The Ory Changelog

Ory Network Ory Kratos

Prevent setting new password to the current password

Ory now rejects attempts to set a new password identical to the current password. The admin API is unchanged and continues to allow any password for import...

August 25, 2025

Ory Network

Improvements to OAuth2 hooks

This fix is now live in Ory Network.

August 4, 2025

Ory Network Ory Kratos

Account recovery via SMS

Ory now supports sending account recovery codes via SMS, in addition to email. This allows users who only have a phone number associated with their account...

August 1, 2025

Ory Network Ory Kratos

SAML Credential Management and OIDC Account Linking

This release introduces new management capabilities for SAML credentials and resolves an issue with OIDC account linking:

July 29, 2025

Ory Network Ory Kratos

Support for external identifiers

Ory now supports assigning an external_id to identities. This feature enables systems to use domain-specific identifiers such as customer_id or employee_id...

July 28, 2025

Ory Network Ory Hydra Ory Kratos

Ory Elements 1.0.0 release

We're thrilled to announce 1.0.0 of @ory/elements-react. Ory Elements is an open-source component library designed to make building login, registration, and...

July 11, 2025

Ory Network Ory Kratos

Maximum Code Submission Limit

Ory Network now supports a configurable setting to limit the number of code submissions per flow. This applies to all code-based flows including recovery,...

June 18, 2025

Ory Network

Improved required verification flow on login and registration

New Ory Network projects now redirect users to a pre-filled verification flow when the require_verified_address hook is enabled for login. This ensures that...

June 17, 2025

Full user profile in id_token for SAML attribute mapping

Previously, the id_token did not include the complete user profile, which prevented custom SAML attributes from being mapped in Jsonnet during SAML...

June 17, 2025

Ory Network Ory Hydra

Graceful refresh count limit

Added support for limiting the number of times a refresh token can be used in a graceful token rotation flow. This helps prevent long-lived refresh sessions...

June 16, 2025