Release: 16.4.0-rc2

[github-actions[bot]]

Release date: 2025-11-20

The release of 16.4.0-RC2 brings some important backoffice login updates:
As an added security feature used by default in Umbraco 17, user authentication tokens can be returned in secure cookies from the server's authentication requests. For backwards compatibility reasons, the feature is disabled by default, but can be enabled via the boolean configuration at Umbraco:Cms:Security:BackOfficeTokenCookie:Enabled. Read more in the Umbraco documentation.

Links

• Issues and pull requests marked for version 16.4.0-rc2