- Taking a photo or video in a chat now works when screenshots are blocked: the app no longer goes black after the camera closes, so the photo can be sent. - Links in settings and help pages now open in Safari. - Stability improvements.

- Call details and contact menus that were open when a call came in now work normally after the call ends, instead of showing an error. - Dialogs in Security settings and in chats no longer fail when the screen behind them changes. - Server wipe: a self-wipe requested by the server always runs, even if you left the page. - Stability improvements.

- Settings your administrator sets for your organization now take effect on your iPhone, including a screen that tells you when access is locked. - Incognito calls: the caller's name stays hidden on the call screen and in notifications until you unlock CallSec. Optionally, the caller can be shown once your iPhone is unlocked. - An ongoing call ends when your administrator locks access. - Remote wipe and the panic PIN now always run to the end and sign this device out; the panic report reaches your administrator. - Disappearing messages: expired messages are reliably removed from your iPhone. - More reliable encrypted messaging across your devices.

- Fixed: in rare cases a message sent shortly after a call could not be read, neither by the recipient nor on your own device. - More reliable encrypted messaging when the app is woken up in the background.

- Stronger protection of the app against tampering and unauthorized copies. - The app now proves its integrity on every connection to our servers. - Security and diagnostics improvements.

- Calls connect faster after you answer. - Declining or ending a call now ends it immediately on the other side. - You can call a new contact as soon as they accept your invitation, without restarting the app. - After signing in, incoming calls and your organization's security settings work right away. - Fixed signing in to the security service for some accounts. - Clearer message when an invitation can no longer be accepted.

- Fixed: answering a call from the incoming-call screen could fail to connect when the app had been locked in the background. - Fixed: in a rare case the microphone could stay on after the caller hung up at the very moment the call was answered. - Signing out of an account now also stops this iPhone from ringing for that account. - Stronger protection of the app's security components. - The privacy screen shown in the app switcher is restored reliably after a call.

- One account per device: CallSec now keeps a single account on each iPhone. - Changing or turning off the app lock now asks for your current PIN or pattern first. - Three wrong entries in the PIN confirmation lock the app; ten wrong entries in total erase the app data, exactly as on the lock screen. - New option: scrambled PIN pad. Choose "Scrambled PIN" when setting a PIN and the digits appear in a new order every time you unlock. - If the app locks during a call, the call stays reachable; everything else stays locked until the call ends. - Fixed: after unlocking during a minimised call, a "Connecting" screen could cover the app for up to 30 seconds.

- Calls on a weak or moving mobile connection stay closer to real time: the delay you hear after a network stall is now capped at half a second and recovers within seconds. - Better call privacy: every voice packet is now the same size and no longer carries the loudness of your speech, so nobody on the network path can tell when or how loudly you speak. - Stability improvements.

Privacy and security • Fixed a fault that could leave the last screen you were on visible for a moment when you reopened the app, before it asked for your PIN, pattern or Face ID. Once it happened it kept happening for the rest of that run of the app. • An invitation link could point the app at an address on your own local network. It is now refused unless it names a real server on the internet. • Scanning an invitation issued by your own organisation's server now opens it. Before, the scan simply did nothing — no message, no error. Calls • Answering while your iPhone is locked now connects reliably. The call used to be accepted on screen without the answer ever leaving the device, which looked like a call with no sound. • Fixed a case where tapping Answer did nothing at all, because the call arrived before the app had finished starting. • A call that was never answered no longer reappears afterwards as a second, phantom call. • Calls that were still ringing are no longer cut short by an internal timeout, so the caller keeps ringing for the full time. • When the person you are calling is already on another call, you are told straight away instead of ringing for a minute. • A call you placed yourself can no longer come back to you as a missed call. • Fixed connection details that could be dropped while being sent, which could leave a call stuck on "Connecting". Reliability • Fixed a fault that could make the app stop responding when a call arrived while the iPhone was locked. • Setting up your encrypted message backup after signing in no longer asks for a password you were never given. • The call quality indicator now reports the delay you can actually hear, not the round trip. • The server information screen shows the connection details again. Accessibility • The call controls are now labelled for VoiceOver.

Calls • Answering while your iPhone is locked now connects reliably. The call used to be accepted on screen without the answer ever leaving the device, which looked like a call with no sound. • Fixed a case where tapping Answer did nothing at all, because the call arrived before the app had finished starting. • A call that was never answered no longer reappears afterwards as a second, phantom call. • Calls that were still ringing are no longer cut short by an internal timeout, so the caller keeps ringing for the full time. • When the person you are calling is already on another call, you are told straight away instead of ringing for a minute. • A call you placed yourself can no longer come back to you as a missed call. • Fixed connection details that could be dropped while being sent, which could leave a call stuck on "Connecting". Reliability • Fixed a fault that could make the app stop responding when a call arrived while the iPhone was locked. • The call quality indicator now reports the delay you can actually hear, not the round trip. • The server information screen shows the connection details again. Accessibility • The call controls are now labelled for VoiceOver.

What's new in 1.9.257 • Answering a call on a locked iPhone now works reliably. When a call arrived while the phone was locked, the app could report the call to the system and start the timer without ever completing the connection, so the caller kept ringing and neither side had audio. The key that unlocks the local database is now available during a call wake-up, and the call connects. • Removed a second, nameless call screen that could flash up right after an unanswered call ended. • The speaker button during a call now switches on the first press. It could previously ask the system for the earpiece the call was already using, which looked like a button that did nothing. • Clearer diagnostics for call set-up, so a failure reports its own reason. Review note: the demo account and its QR code are attached to this submission.

When you call someone who is already on another call, CallSec now tells you straight away that the line is busy, instead of ringing on until the call attempt expires. If you would rather not reveal that you are on a call, turn "Send busy signal" off in Security settings and the caller sees an unanswered call, exactly as before. Ending a call no longer disturbs a second call that is still running: the ringtone, the call notification, the audio route and the lock bypass now belong to the call that owns them, also when you are signed in with more than one account. A call whose connection is only briefly unreadable is no longer ended by mistake. The call is now ended only after the transport has been measured as dead continuously, never on the strength of two readings far apart. Call quality reporting is more precise: it now measures the audio stream and the size of the jitter buffer, so a delay on the line can be diagnosed instead of guessed at.

New in this version. - Share a contact: press and hold a contact to send it to someone else. They decide whether to connect, and the two of them get their own conversation. When the two are not in the same group, the person being shared is asked first and their account is not revealed until they agree. - Fixed a menu that was taller than the screen, which hid its last entries behind the system navigation bar.

Reliability update. - Fixed a case where, after a missed notification while the phone was locked, the app could keep a second background session running, doubling data use and battery drain until the app was restarted. - Calling a contact right after they accepted your invitation no longer reports that the invitation is still pending. - The call quality indicator now reports correctly during video calls. - Added detailed diagnostics for slow connections so delays in delivering incoming calls can be traced. - Removed a link in the update notice that led to a page not meant for users.

Setting a PIN now protects the message database in every case. Since June, on some phones the PIN was accepted while the key that encrypts your messages was left unprotected, and the app reported success anyway. This version repairs that on its own: the first time you enter your PIN, the key is protected. If you set your PIN after mid-June, just unlock once. If setting a PIN fails, the app now says so, and your previous lock stays as it was. When a call arrives while the app is locked, the lock screen no longer starts Face ID on its own; unlock with your PIN or tap the button.

Messages and encryption keys that arrived shortly before the app was closed can no longer be lost. The emergency wipe now works for people who unlock with a PIN. The screen that sets it up asked for your identity in a way a PIN could never satisfy, so the protection it offered was unreachable. If the phone was slow to unlock while a call was arriving, the lock screen now steps aside before the call is built, instead of appearing over a call that is already connected. Sharing your invite link no longer leaves a blank screen, and the Chats badge shows the number of conversations you have actually not seen.

When you call someone, your phone now rings back only once their phone is actually ringing — and it does. Until now the caller often heard nothing at all while the other side rang, and sometimes a tone only at the moment the call was answered. The ringback also no longer stops early while the call is connecting, and it is not lost if you leave the call screen and come back.

The lock screen now tells you why it appeared, instead of just appearing. "Answer calls without PIN" has a clearer name and description: it now says exactly what stays locked while a call is running. Your setting itself is unchanged. If the device's secure hardware took a moment longer than usual to release the message key, the app used to give up on it and ask for your PIN again. It now waits for the answer it asked for.

The "Connecting to …" screen no longer stays up over a call that is already running. It exists to cover the gap between answering and the call screen appearing, and it now stands down the moment that screen arrives instead of waiting out its own timeout.

Reactions are now encrypted end to end. Until this release the emoji, the message it was attached to and the person who sent it were the one thing an encrypted conversation still left readable on the server. Reactions also behave sensibly now: when someone reacts to your own message you are told, instead of being shown a notification about a new message that turned out not to exist.

Answering a call on a locked phone could show a database-repair message instead of the call; that is fixed. The PIN screen now uses a keypad that never shows the digits you type and confirms itself after the fourth one. Server-name privacy on the connection now covers every request the app makes, including the ones sent while a call is arriving, and recovers by itself after a network hiccup.

Some messages could arrive unreadable — "the encryption has been corrupted" — when two parts of the app encrypted at the same moment and both took the same place in the sequence. They now agree on that place before writing, so the message stays readable, including on the phone that sent it. Answering a call on a locked phone is quicker as well: the app no longer waits on a part of itself that has already shut down.

On a call that ran past an hour, the screen stopped going dark when you held the phone to your ear, and stayed that way for the rest of the call. It now keeps working for as long as the call lasts. Separately, every time the phone moved between Wi-Fi and mobile data it left an extra background sync running, and those built up until the app was restarted; each switch now clears up after itself.

The app now reports why its database could not be opened, instead of erasing that reason. Disappearing messages stop re-sending deletion requests the server accepts but cannot act on. Call diagnostics are visible in release builds.