer without requiring login
• IP geolocation with timezone detection — Activity logs now capture geographic location and automatically detect your timezone
• Fixed document/note filtering — Documents and notes now properly filter to show only unassigned items when creating a new deadman switch
• Other minor UI fixes and improvements

Test switches have been completely unified with production switches. You are now treated as a real beneficiary when testing, receiving the exact same emails your beneficiaries would receive when a switch triggers.

• Unified test/production code path — Test switches now use the same TriggerWorker logic as production switches
• Self-beneficiary for test switches — You're automatically added as a beneficiary marked with "YOU" so you receive real triggered emails
• Consolidated emails — Instead of separate emails for each shared item, beneficiaries receive a single email listing all shared documents and notes with individual access links
• Document names in emails — Triggered emails now display your document's actual name instead of generic "Document" text
• Note attachment support — Notes with attachments now properly include attachment metadata when sharing through deadman switches

Killswitch now has a complete payment system. Subscriptions, upgrades, downgrades, and billing management are fully integrated.

• Stripe Checkout: Subscribe to Starter, Pro, or Legacy plans through secure Stripe-hosted checkout
• Plan switching: Upgrade or downgrade between plans at any time with automatic proration
• Free trials: New users get a 7-day trial on the Starter plan (one trial per user)
• Billing Portal: Manage payment methods, view invoices, and cancel subscriptions through Stripe's portal
• Webhook integration: Real-time subscription status sync when payments succeed, fail, or subscriptions change
• Settings billing info: View your current plan, next billing date, and trial status on the Settings page

Added infrastructure to seamlessly transition from beta testing to a paid subscription model at launch.

• New users registering during beta automatically receive full access as beta testers
• When beta mode is turned off at launch, beta users will be prompted to subscribe
• Admin settings now control the beta mode toggle for the entire platform
• Subscription status properly tracks beta vs. paid user states

Invested in testing infrastructure for a more reliable experience.

• Added comprehensive automated test suites across the application
• Implemented CI quality gates to catch issues before release
• Fixed several edge cases discovered during testing

Improved how document sharing is displayed so you can instantly understand how each share works.

• Share types are now clearly labeled with badges:
• Instant (green badge) — Recipients have immediate access
• Deadman Switch (blue badge) — Recipients will only receive access if the switch triggers

Killswitch has a brand new logo! We got tired of the current trend of flat, minimalist logos that all blur together—so we went the opposite direction. The new isometric padlock design gives off Tron vibes (or 90s vibes, depending on who you ask) with both the "K" and "S" from Killswitch integrated into the lock's geometry—K on the left, S on the right.
It's bold, it's different, and it actually looks like something worth remembering. Security software doesn't have to look boring.

All dates and times throughout Killswitch now display in your local timezone. No more mental math converting from UTC!

Times are also now shown in 12-hour format (e.g., 2:30 PM) for easier reading.

Bug Fixes
• Flash messages now automatically disappear after a few seconds
• Fixed beneficiary avatar alignment
• Improved button visibility in light mode
• Fixed printing recovery codes on some browsers
• Various admin panel stability improvements

Fixed several issues affecting notification delivery when deadman switches trigger.

• Trigger checks now run every 15 minutes (was hourly) — notifications arrive faster after grace period ends
• Fixed duplicate emails being sent to beneficiaries
• Fixed SMS notifications not being sent despite valid phone numbers
• Owner trigger alerts now always send regardless of email preferences
• Beneficiaries with phone numbers now receive SMS when you share documents

Fixed an issue where users who experienced an interruption during account registration (particularly on mobile browsers) could end up with an account but without encryption set up.

• Added automatic detection of accounts missing encryption setup
• Users without encryption are now gracefully redirected to complete setup when accessing encrypted features
• New streamlined setup flow for existing users — just enter your password once to enable encryption
• Server-side password verification ensures secure setup completion
• Improved error handling prevents silent failures during encryption setup

Redesigned reminder notification schedule to be less frequent while ensuring you never miss a critical check-in.

• Before check-in deadline: Now just a single reminder 1 day before (previously sent at 5, 2, and 1 days)
• Grace period reminders now scale with length:
- Notification when grace period starts
- Reminder at the halfway point
- Daily reminders only in the final 3 days
- Result: A 14-day grace period now sends ~6-7 reminders instead of 14 daily messages

Fixed several issues with the deadman switch share repair functionality:

• Fixed duplicate shares being created when clicking "Repair Shares" button - the repair modal was being rendered twice, causing shares to be created in duplicate
• Fixed note shares created with wrong trigger_type - notes shared via deadman switch were incorrectly getting trigger_type: "immediate" instead of trigger_type: "deadman_switch"
• Fixed notes with attachments failing to create shares - the attachment data wasn't being properly loaded before JSON encoding
• Added missing duplicate prevention to the note share controller API endpoint, matching the existing logic in the document share controller

We've made share links for deadman switches more reliable and self-healing. Your beneficiaries will always get access to your files when it matters most.

• Automatic share repair — If share links are ever missing, we'll detect and recreate them automatically when you add items or beneficiaries
• No more duplicates — Adding the same item multiple times won't create duplicate share links cluttering your switch
• Cleaner document deletion — When you delete a document, any orphaned share links and switch associations are automatically cleaned up
• Visual status indicators — See at a glance which items and beneficiaries have their share links ready with new "Secured" badges

Behind the scenes, we've also added comprehensive test coverage for all the new share link logic to ensure everything works reliably.

SMS notifications are now live!

Get text message reminders for your deadman switches:
• All Reminder Levels - Receive SMS for every check-in reminder (5 days, 2 days, 1 day before due)
• Grace Period Alerts - Critical notifications when you miss a check-in
• One-Click Check-In - Tap the link in the SMS to check in instantly
• Easy Setup - Just add your phone number in Settings > Notifications

SMS works alongside email notifications to ensure you never miss an important check-in. Enable it in your notification settings today!

We've completely redesigned the landing page with a modern, conversion-focused layout. The new design puts product videos front and center to show you exactly what Killswitch does.

• New scroll-triggered animations that bring the page to life
• Auto-playing feature videos that play as you scroll through each section
• Responsive glass/shimmer effects on video placeholders
• Redesigned problem/solution messaging focused on peace of mind
• Streamlined "How It Works" section with step-by-step cards

Added four new product demonstration videos to the landing page, walking through each core feature:

• Hero video: "See Killswitch in Action" - full product overview
• Feature 1: "Zero-Knowledge Encryption" - shows the upload and encryption process
•Feature 2: "Secure Notes Demo" - demonstrates rich text notes with attachments
• Feature 3: "Deadman Switch Setup" - configuring check-in schedules
• Feature 4: "What Happens When..." - automatic transfer flow to beneficiaries
• "How It Works" video: complete walkthrough of the signup experience

Updated the navigation bar with scroll-aware behavior and improved accessibility across all pages.

• Navbar now hides when scrolling down and reappears when scrolling up
• Added aria-labels to interactive elements (toggle buttons, collapse menus)
• Improved form field labeling for screen readers
• Fixed color contrast issues on avatar badges and error text
• Added proper heading hierarchy throughout the site

The Under the Hood (/under-the-hood) page now shares the same navigation and footer styling as the rest of the site for a consistent experience. Technical details about our encryption architecture remain unchanged.

Resolved issues preventing deadman switch shares from being created properly when the master key wasn't cached in session.

• Added password prompt when master key is not available in session storage
• Fixed password trimming to prevent authentication failures from copy-paste whitespace
• Applied whitespace fix across all password input flows (sharing, note encryption/decryption)

Improved the file upload experience to make encryption more visible and trustworthy. During file uploads, a new animated encryption indicator shows a glowing lock icon with spinning rings while your files are being encrypted in-browser, followed by a bouncing upload indicator during the secure transfer.

• Animated encryption stage with glowing lock icon and dual spinning rings
• Animated upload stage with pulsing glow and bouncing arrow
• Visual progress bar tracks both encryption and upload phases
• Lock icons added to files and notes in collection views indicate encryption status
• Documents and notes now sort with most recent items first
• Increased file upload limit to 200MB for Business plan users
• Fixed dashboard crash when selecting documents for notes
• Fixed deadman switch countdown timer display in urgent mode

Deadman switches now support a second trigger action: permanent file deletion. Previously, all switches would share files with beneficiaries when triggered. Now you can choose what happens when you don't check in.

• Share (default) — Files are securely shared with your designated beneficiaries
• Delete — Files are permanently deleted from both the database and cloud storage
• Choose trigger action when creating a switch — "Share with beneficiaries" or "Delete permanently"
• Beneficiaries are optional for delete switches — add them if you want others notified that files were deleted
• Owner receives confirmation email listing all deleted files
• Delete switches show a red "Delete" badge throughout the UI
• Full dark mode support for all notification emails

Note: Delete switches in test mode will actually delete your files. We recommend uploading test files specifically for testing delete switches.

SMS notifications are coming soon! We're currently waiting for A2P 10DLC carrier approval.

• "SMS Coming Soon" banner in the sidebar to keep you informed
• Direct link to notification settings at /settings/notifications
• Add your phone number now so you're ready when we launch
• Full opt-in documentation for carrier compliance
• Improved phone number validation using Google's libphonenumber
• Consolidated phone validation code for better maintainability
• New CDN support for product screenshots

Fixed crash when pausing/resuming deadman switches. When resuming a switch that has been paused past its trigger date (grace period expired), the timer is now automatically reset to give you a fresh countdown instead of triggering immediately. You'll see a message confirming the timer was reset. Switches resumed while still within the grace period will continue their countdown from where they left off.

Implemented complete account deletion functionality that permanently removes all user data from the system. When a user deletes their account, all associated data including files, notes, shares, deadman switches, and recovery codes are automatically cascaded and permanently deleted. An audit log entry is created before deletion to maintain a record that the account existed and was removed by the user.

We've added a changelog feature so you can stay up-to-date with all the latest improvements and updates to Killswitch.

• Browse all product updates in one place
• Filter by category (features, improvements, bug fixes, security, announcements)
• Version badges for easy reference
• Accessible from the sidebar and footer

Check out the full history of updates to see how far we've come!

Fixed an issue where updating beneficiaries on existing deadman switches wasn't saving correctly. Changes to beneficiary email addresses and names now persist properly when editing a switch.

Never lose your work again! We've added automatic form state recovery across the application.

Key features:
- Auto-save form data every few seconds to browser storage
- Automatic recovery after page refresh or browser crash
- Works on file uploads, notes, deadman switches, and settings
- Recovery prompt appears when unsaved data is detected
- One-click restore or dismiss options

Fixed several issues with the mobile experience:
- Improved responsive layouts
- PWA installation support
- Service worker for socket connection
- Touch-friendly navigation

Welcome to the Killswitch beta! We're excited to have you testing our zero-knowledge encrypted document storage with deadman switch functionality.

Core features in this release:
- Zero-knowledge encrypted document storage
- Secure notes with rich text editing
- Deadman switch system with automatic beneficiary notifications
- Recovery code system for account recovery
- PWA support for mobile devices

Thank you for being part of our beta program!

New admin tools for better platform management:
- Comprehensive activity logging with filtering
- User management dashboard
- Beta whitelist management
- Deadman switch monitoring
- System settings control

Account recovery is now possible even with zero-knowledge encryption:
- Generate recovery codes during setup
- Regenerate codes at any time from settings
- Use codes to recover access if you forget your password
- Each code can only be used once for security

Several security improvements have been implemented:
- Honeypot defense against automated attacks
- IP-based rate limiting
- Maintenance mode for planned downtime
- Improved CSP (Content Security Policy)
- Paraxial security monitoring integration

Share encrypted documents securely with anyone:
- Generate password-protected share links
- Set expiration dates for shares
- Email notifications to recipients
- Revoke access at any time
- Track when shares are accessed

The core deadman switch functionality is now live:
- Create switches with custom check-in intervals
- Attach documents and notes to switches
- Add multiple beneficiaries
- Automatic email notifications when triggered
- Countdown timer with grace period

Industry-standard encryption for your documents:
- Client-side AES-256-GCM encryption
- Wrapped master key architecture (same as 1Password, Bitwarden)
- Server never sees your encryption keys
- Fast password changes without re-encrypting files
- PDF and image preview for encrypted files

Rich text notes with full encryption:
- Trix editor for formatting
- Attach documents to notes
- Tag organization
- Share notes as encrypted files