diff --git a/.github/ISSUE_TEMPLATE/2-bug_report.yml b/.github/ISSUE_TEMPLATE/2-bug_report.yml
index b47f5fe..fbae135 100644
--- a/.github/ISSUE_TEMPLATE/2-bug_report.yml
+++ b/.github/ISSUE_TEMPLATE/2-bug_report.yml
@@ -61,7 +61,7 @@ body:
   attributes:
     label: Version
     description: The output of `face-unlock --version`.
-    placeholder: face-unlock 2.0.0
+    placeholder: face-unlock 2.1.0
   validations:
     required: true
 - type: dropdown
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c694ce0..adbecc9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,19 @@
 
 What each release brings, newest first. The [GitHub releases](https://github.com/LoonixTools/face-unlock/releases) add every commit that went into it.
 
+## v2.1.0
+
+_2026-09-28_
+
+Welcome to face-unlock `v2.1.0`! It now gets out of the way during video calls: when another app uses the camera, you type your password right away. sudo and admin prompts take your face from the start.
+
+### Highlights
+
+- A crossed-out camera when another app uses it
+- A setting to stay quiet while the camera is in use
+- sudo and admin prompts are on by default
+- A setting for sudo over SSH, off by default
+
 ## v2.0.0
 
 _2026-09-26_
diff --git a/CMakeLists.txt b/CMakeLists.txt
index 90e87c5..08f1bf5 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -6,7 +6,7 @@
 # installed by the Makefile, which is where the paths come from.
 
 cmake_minimum_required(VERSION 3.22)
-project(face-unlock VERSION 2.0.0 LANGUAGES C CXX)
+project(face-unlock VERSION 2.1.0 LANGUAGES C CXX)
 
 set(FU_VERSION "${PROJECT_VERSION}" CACHE STRING "Version reported by every binary")
 
diff --git a/Makefile b/Makefile
index b877cc6..c02939d 100644
--- a/Makefile
+++ b/Makefile
@@ -9,7 +9,7 @@
 # Overridable so a packager can pass the version it is actually building
 # (`make VERSION=$pkgver`). The literal below is the fallback for builds
 # straight from a checkout, and is what a release tag has to carry.
-VERSION      ?= 2.0.0
+VERSION      ?= 2.1.0
 
 PREFIX       ?= /usr
 DESTDIR      ?=
diff --git a/packaging/rpm/face-unlock.spec b/packaging/rpm/face-unlock.spec
index 527ea5a..dc5edef 100644
--- a/packaging/rpm/face-unlock.spec
+++ b/packaging/rpm/face-unlock.spec
@@ -1,6 +1,6 @@
 # Built with `packaging/build-rpm.sh`, which passes the version in rather than
 # editing this file: the Makefile is where the version is written down.
-%global upstream_version %{?_version}%{!?_version:2.0.0}
+%global upstream_version %{?_version}%{!?_version:2.1.0}
 
 Name:           face-unlock
 Version:        %{upstream_version}