What’s new in Postrider

August 2026 · Postrider Drive, active sessions, trusted devices, message search

Released August 14, 2026

A big daily-use release. The headline: Postrider Drive lets you mount your files as a folder on your Mac, PC, or phone — browse, open, drag files in and out without opening a browser. Plus a set of security controls that put you in charge of exactly where and how you’re signed in.

Postrider Drive — mount your files as a folder

• Postrider Drive (new). Mount your Inbox, Sent, My Files, and Team Files (if you’re on an org account) as a network folder in Finder (macOS), Explorer (Windows), the Files app (iOS), or davfs (Linux). Files decrypt on the fly; writes upload immediately. Same encryption, permissions, and quotas as the web app.
• App passwords (new). Per-device credentials for the Drive mount, created and revoked individually from Account settings. Losing a device only requires revoking its app password, not your real password. End-to-end encrypted messages stay web-only by design — the mount covers server-envelope items.

Security & account control

• Active sessions. See every browser you’re signed in on (device, IP, last-active time) and sign any of them out individually, or “Sign out of all other sessions” in one click.
• Trusted devices — 30-day two-factor skip. New checkbox at the two-factor step: trust this browser for 30 days and skip the code / passkey prompt on subsequent sign-ins. Revocable per device from Account settings.
• Per-user session timeout. Set your own idle-logout window (1–480 minutes) in Account settings. Handy for admins on long-running dashboards; the system default (15 minutes) is unchanged.
• Microsoft 365 SSO: guest-block. Business orgs signed up via Microsoft SSO are now locked to their primary email domain by default. External guests and personal Microsoft accounts invited to your Entra tenant can no longer inherit portal access — ask your Postrider admin to invite them directly.

Everyday polish

• Message search. The Inbox search bar now searches inside message bodies, not just subject and sender. Match previews show where the hit landed. Sent messages are searched too.
• Inline document preview. Click a document name and it opens in a preview modal — PDFs and images render inline; other types get a Download button. Decryption for end-to-end items still happens in your browser.
• Cleaner first-contact email. When someone messages a person who doesn’t yet have a Postrider account, we now send one combined “invited + message waiting” email instead of two (invite + “log in to read”) — less confusing, one working link.

June 2026 · Passkeys, backup codes, Microsoft 365 SSO, and a built-in Help center

Released June 2, 2026

A focused release on sign-in security, plus self-serve Microsoft 365 sign-on for business accounts and a built-in Help center so you can find answers without leaving the app.

Sign-in & security

• Microsoft 365 / Entra SSO (Business plan). “Sign in with Microsoft” on the login page and “Sign up with Microsoft” on the Business signup tab. Creating a new organization via SSO provisions everything automatically — no separate password to manage. Existing org members can also link their Microsoft account on first SSO sign-in. SSO accounts use server-side encryption; password sign-in remains available alongside SSO and is the only option for end-to-end encryption.
• Passkeys & hardware security keys. FIDO2 / WebAuthn support for YubiKey, Titan, Touch ID, Face ID, and Windows Hello. Register multiple per account. New registrations save as discoverable passkeys on supporting platforms and sync across devices via iCloud Keychain, Google Password Manager, or 1Password.
• One-time backup codes. Ten single-use codes per account, shown once and downloadable. Each works once at the MFA step in place of TOTP or a passkey. Regenerating immediately invalidates the previous set.
• Self-service recovery key regeneration. Generate a new recovery key from Account settings — the old one stops working instantly. Your password and existing data are untouched.
• Flexible 2FA gate for staff. Either TOTP or a passkey satisfies the forced-MFA requirement for staff and admin accounts.

Sharing & documents

• Link-only document share. Send a file to someone without a Postrider account. Optional password, expiry date, and download limit; revoke from the Documents page at any time.
• Multi-file upload. Select or drag in several files at once.
• Drag-and-drop folder organization. Move documents between folders by dragging. Rename folders inline by clicking the name.

Inbox

• Threaded conversations. Replies are grouped into a single row per thread, with an unread badge counting new messages in that thread.
• Desktop notifications. Opt in from Account settings to get a browser alert when a new secure message arrives. The alert never contains message content.

For organizations

• Storage usage at a glance. The Documents page shows team quota usage as a bar; the Companies admin page surfaces per-org usage alongside seat counts.
• Trial indicator on the Companies admin list, with days remaining.
• Suspend or fully delete users. Suspend instantly blocks sign-in while preserving data (reversible). Delete is a full purge for abuse cases, with a confirmation dialog (not reversible).
• Pending-signup management. Multi-select abandoned signups to purge; per-row resend-invite. Reactivate no longer appears on pending accounts.
• Per-user invite rate limit stops a compromised admin account from being weaponized to spam your users.
• Verified org audit isolation. Org admins see audit entries for their own org only — no cross-tenant bleed, no global system events.

Anti-spam

• hCaptcha + honeypot on the public signup form to filter bots before any email goes out.
• Stale-signup purge job sweeps abandoned pending accounts on a schedule.

Help center

• In-app Help — a new sidebar link opens deep-linkable articles covering signing in, 2FA setup, backup codes, recovery keys, sending messages, documents and folders, share-by-link, account settings, privacy and encryption, and troubleshooting.