• Two-factor authentication and passkeys: A new Security settings page lets you enable TOTP-based two-factor authentication with backup codes, or register a passkey for passwordless sign-in, and see at a glance which sign-in methods are active on your account.
• Sign in with a passkey: The sign-in page now offers a "Sign in with a passkey" option alongside password sign-in, and accounts with 2FA enabled are guided through a dedicated verification step.
• Clearer messages for banned accounts: If your account has been banned, the sign-in error now shows the actual reason (and expiry date for temporary bans) instead of a generic message.
• Fixed TikTok posts silently hitting the account cap: Video posts that didn't explicitly set a post mode were incorrectly going through TikTok's Direct Post flow, which is capped at 5 creators per day on our shared TikTok app. These now correctly land as drafts in the creator's TikTok inbox, avoiding the cap. Note that this changes default behavior: draft posts don't go live automatically, don't carry a caption for video, and won't have analytics until the creator publishes them from the TikTok app.
• More actionable TikTok error messages: Publishing errors from TikTok (rate limits, spam checks, unverified accounts, and more) now come with clear guidance instead of a raw error code.
• Fewer failed TikTok uploads: TikTok now pulls video and image media directly from your media library instead of requiring a separate file upload, and the maximum upload size has increased, reducing upload failures.
• Bigger Bluesky image uploads: The maximum image size for Bluesky posts has increased from 1MB to 2MB, matching Bluesky's current limits.
• Improved OAuth/OpenID compatibility: Added a JWKS endpoint and updated OAuth discovery metadata, fixing discovery errors for OAuth and MCP clients that follow the OpenID Connect Discovery spec.