Escrow, and sharing a recovery fragment in the Escrow app, no longer stop when an escrow key fails the check added in 2.18.0 (signed by a site key that the vendor key signed). The key is used as in 2.17 and the failure is only written to the browser console
Inbox upload folders are now named like fred-Fri-Oct-16-2026-11.09.05 instead of fred-Fri Oct 16 2026 11:09:05, so they can be transferred to Windows VMs. Characters Windows does not allow in the user name are replaced with -. Folders uploaded before keep their old names
Accounts set to escrow their key at the next login can log in again; since 2.18.0 they were stopped with "Your key was not escrowed: ..." on deployments whose escrow groups hold keys the check could not verify
The escrow key check accepts every site key signature the server accepts, and every site key the vendor key signed, including after a site key rotation, so it no longer reports those keys
