Our new stable release comes with a long list of indexing and security-related improvements. Most notably, we've added support for 2-Factor Authentication (2FA) to protect your account in case someone gains access to your password. As all security-related changes had to be thoroughly tested, this is one of the updates that were longer in the making. We appreciate your patience while we've been working on this and would like to thank everyone involved! :closed_lock_with_key:

What's new?

• Account: Added support for 2-Factor Authentication (2FA)
• Account: Added dialog to manage App Passwords from the UI
• Places: Updated reverse geocoding data and standard map tiles
• Albums: Fixed links to albums in the settings tab of the edit dialog
• Photos: Non-JPEG files like HEIC are no longer flagged as stacks in the UI
• Videos: Improved Intel QSV hardware transcoding support and performance
• Videos: Added support for Material Exchange Format (MXF) files
• UI/UX: Improved visibility of buttons and toggles in search results
• Index: A warning is shown for files with an invalid filename extension
• Index: Nested storage folders within the originals path are ignored
• Import: Modification times are preserved when moving or copying files
• Metadata: Media files with a matching ContentIdentifier can be stacked
• Metadata: File mod time instead of birth time is used as creation time fallback
• Metadata: Improved validation for focal length, f-number, and exposure values
• Metadata: Stop words are no longer ignored when generating titles from filenames
• WebDAV: File modification date is preserved if client submits an X-OC-MTime header
• API: Added support for OAuth2 Client Credentials and Access Tokens
• API: Added Prometheus-compatible metrics and monitoring endpoint
• CDN: Improved Cross-Origin Resource Sharing (CORS) and cache headers
• MariaDB: Info log is shown when waiting for the database to become available
• MariaDB: Changed image name in Docker Compose config example for ARMv7
• Docker: Missing user accounts are automatically created by the entrypoint script
• Setup: Added ARMv7 tar.gz packages for installation without Docker
• Performance: Added index for files.file_error to reduce query time
• Security: Go has been updated to the latest stable release v1.22.2

Translations

Missing user interface translations have been generated with the help of DeepL and Google Translate. Native speakers are welcome to help us improve them, if necessary.

Screenshots

Login with 2FA

https://docs.photoprism.app/user-guide/users/2fa/#2-factor-authentication

Generate App Password

https://docs.photoprism.app/user-guide/users/2fa/#step-3-app-passwords

Manage Apps and Devices

Installation Packages

The packages attached to this release are intended for experienced users and maintainers of third-party integrations only, as they require manual configuration and do not include tested system dependencies. Since we are unable to provide support for custom installations, we recommend using one of our Docker images to run PhotoPrism on a private server or NAS device.

Learn more ›