Changelog

🔥 Burn on Failure — every password attempt (correct, wrong, or decoy) decreases the view counter. Attacker cannot tell which password was entered.

📜 Destruction Certificate (Proof of Destruction) — visual confirmation of note deletion with timestamp, Reference ID, and reason. Downloadable as PNG.

🛡️ 'Emergency Destruction' status — when password attempts are exhausted, note is destroyed with a clear status instead of generic 'viewed'

Improved password input screen: shows remaining views from server, adaptive colors (blue → yellow → red)

Removed client-side attempt blocking — server now controls limits via views

🛡️ Decoy Mode — plausible deniability. Two passwords: real and fake. Under duress, enter the fake one — shows decoy text, note is destroyed.

Brute-force protection: minimum 3 views for Decoy Mode (each password attempt consumes a view)

Added Decoy Mode instructions to 'How it works' page

Trust indicator in header — green shield 🛡️ shows zero-knowledge status

Improved result UI: shows expiry date instead of anxiety-inducing countdown timer

Share button now uses native Web Share API on mobile devices

Redesigned mobile interface: primary action button, copy feedback states

Fixed auto-deleted notes counting in statistics

Replaced warning badge with informative split-link hint

Simplified link usage: # added automatically

Added privacy-friendly analytics (Vercel Analytics)

Added auto-deletion tracking to statistics

Fixed critical bug with long texts (React Error #185)

Improved 'How it works' page with shorter guide

Added usage statistics

Improved security: updated CSP headers

Encryption performance optimization

First version of threat model

Security documentation

Responsible disclosure policy