release-2025-12-05: Anchor migration & unsupported page redirect

This is Internet Identity release release-2025-12-05 for commit 493f4c5f68cb13414dd1c87b2aa7692fa81ccda4.
The sha256 of production asset internet_identity_production.wasm.gz is 8101e325042b0df95f8cf1eb91ce3433db0e337241eba20234abd413a50e6e3e.

This is mostly a maintenance release with one user-visible change:

• Redirect to landing page when unsupported page is visited directly.

In addition, this release contains the following code changes:

• The first phrase of the anchor storage migration: each anchor's data is read from the current (bounded) storage, marshalled into a new, clearer format (e.g., recovery keys and passkeys are now stored in separate types), and then stored in the unbounded anchor memory. The code ensures that anchor data is kept in sync between the two storages, but the source of truth remains in the bounded memory (switching the source of truth will be proposed in a subsequent proposal).
• Implementation of the new recovery phrase feature for id.ai (which remains disabled for now since more testing is needed).

What's Changed

• Recovery phrase unverified status based on last_authentication. by @sea-snake in #3519
• Refactor recovery phrase e2e and add more test cases. by @sea-snake in #3523
• chore: Make StorableAnchor a structural super-type of StorableFixedAnchor by @aterga in #3522
• Redirect to landing page when unsupported page is visited directly. by @sea-snake in #3521
• chore: Fallback for passkeys without credential IDs by @aterga in #3526
• Support for resetting locked recovery phrases. by @sea-snake in #3527
• Use classes instead of component for buttons. by @sea-snake in #3529

Full Changelog: release-2025-11-28...release-2025-12-05

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	8101e325042b0df95f8cf1eb91ce3433db0e337241eba20234abd413a50e6e3e
internet_identity_dev.wasm.gz	51aa14f7d88a389e3d3434cd135967ac9b24ddd61c17a45e21d46006776016b3
internet_identity_test.wasm.gz	d64fa85da9770a7eac4d1c9c227c81c7dc1b6d70ee66f3ed21a82ada11b22114
archive.wasm.gz	44149b657f8b9693da4b4f9a134e799c1c7d223ab09fea3d5c3fa1cfa7ddaba9
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 493f4c5f68cb13414dd1c87b2aa7692fa81ccda4
./scripts/verify-hash --ii-hash 8101e325042b0df95f8cf1eb91ce3433db0e337241eba20234abd413a50e6e3e

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2025-11-28: Better instructions to bypass limited built-in browser (X/Twitter)

This is Internet Identity release release-2025-11-28 for commit 3611a9e31c57edf1ed1caec89d63ba162fc064fc.
The sha256 of production asset internet_identity_production.wasm.gz is e8d14aafd2d66583e9993d4c1c2baccacac029f607d2724c0e698c3338479da6.

The main user-visible change in this release is an improved screen with instructions to bypass the limited built-in browser in X/Twitter. Additionally, this release prepares for the upcoming recovery phrase feature for id.ai (which is not yet enabled).

What's Changed

• feat: Support AAGUID for PassKey devices by @aterga in #3508
• Add remaining retry and reset views to recovery phrase creation wizard. by @sea-snake in #3511
• Add initial screen in recovery flow by @lmuntaner in #3512
• Split and move routes by @lmuntaner in #3516
• Recovery phrase set-up e2e tests. by @sea-snake in #3517
• fix: Record anchors operation outcome only if it succeeds by @aterga in #3518
• Custom unsupported page for users trying to sign in from within X. by @sea-snake in #3520

Full Changelog: release-2025-11-21...release-2025-11-28

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	e8d14aafd2d66583e9993d4c1c2baccacac029f607d2724c0e698c3338479da6
internet_identity_dev.wasm.gz	18bd7e5f51aab7c4048aaa9fce25fe12565930173a055db6c5106bc83bf7a880
internet_identity_test.wasm.gz	6a01e4315bfe33164de34505b7ab1f7a6469c5aa67ce1c55d186842b90cc9df2
archive.wasm.gz	44149b657f8b9693da4b4f9a134e799c1c7d223ab09fea3d5c3fa1cfa7ddaba9
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 3611a9e31c57edf1ed1caec89d63ba162fc064fc
./scripts/verify-hash \
    --ii-hash e8d14aafd2d66583e9993d4c1c2baccacac029f607d2724c0e698c3338479da6 \
    --archive-hash 44149b657f8b9693da4b4f9a134e799c1c7d223ab09fea3d5c3fa1cfa7ddaba9

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2025-11-21: Ongoing implementation of recovery phrase

This is Internet Identity release release-2025-11-21 for commit 1115f8a35978aa6813690dd916b932668b6112ad.
The sha256 of production asset internet_identity_production.wasm.gz is efa795280181b5fbd51069bab813e885ebf95dcef478c52f37deabcd62e63907.

This release doesn't include any user facing implementation changes this time around, instead it includes ongoing implementation work around recovery phrase creation, usage and an updated data migration (for the identity by recovery phrase lookup).

One user facing configuration change this release is in the updated OpenId configurations, which now includes colored icons that replace the current monochrome ones.

What's Changed

• fix: No more dangling identity anchors and make data migration work with non-existent anchors by @aterga in #3502
• refactor: Even safer anchor allocation by @aterga in #3504
• test: Adjust sync_anchor_indices_migration test to reflect the recent bug fix by @aterga in #3506
• Implement recovery phrase wizard. by @sea-snake in #3500
• chore: Bump astro by @aterga in #3509
• Enter name after recovery flow by @lmuntaner in #3501
• Add identity to local storage if missing after adding an access method by @lmuntaner in #3505
• Update create recovery phrase views by @sea-snake in #3510
• Reduce logo sizes further. by @sea-snake in #3513

Full Changelog: release-2025-11-14...release-2025-11-21

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	efa795280181b5fbd51069bab813e885ebf95dcef478c52f37deabcd62e63907
internet_identity_dev.wasm.gz	4d845df4e4a89c91918cab3d6a5f48a259c81c9bae86b5289302d96568cef905
internet_identity_test.wasm.gz	3ac76609d2855b184200d6948ea58700aac074a1b38a20359b4cbd522de46ef5
archive.wasm.gz	ce746c2055fb6a0d6320535934cfccec6b47baef42e5c04f51742cf0fca95900
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 1115f8a35978aa6813690dd916b932668b6112ad
./scripts/verify-hash --ii-hash efa795280181b5fbd51069bab813e885ebf95dcef478c52f37deabcd62e63907

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2025-11-14: Access method management redesign

This is Internet Identity release release-2025-11-14 for commit 606b484b36cf65b7372193ed5ee6c7848995adaa.
The sha256 of production asset internet_identity_production.wasm.gz is 7a03878478d1478b9012f9e2676f1077b0ea845b3f959eae40019fa6f8d4c747.

This release includes a major redesign for the access methods management experience, allowing users to better understand how their identity access is configured, e.g., where a passkey is stored. Additionally, this release includes

• Preliminary changes for the new recovery phrase feature.
• Minor tuning of SEO settings.
• Various fixes.

What's Changed

• Add svelte-check to check script by @lmuntaner in #3455
• Bump tracing-subscriber from 0.3.19 to 0.3.20 in /demos/vc_issuer by @dependabot[bot] in #3457
• Implement the flow using the recovery flow happy path by @lmuntaner in #3453
• Show error style on invalid spelling recovery word by @lmuntaner in #3459
• Add $formatRelative and additional comments that explains usage. by @sea-snake in #3460
• Automatically flip popover if it doesn't fit in viewport e.g. select dropdown on mobile. by @sea-snake in #3461
• Add auth method to authentication state. by @sea-snake in #3463
• Implement Select component and use it to replace language selectors. by @sea-snake in #3462
• Update add/remove access method views. by @sea-snake in #3465
• Update add access method wizard by @sea-snake in #3466
• Fetch identity info data in load function by @sea-snake in #3464
• Fix manually reroute. by @sea-snake in #3467
• Unsupported browser support URL. by @sea-snake in #3468
• Use class for custom icon dimensions by @sea-snake in #3469
• Add behavior when entering recovery words by @lmuntaner in #3471
• New access methods page design. by @sea-snake in #3470
• Replace old access route with new access route. by @sea-snake in #3472
• Reset session store when logged out due to removing current access method. by @sea-snake in #3475
• Cleanup unused and fix layout. by @sea-snake in #3476
• chore: Minor refactoring to make storage code more meaningful by @aterga in #3474
• Black and white favicon. by @sea-snake in #3477
• Successful recovery modal by @lmuntaner in #3473
• Disable source comments in translation files to avoid git conflicts. by @sea-snake in #3479
• chore: Disallow crawling try.id.ai and improve sitemap by @aterga in #3481
• Updated translations and translation script by @sea-snake in #3480
• Manage error case in recovery flow by @lmuntaner in #3482
• Fix switching identity in dashboard. by @sea-snake in #3484
• Show no identity found modal in recovery flow by @lmuntaner in #3485
• Update homepage cards design by @sea-snake in #3486
• feat: Add new API function lookup_caller_identity_by_recovery_phrase by @aterga in #3483
• feat: Add recovery phrase principal index and implement its synchronization with anchors by @aterga in #3487
• Add Cancel Recovery Flow Modal by @lmuntaner in #3488
• Move passkey from another device from /manage to /manage/access route. by @sea-snake in #3489
• Update subtitles and translations. by @sea-snake in #3491
• Implement recovery phrase page. by @sea-snake in #3492
• chore: Migrate recovery phrases to populate the new index by @aterga in #3490
• Update rust version by @gix-bot in #3357
• chore: Small improvements for the recovery phrase data migration by @aterga in #3496
• feat: Implement lookup_caller_identity_by_recovery_phrase by @aterga in #3497

Full Changelog: release-2025-10-31...release-2025-11-14

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	7a03878478d1478b9012f9e2676f1077b0ea845b3f959eae40019fa6f8d4c747
internet_identity_dev.wasm.gz	59a779dd4143416f8761ade228ca81efd222a54117d2728a2ebc2793d60a9c9e
internet_identity_test.wasm.gz	0fa2dd581bbd9392a9e3fc42f3016571b547099b5ff6ab9c56fcc979ff475a27
archive.wasm.gz	ce746c2055fb6a0d6320535934cfccec6b47baef42e5c04f51742cf0fca95900
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 606b484b36cf65b7372193ed5ee6c7848995adaa
./scripts/verify-hash --ii-hash 7a03878478d1478b9012f9e2676f1077b0ea845b3f959eae40019fa6f8d4c747

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2025-11-07-v2: Updated translations and translation script (#3480)

This is Internet Identity release release-2025-11-07-v2 for commit 389277f7a89833328c3362124715339947ae813e.
The sha256 of production asset internet_identity_production.wasm.gz is 620142d6d5f403022aab64df3084a8d0d51ca4e73b79e364227ceff876cad01f.

Full Changelog: release-2025-11-07...release-2025-11-07-v2

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	620142d6d5f403022aab64df3084a8d0d51ca4e73b79e364227ceff876cad01f
internet_identity_dev.wasm.gz	462077ede4d0dfa3784b3a78a5095f92dd1f9a0694d3f50c38910faaaf50c3a4
internet_identity_test.wasm.gz	c053d0733baacac16afe9d0615b6518652453d491d48e7c73ac27c59ea4a671c
archive.wasm.gz	a82dc9afac04ff0efefd3660f41d8fcc808e1a5eb900e518605912d5c1b78577
vc_demo_issuer.wasm.gz	626d2844c11570b01b2b0d2e1ee565ed87f334f8d9804605dae6cf9f77f2ee2d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 389277f7a89833328c3362124715339947ae813e
./scripts/verify-hash --ii-hash 620142d6d5f403022aab64df3084a8d0d51ca4e73b79e364227ceff876cad01f

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2025-11-07: Updated translations and translation script (#3480)

This is Internet Identity release release-2025-11-07 for commit 389277f7a89833328c3362124715339947ae813e.
The sha256 of production asset internet_identity_production.wasm.gz is 8ef22da0a67464ca8cee531fe4b5e1c3f5394602331b1b9f603c83241e1f33b1.

Full Changelog: release-2025-11-14...release-2025-11-07

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	8ef22da0a67464ca8cee531fe4b5e1c3f5394602331b1b9f603c83241e1f33b1
internet_identity_dev.wasm.gz	db29469fd9d17a7fd6febfa4ebb1790c30cbeee1dfd673c8b14243a7ffdc22ed
internet_identity_test.wasm.gz	e83a6979af96a92b1ee3c51fb8c3d229f35b480138f3f4076f4b14bca0ac5835
archive.wasm.gz	a82dc9afac04ff0efefd3660f41d8fcc808e1a5eb900e518605912d5c1b78577
vc_demo_issuer.wasm.gz	626d2844c11570b01b2b0d2e1ee565ed87f334f8d9804605dae6cf9f77f2ee2d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 389277f7a89833328c3362124715339947ae813e
./scripts/verify-hash --ii-hash 8ef22da0a67464ca8cee531fe4b5e1c3f5394602331b1b9f603c83241e1f33b1

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.