Hush 2.2 hardens saved-secret access, hides content in the app switcher, authenticates HUSHF2 filenames and file types, validates package structure and iteration limits, and clarifies recipient-control boundaries.

Hush 2.1 adds Send Readiness, a new checklist after encryption that validates the package, secret strength, verification code, QR suitability, package size, and self-destruct warnings before you copy or share.

This update sharpens the interface: the iPad layout now uses a centered, comfortable reading width instead of stretching edge to edge, plus small display fixes. iPhone is unchanged.

Hush 2.0 — a pro upgrade for private text, still 100% on-device. • Self-destruct messages: set an expiry or burn-after-reading, sealed inside the encryption itself. • Decoy mode: a separate duress secret reveals a cover message, protecting the real one. • Verification code: confirm you and your contact share the same secret, without revealing it. • Smarter strength audit: catches common passwords, keyboard runs, sequences, and dates. • App Lock: Face ID, Touch ID, or passcode to open the app, with auto re-lock. Real AES-256-GCM encryption with PBKDF2 key derivation — no account, no network, nothing ever leaves your device.

Hush Files: encrypt any photo, PDF, or file with your shared secret. Pick a file (or share one into Hush), encrypt it on-device into a small .hush document, and send it through Messages, Mail, AirDrop, or Files. The recipient opens it in Hush, enters the same secret, and gets the original back — saved to Files or Photos. Same AES-256-GCM + PBKDF2 protection as the text path, fully offline with no account. Also: encrypt/decrypt now runs off the main thread with a progress indicator (no more launch or button hangs), the passphrase suggester uses the secure system RNG, QR codes stay scannable, an

What's New in Hush 1.1 Message Ledger After encrypting or decrypting, tap "Save to Ledger" to keep a named copy of the result. The ledger lets you re-copy an encrypted message to share again, or re-read a decrypted message - without going back to the original sender. Up to 50 entries, stored locally only. Message Templates Save plaintext snippets you encrypt repeatedly (meeting codes, standing alerts, frequent updates) as named templates. Tap "Load a Template" on the compose screen to fill the text field in one step instead of retyping. Quick Decrypt When a Hush message is on your clipboard and you have saved secrets, Hush tries each saved secret automatically when you open the app. If one matches, a Quick Decrypt banner lets you jump straight to the decrypted result - skipping the full enter-secret and paste flow. Guide updates Three new guide entries explain the ledger, templates, and Quick Decrypt, so new users understand what they store and how they work.

Stronger by default. Hush now derives your key with PBKDF2-HMAC-SHA256 at 600,000 iterations (the new HUSH2 format), so weak secrets are far harder to brute-force — and it still opens your older HUSH1 messages. New — a 7,776-word diceware passphrase generator with a live strength meter, Face ID-gated Saved Secrets, QR export for in-person exchange, an in-app encryption guide, and clipboard auto-clear. Fully offline. No account, no ads, no tracking.

Updated the app icon with a more premium detailed design and refreshed the App Store build.