v3.2.0
New
- Pick which alias to use. Clicking the addy.io icon in an email field now lists your aliases for that site, so you can choose one or create a new alias. Aliases with a description show it underneath, making it easy to tell them apart. If the site has no aliases yet, a new one is created and filled in straight away, as before.
- Stop emails from a site in one click. When the site you're on already has an alias, the Create Alias page now lets you deactivate it right there, with an Undo button if you change your mind.
- Faster alias list. Your aliases now appear instantly when you open the extension, and refresh in the background.
Security and privacy
- New sign-ins now store your API key only on this device instead of syncing it through your browser account.
- Logging out on one browser no longer affects your other browsers, and your preferences (theme, sorting, icon position, etc.) are kept when you log out or your session expires.
- Logging out now deletes the API key the extension created when you signed in with your username and password. API keys you pasted in yourself are left untouched.
- The field icon, keyboard shortcut and right-click menu now only use aliases that clearly belong to the site you're on, so a lookalike site can no longer receive an alias meant for another site. Aliases made on any part of a site (for example www.example.com and example.com) are found on the others.
- The field icon now responds only to real clicks, so websites can't trigger alias creation on their own.
- Aliases copied with the shortcut or right-click menu are no longer shared with ads or other embedded frames on the page.
- Self-hosted instances must use https:// (http:// is still allowed for localhost and private network addresses).
- Firefox: the extension now declares the data it sends to addy.io (your sign-in details, and the address of the site you create or look up aliases for) using Firefox's built-in data consent. This requires Firefox 140 or later on desktop, or 142 or later on Android.
Fixes
- Aliases filled in by the field icon now register correctly on sign-up forms built with React and similar frameworks.
- Error messages now always come into view, even when you've scrolled down (for example, trying to send from an inactive alias).
- Error messages for network problems now actually appear instead of failing silently.
- Notifications no longer cover the Aliases and Settings tabs, which previously couldn't be clicked for a few seconds.
- Changing an alias (activating, deactivating, editing its description and so on) is now reflected everywhere in the extension straight away.
- Renewing your API key after signing in with a password no longer logs you out when the original sign-in would have expired.
- An expired or revoked API key is now handled the same way everywhere, with a clear message.
- Searching for aliases containing characters like
&,#or+now works. - Fast typing in search no longer lets an older, slower result replace the newer one.
- "Copied to clipboard" is only shown when the copy actually succeeded.
- The field icon now appears in sign-up popups and dialogs, and comes back properly in web components after being turned off and on.
- The "System" theme now follows your operating system's light/dark setting while the extension is open.
Performance
- The extension opens faster: settings load in one step and the alias list is fetched first.
- Much lighter on busy websites: the field icon no longer re-scans the whole page on every change or polls every field constantly.
- Fewer background storage writes each time you open the extension.
Under the hood
- The extension has been reorganised into smaller components with shared request handling, making future updates easier and safer.
- A new automated test suite covers sign-in, alias matching, the field icon and picker, and the main popup actions.