Duo22 v2026.10.13.1

Fixes

• Remote desktops feel quicker: RDP and VNC show screen changes as soon as they arrive
  instead of on a fixed timer. Keys, clicks and scrolling go out straight away, even while the
  screen is busy updating. RDP sessions also skip the wallpaper and cursor shadow, so there's
  less to send.
• SSH sign-in explains a missing key: if a host's identity or SSH key hasn't reached this
  device yet (say it was added on another device that hasn't synced), the connection log says
  so, and so does the error if signing in fails. Before, the key was skipped silently and you were
  just asked for a password.

Duo22 v2026.10.12.7

Duo22 v2026.10.12.7

22Vault v2026.10.12.4

New

• Your look on every device: the accent colour, animations, notification position, file
  icons, sidebar, tab colours and terminal font are now saved to your account, encrypted like
  your vaults, so every device you sign in on looks the same. To keep a device's look to itself,
  choose This device only under Settings → Appearance; switching back brings the account's
  look back. Security and other per-device settings stay on each device.

22Vault v2026.10.12.3

22Vault v2026.10.12.3

22Vault v2026.10.12.2

New

• Kubernetes: manage a cluster through any SSH host that can reach it, using the host's own
  kubectl (k3s and MicroK8s included), so nothing needs installing. See pods, workloads,
  services and nodes. Open a pod's logs or a shell as a terminal tab, describe a pod or view its
  YAML, delete pods, restart workloads, and scale deployments.
• Services: an SSH terminal can show the host's systemd services in a side pane. Check a
  service's status and unit file, and follow its logs. If you're root or have passwordless
  sudo, you can also start, stop, restart, reload, and choose whether it starts at boot.
• Health: every host on one page, showing whether it answers and how fast. Hosts you're
  connected to over SSH also show CPU, memory and disk. Turn on Watch in the background to
  get a notification when a host goes down, comes back, or its disk passes 90%.
• Workspaces: save your open tabs, split panes included, and reopen them in one go from the
  tab bar or Quick connect. Workspaces sync like snippets, so a workspace saved in a shared vault
  is there for your whole team too.
• Connection history: each vault lists who connected to its hosts, when, how and from which
  device, and keeps it for a year. Which host it was is encrypted, so the server only sees who
  and when. A host's own history is in its menu.
• Import hosts from your SSH config, PuTTY, SecureCRT or a CSV file. Private keys come
  along, and hosts you already have start unticked.
• SSH certificates: keep a certificate authority in a vault and 22Vault signs a short-lived
  certificate each time a chosen identity connects. Servers that trust the CA let you in without
  touching authorized_keys. You can also sign any public key to use with plain OpenSSH.
• Expiring access: when you share a vault, you can choose when someone's access ends. When
  the time comes, they lose access and the vault key is changed for everyone else.
• Confirm it's you before connecting: a host can require Touch ID, Windows Hello or your
  master password before anyone connects to it or through it. Turning this on or off needs your
  master password and a second factor, and turning it off emails you.
• Tabs and sidebar: colour tabs by host tag (red for "prod", say), reopen your tabs after
  unlocking, hide sidebar sections you don't use, and show your hosts as a tree of groups in
  the sidebar.

Changes

• Emails from 22Vault now come from 22vault@ewok.space.
• New View menu shortcuts: Kubernetes is ⌘7, Health ⌘8 and Vaults ⌘9.

22Vault 2026.10.11.7

New

• SFTP beside a terminal: an SSH terminal's split menu can open an SFTP browser for the host
  beside or below the terminal.
• Automatic retry on all termianl types

22Vault v2026.10.11.11

New

• Security keys: add a YubiKey or other FIDO2 key in Settings → Security and use it for
  two-step verification.
• Pick your second step: choose which one signing in and unlocking ask for first (security
  key, authenticator app or emailed code) in Settings → Security → Ask for first.

22Vault 2026.10.11.9929

New

• Split panes: put another terminal beside or below the current one (the same host or any
  other, up to four panes) and drag the gap to resize.
• Session logs: save a terminal's output to a text file, or log every session (Settings →
  Terminal). Logs are plain text that only your user account can read.
• Host stats: on Linux SSH hosts, a bar under the terminal shows CPU, memory, disk, load and
  uptime.
• Tailscale: the network scan also lists your tailnet's online devices.
• What's new: this list, in Settings, and a note after each update with what changed.
• The Hosts page can check which hosts are online again on demand, and the security log has
  filters and pages.

Security

• Vault keys are checked on every device: when a member is removed and the key changes, the new
  key has to come with proof from the old one, so the server can't swap in a key of its own.
• A server key of a different type (say RSA where you trusted ed25519) now warns that the host's
  key changed, instead of looking like a first connection.
• Links in a terminal open in your browser, and only web links.
• Sign-up and verification emails can't be sent to an address faster than the limit, whatever the
  request carries.

Fixes

• Unsynced changes to a vault you can't open right now wait instead of being dropped; if they do
  have to go (the vault was removed, or you can only view it), you're told how many.
• Clearer messages when Windows refuses a Remote Desktop sign-in (expired password, locked or
  disabled account, not in Remote Desktop Users).

22Vault 2026.10.11.7125

22Vault 2026.10.11.7125

TermiVault 2026.10.10.6411

TermiVault 2026.10.10.6411