What Shipped, When
Changelog
Every release, documented — real dates, real fixes, and SHA-256-verified builds. Installers and checksums for each version live on the download page.
3.5.5
September 5, 2026 LATESTA visual release. Nothing about how it works changed.
- The desktop app now carries the same brand system as this site: the knot-X mark at every icon size, Inter Tight for everything you read, and IBM Plex Mono for everything the app reports back — hashes, versions, API paths, fingerprint values, logs.
- Calmer surfaces: warm near-black grounds instead of the old blue-black, square corners, no drop shadows or gradients. Amber is the warning colour and green means running or connected; red is reserved for the brand and for destructive confirmations.
- Sign-in shows the mark and the line “One machine. X devices.” New installer art on Windows and a new DMG background on macOS.
- Every text colour was measured against every surface in the new palette. One that fell short — a tertiary grey at 4.24:1 on the raised surface — was corrected before release. All text now meets WCAG AA.
- No changes to profiles, the fingerprint engine, cloud sync, the local API, licensing or the team panel.
- These builds are not code-signed. They never have been; the download page previously implied a certificate existed, and that wording has been corrected. Windows will show “Windows protected your PC” and macOS needs the one-line quarantine command. The published SHA-256 checksums are the real verification step — use them.
Android 1.2.1-beta.1
September 5, 2026 ANDROID LATESTA visual release. Nothing about how it works changed.
- The app now carries the same brand system as this site: the knot-X mark as an adaptive launcher icon, Inter Tight for everything you read, and IBM Plex Mono for everything the app reports back — fingerprint values, proxy strings, versions. The app previously used the system typeface and shipped no fonts of its own.
- Calmer surfaces: warm near-black grounds instead of the old blue-black, square corners, no drop shadows. Amber is the warning colour and green means running or connected; red is reserved for the brand and for destructive confirmations.
- Sign-in shows the mark and the line “One machine. X devices.”
- Every text colour was measured against every surface in the new palette; all of it meets WCAG AA.
- No changes to profiles, the fingerprint engine, proxy handling, tabs, downloads, history or bookmarks. Same beta signing key, so it installs over 1.2.0 in place.
- The
X-Requested-Withheader added by the Android System WebView is unchanged and still disclosed on the download page.
Android 1.2.0-beta.1
September 5, 2026 ANDROIDThe browser release: tabs, popups, downloads, uploads
- Tabs with a switcher, new, close and close all, and a session that reopens the tabs a profile had (switchable in Settings).
- Popups work: a window a page opens becomes a tab of the same profile with the same fingerprint script and proxy, and its very first request already carries the profile's Accept-Language and timezone. Windows opened without a tap are blocked.
- Downloads go through the profile's proxy with its user agent, cookies and referer, into a file you pick. Android's DownloadManager is deliberately not used because it would fetch with the device's real IP.
- File uploads, JavaScript dialogs, fullscreen video, find in page, pull to refresh, a stop button, and a long-press menu on links and images.
- Per-profile history and bookmarks, address-bar suggestions, text size, clear browsing data, and an identity & proxy panel with a live exit-IP test and a proxy status dot that turns red when the proxy fails closed.
- Own error pages for network, proxy and certificate failures; certificate errors are never bypassable inside a profile. A page whose renderer dies is reopened instead of crashing the app.
- Search engine choice in Settings: Google, DuckDuckGo, Bing or Brave.
- Fingerprint:
navigator.languagesno longer leaks Accept-Language q-weights. Re-verified on real hardware (Android 16, WebView 151): user agent, client hints, platform, screen, touch, timezone, Accept-Language, WebGL and canvas all present the profile's device. - The
X-Requested-Withheader is still added by the Android System WebView itself; re-tested on WebView 151 with the allow-list API and request interception both ineffective. Disclosed on the download page until the platform fixes it. - Under the hood: JVM unit tests for the address-bar policy, device model and profile JSON, and a GitHub Actions build for every Android change.
Android 1.1.0-beta.1
September 4, 2026 ANDROIDFolders, backups, and app lock
- Organize profiles into folders with tags, and search, sort, and filter the profile list to find what you need fast.
- Multi-select is here: bulk-delete profiles in one action, duplicate a single profile, or bulk-create several at once (bulk-create requires a paid plan).
- Cookie export/import and full profile backup export/import, both via the on-device DevTools bridge, moving JSON files through Android's native document picker.
- Proxy connection testing runs a real network check against your configured proxy — latency, exit IP, and country, before you rely on it.
- App lock with PIN or biometric unlock, a 3-screen first-run onboarding flow, and a consolidated Settings screen for account, security, and about.
- Every action above is recorded in a new activity log with timestamps.
- Found and fixed during on-device testing: a crash opening the "New folder" dialog (a Material
TextInputLayoutlayout-params cast issue), a duplicate-profile name missing its leading space ("Profile 1(Copy)"instead of"Profile 1 (Copy)"), and five activity-log entries (launch, folder create/delete, profile export/import) whose display strings existed but were never wired to a call site, so those actions weren't being logged — now fixed. - The
X-Requested-Withheader issue from the first build is still unresolved — see below.
Android 1.0.0-beta.1
September 4, 2026 ANDROIDFirst Android build — native app, not a port
- A native Kotlin app, separate from the desktop Electron build: isolated per-profile WebViews, the same fingerprint engine and coherent device-model logic as desktop, ported line-for-line, and the same account and backend.
- Real timezone, locale and client-hint header parity via an in-process DevTools bridge — no external tooling, no root required.
- Disclosed, not fixed: the Android WebView still attaches an
X-Requested-Withheader naming this app's package to every site a profile visits. Two independent removal approaches were tried (the documented WebView allow-list API, and rewriting the header directly on the wire) and neither worked on the WebView build this was tested against. We're not shipping a "hides your identity" claim for Android until this is resolved and verified on real hardware — see the download page for the current state. - Sideloaded APK from this site; not on Google Play, which doesn't list this category of app.
v3.5.4
September 2, 2026 QUALITYHonest panels, paid-only team sharing, macOS beta
- Every panel now shows its real state. The Extension Manager, Cookie Editor, Team, Activity Log and Backup panels no longer display placeholder data; controls that have nothing behind them yet are disabled and say so.
- Team sharing is a paid-plan feature: Free is single-user, Starter includes 3 seats, Pro 10, Business unlimited. The Team panel shows the upgrade path on Free.
- Fixed a race in Advanced Fingerprint where two quick edits could silently revert the first; edits now apply immediately and save in one batch.
- Launch, delete and batch failures surface as notifications instead of being swallowed; commands that need a selected profile ask for one.
- First macOS build (Beta): unsigned .dmg for Intel and Apple Silicon. Not yet runtime-verified by us — see the download page for the Gatekeeper steps and please report issues.
- Website: the contact form now delivers to a real inbox instead of opening your mail client.
v3.5.3
August 31, 2026 PlatformLinux fully supported
- Linux promoted out of Beta after a complete runtime pass on Ubuntu 22.04: .deb install via apt, AppImage boot, sign-up, and a live profile launch with fingerprint injection — all verified.
- Fixed .deb dependencies: the package now declares libasound2, so minimal Ubuntu/Debian installs no longer fail at startup.
- Profiles on Linux launch in your installed Google Chrome or Chromium (apt and snap installs both detected).
v3.5.2
August 30, 2026 Major fixCoherent OS spoofing + worldwide timezones
- Choosing a non-Windows OS now changes the whole device identity — client-hint headers, navigator.platform, touch, screen size, and GPU all derive from one coherent device model, so detection sites see no mismatch.
- Android profiles present as a real phone (e.g. a Pixel 7 reports Android 13, touch, a Mali-G710 GPU, and a phone viewport). Existing profiles are repaired automatically.
- The timezone picker now lists the complete IANA database — ~418 zones covering every country, labelled with live UTC offsets.
v3.5.1
August 29, 2026 POLISHBrand consistency & hardening
- New profiles and folders default to brand red; app, taskbar, and window icons are generated from one canonical mark.
- Removed ~5 KB of dead legacy styles from the renderer.
- The account server now refuses to start in production without real signing secrets.
v3.5.0
August 29, 2026 FEATUREEnd-to-end-encrypted cloud profile sync (Pro)
- Profiles are sealed with AES-256-GCM on your device before upload — the server only ever stores ciphertext.
- Sync uploads only what changed, pulls what changed elsewhere, and resolves conflicts deterministically across devices.
- Deleting a profile on one machine removes it everywhere on the next sync. Requires Pro and the same passphrase on each machine.
v3.4.x
August 24–25, 2026 SERIESAutomation attach point & polish
- Drive profiles from Puppeteer, Playwright, or Selenium: launch a profile, ask the local API for its connection endpoint, and attach — every page carries the full fingerprint. Available on every plan, free included.
- Series of fixes through 3.4.6: legacy accent-colour traces removed, Settings repaint bug fixed.
v3.3.0
August 24, 2026 FEATUREUpgrade from inside the app
- Plans & License sells directly: pick a plan, pay by card or crypto in your browser, and your account upgrades automatically — no license keys to copy around.
Older releases are archived on the releases page. Existing installs update automatically.