v1.9.14 backend/v2.4.0
feder-cr/invisible_dotsJan 19, 2026 → Jan 20, 20261 day between releases
What's New
Newer tag backend/v2.4.0 documents an unrelated Hanko auth backend, not a delta from the camera-focused v1.9.14 release.
Breaking Changes
- PKCE is now the default flow in Hanko Elements, which can break third-party integrations that assumed the previous non-PKCE behavior.
- Device trust cookies are no longer overwritten on shared machines, changing prior multi-user session semantics.
- The jump from v1.9.14 to a v2.x backend tag signals a major-version boundary with no documented migration path in these notes.
New Features
- Optional alphanumeric passcodes raise entropy for passcode-based authentication.
- Token signing can be delegated to external key providers, with AWS KMS as the first supported integration.
- Optional email security notifications alert users to sensitive account actions such as adding a passkey.
- Device trust now supports multiple users on shared machines instead of a single cookie.
- Dutch localization was added to the UI.
Improvements
- PKCE-by-default resolves several third-party integration issues, particularly cross-domain frontend/backend setups.
- Key management was refactored to support HSMs and external KMS backends.
- Device trust handling was made more robust for shared-machine scenarios.
- Localization coverage was expanded beyond the previously supported languages.
Bug Fixes
- Cross-domain authentication flows in Hanko Elements are fixed by the PKCE default change.
- Shared-machine device trust no longer loses or overwrites another user's trust cookie.
Upgrade Notes
These notes describe a different component (Hanko authentication backend) than the older invisible_dots camera release, so no direct upgrade path or config migration can be derived from them. If you are in fact moving to the v2.x backend, review the PKCE-by-default change against any third-party integrations and decide whether to enable alphanumeric passcodes, AWS KMS signing, and security notification emails. Treat the version jump as a major upgrade and validate auth flows in staging first.
The Two Releases
v1.9.14 - 2026-01-19
Jan 19, 2026· 9 months ago
Significant improvements to camera sources including Xiaomi and Wyze, enhanced WebUI with Monaco editor, WebRTC fixes for IPv6, and ONVIF compatibility updates.
Full release notesHanko 2.4
Jan 20, 2026· 9 months ago
Introduces alphanumeric passcodes, AWS KMS external key provider, and PKCE default for better security, along with multi-user device trust and Dutch localization.
Full release notes