2.2.6

Improvements

• Updated Envoy Server Tor endpoint

2.2.5

What's changed

In Envoy 2.2.5 we've focused heavily on refinements to the Passport Prime onboarding and device management.

For more details on each of the changes, keep reading below!

Improvements

• Improved tor reliability by adding a tor endpoint to the supply chain verification for Passport Prime

• Envoy now checks for internet connectivity before allowing users to start setting up their Passport Prime

• Better error messaging for different failure modes during supply chain verification of Passport Prime

• Bumped Envoy's bluetooth protocol to version 1

Bug Fixes

• Fixed a bug where the bitcoin price would not update upon reconnecting Passport Prime

• Fixed a rare bug that prevented users from onboarding to Passport Prime if they failed to complete the supply chain verification flow

• Fixed a bug that could cause issues during onboarding if camera permission was denied

• Fixed a bug where scanning a deeplink with a menu open in Envoy would no properly load the deeplink information

2.2.1

What's changed

On Envoy 2.2.1 we focused mostly on the upcoming Passport Prime integration, but we also focused efforts on improving our tor integration and fixing many bugs.

For more details on each of the changes, keep reading below!

New Features

• Envoy is now ready for your Passport Prime!

Improvements

• Tor connectivity has been improved - added onion native endpoints for all the calls Envoy needs to make, and bumped Arti to 1.7.0

• Upgraded Rive to 0.14

• Buy Bitcoin feature has been temporarily halted (we are working on adding a new provider)

• Importing Magic Backups for an app that's already in use will not overwrite settings or user preference

• If the user was using a deprecated default node, this version will update it to foundation.xyz

• Improved logic around available firmware versions when restoring from Magic Backup

• Magic Backup scope has been expanded to include more metadata

• Many minor visual improvements

Bug Fixes

• Fixed a bug where Tor could indefinitely open new connections if the first one failed. This could lead to some phones becoming laggy and frozen at times

• Fixed a bug where sometimes Magic Backups would not be recovered if the user was connected via tor

• Fixed a bug where sometimes some accounts would take longer than usual to load on iOS

• Fixed a fiat input bug that affected French Envoy users

• Fixed a visual bug where coin tags would not be capitalized even if saved like that

• Fixed a minor bug where if the user renamed an empty coin tag it would be deleted

• Fixed an issue where sometimes Envoy would temporarily show an incorrect name for a Passport Core account when interacting with similarly numbered accounts in passphrase and non-passphrase accounts

• Fixed a minor issue where Android users could see incorrect screens when using Android's native back gesture

• Fixed a minor visual bug where users could end up seeing fiat values for testnet coins

• Fixed an issue resulting in incorrect next block fee estimates for testnet 4

• Fixed a rare issue where sometimes the shield would not appear when using tor after closing the app

• Fixed an issue where sometimes locally saved Magic Backups could not be loaded if the user overwrote a previously existing Magic Backup file

• Fixed an edge case where some users with Magic Backups would restore it even if they explicitly asked not to during manual onboarding with the same seed

• Fixed a minor visual bug where the three dots menu of the buy flow could disappear

• Fixed an issue where sometimes the screen could go to black when dismissing a Tor connectivity toast

• Fixed a minor visual bug where sometimes a 0 would be flashed when the user moved to the review screen after typing the send amount

• Fixed a visual bug where subsat fees would be incorrectly displayed in Envoy

• Fixed an issue where Android's native back gesture would not work in Envoy's menu

• Fixed an issue where sometimes the custom fee wouldn't properly adjust when tapping Send Max

• Fixed an issue where the "don't show again" prompt wouldn't work in the Open in Explorer dialog

• Fixed a bug where some iOS users would not be able to recover from their Magic Backup

• Fixed an issue where sometimes Envoy could freeze on GrapheneOS devices

• Fixed a rare issue where sometime Envoy would not be able to correctly parse Passport Core security check QRs

• Fixed a very rare loop some users could be trapped in if they performed some specific steps when recovering from a Magic Backup

• Fixed an edge case where recovering a Magic Backup on an already existing wallet could overwrite some accounts

2.1.1

Bug Fixes

• Fixed an issue where upgrading from a previous Envoy version could overwrite personal node settings.

2.1.0

What's changed

In Envoy v2.1.0 we squashed a lot of bugs so we encourage all our users to update to have a more smooth and solid Envoy experience. Since Magic Backups have also been improved, we encourage everyone to perform a Magic Backup after the upgrade!

For more details on each of the changes, keep reading below!

Improvements

• Improved the Magic Backup restoring flow - if the user changes any privacy settings during onboarding, these will prevail over those defined in the Magic Backup file

• Improved the Personal Node selection. Previously, if you defined a Personal Node, then changed to a predefined node, then back to Personal Node, the field was overwritten by the predefined node's address. This behavior has been updated so that the Personal Node saved remains there even when you return from a predefined node.

• Major upgrade to Flutter to version 3.35.1

• The Personal Node is now saved to the Magic Backup, so make sure to update and perform a magic backup again to save this setting!

• Added warnings for users that last paired their accounts before Passport Core v2.3.0, and want to either enable Taproot by default, access the taproot descriptor, or show a taproot receive address

• Improved the fee display for Canceling transactions for users with very big text size

• Updated multiple repositories and dependencies

• Added tor endpoints for signet, so users that use tor should enjoy a more stable connection while using signet

• Moving forward, user preference will be remembered between transactions in terms of send unit. Previously it would always default to BTC or Sats depending on app setting.

• Added the Explorer option to the transaction ID for the Coin Details view

Bug Fixes

• Fixed a scenario where Magic Backups could be corrupted while being restored

• Fixed a bug where sometimes an "Insufficient Funds" error could show up despite there being enough unlocked and confirmed coins

• Fixed an edge case where sometimes two hot wallets could be created instead of one

• Fixed an issue where tor would not be loaded on first app startup, and added checks to make sure tor is bootstrapped before attempting a connection to a node

• Fixed a couple of issues that could err or show 0 send amount when scanning an all caps address

• Fixed a visual bug where sometimes the fee would be displayed as 0 when accessing the transaction details

• Fixed an issue where for some users the option to hide the Buy feature would not show up in settings -> advanced

• Fixed a bug where under some scenario self-sends couldn't be boosted while using Passport

• Fixed a rare bug where sometimes a hot wallet would be created but the seed would not be displayed

• Fixed a minor visual spacing issue when selecting a Tag

• Fixed an issue where users with big text sizes couldn't save a transaction's notes

• Fixed an issue where Envoy would attempt to redeem a Lightning Network BTCPay voucher instead of throwing an error

• Fixed an issue where sometimes iOS users wouldn't be able to delete an account that was still loading balance

• Fixed a minor visual bug that would not provide visual feedback to the user when entering an incorrect seed

• Fixed the date of the Envoy new version notifications to display the actual date of release, instead of the day the user connected to the internet and saw it

• Fixed a visual bug where sometimes the red shield would not show up even if tor connection dropped

• Fixed a bug where for some users Envoy could remain blurred even after unlocking the app

• Fixed an issue where tor would sometimes not temporarily disable after explicitly asking it to do so

• Fixed an issue where sometimes the PIN couldn't be entered after faceID failed for iOS users

• Fixed an issue where sometimes if the user performed multiple back to back transactions, some of them would not be logged in the Activity tab

• Fixed a minor bug where the default Note for BTCPay transaction wouldn't be pre-populated

• Fixed a bug where after performing a migration a user could get stuck in the send screen because the "Send Max" option wouldn't disappear

• Fixed a visual bug where the confirmation time wouldn't update as soon as the user changed fee rate in the transaction review screen

• Overall improvements in the onboarding flow and other minor visual tweaks

2.1.0-beta

What's changed

In Envoy v2.1.0 we squashed a lot of bugs so we encourage all our users to update to have a more smooth and solid Envoy experience. Since Magic Backups have also been improved, we encourage everyone to perform a Magic Backup after the upgrade!

For more details on each of the changes, keep reading below!

Improvements

• Improved the Magic Backup restoring flow - if the user changes any privacy settings during onboarding, these will prevail over those defined in the Magic Backup file

• Improved the Personal Node selection. Previously, if you defined a Personal Node, then changed to a predefined node, then back to Personal Node, the field was overwritten by the predefined node's address. This behavior has been updated so that the Personal Node saved remains there even when you return from a predefined node.

• Major upgrade to Flutter to version 3.35.1

• The Personal Node is now saved to the Magic Backup, so make sure to update and perform a magic backup again to save this setting!

• Added warnings for users that last paired their accounts before Passport Core v2.3.0, and want to either enable Taproot by default, access the taproot descriptor, or show a taproot receive address

• Improved the fee display for Canceling transactions for users with very big text size

• Updated multiple repositories and dependencies

• Added tor endpoints for signet, so users that use tor should enjoy a more stable connection while using signet

• Moving forward, user preference will be remembered between transactions in terms of send unit. Previously it would always default to BTC or Sats depending on app setting.

• Added the Explorer option to the transaction ID for the Coin Details view

Bug Fixes

• Fixed a scenario where Magic Backups could be corrupted while being restored

• Fixed a bug where sometimes an "Insufficient Funds" error could show up despite there been enough unlocked and confirmed coins

• Fixed an edge case where sometimes two hot wallets could be created instead of one

• Fixed an issue where tor would no be loaded on first app startup, and added checks to make sure tor is bootstrapped before attempting a connection to a node

• Fixed a couple of issues that could err or show 0 send amount when scanning an all caps address

• Fixed a visual bug where sometimes the fee would be displayed as 0 when accessing the transaction details

• Fixed an issue where for some users the option to hide the Buy feature would not show up in settings -> advanced

• Fixed a bug where under some scenario self-sends couldn't be boosted while using Passport

• Fixed a rare bug where sometimes a hot wallet would be created but the seed would not be displayed

• Fixed a minor visual spacing issue when selecting a Tag

• Fixed an issue where users with big text sizes couldn't save a transaction's notes

• Fixed an issue where Envoy would attempt to redeem a Lightning Network BTCPay voucher instead of throwing an error

• Fixed an issue where sometimes iOS users wouldn't be able to delete an account that was still loading balance

• Fixed a minor visual bug that would not provide visual feedback to the user when entering an incorrect seed

• Fixed the date of the Envoy new version notifications to display the actual date of release, instead of the day the user connected to the internet and saw it

• Fixed a visual bug where sometimes the red shield would not show up even if tor connection dropped

• Fixed a bug where for some users Envoy could remain blurred even after unlocking the app

• Fixed an issue where tor would sometimes not temporarily disable after explicitly asking it to do so

• Fixed an issue where sometimes the PIN couldn't be entered after faceID failed for iOS users

• Fixed an issue where sometimes if the user performed multiple back to back transactions, some of them would not be logged in the Activity tab

• Fixed a minor bug where the default Note for BTCPay transaction wouldn't be pre-populated

• Fixed a bug where after performing a migration a user could get stuck in the send screen because the "Send Max" option wouldn't disappear

• Fixed a visual bug where the confirmation time wouldn't update as soon as the user changed fee rate in the transaction review screen

• Overall improvements in the onboarding flow and other minor visual tweaks

2.0.2

Envoy 2.0.2 is a bugfix release for 2.0.0

Bug Fixes

• Fixed an issue where a small subset of Passport passphrase users experienced duplicated accounts during the upgrade from 1.8.6 to 2.0.1.

• Updated the migration screen to not rely on syncing accounts, so that users with networking issues can quickly update to the 2.0.0+ database structure and then address their networking issues. This will resolve instances where some users were stuck in the migration screen.

• Fixed various tor related issues. Arti has also been updated to the latest version to help stabilize connections.

• Fixed an issue that could cause some users not being able to connect to their nodes locally.

• Envoy will now force a re-sync when upgrading to 2.0.2, so the balance will be refreshed and updated to its current value

• Fixed a small typo in the personal node section and updated some of the options.

• Fixed a bug where if users scanned a Passport 2.3.8 pairing QR with their phone camera app, the paired account may not be synced to Envoy.

• Fixed some rare issues related to Envoy's hot wallet occasionally disappearing or missing a taproot descriptor

• Fixed an issue related to the Buy Bitcoin button showing up in countries it shouldn't

• Fixed a visual glitch where canceling a coin selection would sometimes result in some options not showing

• Fixed an issue where users with multiple tags couldn't scroll them when reviewing coin selection

• Fixed some "learn more" hyperlinks

• Fixed a bug that prevented some Passport accounts from being exported in the BIP-329 file

2.0.1

Envoy 2.0.1 is a hotfix release for 2.0.0

Bug Fixes:

• After releasing Envoy 2.0.0, some users reported seeing an unexpected prompt asking for Bluetooth permission. v2.0.0 did introduce Bluetooth support for QuantumLink on Passport Prime, this prompt should not have appeared for users who weren’t pairing a Prime device.
• Fixed a visual bug when displaying a descriptor after enabling Taproot.

2.0.0

What's changed

Important upgrade to BDK 2.0 – on first startup all your accounts will resync due to changes in the database format. This will occur automatically when you open the updated app for the first time.

In addition to the updates described below, Envoy 2.0.0 adds initial support for Passport Prime, including QuantumLink Bluetooth connectivity and the device onboarding flow.

For more details on each of the changes, keep reading!

New Features

• Completely updated the onboarding flow to be more easy and intuitive. It streamlines the onboarding process for non-technical users while keeping all the advanced features accessible to power users.

• Unified Taproot and Segwit accounts! Taproot addresses will no longer live in a separate account tile – one account will now be able to have both address types. Head to Advanced Settings to change the default script to be displayed when tapping Receive. If you had a Taproot and a Segwit tile for the same account, they will be merged during the upgrade process and they will keep the tags they had before upgrading. You will also now be able to choose the type of script to export in the descriptor.

• You can now export your wallet metadata in BIP-329 format! This will save your Notes and Tags in a way that you can easily import them in other software wallets, like Sparrow. Head to Advanced backups under Backups in the app menu to find this option.

• Manual to Magic (and vice versa) is here! Manual users can now go to the Backups menu and opt in to Magic backups. Likewise, Magic Backup users can go to the Backups menu and disable the toggle to become manual users – the Magic Backup will be deleted from our servers.

• Tapping an item in Activity now opens the relevant event associated to it! So if you tap in a transaction for example, it opens the transaction details directly in the Activity view.

• Brand new currency selector: Over 160 new fiat pairs now available in Envoy! Be sure to head to settings and change the fiat value to the one you want to use. Hint: You can now search for the currency name or code.

• Added new Electrum backend options! If you don't use your own node and you don't want to use Foundation's node for transaction relaying and checking balance, you can now connect to some other well-established nodes. Head over to the Privacy tab and check the dropdown under Node.

• Envoy now upgraded from using testnet3 to testnet4 and from mutinynet Signet to Global Signet. Upon upgrading you will be notified that the accounts in the old networks have been deleted – you will need to go to settings and re-enable testnet or signet to start working on the new networks.

Improvements

• Upgraded from BDK 0.28 to BDK 2.0!! This is a MAJOR update. The app now streamlines most processes in parallel, numerous interactions have been rewritten, and the results are great! Expect reduced loading times across the board, a smoother experience, reduced sync times, and fewer bugs.

• Redesigned the way RBF fees are displayed to make it clear how much the user is paying and how much it is replacing. When doing an RBF, tap the "i" icon next to the new "Boost fee" field displayed in the transaction review screen to clearly understand the fee structure

• Envoy will now ask you to re-authenticate if you had the lock privacy feature enabled after the app has entered the background.

• Increased the note character limit to match the spec of BIP 329.

• Visual refresh to the main menu, as well as to the Backups menu.

• Added screen and logic to require app update should an urgent vulnerability come up in the future.

• Tapping "Receive" now shows the next unused address, instead of changing every time irrespective of wallet activity.

• Updated Arti to 1.4.3.

• Updated Flutter to 3.27.1.

• Standardized and localized messages across the board for Ramp, BTCPay and Azteco purchases.

• Improved the behavior of "Cancel Transaction" and improved the way edge case errors are handled.

• Tapping "Send max" will now display all the trailing zeroes when using BTC as unit for easier visualization of quantity being sent.

• Improved logging for Magic Backup and networking issues for easier troubleshooting.

• Added a low-res map for when the ATM map API can't be loaded in the Buy area.

• The "learn more" hyperlinks will now link to the specific area dedicated to them in our documentation, instead of linking to the more generic page.

• Using Android's gesture on the side of the phone will now unselect coins if you are doing coin control.

• Improved translations.

Bug Fixes

• Fixed a bug that impacted iOS users where the file picker would not come up if you mistakenly saved the update file in a location other than the SD card once before.

• Fixed a bug that impacted iOS users where sometimes the red dot alerting of a new firmware version would persist even after downloading the latest version.

• Fixed an issue that would show a different date for transactions on-chain and into Envoy.

• Fixed an issue where some transactions would still show as pending even though they were confirmed on-chain.

• Fixed several minor scrolling and scaling issues for users with large font sizes.

• Fixed a minor issue where notes added to boosted Passport transactions or Ramp purchases would not be properly saved.

• Fixed a minor UI issue where incoming txs would at times show as "Boosted".

• Fixed a minor issue where deselecting coins during "Edit Transaction" would not refresh the actual transaction.

• Fixed a minor issue where some countries would not show in alphabetical order when selecting region in the "Buy" menu.

• Fixed an edge case bug where importing an incorrect backup file multiple times in a row could sometimes yield in an unresponsive screen.

• Added an alert icon in a dialog that was missing it when deleting a passport account.

• Fixed a minor bug where killing the app while selecting a country allowed a user to select a region belonging to a different country in the Buy region selection.

• Gracefully handle an error when opening a specific type of unsupported link, instead of showing an off-spec error message.

• Tapping the decimal point straight away in the send screen works now without having to tap "0" first.

• Fixed a minor bug where pairing an old passport would not display the red dot alerting of new versions on a fresh Envoy install.

• Fixed a minor issue where the user would be warned about emptying their wallet when trying to delete an already empty wallet.

• Minor visual and flow improvements across the board.

• Hardened the code overall by updating some libraries with known edge case vulnerabilities.

2.0.0-beta

What's changed

Important upgrade to BDK 2.0 – on first startup all your accounts will resync due to changes in the database format. This will occur automatically when you open the updated app for the first time.

In addition to the updates described below, Envoy 2.0.0 adds initial support for Passport Prime, including QuantumLink Bluetooth connectivity and the device onboarding flow.

For more details on each of the changes, keep reading!

New Features

• Completely updated the onboarding flow to be more easy and intuitive. It streamlines the onboarding process for non-technical users while keeping all the advanced features accessible to power users.

• Unified Taproot and Segwit accounts! Taproot addresses will no longer live in a separate account tile – one account will now be able to have both address types. Head to Advanced Settings to change the default script to be displayed when tapping Receive. If you had a Taproot and a Segwit tile for the same account, they will be merged during the upgrade process and they will keep the tags they had before upgrading. You will also now be able to choose the type of script to export in the descriptor.

• You can now export your wallet metadata in BIP-329 format! This will save your Notes and Tags in a way that you can easily import them in other software wallets, like Sparrow. Head to Advanced backups under Backups in the app menu to find this option.

• Manual to Magic (and vice versa) is here! Manual users can now go to the Backups menu and opt in to Magic backups. Likewise, Magic Backup users can go to the Backups menu and disable the toggle to become manual users – the Magic Backup will be deleted from our servers.

• Tapping an item in Activity now opens the relevant event associated to it! So if you tap in a transaction for example, it opens the transaction details directly in the Activity view.

• Brand new currency selector: Over 160 new fiat pairs now available in Envoy! Be sure to head to settings and change the fiat value to the one you want to use. Hint: You can now search for the currency name or code.

• Added new Electrum backend options! If you don't use your own node and you don't want to use Foundation's node for transaction relaying and checking balance, you can now connect to some other well-established nodes. Head over to the Privacy tab and check the dropdown under Node.

• Envoy now upgraded from using testnet3 to testnet4 and from mutinynet Signet to Global Signet. Upon upgrading you will be notified that the accounts in the old networks have been deleted – you will need to go to settings and re-enable testnet or signet to start working on the new networks.

Improvements

• Upgraded from BDK 0.28 to BDK 2.0!! This is a MAJOR update. The app now streamlines most processes in parallel, numerous interactions have been rewritten, and the results are great! Expect reduced loading times across the board, a smoother experience, reduced sync times, and fewer bugs.

• Redesigned the way RBF fees are displayed to make it clear how much the user is paying and how much it is replacing. When doing an RBF, tap the "i" icon next to the new "Boost fee" field displayed in the transaction review screen to clearly understand the fee structure

• Envoy will now ask you to re-authenticate if you had the lock privacy feature enabled after the app has entered the background.

• Increased the note character limit to match the spec of BIP 329.

• Visual refresh to the main menu, as well as to the Backups menu.

• Added screen and logic to require app update should an urgent vulnerability come up in the future.

• Tapping "Receive" now shows the next unused address, instead of changing every time irrespective of wallet activity.

• Updated Arti to 1.4.3.

• Updated Flutter to 3.27.1.

• Standardized and localized messages across the board for Ramp, BTCPay and Azteco purchases.

• Improved the behavior of "Cancel Transaction" and improved the way edge case errors are handled.

• Tapping "Send max" will now display all the trailing zeroes when using BTC as unit for easier visualization of quantity being sent.

• Improved logging for Magic Backup and networking issues for easier troubleshooting.

• Added a low-res map for when the ATM map API can't be loaded in the Buy area.

• The "learn more" hyperlinks will now link to the specific area dedicated to them in our documentation, instead of linking to the more generic page.

• Using Android's gesture on the side of the phone will now unselect coins if you are doing coin control.

• Improved translations.

Bug Fixes

• Fixed a bug that impacted iOS users where the file picker would not come up if you mistakenly saved the update file in a location other than the SD card once before.

• Fixed a bug that impacted iOS users where sometimes the red dot alerting of a new firmware version would persist even after downloading the latest version.

• Fixed an issue that would show a different date for transactions on-chain and into Envoy.

• Fixed an issue where some transactions would still show as pending even though they were confirmed on-chain.

• Fixed several minor scrolling and scaling issues for users with large font sizes.

• Fixed a minor issue where notes added to boosted Passport transactions or Ramp purchases would not be properly saved.

• Fixed a minor UI issue where incoming txs would at times show as "Boosted".

• Fixed a minor issue where deselecting coins during "Edit Transaction" would not refresh the actual transaction.

• Fixed a minor issue where some countries would not show in alphabetical order when selecting region in the "Buy" menu.

• Fixed an edge case bug where importing an incorrect backup file multiple times in a row could sometimes yield in an unresponsive screen.

• Added an alert icon in a dialog that was missing it when deleting a passport account.

• Fixed a minor bug where killing the app while selecting a country allowed a user to select a region belonging to a different country in the Buy region selection.

• Gracefully handle an error when opening a specific type of unsupported link, instead of showing an off-spec error message.

• Tapping the decimal point straight away in the send screen works now without having to tap "0" first.

• Fixed a minor bug where pairing an old passport would not display the red dot alerting of new versions on a fresh Envoy install.

• Fixed a minor issue where the user would be warned about emptying their wallet when trying to delete an already empty wallet.

• Minor visual and flow improvements across the board.

• Hardened the code overall by updating some libraries with known edge case vulnerabilities.