release-2026-01-31: Direct link to self-service from upgrade view

This is Internet Identity release release-2026-01-31 for commit f3eb12e94aec92083a26ebdaaeda5d720bb0923f.
The sha256 of production asset internet_identity_production.wasm.gz is 18acac29fbb6fe5641ab9df37224bedd9e1f93b4014394de65864f1bf6a79043.

This release is a correction of proposal/140185 (that referred to the wrong Wasm version due to a race condition in the GitHub release process). This proposal description is thus identical to proposal/140185 modulo this paragraph, the referenced Git commit, and the hashes of the Wasms being released. Kudos to Behrad for catching the issue!

This release adds a direct link to the self-service page (helpful for those upgrading to 2.0) and also includes and a few other, minor improvements.

What's Changed

• Exclude callback from redirect by @sea-snake in #3596
• Update Passkey AAGUID data by @pr-automation-bot-public[bot] in #3593
• Add additional authOrigin to NeuronPool entry. by @sea-snake in #3599
• Update upgrade modal footer to contain two links. by @sea-snake in #3601

Full Changelog: release-2026-01-26-v2...release-2026-01-31

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	18acac29fbb6fe5641ab9df37224bedd9e1f93b4014394de65864f1bf6a79043
internet_identity_dev.wasm.gz	bef45492d81575d2d50a53a60e2d5f99094a0fe3673f01a00ef6ee2b0506c54b
internet_identity_test.wasm.gz	1ea4c6a954be68d264faaaaa9cbf1f19f1c37232b096b19f3a87344ac31bb18c
archive.wasm.gz	ce746c2055fb6a0d6320535934cfccec6b47baef42e5c04f51742cf0fca95900
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout f3eb12e94aec92083a26ebdaaeda5d720bb0923f
./scripts/verify-hash --ii-hash 18acac29fbb6fe5641ab9df37224bedd9e1f93b4014394de65864f1bf6a79043

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2026-01-26-v2: Switch identity.internetcomputer.org to new UX

This is Internet Identity release release-2026-01-26-v2 for commit 7c7913753a163d30dd657e3c6f7e50f292f12c1a.
The sha256 of production asset internet_identity_production.wasm.gz is 60e58d86adad45e3a475c1b518496d1f91819eb74a712debd565df4fca97bbe1.

This release also switches identity.internetcomputer.org to new UX.

What's Changed

• Switch identity.internetcomputer.org to new UX by @sea-snake in #3595

Full Changelog: release-2026-01-26...release-2026-01-26-v2

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	60e58d86adad45e3a475c1b518496d1f91819eb74a712debd565df4fca97bbe1
internet_identity_dev.wasm.gz	4cf076320ad3e87a0041212aae6d1de2a22927b4c829da472cbf507fefd30b61
internet_identity_test.wasm.gz	fd2c55e6c80993cd2c1beb4a1b697fdc9e1b775972a83476d706e420f4d38907
archive.wasm.gz	ce746c2055fb6a0d6320535934cfccec6b47baef42e5c04f51742cf0fca95900
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 7c7913753a163d30dd657e3c6f7e50f292f12c1a
./scripts/verify-hash --ii-hash 60e58d86adad45e3a475c1b518496d1f91819eb74a712debd565df4fca97bbe1

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2026-01-26: Hotfix passkey creation on legacy domains in Safari

This is Internet Identity release release-2026-01-26 for commit e869a131156105ab8217dd60c25ac28855bfbc14.
The sha256 of production asset internet_identity_production.wasm.gz is 6ca518484d9a71925ff1cb8f3053db964d02c43f04d84ead1bbbb96f8d5ffc86.

This hotfix release adds a fallback for cross-origin iframe passkeys on legacy domains, using related origins request instead in Safari since Safari doesn't support cross-origin passkey creation in iframes.

What's Changed

• Fall back to related origins request in Safari for cross-origin passkeys. by @sea-snake in #3594

Full Changelog: release-2026-01-22...release-2026-01-26

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	6ca518484d9a71925ff1cb8f3053db964d02c43f04d84ead1bbbb96f8d5ffc86
internet_identity_dev.wasm.gz	975ffb9ad9e1fe329ac08f6210b52543ac5c44290a084b26fbfe65a6b4252aa0
internet_identity_test.wasm.gz	3345a7a43896e3cf4cf078d9bf9067b11480709f4b801deddfa5abddd24e9034
archive.wasm.gz	ce746c2055fb6a0d6320535934cfccec6b47baef42e5c04f51742cf0fca95900
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout e869a131156105ab8217dd60c25ac28855bfbc14
./scripts/verify-hash --ii-hash 6ca518484d9a71925ff1cb8f3053db964d02c43f04d84ead1bbbb96f8d5ffc86

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2026-01-22: Switch from legacy to new frontend

This is Internet Identity release release-2026-01-22 for commit ebce5eee7028958f61c283b2fdd6e8e026356704.
The sha256 of production asset internet_identity_production.wasm.gz is a7058d5030efe234fb99125ebfd6b725d2dbf14751ab73bdd74d8a807fcfc60c.

This release switches from the legacy to the new II frontend. To support users in upgrading their existing identities, the following measures are taken:

1. A self-service support page is added under /self-service, helping to recall one's legacy identity login number (which is needed for upgrading, but will be obsolete afterwards).
2. Double the maximum number of access methods to ensure users have enough head room for the passkey created during the upgrade process.
3. Enable the guided upgrade flow by default (so that no changes are required from app developers).
4. Allow upgrading using a recovery passkey.

The release also includes minor bug fixes.

What's Changed

• Update Passkey AAGUID data by @pr-automation-bot-public[bot] in #3585
• Self service page by @sea-snake in #3586
• Allow upgrading with any valid passkey (authentication or recovery). by @sea-snake in #3590
• feat: Double device limits by @aterga in #3588
• Switch identity.ic0.app to id.ai interface by @sea-snake in #3589
• Double passkeys limit in dashboard by @sea-snake in #3591

Full Changelog: release-2026-01-16...release-2026-01-22

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	a7058d5030efe234fb99125ebfd6b725d2dbf14751ab73bdd74d8a807fcfc60c
internet_identity_dev.wasm.gz	565d23dff750865f6395247a762c8c9a199995a34ed41e6bb148915ebe4f3642
internet_identity_test.wasm.gz	0f0fad929f1728dc2b82cfe020cf28fc8b4be11f30f956a94d7980ad9321231f
archive.wasm.gz	ce746c2055fb6a0d6320535934cfccec6b47baef42e5c04f51742cf0fca95900
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout ebce5eee7028958f61c283b2fdd6e8e026356704
./scripts/verify-hash --ii-hash a7058d5030efe234fb99125ebfd6b725d2dbf14751ab73bdd74d8a807fcfc60c

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2026-01-16: Switch to unbounded anchor memory

This is Internet Identity release release-2026-01-16 for commit 1c93091cc6ce54925f942f2effb71b270f5d6db2.
The sha256 of production asset internet_identity_production.wasm.gz is f5eb8b7c6b691379b907f3324a4e47162b12cba3a979da8b5d31bd3e071a9420.

This release switches to unbounded anchor memory, lifting the 4KB-per-anchor restriction. This does not involve any visible change for end users.

Minor changes:

• Enable ii 2.0 (i.e., the UI used on id.ai) by default — this affect local testing.
• Update NFID logo

What's Changed

• Enable new interface by default by @sea-snake in #3575
• Update node version by @gix-bot in #3342
• chore: Update config for local testing with pulled DFX dependency by @aterga in #3576
• Update NFID logo by @sea-snake in #3583
• Simplify dfx pull args by @sea-snake in #3578
• chore: Switch to unbounded anchor memory by @aterga in #3571

Full Changelog: release-2026-01-13...release-2026-01-16

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	f5eb8b7c6b691379b907f3324a4e47162b12cba3a979da8b5d31bd3e071a9420
internet_identity_dev.wasm.gz	2c45c2aad6647f5bd9300dee7f6dd4eddf26ff9253cda4895a0aaa1b9e10ab43
internet_identity_test.wasm.gz	4db4e7174ae417582cc8dd67b909a85b8114c8621870b135bcecbf380c9e627c
archive.wasm.gz	ce746c2055fb6a0d6320535934cfccec6b47baef42e5c04f51742cf0fca95900
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 1c93091cc6ce54925f942f2effb71b270f5d6db2
./scripts/verify-hash --ii-hash f5eb8b7c6b691379b907f3324a4e47162b12cba3a979da8b5d31bd3e071a9420

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2026-01-13: Fix 1Password authentication overlay

This is Internet Identity release release-2026-01-13 for commit a63eea654d329676a8c08e96a74a335c6680b200.
The sha256 of production asset internet_identity_production.wasm.gz is 92e198a444fb4f83c8f00262e4b50c7af88fcd56ecb4698718aa2047fc11397b.

This releases fixes the 1Password authentication overlay in desktop browsers, makes sure users are automatically signed in after upgrading and includes additions to our known AAGUID list supplied by external data sources.

What's Changed

• Add aaguid to approved files for bot changes by @sea-snake in #3570
• Update Passkey AAGUID data by @pr-automation-bot-public[bot] in #3569
• Fix 1Password overlay, move it to the top layer whenever it appears. by @sea-snake in #3573
• Add .node-version to approved bot PR files. by @sea-snake in #3572
• Fix authentication redirect after guided upgrade by @sea-snake in #3574

Full Changelog: release-2026-01-10...release-2026-01-13

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	92e198a444fb4f83c8f00262e4b50c7af88fcd56ecb4698718aa2047fc11397b
internet_identity_dev.wasm.gz	94601c6ca7566b504a23077812227a5019c5fbf96f1abd9223e877293d9fdf81
internet_identity_test.wasm.gz	28ef1c3cfc9fac9d3c4b7c983845c021fbfb5e465cb5b4e07c06358fc6007580
archive.wasm.gz	ce746c2055fb6a0d6320535934cfccec6b47baef42e5c04f51742cf0fca95900
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout a63eea654d329676a8c08e96a74a335c6680b200
./scripts/verify-hash --ii-hash 92e198a444fb4f83c8f00262e4b50c7af88fcd56ecb4698718aa2047fc11397b

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2026-01-10: Prepare for switching to new anchor memory

This is Internet Identity release release-2026-01-10 for commit 5fbb972ae7dcbce3c3890150cee1f8d8b4efecd6.
The sha256 of production asset internet_identity_production.wasm.gz is d4592e8ea6819289279fd1306c39291071b18c0e0814ad1372159accb9a216e2.

This release prepares the II canister for the upcoming switch to the new (unbounded) anchor memory.

What's Changed

• fix: Adjust anchor migration to correctly handle key type unknown by @aterga in #3547
• chore: Prepare to switch to new anchor storage (but don't switch yet) by @aterga in #3565
• feat: Add better observability features for the anchor migration by @aterga in #3567

Full Changelog: release-2026-01-05...release-2026-01-10

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	d4592e8ea6819289279fd1306c39291071b18c0e0814ad1372159accb9a216e2
internet_identity_dev.wasm.gz	ecb57dd85e1d4f5c564cd7e01bdde49cf2f05a19baa02ba1f81e4cf4a0e39260
internet_identity_test.wasm.gz	b31941354a734dd11e4a1de67b5f664ff409d97b83a8ae876ad3d26b22db02f0
archive.wasm.gz	ce746c2055fb6a0d6320535934cfccec6b47baef42e5c04f51742cf0fca95900
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout 5fbb972ae7dcbce3c3890150cee1f8d8b4efecd6
./scripts/verify-hash \
    --ii-hash d4592e8ea6819289279fd1306c39291071b18c0e0814ad1372159accb9a216e2 \
    --archive-hash ce746c2055fb6a0d6320535934cfccec6b47baef42e5c04f51742cf0fca95900

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2026-01-05: Passkey storage, simplified sign-in and upgrade guidance

This is Internet Identity release release-2026-01-05 for commit edcb1830a1e88bc3396e3281a64d3572de69e65a.
The sha256 of production asset internet_identity_production.wasm.gz is a1fb9a2a01b3c29115542f23bf029bfdbeb44eccb331a390d4b7cc4f5dadcb2b.

This release includes many smaller changes with a large impact, showing users where their passkey is stored, simplifying the sign-in experience on the landing page and opt-in upgrade instructions for apps to provider additional guidance to their existing legacy II users. See the full change log below for all changes included in this release.

What's Changed

• Guided upgrade by @sea-snake in #3548
• Update upgrade support CTA. by @sea-snake in #3549
• Incentivize users in the dashboard to set up their recovery phrase. by @sea-snake in #3551
• Revert large Google button A/B test. by @sea-snake in #3556
• Change lookup_caller_identity_by_recovery_phrase from query to update call. by @sea-snake in #3555
• Language selector redesign. by @sea-snake in #3559
• Redesign sign-in on landing page. by @sea-snake in #3557
• Add details regarding storage to passkeys data by @sea-snake in #3545
• Show users where their passkey is stored by @sea-snake in #3544

Full Changelog: release-2025-12-27...release-2026-01-05

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	a1fb9a2a01b3c29115542f23bf029bfdbeb44eccb331a390d4b7cc4f5dadcb2b
internet_identity_dev.wasm.gz	28e70c4f4d87903260025ed32d172ebc12d65e579a14b5e86359cab8dc831d7d
internet_identity_test.wasm.gz	95e902a0cf984be3383b92cc9d5333e98c6ce32c0baeea03f5d09daa02586c3b
archive.wasm.gz	44149b657f8b9693da4b4f9a134e799c1c7d223ab09fea3d5c3fa1cfa7ddaba9
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout edcb1830a1e88bc3396e3281a64d3572de69e65a
./scripts/verify-hash --ii-hash a1fb9a2a01b3c29115542f23bf029bfdbeb44eccb331a390d4b7cc4f5dadcb2b

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2025-12-27: Dark logo variant in Safari

This is Internet Identity release release-2025-12-27 for commit ca6c42664ac1ab4187fae646d58d88658c2b24d3.
The sha256 of production asset internet_identity_production.wasm.gz is 7e8c5d133eb7dfda6a6fb7dab55aab0d4821c63b768b4f9a9065d27ae518f59d.

This release includes just one fix, fixing how Safari displays logos in dark mode.

What's Changed

• Dark logo variant in Safari by @sea-snake in #3554

Full Changelog: release-2025-12-19...release-2025-12-27

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	7e8c5d133eb7dfda6a6fb7dab55aab0d4821c63b768b4f9a9065d27ae518f59d
internet_identity_dev.wasm.gz	27e856d64668e62eeebbbcd6c8996b1e0c4798bfe20ceb88405d6e3348ada4ef
internet_identity_test.wasm.gz	023d29430c5291b3e8d3dda728e115119c6741a82424d4e582779b6fc2acaa94
archive.wasm.gz	44149b657f8b9693da4b4f9a134e799c1c7d223ab09fea3d5c3fa1cfa7ddaba9
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout ca6c42664ac1ab4187fae646d58d88658c2b24d3
./scripts/verify-hash --ii-hash 7e8c5d133eb7dfda6a6fb7dab55aab0d4821c63b768b4f9a9065d27ae518f59d

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.

release-2025-12-19: Enable dapps to have a dark logo variant

This is Internet Identity release release-2025-12-19 for commit cd19f3144356d01753e62962ea0362e33eda2b1b.
The sha256 of production asset internet_identity_production.wasm.gz is c2bd369b53d972e265cf1fd2755340101e83d097b1ae1b40d7314e04d7a5d476.

What's Changed

• Enable dapps to have a dark logo variant by @sea-snake in #3552

Full Changelog: release-2025-12-12...release-2025-12-19

Build flavors

For more information please see the Build flavors section of the README.

Filename	sha256 (links to CI Run)
internet_identity_production.wasm.gz	c2bd369b53d972e265cf1fd2755340101e83d097b1ae1b40d7314e04d7a5d476
internet_identity_dev.wasm.gz	ad69ab7dcf55d58edf275ff01ce23353dbd4713e406e6dbd3066e45254003f6b
internet_identity_test.wasm.gz	6f9834b67db8cd616156ed4723492eeaeb356b58eece3dd70953a278ec9b03ba
archive.wasm.gz	44149b657f8b9693da4b4f9a134e799c1c7d223ab09fea3d5c3fa1cfa7ddaba9
vc_demo_issuer.wasm.gz	f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull # to ensure you have the latest changes.
git checkout cd19f3144356d01753e62962ea0362e33eda2b1b
./scripts/verify-hash --ii-hash c2bd369b53d972e265cf1fd2755340101e83d097b1ae1b40d7314e04d7a5d476

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.