Skip to content

Changelog

[1.5.3] - 2026-06-24

  • New Bootstrap password is now auto-generated on first start and printed to the container log — the WIREBUDDY_BOOTSTRAP_ADMIN_PASSWORD environment variable has been removed
  • New First login, and any admin-initiated password reset, now forces a mandatory password change before continuing
  • Fix Redesigned password change screen that reliably validates strength and submits
  • Fix Peer list "Last Seen" no longer flickers, and DNS service controls (Start/Restart/Stop) are no longer stuck greyed out
  • Fix Readiness probes (/ready) are no longer rate limited, and startup/access logs are much quieter
  • Security Hardened user accounts and OTP recovery codes: brute-force rate limits on user management, recovery codes only via a one-time secure download, and no password hashes or recovery codes in API responses
  • Security Optional stale-interface cleanup now only removes WireGuard interfaces managed by WireBuddy
  • Security Stricter Content-Security-Policy and updated dependencies (fastapi 0.138.0, nh3 0.3.6, pydantic-settings 2.14.2)
Previous versions...

[1.5.2] - 2026-06-16

  • New Backups now include your full configuration (interfaces, peers, users, settings); restoring a backup brings back a working setup instead of an empty first-run database
  • New Backups can optionally export metrics history with a configurable time range from the last 7 days up to 1 year
  • Fix Speed test scheduling and result recording fixed: nodes run at most one scheduled test per day and failed measurements are no longer stored as valid results
  • Fix Live progress (SSE) and per-IP rate limiting corrected for edge cases
  • Security CSRF referer validation hardened; login protection now also throttles repeated failed attempts per username across changing IP addresses

[1.5.1] - 2026-05-29

  • Fix DNS statistics and DNS query logs are displayed reliably again in the GUI
  • Fix DNS blocklist updates, reloads and logging are more stable and no longer break as easily in daily use
  • Fix Speed tests now start more reliably and show live progress correctly again
  • Fix Dashboard KPIs and traffic cards were visually refined for clearer values, better empty states and improved mobile layout
  • Fix Login, MFA and passkey sign-in flows are more reliable
  • Fix Additional security hardening in the web UI and API

[1.5.0] - 2026-05-26

  • New A new feature allows each peer to connect to all available nodes.
  • New arm64 images are now built natively
  • Fix Massive Redesign of many the Frontend/GUI Elements
  • Fix Improved Caching behavior of DNS stats
  • Fix Several Security Improvements
  • Fix Update Python dependencies

[1.4.6] - 2026-05-10

  • Fix A rollback bug in the backup routine has been fixed
  • Fix On iOS, the country table was not displayed correctly in the traffic metrics
  • Fix It was not possible to add additional nodes
  • Fix A persistent bug was preventing speed tests
  • Fix Various stability improvements in the Wirebuddy engine
  • Fix General stability improvements in WireBuddy engine
  • Fix Several design improvements in the GUI
  • Fix Update Python dependencies

[1.4.5] - 2026-04-26

  • Fix Various improvements to the GUI and fixes for display errors
  • Fix Peers connected via a node did not display traffic details in the statistics
  • Fix After restarting the Docker container, the Speedtest results from the last run were gone
  • Fix Numerous stability improvements in the Wirebuddy engine
  • Fix Update Python dependencies

[1.4.4] - 2026-04-20

  • New SVG flags removed from the Docker image and replaced with CDN Load
  • New "Recent Peer Activity" now only shows peers who have been active in the last 30 days
  • Fix 🔥 A bug in the passkey validation process allowed users to log in even if their passkey had been deleted
  • Fix When a token is regenerated for a node, the associated peer is left orphaned
  • Fix Front-end performance improvements
  • Fix Update Python dependencies

[1.4.3] - 2026-04-10

  • Fix 🔥 Node re-enrollment loop when state file was lost (certificate-based recovery)
  • Fix Traffic analysis queries now cached for 30s (faster page loads)
  • Fix Peer names now support apostrophes (e.g., "John's iPhone")
  • Fix API validation consistency improved for peer updates
  • Fix Reduced unnecessary warnings in logs during normal operation
  • Fix Various stability improvements in the Wirebuddy engine

[1.4.2] - 2026-04-10

  • New Update multiple Python dependencies
  • Fix Metrics from the nodes were not reliably transmitted to the master
  • Fix No Speedtest results for the master were displayed on the dashboard
  • Fix Various stability improvements in the Wirebuddy engine

[1.4.1] - 2026-04-02

  • New Switching the speed test to librespeed-cli for more reliable results
  • New Speed tests are now also conducted regularly on nodes with real-time progress updates
  • New Time range filters added to DNS trend chart (7d, 30d, 90d, 180d, 1y)
  • New Dashboard speedtest chart now shows upload/download for all nodes with time range selection
  • New DNS metrics are now also available via TSDB for faster display in the GUI
  • Fix When a docker stop command is executed, the SQLite database is now closed correctly
  • Fix Dashboard node counter displayed 0 even when nodes existed
  • Fix DNS query logs not displayed correctly on mobile devices
  • Fix Restarting a node triggered a 503 error
  • Fix 🔥 Nodes deleted themselves when master was unavailable
  • Fix Improved security against host header injection attacks
  • Fix General stability improvements in WireBuddy engine
  • Fix DNS module: Improved thread-safety and performance
  • Fix Better error handling during application shutdown
  • Fix Optimized retry logic to prevent load spikes

[1.4.0] - 2026-03-30

  • New Node mode is here! 🎉 WIrebuddy can now run on multiple instances at the same time!
  • New DNS logging can be enabled or disabled for each peer
  • New Added the tzdata package to support time zones
  • New PSK is now enabled by default
  • Fix Python dependencies updated
  • Fix Fixed an issue with the test server selection for the speed test
  • Fix Improved caching behavior for graphs
  • Fix Several design improvements in the GUI

[1.3.3] - 2026-03-23

  • New The dashboard now also displays the network load for each interface
  • Fix Design optimized for iPad display
  • Fix The DNS ad blocker could be launched even if Unbound wasn't installed
  • Fix The changes to the downstream and upstream values were not saved
  • Fix In some cases, the peer name was not displayed in the DNS logs
  • Fix If a DNS blocklist has been disabled, the filter has not been updated
  • Fix Several design improvements in the GUI

[1.3.2] - 2026-03-16

  • New A documentary is now available online: https://gill-bates.github.io/wirebuddy/
  • New Search filter for peers
  • New Connection animation on the status page
  • Fix Hardening the TDSB Engine for Handling Compressed Files
  • Fix Improved stability in the Unbound Watchdog process
  • Fix Improved stability in the speed test engine
  • Fix Sessions expired after 1 hour, despite user interaction
  • Fix A validation routine in the DNS Leak Indicator produced incorrect results
  • Fix Several design improvements

[1.3.1] - 2026-03-13

  • New New health endpoint for a Docker health check
  • New Added speed test to monitor server performance
  • Fix An incorrectly entered password did not generate an error message
  • Fix The charts for traffic metrics provided some contradictory information
  • Fix When logged in, several error messages appeared in the GUI under Settings
  • Fix A timeout occurred while saving DNS custom rules
  • Fix Security hardening in the MFA routine & Credential handling
  • Fix And as always: Several design improvements to make the front end more mobile-friendly

[1.3.0] - 2026-03-07

  • New Introducing Passkey for Users to Signin
  • New A global quick filter for peers has been introduced under DNS
  • New The Swagger endpoint can now be disabled in the settings
  • Fix Security hardening of settings endpoints
  • Fix The adaptive calculation of measurement points optimizes
  • Fix Fixed display issues on tablets
  • Fix The retention policy for DNS logs did not apply correctly
  • Fix Fixed a bug that caused Unbound to crash on startup

[1.2.2] - 2026-03-05

  • New The ad blocker can now be temporarily disabled on a time-based basis
  • New Added a /swagger endpoint
  • New Metrics can now be saved and deleted in a more differentiated manner
  • New Traffic statistics are now also grouped by ASN
  • New Users without admin rights can log in with read-only rights
  • Fix The logs now show the real IP addresses and not those from the reverse proxy
  • Fix Various stability improvements in the backend and GUI
  • Fix And as always: Several design improvements to make the front end more mobile-friendly

[1.2.1] - 2026-03-02

  • New Passwords for users now require a minimum level of complexity
  • New The DNS ad blocker can now be enabled and disabled globally
  • New A new "Traffic" section now bundles all network activities in an overview
  • New Completely revised migration framework for the database
  • Fix The /status page now reliably detects an existing Wireguard connection
  • Fix Various stability improvements in the backend engine
  • Fix Disabling OTP for a user had no effect
  • Fix Due to a regex validation error, no new user could be created
  • Fix The block lists did not update automatically every 24 hour
  • Fix Creating another Wireguard interface used the same IP range
  • Fix When a peer is deleted, the time series data is now also deleted
  • Fix Application made more resilient when started with an incorrect encryption key
  • Fix And as always: Several design improvements to make the front end more mobile-friendly

[1.2.0] - 2026-02-26

  • New Introducing MFA to provide an additional layer of access restriction
  • New Easylist has been replaced by the significantly more comprehensive HaGeZi Pro
  • New Update Dependencies (fastapi)
  • New A new status page now allows you to check the configuration on the client side
  • New You can now define your own filter rules for each client
  • Fix The bleach package has been replaced by nh3
  • Fix The creation of new peers also automatically created a new PSK
  • Fix The blocklists are no longer downloaded again each time the container is restarted
  • Fix And as always: Several design improvements to make the front end more mobile-friendly

[1.1.1] - 2026-02-24

  • New When Wirebuddy is running in bridge mode, an alternative port can be defined for the Wireguard configuration
  • Fix And as always: Several design improvements to make the front end more mobile-friendly

[1.1.0] - 2026-02-23

  • New Switching from HTTP authentication to cookie authentication
  • New You can now add your own allow and block lists to the DNS
  • New DNS logs can now be deleted
  • Fix And as always: Several design improvements to make the front end more mobile-friendly

[1.0.2] - 2026-02-22

  • New Update Dependencies (fastapi)
  • Fix Changing the password had no effect
  • Fix Unbound crashed unexpectedly when the blocklist was updated
  • Fix And as always: Several design improvements to make the front end more mobile-friendly

[1.0.1] - 2026-02-20

  • New Internal DNS serve (Unbound) is now dual-stack capable
  • New Custom DNS upstream servers added by the user are now checked before saving
  • Fix The pie charts under DNS displayed incorrect values due to a race condition
  • Fix In the front end, each block list was displayed with the same size (7 MB)
  • Fix Various security hardening measures (e.g. brute force, IP spoofing)
  • Fix And as always: Several design improvements to make the front end more mobile-friendly

[1.0.0] - 2026-02-19

  • Project initialization