Changelog

The Beebeeb iOS app is in TestFlight. It is not in the App Store yet.

What it can do

• Unlock with Face ID or a biometric lock, with a lock timer
• Browse, search, sort, rename, move and multi-select files in grid or list view
• Upload from the document picker and open recent files
• Keep chosen files available offline, export through the share sheet or save to gallery
• Back up photos and videos with progress and resume on Wi-Fi, with encrypted thumbnails
• Preview images, PDFs, Office files, CSV, code and ZIP archives
• Share files, including double-encrypted shares
• Add files from other apps, with Siri shortcuts, a lock screen widget and a document scanner
• Search over encrypted names, push notification preferences, light and dark mode

Up to commit bcebcb9 (22 October 2026). No numbered release yet.

This release checks downloads more strictly and fixes replacing the same file twice.

Improved

• Every download (bb pull, bb sync, bb webdav, bb mount, bb repair) checks the file format before decrypting
• A file whose stored name is not encrypted is refused
• A resume record from an earlier version restarts that file from the beginning once

Fixed

• bb push --replace no longer fails the second time you replace the same file

Full release notes on GitHub

A safety release for bb sync.

New

• bb sync --allow-mass-delete is needed to remove more than 50 files or over 10% of tracked files
• bb sync --rebind accepts a changed remote folder

Improved

• A local file is removed only when the server reports that exact file as trashed
• Removed files move to .bb-trash/<UTC time>/<path> in the sync folder
• bb sync --once exits 3 when removals were held back or a download could not be decrypted

Fixed

• A download that fails to decrypt no longer moves the remote copy to the Trash

Full release notes on GitHub

bb webdav is now safer, and the CLI no longer sends your password for password checks.

Improved

• bb webdav is read-only by default, and writes need --read-write
• It prints a random password at startup that every client must send
• It refuses requests that did not come from a local program

Security

• 0.13.3: password checks in bb trash empty, bb rm --permanent and bb account update no longer send your password
• 0.13.4: bb account update --email no longer sends your password either; in 0.13.3 and earlier it still did, although the email change then failed

Good to know: the password changes on every run, so unattended mounts stop connecting. Windows Explorer is not supported by bb webdav, so use the desktop app, rclone, Cyberduck or WinSCP. Changing the email on a standard account is not yet possible from the CLI, so use the web app.

Release notes: v0.13.3 and v0.13.4

A background bb sync service now stops when your sign-in is no longer accepted.

Fixed

• Before, launchd or systemd restarted it every 10 to 20 seconds
• It now prints one line, "Your session has ended. Run bb login ...", and exits with code 77
• Service managers are told not to bring it back

Not covered yet: a sign-in that ends while bb sync is already running.

Full release notes on GitHub

0.8.10 fixes a trap with revoked sign-ins on Windows and Linux, and 0.8.11 brings back the Mac app.

New

• The Mac app returns in 0.8.11 (Apple Silicon, macOS 14 or later), last released in 0.8.9
• The sign-in screen says to type the code shown in the app and approve only sign-ins you started
• The sign-in request reports client, version, OS and hostname for the approval page

Improved

• Windows checks its stored sign-in at startup and, if it was revoked, opens sign-in with your email filled in
• Offline laptops and server errors never sign you out
• Sign-out works again when your profile fails to load, and errors name the failing stage
• Linux is rebuilt from the same source

Release notes: desktop-v0.8.10 and desktop-v0.8.11

The download page now picks the right download for you.

New

• The /download page chooses the download for your operating system
• A Download link in the navbar

0.13.0 carries two security fixes, and the release notes recommend upgrading.

New

• bb whoami shows the account state and denied capabilities (--json gains an account key)
• bb signup explains the answer it got (--json gains signup)
• bb login: you type the code your terminal shows, and the approval page shows where the request came from

Fixed

• bb pull no longer fails on about 1 file in 256
• bb pull --zip works on file-request uploads
• bb mv <x> / moves to the root
• 0.13.1: the read-only notice no longer says you can delete when your account cannot

Security

• bb pull now only writes inside the folder you chose, and bb login no longer prints a link carrying the code.

Release notes: v0.13.0 and v0.13.1

The macOS app now shows your real files in Finder. Published on the alpha channel.

New

• A Finder location with your real file tree, kept current as files change
• Thumbnails for images and videos
• Sync badges for uploading, downloading, error, conflict and trashing
• Files deleted in Finder move to the Trash
• A redesigned four-tab Settings window (General, Account, Sync, About)

Not yet: restoring from the Finder Trash ("Put Back" or drag-back) and emptying it, so restore from the app or the web app. Thumbnails, badges and the Trash round trip were not verified on a device at publication. Windows and Linux have no changes.

Full release notes on GitHub

The Windows installers now show Initlabs B.V. as the publisher.

Fixed

• Adding files to folders from Finder on macOS

Security

• Windows installers, app and uninstaller carry a timestamped Initlabs B.V. signature, so the "unknown publisher" prompt is gone.

A release check now refuses to publish any Windows file without a valid signature from that publisher. Good to know: SmartScreen trust starts at zero for a new certificate, so early downloads may still show "more info, Run anyway".

Full release notes on GitHub

Today we're opening Beebeeb to the public. Every file is encrypted before it leaves your device, stored in Europe, governed by EU law.

bb does not create accounts, and it now explains a missing or lapsed plan.

New

• bb signup prints the web signup address and opens it in a browser when one is available
• bb whoami, bb status, bb quota and bb billing show show your account state
• States are no plan yet, or trial ended (read-only until the stated deletion date)
• --json on whoami and quota gains account_state (ok, needs_plan, lapsed) and data_deletion_at

Improved

• Refused uploads and shares say why and link to where to fix it

It does not open a browser under --json, --quiet or over SSH. bb login works as before, and existing Free accounts see no change.

Full release notes on GitHub

Beebeeb Desktop is now available on macOS.

New

• A notarized .dmg for Apple Silicon, macOS 14 or later, signed with a Developer ID
• A Finder location instead of a synced folder copy
• Uploads of 0-byte files

Improved

• Interrupted uploads resume instead of restarting

Fixed

• A crash loop of the Finder location on macOS 26
• Detection of a Finder location you turned off
• Leftover unfinished uploads are cleaned up

Windows and Linux are rebuilt from the same code as 0.8.4.

Full release notes on GitHub

These releases fix bb share and make scripted runs fail loudly.

New

• bb share creates shares in the same encrypted format as the web app
• Links made by bb open in the web viewer, and vault paths and short IDs work
• Exit code 0 means success and 1 means any other error
• Exit code 2 means a prompt was needed but input is not a terminal
• Exit code 3 means a one-shot run finished with failed or unresolved items

Improved

• bb pull never silently overwrites a local file, so use -f or --force
• bb push and bb sync no longer abort a whole folder when one file fails
• Release binaries without FUSE say so and point to bb webdav

Fixed

• bb share could not create any share on 0.10.0
• A resumed upload that cannot continue is restarted instead of failing on every later run

Release notes: v0.11.0 and v0.11.1

Installs on 0.3.0 or later could not apply any update since 0.3.0 (the updater refused them, so nothing was installed unverified), and this release fixes that.

New

• macOS two-factor sign-in, dark mode, a rebuilt tray and a Plan and subscription panel
• Conflict resolution shows the actual diverging content

Improved

• Automated builds and tests on Linux, Windows and macOS

Fixed

• Updates are now signed with the matching key and deliver everything since 0.3.0 at once

Security

• Sign-out and account switch clear the local queue and decrypted cache, and recovery-phrase unlock checks the phrase first.

Installs older than 0.3.0 need a manual reinstall.

Full release notes on GitHub

The CLI gains commands to organize your vault, secure your account and check billing.

New

• bb mkdir (with -p), bb mv, bb rm and bb restore to organize files
• bb trash list and bb trash empty, with bb rm --permanent behind a password confirmation
• bb search <query>, with names decrypted locally
• bb 2fa status | setup | enable | disable for two-factor authentication
• bb sessions list | revoke | revoke-all-others and bb passkey list | add | remove
• bb billing show | usage | invoices, bb account billing and bb account addons

Improved

• bb ls gains -l, -a, -R, --depth, --sort and -r, and no longer cuts off at 200 entries
• Every upload now uses the same upload route

Security

• The login fallback that could silently degrade a failed key derivation was removed.

Full release notes on GitHub

A security release for how the background sync service talks to the app on your computer.

Security

• The channel now checks which program connects. The notes say it was not remotely exploitable and show no sign of use.

Full release notes on GitHub

Error messages now look the same everywhere, and a rare stuck upload is fixed.

Improved

• Errors in sign-in, first-run setup and the main file view use one toast style
• Backup onboarding and the Explorer and launch-at-login settings use it too

Fixed

• A failed restore from Trash no longer replaces the Trash list with a "Could not load Trash" card
• A retryable failure could be mistaken for an authorization error and pause the upload

Release notes: desktop-v0.8.1 and desktop-v0.8.2

Linux gets thumbnails, and the app gets a quick file search.

New

• Preview thumbnails for synced files in file managers such as GNOME Files and Dolphin
• A quick-open dialog searches file names with the same encrypted search as the web app

Improved

• Status messages use one consistent toast
• Confirmation dialogs are fully keyboard-navigable

Full release notes on GitHub

0.3.0 has no new user-facing features, and 0.4.0 fixes a rare sync problem.

Improved

• Release builds now wait for the Rust and frontend test suites
• App Activity CPU is normalized by core count
• The downgrade confirmation is a real modal
• The dead-end Shared menu item was removed until a real feature existed

Fixed

• Trashing a folder while another device was syncing could leave its contents behind as orphaned entries

Release notes: desktop-v0.3.0 and desktop-v0.4.0

You can now restore earlier versions of a file from the desktop app.

New

• A version history dialog lists every earlier version with its size and time
• Restoring queues the restore, and the file updates on the next sync
• The conflict-resolution page uses the same restore

Full release notes on GitHub

Files and folders shared with you now appear in the desktop app.

New

• A Shared section lists items shared with your account
• Each item shows who shared it and whether you can edit or only view
• Opening an item decrypts its real content

This is the read side only: creating or revoking shares from desktop is not in this release.

Full release notes on GitHub

A fix for double installs on Windows and a tidier Updates page.

New

• A "Release notes" button opens a scrollable window in Settings, Updates

Improved

• "Sync complete" and "Local cache warning" notifications now fire
• The local cache has no cap by default

Fixed

• Windows could end up with two Beebeeb entries after an update
• Update information now covers both Windows installer types
• Settings, Updates no longer shows raw release-note text inline when a downgrade is available

If you already have two Beebeeb entries, uninstall the older one by hand.

Release notes: desktop-v0.2.1 and desktop-v0.2.2

This release adds Trash, a proper menu bar and a working Advanced page. The notes state none of it was confirmed on real hardware at release.

New

• Deleting a file moves it to Trash, and permanent delete re-confirms your password
• A native menu bar replaces the placeholder menu
• A Light, Dark or System theme in Settings, Advanced
• A local cache limit that removes the least recently used files first
• A live App Activity panel
• A confirmed downgrade when you switch to an older channel
• Smaller additions: "Report a problem" and a "Check for updates" button

Improved

• Account alerts and device alerts are separated

Fixed

• Tray flyout size and its position on scaled Windows displays

Full release notes on GitHub

The first release of the native sync client for Windows and Linux. macOS was not part of it.

New

• Sign in and unlock your vault with password, optional 2FA and 12-word recovery phrase
• On-demand files on Windows through the Cloud Files API
• Selective sync
• Known-folder backup for Desktop, Documents and Pictures
• Background sync with retry and an offline queue
• Conflicts become a renamed "Keep Both" copy, with version history
• System tray, optional launch at login, automatic updates and diagnostics export

Windows has MSI and setup installers, and Linux has AppImage, .deb and .rpm. Known limitations: large files download in full on open, no Explorer thumbnails yet, no guided uninstall.

Full release notes on GitHub

The desktop app history from the first commit on 2026-04-24 to the commit before 0.1.0 (217 commits).

What the basics had

• A desktop app with a configurable sync folder and per-file sync state
• Conflict resolution with keep mine, keep theirs or keep both
• Windows: on-demand files, a tray flyout with pause and resume, and a backup prompt for known folders
• Windows: pin files to keep them offline, a live bandwidth view and Explorer thumbnails
• macOS and Linux: groundwork for on-demand files, recursive pinning and smart cache, not shipped to users yet
• Update notifications

The CLI gains file requests, resumable uploads and larger upload parts.

New

• bb request (create, list, rm, send) makes links that let anyone upload an encrypted file without an account
• bb ls and bb pull decrypt files received this way

Improved

• An interrupted bb push or bb sync re-uploads only the missing parts, with retry and backoff
• Larger files use larger parts, up to 128 MiB

Fixed

• Undecryptable downloads of files above about 64 MiB when the part size is not 4 MiB

0.9.1 (same day) re-cuts the release with no changes to the bb binary.

Full release notes on GitHub

Twelve releases without authored notes, so this list comes from the commit messages.

New

• Streaming upload and download in bb push, bb pull and bb sync, with real progress
• bb pull --zip streams a folder as a zip
• Thumbnails are made and uploaded for images
• bb sync registers the device, with --status, --stop-session and --stop-all
• bb sync installs as a background service (LaunchAgent or systemd) and has a terminal screen
• bb account show, bb billing show, a headless-aware bb login and a setup wizard for bb mount

Improved

• Rate limits are handled by pausing and retrying, with pacing from rate-limit headers

Security

• File details such as the file type are now encrypted together with the file name.

Release notes: https://github.com/beebeeb-io/cli/releases (tags v0.3.3 to v0.8.0)

bb sync now keeps watching after the first pass, and bb unshare has a picker.

New

• bb sync keeps watching after the initial sync and replaces bb watch, which stays as a deprecated alias
• bb sync --daemon installs a macOS LaunchAgent, --stop removes it, --once runs one pass
• bb unshare has an interactive picker
• bb ls Music/ works with plaintext folder names
• bb status is an alias for bb whoami

Fixed

• After brew upgrade, bb --version shows the new version

The bb rotate stub was removed.

Release notes: v0.2.1 and v0.3.0

Pull files by path or short ID, and sync uploads several files at once.

New

• bb pull Music/notes.md accepts plaintext file paths as well as UUIDs
• bb pull 3e15382b accepts short ID prefixes
• bb sync uploads 4 files in parallel by default (--concurrency N)
• bb config supports --json
• An encryption performance page in the docs

Improved

• A SHA-256 content hash stops touch from triggering re-uploads
• Share URLs use the production app address

Fixed

• File names stay decryptable after bb sync
• bb ls shows (encrypted) for undecryptable names instead of crashing

Release notes: v0.3.1 and v0.3.2

Self-update improves, and files uploaded from the CLI now open in the web app and the other way round.

New

• A shell installer
• Self-update prints a status line and runs brew upgrade for Homebrew installs
• bb repair migrates files made with the old key derivation to the web app one (--dry-run is supported)
• bb shares decrypts file names

Fixed

• Key derivation now matches the web app, so files decrypt in both
• push, sync, watch, webdav, share and mount use the same derivation

Release notes: v0.1.4 v0.1.5 and v0.1.6

Adds self-update and fixes opening files uploaded through the web app.

New

• Self-update checks GitHub releases on startup
• A full README with a command reference, plus CONTRIBUTING and CHANGELOG files

Fixed

• Decryption of file names and content for files uploaded through the web app
• Smaller fixes: bb shares showing "unknown" names, WebDAV filtering macOS metadata files and push conflict detection

It includes 0.1.2 ("production and open-source readiness improvements", with no further detail).

Full release notes on GitHub

A friendlier CLI with a speed test and flags for scripting.

New

• A custom help screen
• bb speedtest measures latency, upload and download speed and encryption speed
• All commands gain --json, --quiet and --no-color (NO_COLOR is honoured)

Improved

• bb ls shows relative timestamps and summary footers
• A quota bar in bb whoami and bb quota
• Per-file upload progress with speed
• Status indicators in bb shares

Full release notes on GitHub

The CLI history from the first commit on 2026-04-24 to the day before 0.1.1 (published 2026-05-11).

What the basics had

• bb, written in Rust on the shared encryption core
• Password login and browser or device-code login
• Encrypted bb push and bb pull, recursive for folders, with conflict detection and versioning
• bb share, bb shares and bb unshare, including double-encrypted shares
• bb watch and two-way bb sync
• bb webdav (read and write) and bb mount (source builds only)
• bb whoami, bb status, bb quota, bb config and shell completions for bash, zsh, fish and PowerShell

Install through Homebrew, a shell installer or Scoop. 0.1.1 itself has no authored notes.

The web app has no GitHub release, so its history to 2026-10-22 (1267 commits since 2026-04-24) is gathered here.

What the basics had

• Encrypted in the browser before upload, with folders, drag and drop and resumable uploads
• Trash with restore and permanent delete, version history, starring, pinning and bulk actions
• ZIP download for folders
• Previews for images (including HEIC and RAW), PDF, Office documents, code and audio, with encrypted thumbnails
• Search over an encrypted index, and a command palette
• Sharing: links with expiry and passwords, link plus separate key, sharing with users, shared folders, file requests
• Account: 2FA (TOTP), passkeys, a 12-word recovery phrase with a Recovery Kit PDF and a recovery test
• Billing with plans and add-ons, light and dark mode, PWA install, keyboard shortcuts

Up to commit 028ceb4 (22 October 2026). No numbered release yet.

The shared encryption core used by the web, iOS, CLI and desktop apps has no GitHub release, so its history to 2026-10-18 (176 commits since 2026-04-24) is gathered here.

What the basics had

• AES-256-GCM file encryption and Argon2id key derivation
• X25519 identity keys
• Password authentication that does not send your password, and BIP39 recovery phrases
• A sync engine, usable from the browser and from iOS

New

• Encrypted file names and metadata
• Streaming encryption of large files and folder-to-zip
• An encrypted search index and share tokens
• Encryption for file requests, so others can upload to your vault
• WebP thumbnails, the browser-based CLI login and helpers that tell which files can be previewed

Up to commit 5c2944a (18 October 2026). No numbered release yet.

The five product repositories (core, CLI, web, desktop, mobile) and the website repository start on 2026-04-24.

What the basics had

• End-to-end encrypted storage on a shared Rust core
• AES-256-GCM for files and Argon2id key derivation
• X25519 key exchange for sharing
• Password login that does not send your password, and BIP39 recovery phrases

The five product repositories are open source under AGPL-3.0 (checked on GitHub, 2026-10-22). The website repository is private.