Company-email login codes, browser registration, device sign-out and a 30-day authenticated-inactivity cutoff.
New
Sign-in: Confirm a fresh sign-in with a short-lived, single-use code before opening portal data; plaintext codes are not stored.
New
My devices: Review your own registered browsers and sign out one device or all other devices.
New
Session expiry: End sessions after 30 days without authenticated activity; background polling does not extend them.
Improvements and fixes
Design and performance: Use the shared portal header styling on security screens and reuse the trusted request snapshot instead of repeating the same session read.
Improvements and fixes
Verification controls: Keep verification-channel radios and browser-registration checkboxes at their intended size so email details fit on desktop and mobile.
Enforcement activates only after email and server-key readiness checks. WhatsApp remains unavailable pending a production-ready company-owned Meta connection; Taqnyat receives no WhatsApp access and manual team access is unchanged.
Latest release references on this page (3)
The full history is retained. Browse updates, search a version, or open the reference pages within each update to reach every original.
2026.10.17-r24 · Sign-in verification and registered devices ·
2026.10.17-r23 · Sign-in verification and registered devices ·
2026.10.17-r22 · Sign-in verification and registered devices ·
For signed-in accounts, New lasts seven days from the first visit after release, capped at thirty days from release. Visitors see it for seven days from release.
