v1.0.0
May 15, 2026
Currents 1.0 — Public launch.
After two weeks of nights and weekends, Currents is generally available. Free for personal use, native multi-currency, beautifully private.
- NewMulti-currency transactions across 50+ currencies — every entry stays in its original currency
- NewHistorical FX rates — conversions use the rate from each transaction's date, never today's
- NewAccounts with kind (asset / liability), opening balance, and 90-day balance history chart
- NewNet worth card showing all accounts converted to your base currency
- NewCategories with 80+ icons grouped into 11 themes, plus per-category color and merge-duplicates flow
- NewBudgets — weekly, monthly, or yearly periods with anchor day clamping (Feb 31 → Feb 28), optional rollover, inline projection in the transaction form
- NewReports — KPI strip with smart delta inversion, income vs expense bar chart, twin category donuts, GitHub-style spending heatmap, accounts breakdown table, compare-to-previous-period
- NewCross-currency transfers with implied FX rate
- NewHide-balance shortcut (Ctrl+H) — instantly hide every amount on screen
- NewLight, dark, and system theme — warm paper light, inky dark
- New24 locales and 42 time zones in settings, with bn-BD, hi-IN, ur-PK, ar-SA included as first-class
- NewCSV export of every transaction, respecting filters
- SecurityEmail verification required before app access — block typo signups and impersonation
- SecurityPassword reset flow with single-use, signed, one-hour tokens
- SecuritySession invalidation on password change — every device signed out within seconds
- SecurityRate limiting on every auth endpoint (login, signup, password reset, email send)
- SecurityCloudflare Turnstile CAPTCHA on signup and password reset — privacy-first, no Google
- SecurityCSRF protection on every state-changing endpoint (double-submit with HMAC signature, Web Crypto)
- SecurityFull security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP/CORP) via middleware
- SecuritySoft account deletion with 30-day restore window and email confirmation
- SecurityActive sessions view in Settings → Security with per-device revoke and sign-out-all-other-devices
- SecurityLogin activity log (last 50) with IP and device, plus email alerts for new-device sign-ins