Blog

Field notes on security & design.

Release notes and occasional writing from the team.

August 2026

The Authly Developer Platform is here

OAuth 2.1 with PKCE, OpenID Connect discovery and a sync API — the website is now the single source of truth for every Authly client.

August 2026

Uptime, incident history and component health now live at /status, powered by our public Instatus page.

July 2026

Print a recovery kit at signup and export a password-protected backup of your whole vault whenever you want.

July 2026

Move your existing accounts into Authly in one step — export files and migration QR codes are parsed on-device.

June 2026

A first-run tour, plus separate controls for your account password and your vault master password.

May 2026

A gentle introduction to the key hierarchy that keeps your TOTP secrets unreadable to everyone but you.

April 2026

Passkeys are excellent. They also are not everywhere yet — and RFC 6238 codes remain the universal fallback.