GlassChat Releases

The Postgres era

GlassChat's data layer moves to PostgreSQL — dual-written with the previous store during rollout, with end-to-end encrypted content carried byte-for-byte untouched.

  • New database engine: one insert per message instead of whole-store rewrites — the old high-load stalls are gone
  • Race-proof writes: concurrent reactions, unread counts, and membership changes can no longer overwrite each other
  • Zero-knowledge migration: E2EE ciphertext is copied verbatim — the server still can't read your messages, and never will
  • Instant rollback path kept live throughout the rollout

Two-step verification & Linked Devices

Account security, levelled up: authenticator-app 2FA with one-time backup codes, and full visibility into every signed-in device.

  • Two-step verification: authenticator app (TOTP) enrollment with QR + manual key
  • 10 one-time backup codes, shown once and stored hashed
  • Sign-in with 2FA enforced — passkeys count as an inherent second factor
  • Linked Devices: every session with device, sign-in time, approximate location map, and remote sign-out
  • Revoking a session kills its realtime connections instantly

Group calls that meet you where you are

Group calls now live inside the conversation — plus a rebuilt camera experience.

  • Live call state in the chat: an in-chat banner and the header call buttons turn into a Join button while a call is running
  • Calls page shows live group calls with one-tap Join and full history
  • Participant tiles show a centered avatar when the camera is off
  • Camera: lens switching, smoother capture on mobile, and editing tools tucked into a clean collapsible tray

A real desktop app layout

GlassChat on a big screen stopped being a stretched phone. Mobile stays pixel-identical.

  • Persistent left rail with navigation and compose
  • Resizable conversation list next to a full conversation pane
  • Settings, profiles, and details open in-pane instead of full-screen
  • Auto-hiding scrollbars and width-aware message layout

Stability foundation

The groundwork release: sign-in fixes, honest UI, and the instrumentation that guided everything since.

  • Google sign-in switched to a redirect flow that works in every browser, including iOS PWA
  • Every placeholder button now does something real — or was removed until it can
  • Rate limiting and metrics across the API and realtime layer
  • At-rest encryption hardening for stored messages and media