Changelog [1.5.3] - 2026-06-24 New Bootstrap password is now auto-generated on first start and printed to the container log — the WIREBUDDY_BOOTSTRAP_ADMIN_PASSWORD environment variable has been removed New First login, and any admin-initiated password reset, now forces a mandatory password change before continuing Fix Redesigned password change screen that reliably validates strength and submits Fix Peer list "Last Seen" no longer flickers, and DNS service controls (Start/Restart/Stop) are no longer stuck greyed out Fix Readiness probes (/ready) are no longer rate limited, and startup/access logs are much quieter Security Hardened user accounts and OTP recovery codes: brute-force rate limits on user management, recovery codes only via a one-time secure download, and no password hashes or recovery codes in API responses Security Optional stale-interface cleanup now only removes WireGuard interfaces managed by WireBuddy Security Stricter Content-Security-Policy and updated dependencies (fastapi 0.138.0, nh3 0.3.6, pydantic-settings 2.14.2) Previous versions... [1.5.2] - 2026-06-16 New Backups now include your full configuration (interfaces, peers, users, settings); restoring a backup brings back a working setup instead of an empty first-run database New Backups can optionally export metrics history with a configurable time range from the last 7 days up to 1 year Fix Speed test scheduling and result recording fixed: nodes run at most one scheduled test per day and failed measurements are no longer stored as valid results Fix Live progress (SSE) and per-IP rate limiting corrected for edge cases Security CSRF referer validation hardened; login protection now also throttles repeated failed attempts per username across changing IP addresses [1.5.1] - 2026-05-29 Fix DNS statistics and DNS query logs are displayed reliably again in the GUI Fix DNS blocklist updates, reloads and logging are more stable and no longer break as easily in daily use Fix Speed tests now start more reliably and show live progress correctly again Fix Dashboard KPIs and traffic cards were visually refined for clearer values, better empty states and improved mobile layout Fix Login, MFA and passkey sign-in flows are more reliable Fix Additional security hardening in the web UI and API [1.5.0] - 2026-05-26 New A new feature allows each peer to connect to all available nodes. New arm64 images are now built natively Fix Massive Redesign of many the Frontend/GUI Elements Fix Improved Caching behavior of DNS stats Fix Several Security Improvements Fix Update Python dependencies [1.4.6] - 2026-05-10 Fix A rollback bug in the backup routine has been fixed Fix On iOS, the country table was not displayed correctly in the traffic metrics Fix It was not possible to add additional nodes Fix A persistent bug was preventing speed tests Fix Various stability improvements in the Wirebuddy engine Fix General stability improvements in WireBuddy engine Fix Several design improvements in the GUI Fix Update Python dependencies [1.4.5] - 2026-04-26 Fix Various improvements to the GUI and fixes for display errors Fix Peers connected via a node did not display traffic details in the statistics Fix After restarting the Docker container, the Speedtest results from the last run were gone Fix Numerous stability improvements in the Wirebuddy engine Fix Update Python dependencies [1.4.4] - 2026-04-20 New SVG flags removed from the Docker image and replaced with CDN Load New "Recent Peer Activity" now only shows peers who have been active in the last 30 days Fix 🔥 A bug in the passkey validation process allowed users to log in even if their passkey had been deleted Fix When a token is regenerated for a node, the associated peer is left orphaned Fix Front-end performance improvements Fix Update Python dependencies [1.4.3] - 2026-04-10 Fix 🔥 Node re-enrollment loop when state file was lost (certificate-based recovery) Fix Traffic analysis queries now cached for 30s (faster page loads) Fix Peer names now support apostrophes (e.g., "John's iPhone") Fix API validation consistency improved for peer updates Fix Reduced unnecessary warnings in logs during normal operation Fix Various stability improvements in the Wirebuddy engine [1.4.2] - 2026-04-10 New Update multiple Python dependencies Fix Metrics from the nodes were not reliably transmitted to the master Fix No Speedtest results for the master were displayed on the dashboard Fix Various stability improvements in the Wirebuddy engine [1.4.1] - 2026-04-02 New Switching the speed test to librespeed-cli for more reliable results ↗ New Speed tests are now also conducted regularly on nodes with real-time progress updates ↗ New Time range filters added to DNS trend chart (7d, 30d, 90d, 180d, 1y) ↗ New Dashboard speedtest chart now shows upload/download for all nodes with time range selection ↗ New DNS metrics are now also available via TSDB for faster display in the GUI Fix When a docker stop command is executed, the SQLite database is now closed correctly Fix Dashboard node counter displayed 0 even when nodes existed Fix DNS query logs not displayed correctly on mobile devices Fix Restarting a node triggered a 503 error Fix 🔥 Nodes deleted themselves when master was unavailable Fix Improved security against host header injection attacks Fix General stability improvements in WireBuddy engine Fix DNS module: Improved thread-safety and performance Fix Better error handling during application shutdown Fix Optimized retry logic to prevent load spikes [1.4.0] - 2026-03-30 New Node mode is here! 🎉 WIrebuddy can now run on multiple instances at the same time! ↗ New DNS logging can be enabled or disabled for each peer ↗ New Added the tzdata package to support time zones ↗ New PSK is now enabled by default ↗ Fix Python dependencies updated Fix Fixed an issue with the test server selection for the speed test Fix Improved caching behavior for graphs Fix Several design improvements in the GUI [1.3.3] - 2026-03-23 New The dashboard now also displays the network load for each interface ↗ Fix Design optimized for iPad display Fix The DNS ad blocker could be launched even if Unbound wasn't installed Fix The changes to the downstream and upstream values were not saved Fix In some cases, the peer name was not displayed in the DNS logs Fix If a DNS blocklist has been disabled, the filter has not been updated Fix Several design improvements in the GUI [1.3.2] - 2026-03-16 New A documentary is now available online: https://gill-bates.github.io/wirebuddy/ ↗ New Search filter for peers New Connection animation on the status page ↗ Fix Hardening the TDSB Engine for Handling Compressed Files Fix Improved stability in the Unbound Watchdog process Fix Improved stability in the speed test engine Fix Sessions expired after 1 hour, despite user interaction Fix A validation routine in the DNS Leak Indicator produced incorrect results Fix Several design improvements [1.3.1] - 2026-03-13 New New health endpoint for a Docker health check ↗ New Added speed test to monitor server performance ↗ Fix An incorrectly entered password did not generate an error message Fix The charts for traffic metrics provided some contradictory information Fix When logged in, several error messages appeared in the GUI under Settings Fix A timeout occurred while saving DNS custom rules Fix Security hardening in the MFA routine & Credential handling Fix And as always: Several design improvements to make the front end more mobile-friendly [1.3.0] - 2026-03-07 New Introducing Passkey for Users to Signin ↗ New A global quick filter for peers has been introduced under DNS New The Swagger endpoint can now be disabled in the settings ↗ Fix Security hardening of settings endpoints Fix The adaptive calculation of measurement points optimizes Fix Fixed display issues on tablets Fix The retention policy for DNS logs did not apply correctly Fix Fixed a bug that caused Unbound to crash on startup [1.2.2] - 2026-03-05 New The ad blocker can now be temporarily disabled on a time-based basis ↗ New Added a /swagger endpoint ↗ New Metrics can now be saved and deleted in a more differentiated manner New Traffic statistics are now also grouped by ASN ↗ New Users without admin rights can log in with read-only rights ↗ Fix The logs now show the real IP addresses and not those from the reverse proxy Fix Various stability improvements in the backend and GUI Fix And as always: Several design improvements to make the front end more mobile-friendly [1.2.1] - 2026-03-02 New Passwords for users now require a minimum level of complexity ↗ New The DNS ad blocker can now be enabled and disabled globally ↗ New A new "Traffic" section now bundles all network activities in an overview ↗ New Completely revised migration framework for the database Fix The /status page now reliably detects an existing Wireguard connection Fix Various stability improvements in the backend engine Fix Disabling OTP for a user had no effect Fix Due to a regex validation error, no new user could be created Fix The block lists did not update automatically every 24 hour Fix Creating another Wireguard interface used the same IP range Fix When a peer is deleted, the time series data is now also deleted Fix Application made more resilient when started with an incorrect encryption key Fix And as always: Several design improvements to make the front end more mobile-friendly [1.2.0] - 2026-02-26 New Introducing MFA to provide an additional layer of access restriction ↗ New Easylist has been replaced by the significantly more comprehensive HaGeZi Pro ↗ New Update Dependencies (fastapi) New A new status page now allows you to check the configuration on the client side ↗ New You can now define your own filter rules for each client ↗ Fix The bleach package has been replaced by nh3 Fix The creation of new peers also automatically created a new PSK Fix The blocklists are no longer downloaded again each time the container is restarted Fix And as always: Several design improvements to make the front end more mobile-friendly [1.1.1] - 2026-02-24 New When Wirebuddy is running in bridge mode, an alternative port can be defined for the Wireguard configuration Fix And as always: Several design improvements to make the front end more mobile-friendly [1.1.0] - 2026-02-23 New Switching from HTTP authentication to cookie authentication ↗ New You can now add your own allow and block lists to the DNS ↗ New DNS logs can now be deleted ↗ Fix And as always: Several design improvements to make the front end more mobile-friendly [1.0.2] - 2026-02-22 New Update Dependencies (fastapi) Fix Changing the password had no effect Fix Unbound crashed unexpectedly when the blocklist was updated Fix And as always: Several design improvements to make the front end more mobile-friendly [1.0.1] - 2026-02-20 New Internal DNS serve (Unbound) is now dual-stack capable New Custom DNS upstream servers added by the user are now checked before saving ↗ Fix The pie charts under DNS displayed incorrect values due to a race condition Fix In the front end, each block list was displayed with the same size (7 MB) Fix Various security hardening measures (e.g. brute force, IP spoofing) Fix And as always: Several design improvements to make the front end more mobile-friendly [1.0.0] - 2026-02-19 Back to top