diff --git a/CHANGELOG.md b/CHANGELOG.md
index c05d261..cdf1879 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,8 +1,19 @@
 # Changelog
 
 ## [Unreleased]
+
+## [0.4.0] - 2025-09-06
 ### Added
-- Base64 and Base32 encoding/decoding utilities with secure_buffer overloads.
+- Base32 (RFC 4648), Base64, and Base36 encoding/decoding utilities.
+- `secure_buffer<T>` zeroizing container and helpers (page locking, secret_string).
+- Expanded HOTP/TOTP test coverage.
+
+### Changed
+- CMake install exports new headers.
+- README updated.
+
+### Notes
+- Breaking changes: none (public API only extended).
 
 ## [0.3.0] - 2025-09-05
 ### Added