diff --git a/.gitignore b/.gitignore
index ad42bfb..feac9fe 100644
--- a/.gitignore
+++ b/.gitignore
@@ -58,5 +58,8 @@ publish/
# ─── claude-code workspace artefacts (per-developer, never commit) ───────────
.claude/
+# ─── Landing page (deployed manually to a private host; not part of the repo) ─
+landing/
+
# ─── Password-manager export files (real plaintext credentials — test only) ──
pm-export/
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 779f777..516fc58 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,26 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased]
+## [2.0.0] - 2026-06-04
+
+### Added
+- **Cluster 5 UX**: toast notifications, idle auto-lock with countdown warnings
+ (including a 10s warning for the 30s tier), inline form validation, Activity Log
+ with CSV export, illustrated empty states, forgot-password and clear-vault flows.
+- **TOTP / 2FA** (RFC 6238) with import via QR code, `otpauth://` URI or manual seed.
+- **Compromised-password check** via Have I Been Pwned (k-anonymity, opt-in).
+- **Identity fields**: Middle name, Company, Username.
+
+### Changed
+- **Full localization** in 6 languages (IT/EN/FR/DE/ES/PT).
+- App and installer version bumped to **2.0.0**; browser extensions to 1.0.1.
+
+### Fixed
+- Dark theme: unreadable secondary text and markers in the Verifier "Vault" tab.
+- Browser extension: invisible popup action icons (copy username/password).
+- Import: robust handling of Bitwarden / CSV / 1PUX, including encrypted, ZIP and
+ unsupported files.
+
## [1.0.12] - 2026-05-05
### Changed
diff --git a/README.md b/README.md
index d7ae25d..2695711 100644
--- a/README.md
+++ b/README.md
@@ -65,6 +65,8 @@ PassKey stores your passwords, credit cards, identities, and secure notes in a l
> **Requirements:** Windows 10 version 1809 (build 17763) or later, x64 processor.
> No .NET runtime required — PassKey is fully self-contained.
+📋 See the [Changelog](CHANGELOG.md) for the full release history.
+
> ⚠️ **SmartScreen warning:** PassKey v1.0 is signed with a self-signed certificate. Windows may show an "Unknown publisher" warning. Click **More info → Run anyway** to proceed. This will be resolved with a commercial certificate in a future release.
---
@@ -101,13 +103,6 @@ The browser extension requires PassKey Desktop to be installed and running. See
-
-
-