v1.16.0

The right account on the right site

With dozens of accounts, the one a page wants was a search away, and the
guess we made from the service's name ran out the moment three accounts lived
under one company's domain. Now you can say it.

• Websites for an account. Edit Account has a Websites field: type
  example.com, paste a whole address, or add the page you are on with one
  click. On those sites the account is pinned at the top of the list under
  For this site, and right-click → Insert 2FA code fills it in without
  asking.
• Right-click an account → Use on this site ties it to the page you are
  on in one step, and takes it off again.
• Each subdomain can have its own account. A website covers its
  subdomains, and the most specific one wins: with main.com on one account
  and sub1.main.com on another, sub1.main.com shows only the second, and
  main.com or sub2.main.com only the first. www. is the same site as
  without it.
• An account you tied to a site is never guessed for another. Before, an
  account whose name read like the parent domain could be offered on every
  sibling subdomain.
• Several accounts on one site are all pinned at the top; inserting picks the
  one you used there before, or asks.
• Websites live inside the account record: password protection encrypts them,
  and exports, imports and cloud backup carry them. They work even with
  "Suggest account for this site" switched off — that setting is about what
  the extension learns and guesses, and a site you typed in is neither.

Copy the code without opening anything

• Right-click anywhere on a page → Copy 2FA code for this site. The code
  for the site goes to the clipboard, for the sign-in that happens somewhere
  the menu cannot reach — a desktop client, a phone, a field drawn on a
  canvas. It never types into a field, even one the caret happens to be in.
  When the site does not match exactly one account, the extension opens so you
  can pick, and remembers the pick. It sits under the same setting as
  "Insert 2FA code".

Moving from another app

• FreeOTP backups now import: FreeOTP 2's password-protected backup file,
  and the older FreeOTP 1.x token list.
• Encrypted Aegis and 2FAS backups import too: enter the file's password
  and it is opened right here. The password is used only to open that file and
  is not kept.

Pro

• Cloud sync between your devices. With cloud backup on, each browser and
  Mac with your license now folds in the others' changes — additions, edits and
  deletions — instead of only keeping its own copy. The newer edit of an
  account wins, a deletion wins over older edits, and an account missing from
  another device's copy is never removed because of it. A cloud with a tick at
  the top of the window shows when everything is synced.
• After opening checkout, Settings → Pro shows Open checkout and Check
  payment instead of a spinner waiting for a payment you may have closed.

Also new

• Clearer errors when an account cannot be added: a page that cannot be
  scanned no longer offers "Scan QR from screen"; "no QR code here" and "no
  camera" now ask where your QR code is and take you there.
• "Request a feature" is gone — the board it opened has closed. Ideas go to
  support@authenticator.sh.

The Chrome Web Store update follows after review; until then the store may
still offer 1.15.2.