What's New in Version 1.2

Rich Note Types
CaptchaStash now stores more than just text. In addition to text notes, you can now save photos, videos, audio recordings, and documents — all protected by the same AES-256-GCM encryption as your text notes. Audio can be recorded directly in the app; photos and videos are imported from your library without requiring permanent photo access;
documents can be imported from Files and shared or exported via the system share sheet.

7 New CAPTCHA Challenges
Version 1.2 adds seven new CAPTCHA types, bringing the total to eleven:
- Emoji Sequence — tap emojis in the correct order
- Counting — count objects in a grid
- Odd One Out — spot the item that doesn't belong
- Word Arithmetic — solve simple word-based math
- Analogy — complete the pattern
- Clock Reading — read an analogue clock face
- Memory — memorise and recall a sequence

You can preview and try all 11 types from the Settings screen.

Optional Biometric Second Factor
Turn on Face ID or Touch ID as a second unlock step in Settings. After a correct CAPTCHA, the app can require a biometric confirmation before granting access — adding a hardware-backed layer of security. Settings explains the trade-offs clearly so you can decide what's right for you.

Security Hardening
This release brings a full security audit's worth of improvements:
- Encryption keys now require the device passcode to be set; they are never backed up to iCloud
- Attachments are excluded from iCloud backup and iCloud Keychain sync
- The vault re-locks automatically whenever the app leaves the foreground
- Failed CAPTCHA attempts now trigger exponential backoff (5 s → 15 s → 30 s → 60 s), and the lockout timer persists across app restarts — force-quitting doesn't reset it
- All temporary files are written with Complete File Protection
- A confirmation alert is shown before any file is sent to the share sheet

About Screen
Tap the ⓘ button on the unlock screen to open a full in-app reference covering note types, all CAPTCHA challenges, and a plain-language explanation of CaptchaStash's security architecture.

1. Military-grade encryption: AES-256-GCM provides both confidentiality and authentication
  2. Secure key management: 256-bit keys stored securely in iOS Keychain
  3. Replay protection: Each encryption uses a unique nonce
  4. Device binding: Keys are device-specific and require device unlock
  5. Authentication: Built-in tamper detection prevents data modification