Your keys can now explain themselves. Give a secret a name and a note — which account it is for, when it expires, what breaks if it is rotated. Your agent sees them too: the vault now publishes a README alongside the secrets, so a tool on your computer can tell fifteen keys apart without you pasting anything into a prompt. The vault reads like a list again. Denser rows fit fifteen secrets on one screen instead of seven, paths browse as folders, and you can sort by name or by when you added them. Swipe a row to delete it. Each daemon has its own card now, with Lock right there on it, and the session screen explains itself in four plain steps instead of six boxes. Fixed: on iOS 26 the Back button did nothing on some screens.

Sessions between this app and your daemon are now mutually authenticated. The daemon learns which vault is talking to it and accepts only the identity you authorised, so nothing else can take its place — and the connection key you hand to an agent names that identity, which removes the window where a first connection had to be taken on trust. Pairing is gated by a secret carried in the QR code rather than by the session ID, which is printed to terminals and ends up in logs. Also: reconnecting no longer reports a handshake in progress as an error, and a vault that loses signal can get back in.

• The session screen now tells you when your secrets will go, not just how long the window is — “if this disconnects now, they are wiped around 10:21 PM on Sep 13”. • Back up your vault. Every secret and its path, sealed into one encrypted file with a passphrase you choose, and restored the same way. • Backup passphrases now start at eight characters.

Seven languages. ValetFS now follows your device language in English, Korean, Japanese, Chinese, Spanish, French and Arabic. Vault and Daemons are separate tabs. Your secrets and your paired machines no longer share one crowded screen, and the app opens on Daemons so you can see at a glance what is serving. Optional iCloud Keychain sync. Turn it on and your vault follows you to your other devices, still end-to-end encrypted and still behind Face ID. It stays off until you ask for it. The grace window is visible. You can see how long a daemon stays unlocked, and choose it. ValetFS Pro. A one-time purchase, no subscription and no account, that lifts the free limits of 3 secrets and 1 daemon and unlocks iCloud Keychain sync, the grace-window control, and importing secrets from Files or Drive. End-to-end encryption, Face ID and remote wipe stay free, and reaching a free limit never makes an existing secret unreadable. The daemon and the command line tool remain open source and free. Smaller fixes: back buttons now say where they go, the vault list refreshes as it changes, and the running version is stamped at the bottom of the screen.