What's new
What's new
Written for anyone using Signature Tool - not a commit log. See CHANGELOG.md at the repository
root for the full maintainer-facing history, including internal changes with no visible effect.
18 October 2026
New
- Passkeys. Once your authenticator app is set up, you can add a passkey from your Account page and confirm it's you at sign-in with your fingerprint, face, device PIN or a security key. The app stays your way back in.
Changed
- Faster pages. The template and banner editors' heavy libraries now load only on those two pages, so every other page has much less to download.
17 October 2026
New
- Choose your font. Your account has a new Appearance section with three fonts: Modern (the default), Inter (the font this app used before), or your device's own. It's saved on your account, so it follows you to any device you sign in on.
Changed
- A fresh look. A lighter side menu that can fold down to icons, a floating top bar, and matching sign-in, notice and error pages.
7 October 2026
Changed
- Signing in with Microsoft now confirms your email address, if you hadn't already confirmed it from the email we sent.
- Too many wrong attempts now lock your account. After five wrong passwords, or five wrong codes from your authenticator app, your account is locked for 30 minutes and we email you. Reset your password to unlock it straight away. The sign-in page shows the same message whatever the reason, so it can't be used to find out who has an account.
- Too many wrong sign-in codes now pauses sign-in for 15 minutes. After four wrong codes from your authenticator app, no code is accepted - not even the right one - and signing in again with your password won't start a fresh set of tries. Wait 15 minutes, then sign in as normal.
Fixed
- Confirmation dialogs keep keyboard focus inside them. While a confirmation such as "Delete" is open, Tab no longer reaches the page behind it and screen readers no longer read that page out. When the dialog closes, the page is back as it was and focus returns to the button you pressed.
6 October 2026
Changed
- Five wrong sign-in codes end the sign-in. If the code from your authenticator app is wrong five times within 15 minutes, you're signed out and start again with your password.
29 September 2026
Added
- Personal Microsoft accounts (outlook.com, hotmail.com) can now sign in. If you don't have an account yet, Continue with Microsoft makes you a personal one, ready to use, with no organisation to set up. If that address already has an account here, nothing is linked and you're told to sign in the usual way.
Changed
- Continue with Microsoft is one click again, with no email to type, as long as no organisation here has set up its own Microsoft sign-in. The email box only comes back once one has, because that's when it's needed to send you to the right place.
- One organisation per email domain. If your organisation is already registered here, signing up asks you to get an invitation from its administrator rather than creating a second organisation. That applies whether you register with a password or with Microsoft.
28 September 2026
Changed
- One Microsoft button. The sign-in page now has a single Continue with Microsoft: type your work email, and you're sent to your organisation's own Microsoft sign-in if it has one, or Microsoft's general sign-in if not. Microsoft's page opens with your address filled in.
- One less code after Microsoft sign-in. If Microsoft has already asked for your second factor, you're no longer asked for Signature Tool's code as well - whichever way you come through Microsoft, administrators included. Without that from Microsoft, you're asked here as before.
Added
- Administrators can require Signature Tool's own second factor after Microsoft sign-in for a particular person, from their page under Admin → Users. Each change is recorded in the audit log.
27 September 2026
Added
- Your staff list from Microsoft 365. Once an administrator has connected Microsoft 365 (under Admin → Microsoft 365), the service keeps a copy of your staff's names, job titles, departments and contact details, updated every hour. Sync now fetches changes straight away, and View staff lists everyone with a search. People who leave drop off at the next sync. This is the groundwork for signatures that fill themselves in.
26 September 2026
Changed
- The Microsoft options now come first on the sign-in page, inside the sign-in box, then "or", then your email and password - the same layout as our other products. The create-account page offers Register with Microsoft the same way.
- If your account has been deactivated you're told so when you try Microsoft sign-in; an account that was removed is told only that it can't sign in right now.
- Signing in with a personal Microsoft account (such as outlook.com) that has no account here now says to ask your organisation for an invitation.
24 September 2026
Added
- Sign in with Microsoft. Anyone with a work or school Microsoft account can sign in with it, or register a new organisation with it. If you already have an account, the first Microsoft sign-in links the two.
- Your organisation's own Microsoft sign-in, for administrators under Admin → Microsoft sign-in. Connect your own Microsoft app, then optionally require it instead of passwords, let colleagues join automatically on their first sign-in (off unless you switch it on, and they always join as members), and keep your staff list in step with a Microsoft group so leavers lose access. How to set this up on that page walks your IT team through it.
- If you sign in through your organisation's own Microsoft sign-in and Microsoft has already checked your second factor, you're not asked for a code here as well.
- A reminder to add a second step. If you sign in with just a password, a message at the top of the page suggests setting up an authenticator app, so a stolen password isn't enough on its own. Choose Not now to hide it until you next sign in. You won't see it if you already use an authenticator, or if you signed in with Microsoft.
23 September 2026
Added
- Invite staff on Admin → Users: enter your colleagues' email addresses (up to 50 at a time, pasted straight from Outlook if you like), choose staff or administrator, and each person gets their own invitation email. When they accept, a link to choose their password goes to their own inbox, so a forwarded invitation can't be used by anyone else. Invitations last 7 days, and pending ones are listed on the same page, where you can resend or cancel them.
- Ready-made banner layouts under Start from a layout: Property, Top tips, Course, Physio tip, Wellbeing and Event. Each gives you an example picture with text over it - double-click any text to change it, and Undo brings back what you had before.
- Example pictures for property, learning, physio, health and events. Select a picture on your banner to swap it for another example or for your own image; it keeps its place and is cropped to fit.
Fixed
- On smaller screens the banner design no longer slides underneath the settings panel - it scrolls sideways within its own area instead.
- "Keep me signed in" now keeps you signed in on your banners, saved signatures and account page, with no second code asked for. Deleting your account or turning it into an organisation still asks for your password again first, and the account page now says so rather than sending you to the sign-in page unexplained.
- Deleting a banner, brand, section or user asks you to confirm first, as it was always meant to. On the live site these had been going straight through.
- The new share link is selected in full when you click into it again, ready to copy.
11 September 2026
Added
- A short guided tour for a brand-new organisation's admin dashboard, pointing out where to create your first template, where the signature builder is, where to invite colleagues, and the help button. Skip it at any point with Skip tour or Escape - it won't come back once your organisation has created a template, or once you've dismissed it. Replay it any time from the ? help button.
9 September 2026
Added
- A public "What's new" page (
/changelog), linked from the footer of every page, signed in and signed out. - A confirmation step before deleting a saved signature, so a single misplaced click can no longer remove one by accident.
Changed
- The account menu and the demo role picker now use this app's own colour throughout, including on hover - a few remaining spots were still showing the default Bootstrap blue.
Fixed
- The public demo's sign-in step is now rate-limited, matching every other unauthenticated form in the app.
- Creating or editing a signature template now records exactly what changed in the audit log, not just that a change happened.