MoatKey · Release notes
What’s new in MoatKey
Each version of MoatKey for Android, iPhone and iPad, and for the Chrome and Edge extension, newest first. Store updates can take a few days to reach everyone.
MoatKey for iPhone and iPad (November 2026)
- Now on the App Store: MoatKey for iPhone and iPad. Sign in with the same account you use on Android or in the browser, and your Castles are there.
- AutoFill on iPhone and iPad: turn on MoatKey in Settings, General, AutoFill & Passwords. Each fill asks for Face ID, Touch ID or your passcode.
Extension 0.10.1 (November 2026)
- Fixed: when MoatKey was locked while you signed in to a site, the “Save login” offer could be gone after you unlocked. The offer now waits 10 minutes (it was 3), also appears in the full MoatKey view after you unlock there, and tells you if it timed out. It is still kept only in memory, never on disk.
Phone 0.10.0 and extension 0.10.0 (October 2026)
- Dark mode in the browser extension and the Android app. Choose System, Light or Dark (extension: Settings, Unlock & security, Appearance; phone: Settings, Appearance). The AutoFill unlock sheet on Android follows your phone’s own light or dark setting.
- Password health: see which logins are weak, reused or old (not changed in 12 months), and which sites offer two-step sign-in that you haven’t set up. It runs on your device and your passwords are not sent anywhere for it. Find it under Tools, Password health in the extension and Settings, Password health on the phone. On every plan.
- Breach alerts (optional, off until you turn them on): MoatKey checks your passwords against known data leaks. To check, it sends only the first 5 characters of a fingerprint of each password to the Pwned Passwords service, never the password itself. The rest of the match happens on your device. The service can see those 5 characters and your device’s IP address. Automatic checks run at most once a day.
- Quick Find: the search box finds logins and Castles as you type. In the extension press Ctrl+K (Cmd+K on a Mac) inside MoatKey, then Enter to copy a login’s password or Shift+Enter to open it. On the phone, tap a result to open it. It searches the Castle you have open.
- Fill shortcut and quick copy (extension): Alt+Shift+L fills the login for the site you are on when exactly one saved login matches it. The popup rows have Copy username, Copy password and Copy 2FA code buttons. Items in the Dungeon never show them.
- Stay unlocked, up to 12 hours (extension): a new choice, “Until I lock my computer (up to 12 hours)”. MoatKey locks when you lock your computer, close the browser or put the computer to sleep.
- About and diagnostics (extension): Settings, About shows the version and a Copy diagnostics button for support. It never includes a site list or any item.
- Authenticator items: save a two-factor code on its own, without a login. Built-in authenticator codes are free on every plan.
- iPad layout: a centered column with larger text, and a two-column list on wide screens.
- Fixed: opening a website link from MoatKey on the phone no longer locks it right away; it stays unlocked briefly.
- Fixed: “Not now” on the quick-unlock offer is remembered.
- Fixed: the Secure Drop link you just made is kept for 5 minutes in case MoatKey locks before you share it.
- Fixed: importing stops at the Free plan’s item limit with a clear message instead of failing partway.
- Emergency access (Legacy): name someone you trust. If something happens to you, they can ask for access to the Castles you choose, and you can deny the request during the waiting period you set (3 to 30 days). The waiting period is a rule MoatKey’s servers follow, not something locked by math. Setting it up needs Family or Team. How it works.
- Passkeys (Beta, Chrome and Edge): off by default. Turn on Use MoatKey for passkeys in Settings, Saving & filling, and MoatKey can store a passkey in your encrypted vault and sign in with it when a site asks. Not on the phone apps yet. How it works.
Phone 0.8.0 and extension 0.9.0 (October 2026)
- Fill payment cards (optional, off until you turn it on):
- Chrome and Edge: on a secure checkout page, choose a card in the MoatKey button and confirm the page. MoatKey fills the card number, expiry and name, including card fields inside a payment company’s frame. The security code fills in a separate step after your master password or Windows Hello. Turn it on in Settings, Saving and filling.
- Android: tap a card field in an app or in Chrome, then Unlock MoatKey, and the whole card fills after your fingerprint or screen lock. In Chrome, also turn on Settings, Autofill services, “Autofill using another service”.
- iPhone and iPad: touch and hold a card field, tap AutoFill, choose MoatKey, then pick the card number, expiry, security code or name. iPhone fills one value at a time.
- Fixed (Android): after the phone slept or you switched apps, the lock screen could get stuck on “Waiting for your phone”. You can now always tap to try again, or use your master password.
- The “Use security key or passkey” button on the extension’s lock screen is aligned again.
Phone 0.7.0 and extension 0.7–0.8 (October 2026)
- AutoFill on your phone: MoatKey can fill your logins in other apps and in browsers on Android, iPhone and iPad, after your fingerprint, face or passcode.
- Unlock with your screen lock (PIN, pattern, password or iPhone passcode) when your fingerprint or face doesn’t work, or if your phone has no fingerprint reader.
- Comments and requests in shared Castles: leave a note on an item for everyone in the Castle, or ask the owner for something. End-to-end encrypted; adding them comes with Family and Team.
- Offer to save logins in Chrome and Edge (optional): after you sign in somewhere, MoatKey offers to save the login.
- Promo codes: enter a code in the extension under Plan & billing to get Family or Team.
- New Free plan: 50 saved items and one other person to share with. Nothing you already saved is removed.
- Fixed: fingerprint unlock could keep spinning after the phone slept.
Version 0.6.2 (October 2026)
- Tablets, foldables and Chromebooks: MoatKey now turns with the screen on large devices. Phones stay upright, as before.
- Behind the scenes: updated for Google Play’s large-screen guidelines. No changes to how your vault is encrypted.
- The Chrome and Edge extension moves to 0.6.2 with the Android app. It has no new features in this version.
Version 0.6.1 (October 2026)
Fixes from MoatKey’s internal security review of 1 October 2026. This was a review by the MoatKey team, not an independent audit.
- Approve on your phone: pairing a phone is now tied to the QR code you scanned. Phones paired with an earlier version need to Pair again once.
- Signing in: new accounts and password changes use a stronger way of deriving your key. Older accounts keep working and move over when you change your master password.
- Delete forever now asks for your master password first.
- The Activity log is shown only to a Castle’s owner and admins.
- Fill suggestions in the extension show the saved website, so you can see where a login will go.
- Family plan on Android is bought through Google Play; the browser keeps Stripe. One plan works on every device.
- The Android app no longer asks for photo, video or microphone access. Picking a QR screenshot uses Android’s own photo picker.
Questions or problems? See MoatKey Help or Troubleshooting.