Changelog - What's new?

Email security code (recipient verification)

July 2026

New optional protection layer in the internal area: when creating a message, you can store the recipient's email address. The recipient must then request and enter a one-time 6-digit code before the encrypted data is released.
The code is only sent when the recipient requests it, is valid for 10 minutes and can be used once. The zero-knowledge guarantee remains fully intact.
The retrieval page automatically detects protected messages and guides you directly through the code flow.
Privacy policy and terms of service revised and updated.
New FAQ entries and this changelog page.

July 2026

New guide "Share passwords securely" with step-by-step instructions and a comparison with insecure channels such as email.
Improved protection of the contact form against automated spam.
Faster loading through optimized caching of static files.

May 2026

Registered users can attach files up to 5 MB to messages (PDF, images, documents, archives) - encrypted directly in the browser, the server only sees ciphertext.
Convenient drag & drop, download button on retrieval.
New 7-day option for time-based deletion.
Various stability improvements for large messages.

February 2026

Strict Content Security Policy with nonce-based script control against XSS attacks.
Improved session security (secure cookies, HttpOnly, SameSite).
security.txt per RFC 9116 for responsible security disclosures.
Improved accessibility (keyboard navigation).

September 2025

Optional password protection for messages as a second layer of security (Argon2id hashing).
Automatic link detection: URLs in decrypted messages become clickable.

August 2025

Rate limiting and IP protection system completely revised - reliable protection against brute-force attacks for all users.

We are continuously developing Encipher.Me - your suggestions are welcome.