Night Drop 0.1.23

Burn messages

Long-press Send — or the attach button, for a photo or video — to send a message that arrives blurred and is deleted a set time after the other person opens it: 10 seconds, 30 seconds, a minute or five minutes. If it is never opened it is deleted after 24 hours. The timer starts when it is revealed, not when it is sent, so a message waiting for someone who is offline is not burned before they see it.

What it is not. It is a courtesy against a careless or forgetful recipient, not a control over a hostile one: a screenshot, a screen recording or a camera pointed at the screen all still work, as they do in every app that offers this. It is shown as a blur, never a padlock, for that reason.

• Both of you need this version. Burn is only offered once the other person's app has said it understands it; until then a burn message would arrive as an ordinary, permanent one.
• Your own copy is kept for up to 24 hours, not deleted when they open it — unless they turn on burn read receipts (off by default, and their choice, because it tells you when they read it).
• With server storage on, a copy also sits on the relay until their app next collects its mail — normally minutes, up to 24 hours if it never comes back online. The burn menu says so when it applies.

Fixes

• Reopening the app on Android shortly after closing it could show "Couldn't open your saved session", with Try again failing until it recovered by itself a minute or so later. Nothing was lost — the saved data was never touched — but it was alarming. See docs/advisories/2026-09-26-reopen-after-swipe-showed-recovery-screen.md.
• The chat header no longer puts the verify shield next to Back on a phone. Only the server-storage and disappearing-timer icons stay in the bar; verify, rename, back-up and delete are in the ⋮ menu.

Verifying

Every binary is signed with the release key and listed in SHA256SUMS, itself signed. See SECURITY.md for the full verification steps; nightdrop-signing-key.asc is attached.