https://cybertoolchain.io/tools/loginradius New releases and features in LoginRadius, tracked by The Cyber Toolchain. en Fri, 30 Oct 2026 07:46:55 GMT https://www.loginradius.com/docs/changelog https://www.loginradius.com/docs/changelog Fri, 30 Oct 2026 07:46:55 GMT LoginRadius adds Phone ID management to the Admin Console user editor⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Add, update, or remove a user's Phone ID directly from User details > Edit User Info — the field appears only when phone login is enabled, and changing it marks the Phone ID as unverified.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Restrict view-only users from creating or editing items in Organizations and Custom IdP > Settings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/loginradius https://www.loginradius.com/docs/changelog https://www.loginradius.com/docs/changelog Thu, 22 Oct 2026 07:50:54 GMT LoginRadius adds DPoP token binding, per-IP rate limiting, passkey registration controls, and default Advanced Audit Logging V2.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds DPoP (RFC 9449) support to bind Access Tokens and Refresh Tokens to the client's private key, preventing reuse of stolen tokens.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds per-IP rate limiting for SSO (OAuth 2.0, OIDC, and SAML), Account Management, and Partner IAM APIs. • Adds server-side checks to block duplicate Passkey registrations and enforce a per-account Passkey count limit. • Enables Advanced Audit Logging (V2) and Team Audit Logs V2 by default for new Trial and Enterprise tenants. • Adds `lrcontent.com` to the default allowed callback domains. • Increases Passkey verification challenge timeout from 1 minute to 3 minutes and enforces single-use, expiry-checked challenges to block replay attacks. • Improves JSON processing speed for registration, profile update, and workflow requests. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/loginradius https://www.loginradius.com/docs/changelog https://www.loginradius.com/docs/changelog Mon, 12 Oct 2026 08:08:03 GMT LoginRadius V3JS adds component-level config, RBA Email OTP challenges, and extended localization keys⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `componentConfig` to the V3JS library to dynamically show or hide specific authentication components per flow.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `rba-email-otp` localization keys for Risk-Based Authentication Email OTP screens. • Extends `preventVerificationEmail` support to Mandatory Email Verification flows in the Registration Flow. • Suspicious sign-ins now trigger an Email OTP challenge via Risk-Based Authentication rather than returning an error. • Adds dedicated error-code mapping for Hosted Pages Email OTP verification. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/loginradius