Ory Network, Ory Kratos, Ory Elements v26.1.6 released

Ory Network

Proper validation message for invalid email addresses and phone numbers

Kratos’ APIs will now return more user-friendly validation messages when users provide invalid email addresses or phone numbers during registration or profile updates.

Breaking changes

The message IDs for invalid email addresses and phone numbers have changed. Clients should update their localization files accordingly:

• Invalid email address:

  • Old ID: 4000001 (with generic "value" is not valid "email" message)

  • New ID: 4000040 (with user-friendly “Enter a valid email address” message)

• Invalid phone number:

  • Old ID: 4000001 (with generic "value" is not valid "phone" message)

  • New ID: 4000041 (with user-friendly “Enter a valid phone number” message)

Add export functionality to Events view

You can now export visible events data from the Activity > Events page in two formats: JSON and CSV.

The export includes all filtered events visible with their attributes, and filenames are timestamped for easy organization (e.g., events-2026-01-23T10-30-00.json).

Conditional CAPTCHA Rendering

Updated the CAPTCHA component to only display when user interaction is actively required, rather than appearing on every screen, reducing visual clutter.

Properly handle 2FA requirement in recovery flows

When a user has any 2FA method enabled and Kratos is configured to require 2FA for settings flows, Ory Elements did not properly handle the error returned by Kratos when trying to complete a recovery flow. This has now been fixed.

This is now available on Ory Network, for the Ory Enterprise License, and will be part of the next Ory Open Source release.

Ory Kratos

Proper validation message for invalid email addresses and phone numbers

Kratos’ APIs will now return more user-friendly validation messages when users provide invalid email addresses or phone numbers during registration or profile updates.

Breaking changes

The message IDs for invalid email addresses and phone numbers have changed. Clients should update their localization files accordingly:

• Invalid email address:

  • Old ID: 4000001 (with generic "value" is not valid "email" message)

  • New ID: 4000040 (with user-friendly “Enter a valid email address” message)

• Invalid phone number:

  • Old ID: 4000001 (with generic "value" is not valid "phone" message)

  • New ID: 4000041 (with user-friendly “Enter a valid phone number” message)

This is now available on Ory Network, for the Ory Enterprise License, and will be part of the next Ory Open Source release.

Ory Elements

Conditional CAPTCHA Rendering

Updated the CAPTCHA component to only display when user interaction is actively required, rather than appearing on every screen, reducing visual clutter.

Properly handle 2FA requirement in recovery flows

When a user has any 2FA method enabled and Kratos is configured to require 2FA for settings flows, Ory Elements did not properly handle the error returned by Kratos when trying to complete a recovery flow. This has now been fixed.

This is now available on Ory Network and will be part of the next Ory Open Source release.

Ory Hydra, Ory Keto, Ory Oathkeeper, and Ory Polis

No significant changes in this release.