Deprecation of Weak TLS 1.2 Cipher Suites
To ensure the highest security standards for your identity infrastructure, we are retiring specific weak TLS 1.2 cipher suites. This change affects all connections to Auth0 service endpoints and web applications, specifically: __Tenant Domains__: All default (e.g., [tenant].auth0.com) and Custom Domains for both Public and Private Cloud.
Also shipped Dec 15, 2025Okta in December 2025 →
1.144.0 (2025-12-11)
Features Add keepalive feature to tear down streams in their absence ( #2605 ) ( 99aca4f ) Make v1 the default protocolVersion ( #2623 ) ( 12f014d ) Bug Fixes deps: Update the Java code generator (gapic-generator-java) to 2.64.2 ( b4b7f83 ) Dependencies Update actions/checkout action to v5 ( #2613 ) ( a69ffdd ) Update actions/checkout action to v6 ( #2619 )...
Durable Objects, Workers - New Best Practices guide for Durable Objects
A new Rules of Durable Objects guide is now available, providing opinionated best practices for building effective Durable Objects applications. This guide covers design patterns, storage strategies, concurrency, and common anti-patterns to avoid.
Introducing Transaction 360: Unified, transaction-centric observability is here
New Relic's Transaction 360 is the industry's first transaction-centric observability solution designed to streamline troubleshooting, automatically correlating components, telemetry, and change data into a single, unified view.
Workflows insights
Workflows insights provides analytics and monitoring for your CI/CD Workflows, helping you identify trends and diagnose issues across all your workflow runs.
Venmo and PayPal are now treated as separate payment methods
Starting in API version 2026-01 , Venmo and PayPal are treated as separate payment methods when using payment customization functions. Previously, hiding PayPal's express checkout placement would automatically hide Venmo as well. With this change, you can now hide or show Venmo independently from PayPal in your payment customization logic.
Faster bulk operations
We've updated bulk operations in the GraphQL Admin API to process large datasets faster. What's new: Here's what we've done: Support for all mutations : Previously bulk mutations only supported a limited set of actions. Now, you can execute any mutation using bulk operations across all API versions.
More from Auth0Every Auth0 release →
MyAccount API Explorer Experience Updated
The MyAccount API Explorer now has an updated experience! Using MyAccount API, customers can build self-service management experiences at scale, powered directly from their applications. To learn more about the MyAccount API feature, [click here](https://auth0.com/docs/manage-users/my-account-api).
Forms - Flows Auth0 Send Email Action
We’re excited to announce that we added __Flows Auth0 Send Email Action__! This new feature allows you to send emails from Flows using the customized Email Provider at your Auth0 Tenant.
Custom Token Exchange now available in Open Early Access
We’re excited to announce the __Open Early Access (EA) of Custom Token Exchange__. OAuth 2.0 Token Exchange allows to trade one security token for another (typically an Access Token).
Security Center: Unleash Deeper Insights with New Filtering & Pre-defined Groupings
We're excited to announce a significant update to the Security Center, marking the first major enhancement since last year's introduction of Thresholds and Alerts! These new capabilities drastically improve your ability to monitor, analyze, and respond to security threats with greater precision and speed.
Advanced Customizations for Universal Login has reached General Availability
We are excited to announce that __Advanced Customizations for Universal Login (ACUL)__ is now generally available. ACUL enables developers to create custom, client-rendered user interfaces for Universal Login using their preferred frontend technologies.
Google Workspace User Directory Sync - Now in Early Access
We’re excited to announce that Google Workspace User Directory Sync is now available in Limited Early Access (EA) with major enhancements to configuration, usability, and performance.
Requesting App for Cross App Access (XAA) is now available in Beta
This new Token Vault capability allows Client Applications to obtain access tokens from third-party APIs (resource servers), through an authorization flow that is coordinated by a common Identity Provider implementing the [Identity Assertion Authorisation Grant](https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/) standard.
Auth0 Private Cloud Now Available on Azure 30x & 30x Burst Tiers
We are pleased to announce the expanded availability of __Auth0 Private Cloud on Microsoft Azure__, now supporting the __30x and 30x Burst__ performance tiers. This update enables enterprise organizations to leverage high-scale, dedicated identity infrastructure while maintaining their commitment to the Azure ecosystem.