Ory Kratos v1.2 is the most complete, scalable, and secure open-source identity server available. We are thrilled to announce its release! ![Ory Kratos 1.2 released](https://www.ory.sh/images/newsletter/kratos-1.2.0/banner.png) This release introduces two major features: two-step registration and full PassKey with resident key support. Passkeys provide a secure and convenient authentication method, eliminating the need for passwords while ensuring strong security. With this release, we have added support for resident keys, enabling offline authentication. Credential discovery allows users to link existing passkeys to their Ory account seamlessly. [Watch the PassKey demo video](https://github.com/aeneasr/web-next-deprecated/assets/3372410/e676c518-c82a-42a6-821e-28aecadb270c) Two-step registration improves the user experience by dividing the registration process into two steps. Users first enter their identity traits, and then choose a credential method for authentication, resulting in a streamlined process. This feature is especially useful when enabling multiple authentication strategies, as it eliminates the need to repeat identity traits for each strategy. ![Two-Step Registration](https://ik.imagekit.io/launchnotes/production/tr:w-1640,c-at_max,f-auto/ngul9dzfjdt3pe8benegjjeeagi1) The 107 commits since v1.1 include several improvements: - **Webhooks** now carry session information if available. - **Transient Payloads** are now available across all self-service flows. - **Sign in with Twitter** is now available. - **Sign in with LinkedIn** now includes an additional v2 provider compatible with LinkedIn's new SSO API. - **Two-Step Registration**: An improved registration experience that separates entering profile information from choosing authentication methods. - **User Credentials Meta-Information** can now be included on the list endpoint. - **Social Sign-In** is now resilient to double-submit issues common with Facebook and Apple mobile login. **Two-Step Registration Enabled by Default**: This is now the default setting. To disable, set `selfservice.flows.registration.enable_legacy_flow` to `true`. - Improved account linking and credential discovery during sign-up. - The `return_to` parameter is now respected in OIDC API flows. - Adjustments to database indices. - Enhanced error messages for security violations. - Improved SDK types. - The `verification` and `verification_ui` hooks are now available in the login flow. - Webhooks now contain the correct identity state in the after-verification hook chain. We are doing this survey to find out how we can support self-hosted Ory users better. We strive to provide you with the best product and service possible and your feedback will help us understand what we're doing well and where we can improve to better meet your needs. We truly value your opinion and thank you in advance for taking the time to share your thoughts with us! Fill out the [survey now](https://share-eu1.hsforms.com/15DiCnJpcRuijnpAdnDhxxwextgn)!