Certificate checks now support additional services that negotiate TLS after connecting, including supported mail and FTP ports. The domain view identifies connections that used opportunistic TLS so you can distinguish them from services that start with TLS.

Sensitive account actions now ask you to confirm your identity before continuing. You can use the available authentication methods, including a passkey or security key, to complete the confirmation.

Use Export from the Domains list to download your portfolio as CSV. Use the exported list for reporting or reviewing domains outside the app.

Deployment scripts can now read $DEPLOY_CHIEF_SERVER_USER to find the SSH username used for the current server. The value reflects an environment's custom user when one is configured.

Compatible services can send you to Domain Chief to configure their DNS records through Domain Connect. Review the proposed changes and approve them for a domain using hosted DNS.

Set a custom server user in an application's environment to run deployments with that SSH account. Environments without an override continue using the server's configured user.

The team member list now shows whether each member has two-factor authentication enabled. Use the indicator to review account protection across your team.

A monitored domain's IP addresses now show their autonomous system number and network details. Use this information to distinguish addresses served by different hosting networks when reviewing certificate scans.

Create nameserver templates under Settings and select one when configuring a domain's nameservers. Reuse a saved set when registering or transferring domains instead of typing the same nameservers each time.

Add show_plain_redirect_target=true to a short-link or custom-domain request to receive the redirect destination as plain text instead of being redirected. Normal password and link handling still applies; the plain-target response does not record a redirect visit.

When another registrar requests a supported domain transfer, the domain page now shows Transfer Pending with Approve and Deny actions. Review the request and choose whether to let the domain move to the new registrar.

Select domains in the Domains list and use the bulk actions to enable or disable auto-renewal. Review the affected domains' renewal settings before allowing their current registration terms to end.

Open Authorized applications to see the apps that have access to your account and when they were last used. Disable an app's access when you no longer use it; you can reconnect it later if needed.

Compatible OAuth clients can request a device code and ask you to approve access in your browser. This lets a command-line client connect without handling your password or hosting an OAuth callback.

Integrations can request a domain registration or incoming transfer through the API, supplying the domain, contacts, and required registration or transfer details. Follow the returned domain's status to track completion.

When creating a personal access token, choose a team to limit the token to that team's context. Use a team-scoped token for an integration that should work with one team rather than selecting among all your teams.

Use the metadata endpoint with a URL to retrieve its title, description, image, favicon, and resolved URL. Integrations can use the response to prepare a link preview before creating a short link.

Open a domain's DNS records and use Export to download its zone. Keep an export before changing records or use it when moving your DNS to another provider.

Choose TransIP in the hosted DNS import flow and provide a read-only access token to retrieve an existing zone. Review the imported records before moving the domain to Domain Chief nameservers.

Open Invoices for a connected DigitalOcean account to browse its imported invoice history. Download an invoice PDF when you need a copy for your records.