April 2026 Updates
Here is a summary of what changed across Short.io in April 2026.
Features
- Organizations — full billing and team management — Organizations now have their own subscriptions, payment methods, coupons, billing info, billing email, billing phone verification, and autoupgrade preferences. Subscribe, manage Stripe and PayPal payment methods, and update billing details directly at the organization level.
- Sidebar organization switcher — Switch between organizations from the sidebar. New users automatically get a default organization on registration; logging in via Google, Facebook, or SAML correctly scopes to the right organization.
- Migrate existing accounts to Organizations — Paid users (and their domains, SAML configurations, API keys, and full billing/payment info) are migrated into Organizations automatically. Free solo users are also moved into org mode.
- Organization member management — Admins can manage members, invite teammates, and self-remove. The last admin of an organization is protected: they can't be removed, and their account can't be deleted while they're the only admin.
- Organization deletion — Delete an organization; its subscription is cancelled automatically.
- Browser extension — A new Short.io browser extension lets you create and manage links directly from your browser, with screenshot capture, a configurable keyboard hotkey, and inline slug editing.
- Native blog at short.io/blog — The Short.io blog has been moved in-house, with 581 existing posts migrated from Ghost. The new blog has a redesigned reader-focused UI, search, RSS, table of contents, reading progress, share buttons, related posts, tag and category pages, and YouTube/Compare/Bookmark/Callout content blocks.
- Open Graph Checker tool — A new public tool at
short.io/tools/open-graph-checkerlets anyone inspect Open Graph metadata for any URL. - QR Code Debugger tool — A new public tool at
short.io/tools/qr-code-debuggerdecodes QR codes from images, including photos (using BarcodeDetector with a polyfill fallback). - Deep Links Debugger tool — A new public tool at
short.io/tools/deep-links-debuggerinspects iOSapple-app-site-associationand Androidassetlinks.jsonconfigurations for any domain. - Self-hosted API reference — The API reference is now hosted at
docs.short.io/api-referenceusing Scalar, with code samples and SDK installation instructions injected directly into the OpenAPI spec. - AI Assistant on AWS Bedrock — The AI Assistant has been migrated to AWS Bedrock with a visible "thinking" stream so you can see the assistant's reasoning as it works.
- Domain transfer — A new admin endpoint lets you transfer domain ownership between accounts and organizations.
Improvements
- Sidebar v2 — The sidebar has been reworked with collapsible sections, a polished mobile navigation, lighter duotone icons, smoother transitions, and a logout shortcut.
- Toolbar and link creation UX — Domain switcher v2, redesigned shortener block, "Bulk Sheets" and "CSV Import" labels, the bundle button moved to the toolbar, and clicking "Create Link" now properly focuses the toolbar input.
- Login/registration pages redesign — Public pages have been migrated to the new component library with a glassmorphism aesthetic.
- Link bundle redesign — Inline color customization, a redesigned link list and editor, and a polished bundle UI. Long URLs now wrap correctly in bundles, and broken or missing logo images are hidden gracefully.
- Color picker, social links, templates — Improved dark theme contrast for the color picker, restored favicon buttons, and polished social link wrapping in templates.
- AI-suggested tags polish — Visual refinements to the AI-suggested tag chips.
- Unsaved link edits preserved — When you navigate from the link editor into a feature panel (tracking, expiration, password, etc.), unsaved changes are now saved automatically before the navigation.
- Click Certifier honors domain tracking codes — The HTML redirect path now respects domain-level tracking codes, and URL matching includes the URL fragment for stricter comparison.
- Edge connection limits — The redirector edge now caps concurrent connections and bounds request header sizes, with a new
edge_active_connectionsmetric per listener. - Faster link cache invalidation — Bundle updates now use targeted link-cache and domain-cache invalidation instead of broad flushes, so changes propagate faster with less cache churn.
- Public API caching —
POST /links/publicnow caches user lookups for a noticeable performance improvement on bulk creation. - Reporting endpoints — Reporting now resolves statistics and statistics-merger endpoints from environment configuration, supports timezone-aware exports with IANA validation, and degrades gracefully when fetching link top categories.
- SSL queue prioritization — New issuance is now prioritized over renewal in the certificate queue, with a configurable
RENEWAL_LEAD_DAYSand parallel issuance/renewal loops for better throughput. - Trial enforcement and free-email coverage — The free-email-provider list has been extended with broad global coverage to better detect trial-eligibility evasion.
- Plan limit messaging — When a bulk-create operation hits a plan limit, the specific limit reason is now recorded with the response.
- Documentation — The A/B testing guide has been reworked, the link bundle article was updated for the new UI, a new article covers adding and verifying a phone number, and the folder expiration, tracking, HTTP, UTM, and Profile menu / geo-targeting articles were refreshed.
Fixes
- Stale domain selection — The previously selected domain is no longer left behind in
localStoragewhen it becomes invalid. - SAML save button — The Save button on SAML configuration is now correctly enabled when the form is dirty.
- Subscription page — Hides Plan and Invoices links and shows the right billing surface in organization mode.
- Phone-verified banner — Reads its state from organization info instead of the user-level billing endpoint.
- Account deletion — The frontend now hits the correct
POST /profile/deleteendpoint. - Misleading "secure link" upgrade message — Replaced with a clearer plan-upgrade explanation in the redirector.
- Invoice PDFs — Unicode characters now render correctly thanks to an embedded DejaVu Sans font, and PayPal invoice PDFs now include user billing details.
- Two-factor authentication on org switch —
organizationIdnow propagates correctly through 2FA so org switching no longer drops authentication context. - Stale link bundle data — Recently created or updated bundles no longer show stale content immediately after the change.
- Cassandra cleanup safety — The audit table write is correctly skipped when
deleteLinksByDaysruns in DynamoDB-only mode.