diff --git a/CHANGELOG.md b/CHANGELOG.md
index a31c363..31e82d0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,11 @@ versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.2.1] — 2026-08-03
+
+Two defects that shipped in 0.2.0, both found by using the app rather than reading it — plus a
+much smaller, faster binary.
+
 ### Changed
 
 - OpenKey is now a native binary: **11 MB instead of 43 MB**, starting in about a sixth of a
@@ -12,10 +17,6 @@ versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
   most on a USB stick or someone else's machine.
 - Installable with [Scoop](https://scoop.sh), which also avoids the "unrecognized app" prompt.
 
-## [0.2.1] — 2026-08-03
-
-Two defects that shipped in 0.2.0, both found by using the app rather than reading it.
-
 ### Fixed
 
 - **A mistyped or revoked key was accepted and saved.** OpenKey checked keys against an endpoint