Resolved an issue where some devices would lose network connectivity after going to sleep.

Resolved an issue that would incorrectly send an A query instead of the original AAAA query when falling back to unencrypted DNS queries from DoH.

Resolved an issue that could result in subsequent connections to a multi-port resource being made to the incorrect port.

Resolved an issue that could block client startup when OS nameservers are not explicitly configured.

Resolved an issue that prevented freeing up user connections during certain configuration changes.

Resolved an issue that could leave network connections unresponsive when changing the primary network interface, for example when moving location to a new physical network.

Improved network flow resumption behavior when devices move between sleep and wake states.

Improved the behavior when switching flows between connectors, resulting in much shorter switching times.

Improvements to reduce overall system resource usage.

Various minor bug fixes.

Resolved an issue that would incorrectly send an A query instead of the original AAAA query when falling back to unencrypted DNS queries from DoH.

Resolved an issue that could result in subsequent connections to a multi-port resource being made to the incorrect port.

Resolved an issue that could block client startup when OS nameservers are not explicitly configured.

Resolved an issue that prevented freeing up user connections during certain configuration changes.

Resolved an issue that could leave network connections unresponsive when changing the primary network interface, for example when moving location to a new physical network.

Improved network flow resumption behavior when devices move between sleep and wake states.

Improved the behavior when switching flows between connectors, resulting in much shorter switching times.

Improvements to reduce overall system resource usage.

Added the ability to favorite frequently used Resources, pinning them to the top of the Client.

Various minor bug fixes.

Resolved an issue that would incorrectly send an A query instead of the original AAAA query when falling back to unencrypted DNS queries from DoH.

Resolved an issue that could result in subsequent connections to a multi-port resource being made to the incorrect port.

Resolved an issue that could block client startup when OS nameservers are not explicitly configured.

Resolved an issue that prevented freeing up user connections during certain configuration changes.

Resolved an issue that could leave network connections unresponsive when changing the primary network interface, for example when moving location to a new physical network.

Improved network flow resumption behavior when devices move between sleep and wake states.

Improved the behavior when switching flows between connectors, resulting in much shorter switching times.

Improvements to reduce overall system resource usage.

Added support for WebAuthn. Learn more

Added the ability to favorite frequently used Resources, moving them to their own page in the Client.

Various minor bug fixes.

Resolved an issue that would incorrectly send an A query instead of the original AAAA query when falling back to unencrypted DNS queries from DoH.

Resolved an issue that could result in subsequent connections to a multi-port resource being made to the incorrect port.

Resolved an issue that could block client startup when OS nameservers are not explicitly configured.

Resolved an issue that prevented freeing up user connections during certain configuration changes.

Resolved an issue that could leave network connections unresponsive when changing the primary network interface, for example when moving location to a new physical network.

Improved network flow resumption behavior when devices move between sleep and wake states.

Improved the behavior when switching flows between connectors, resulting in much shorter switching times.

Improvements to reduce overall system resource usage.

Added support for WebAuthn. Learn more

Added the ability to favorite frequently used Resources, moving them to their own page in the Client.

Various minor bug fixes.

Resolved an issue that would incorrectly send an A query instead of the original AAAA query when falling back to unencrypted DNS queries from DoH.

Resolved an issue that could result in subsequent connections to a multi-port resource being made to the incorrect port.

Resolved an issue that could block client startup when OS nameservers are not explicitly configured.

Resolved an issue that prevented freeing up user connections during certain configuration changes.

Resolved an issue that could leave network connections unresponsive when changing the primary network interface, for example when moving location to a new physical network.

Improved network flow resumption behavior when devices move between sleep and wake states.

Improved the behavior when switching flows between connectors, resulting in much shorter switching times.

Improvements to reduce overall system resource usage.

Added support for Aliases. Learn more

Added the ability to favorite frequently used Resources, pinning them to the top of the Client.

Various minor bug fixes.

Resolved an issue that prevented Resources with wildcards from resolving correctly under certain circumstances.

Resolved an issue that prevented Resources with wildcards from resolving correctly under certain circumstances.

Resolved an issue that prevented Resources with wildcards from resolving correctly under certain circumstances.

Changed how Linux device IDs are generated. Learn more

Resolved an issue that prevented Resources with wildcards from resolving correctly under certain circumstances.

Resolved various minor bugs.

Resolved an issue that prevented Resources with wildcards from resolving correctly under certain circumstances.

Added support for IdP and social login. Learn more

Resolved various minor bugs.

Resolved various minor bugs.

Added support for IdP and social login. Learn more

Resolved various minor bugs.

Resolved various minor bugs.

Improved debug logging clarity and verbosity.

Resolved various minor bugs.

Improved debug logging clarity and verbosity.

Removed support for Android 8 (Oreo), 8.1 and 9 (Pie).

Resolved an issue when handling requests for AAAA DNS queries for bypass (non-private) traffic.

Resolved an issue impacting users who are assigned a large number of Resources.

Improved debug logging clarity and verbosity.

Resolved an issue that could cause a crash under certain circumstances.

Improved the recovery behavior when a Connector becomes unreachable.

Resolved various minor bugs.

Improved error handling when running a headless Linux Client in Docker.

Improved debug logging clarity and verbosity.

Resolved an issue that could cause a crash under certain circumstances.

Improved the recovery behavior when a Connector becomes unreachable.

Resolved various minor bugs.

Resolved an issue when handling requests for AAAA DNS queries for bypass (non-private) traffic.

Resolved an issue impacting users who are assigned a large number of Resources.

Improved debug logging clarity and verbosity.

Resolved an issue that could cause a crash under certain circumstances.

Improved the recovery behavior when a Connector becomes unreachable.

Resolved various minor bugs.

Created a new release channel for the most recent Linux build. Learn more

Resolved an issue handling requests for AAAA DNS queries for bypass (non-private) traffic.

Resolved an issue impacting users assigned a large number of Resources.

Resolved various minor bugs.

Added support for Windows N editions.

Changed how headless Clients store Service Keys, impacting how keys are updated and deleted. Learn more

Resolved an issue that prevented certain DNS responses from being forwarded from the Remote Network back to the Client machine. Traffic on port 53/UDP (in the Twingate Resource configuration) must be allowed for DNS queries to succeed. Learn more

Improved the recovery behavior for peer-to-peer connections on address and network changes.

Improved connection resilience when the Controller is unavailable.

Resolved various minor bugs.

Resolved an issue that could cause automatic updates to fail.

Resolved various minor bugs.

Added support for Gentoo Linux.

Improved the authentication flow for Clients running in headless mode.

Resolved an issue that prevented certain DNS responses from being forwarded from the Remote Network back to the Client machine. Traffic on port 53/UDP (in the Twingate Resource configuration) must be allowed for DNS queries to succeed. Learn more.

Improved the recovery behavior for peer-to-peer connections on address and network changes.

Improved connection resilience when the Controller is unavailable.

Resolved various minor bugs.

Resolved an issue that prevented certain DNS responses from being forwarded from the Remote Network back to the Client machine. Traffic on port 53/UDP (in the Twingate Resource configuration) must be allowed for DNS queries to succeed. Learn more.

Improved the recovery behavior for peer-to-peer connections on address and network changes.

Improved connection resilience when the Controller is unavailable.

Resolved various minor bugs.

Resolved an issue that prevented certain DNS responses from being forwarded from the Remote Network back to the Client machine. Traffic on port 53/UDP (in the Twingate Resource configuration) must be allowed for DNS queries to succeed. Learn more.

Improved the recovery behavior for peer-to-peer connections on address and network changes.

Improved connection resilience when the Controller is unavailable.

Resolved various minor bugs.

Resolved an issue that prevented certain DNS responses from being forwarded from the Remote Network back to the Client machine. Traffic on port 53/UDP (in the Twingate Resource configuration) must be allowed for DNS queries to succeed. Learn more.

Improved the recovery behavior for peer-to-peer connections on address and network changes.

Improved connection resilience when the Controller is unavailable.

Resolved various minor bugs.

Resolved various minor bugs.

Added support for hidden resources, which are located in the “Background Resources” section in client.

Resolved various minor bugs.

Dropped support for macOS Catalina (10.15); macOS Big Sur (11) or newer is required to run the most recent client.

Added support for hidden resources, which are located in the “Background Resources” section in client.

Resolved various minor bugs.

Added support for hidden resources, which are located in the “Background Resources” section in client.

Resolved various minor bugs.

Added support for hidden resources, which are located in the “Background Resources” section in client.

Reduced the overall data payload size for communication with the controller.

Resolved various minor bugs.

Added visibility into the current Resource authentication state.

Added the ability to manually trigger authentication for any Resource.

Added support for hidden resources, which can be listed via twingate resources --all.

Improved the authentication trigger workflow for better usability, particularly when system notifications are disabled.

Added Bash autocompletion support.

Resolved various minor bugs.

Raised minimum iOS version to iOS 15.

Added log level information to each log line and standardized date format.

Reduced the overall data payload size for communication with the controller.

Resolved various minor bugs.

Resolved an issue that could cause problems connecting under certain circumstances.

Reduced the overall data payload size for communication with the controller.

Resolved various minor bugs.

Added log level information to each log line and standardized date format.

Reduced the overall data payload size for communication with the controller.

Resolved various minor bugs.

Added visibility into the current Resource authentication state.

Added the ability to manually trigger authentication for any Resource.

Improved the authentication trigger workflow for better usability, particularly when system notifications are disabled.

Added log level information to each log line and standardized date format.

Reduced the overall data payload size for communication with the controller.

Disabled randomized case DNS lookups to improve compatibility.

Resolved various minor bugs.

Added visibility into the current Resource authentication state.

Added the ability to manually trigger authentication for any Resource.

Improved the authentication trigger workflow for better usability, particularly when system notifications are disabled.

Resolved an issue that could affect device posture checks after app sleep.

Reduced the overall data payload size for communication with the controller.

Disabled randomized case DNS lookups to improve compatibility.

Resolved various minor bugs.

Added support for ARM64 architecture.

Added log level information to each log line and standardized date format.

Improved handling of authentication requests and sessions.

Reduced the overall data payload size for communication with the controller.

Disabled randomized case DNS lookups to improve compatibility.

Resolved various minor bugs.

Added visibility into the current Resource authentication state.

Added the ability to manually trigger authentication for any Resource.

Improved the authentication trigger workflow for better usability, particularly when system notifications are disabled.

Added log level information to each log line and standardized date format.

Added the ability to submit tickets to Twingate Support and automatically upload logs.

Changed the color of the notification on the Twingate icon.

Reduced the overall data payload size for communication with the controller.

Disabled randomized case DNS lookups to improve compatibility.

Resolved various minor bugs.

Added visibility into the current Resource authentication state.

Added the ability to manually trigger authentication for any Resource.

Improved the authentication trigger workflow for better usability, particularly when system notifications are disabled.

Added log level information to each log line and standardized date format.

Added the ability to submit tickets to Twingate Support and automatically upload logs.

Reduced the overall data payload size for communication with the controller.

Disabled randomized case DNS lookups to improve compatibility.

Resolved various minor bugs.

Reduced the number of calls issued when the client is idle.

Reduced the number of calls issued when the client is idle.

Reduced the number of calls issued when the client is idle.

Reduced the number of calls issued when the client is idle.

Reduced the number of calls issued when the client is idle.

Added support for native DoH.

Extended Device Security support to NixOS.

Added support for Device Security hard drive encryption posture check.

Improved connection stability under degraded network conditions.

Improved the selection and fallback logic used for relay selection across multiple regions and zones.

Improved the resilience to temporary service or network interruptions.

Resolved an issue that could incorrectly cause the client to be unable to connect to Twingate under certain circumstances.

Resolved an issue that could cause a crash under certain circumstances.

Resolved an issue involving certain types of DNS responses.

Resolved various minor bugs.

Added support for native DoH.

Improved connection stability under degraded network conditions.

Improved the selection and fallback logic used for relay selection across multiple regions and zones.

Improved the resilience to temporary service or network interruptions.

Resolved an issue that could incorrectly cause the client to be unable to connect to Twingate under certain circumstances.

Resolved various minor bugs.

Added support for native DoH.

Updated minimum supported iOS version to 14.

Added support for Time Sensitive notifications for authentication notifications.

Improved connection stability under degraded network conditions.

Improved the selection and fallback logic used for relay selection across multiple regions and zones.

Improved the resilience to temporary service or network interruptions.

Resolved an issue that could incorrectly cause the client to be unable to connect to Twingate under certain circumstances.

Resolved an issue that could cause a crash under certain circumstances.

Resolved an issue involving certain types of DNS responses.

Resolved various minor bugs.

Added support for native DoH.

Updated minimum supported macOS version to 10.15

Added support for Time Sensitive notifications for authentication notifications.

Updated onboarding and setup experience.

Improved connection stability under degraded network conditions.

Improved the selection and fallback logic used for relay selection across multiple regions and zones.

Improved the resilience to temporary service or network interruptions.

Resolved an issue that could incorrectly cause the client to be unable to connect to Twingate under certain circumstances.

Resolved an issue that could cause a crash under certain circumstances.

Resolved an issue involving certain types of DNS responses.

Resolved various minor bugs.

Added support for native DoH.

Updated the onboarding and setup experience.

Improved connection stability under degraded network conditions.

Improved the selection and fallback logic used for relay selection across multiple regions and zones.

Improved the resilience to temporary service or network interruptions.

Resolved an issue that could incorrectly cause the client to be unable to connect to Twingate under certain circumstances.

Resolved an issue that could cause a crash under certain circumstances.

Resolved an issue involving certain types of DNS responses.

Resolved various minor bugs.

Resolved issues that could cause the client application to crash.

Resolved an issue that could cause the client application to terminate unexpectedly.

Added support for device posture.

Improved the underlying watchdog logic to reduce system activity.

Improved the process for updating policy changes more promptly under certain circumstances.

Updated data transport behavior to disconnect automatically after user inactivity on specific connections.

Resolved an issue that could cause a crash on client disconnection from Twingate.

Resolved an issue that prevented the client from reconnecting after OS suspend/resume.

Updated logging verbosity.

Resolved an issue where it could take longer than configured to fallback from peer-to-peer connectivity to relayed data transport.

Added support for device posture.

Resolved an issue where the client would lose connectivity when accessing resources protected by 2FA under certain circumstances.

Improved the resiliency of the client application to temporary controller unavailability.

Resolved an issue where peer-to-peer connections could timeout prematurely.

Improved the process for updating policy changes more promptly under certain circumstances.

Updated data transport behavior to disconnect automatically after user inactivity on specific connections.

Resolved an issue that could cause a crash on client disconnection from Twingate.

Resolved an issue that prevented the client from reconnecting after OS suspend/resume.

Updated logging verbosity.

Resolved an issue where it could take longer than configured to fallback from peer-to-peer connectivity to relayed data transport.

Added support for device posture.

Improved the process for updating policy changes more promptly under certain circumstances.

Updated data transport behavior to disconnect automatically after user inactivity on specific connections.

Resolved an issue that could cause a crash on client disconnection from Twingate.

Resolved an issue that prevented the client from reconnecting after OS suspend/resume.

Updated logging verbosity.

Resolved an issue where it could take longer than configured to fallback from peer-to-peer connectivity to relayed data transport.

Added support for device posture.

Improved the process for updating policy changes more promptly under certain circumstances.

Updated data transport behavior to disconnect automatically after user inactivity on specific connections.

Resolved an issue that could cause a crash on client disconnection from Twingate.

Resolved an issue that prevented the client from reconnecting after OS suspend/resume.

Updated logging verbosity.

Resolved an issue where it could take longer than configured to fallback from peer-to-peer connectivity to relayed data transport.

Added support for device posture.

Resolved an issue that would erroneously report that another VPN connection active, preventing the client from connecting under certain circumstances.

Updated data transport behavior to disconnect automatically after user inactivity on specific connections.

Resolved an issue that could cause a crash on client disconnection from Twingate.

Resolved an issue that prevented the client from reconnecting after OS suspend/resume.

Updated logging verbosity.

Resolved an issue where it could take longer than configured to fallback from peer-to-peer connectivity to relayed data transport.

Resolved an issue that could cause the client application to crash under certain circumstances.

Resolved an issue that prevented the client application from connecting after the device wakes up from sleep.

Improved the resiliency of the client application to temporary controller unavailability.

Resolved an issue where peer-to-peer connections could timeout prematurely.

Resolved an issue with the authentication prompt workflow.

Improved the resiliency of the client application to temporary controller unavailability.

Resolved an issue where peer-to-peer connections could timeout prematurely.

Resolved an issue where the app would display an erroneous “Network Error” message after reboot.

Modified the “Log in…” message in the drop down menu to display the name of the tenant instead of the network subdomain.

Improved the resiliency of the client application to temporary controller unavailability.

Resolved an issue where peer-to-peer connections could timeout prematurely.

Updated the extended validation (EV) certificate for the Twingate client application. There are no additional functional changes or bug fixes in this release compared to 1.0.15.

Added support for CentOS Stream 8 and 9.

Resolved an issue to prevent multiple user authentication calls being generated for the same Resource request.

Introduced HTTP 429 throttling support for control plane requests.

Improved the reconnection behavior when switching between Connectors.

Improved the experience around state changes where the application icon would flash at times other than when connecting to Twingate.

Added jitter to reconnection logic to avoid the “thundering herd” effect during service interruptions.

Resolved an issue where peer-to-peer connections were denied when an unusually large number of Resources is configured.

Added a request for notifications to be enabled if they are disabled.

Resolved an issue to prevent multiple user authentication calls being generated for the same Resource request.

Introduced HTTP 429 throttling support for control plane requests.

Improved the reconnection behavior when switching between Connectors.

Improved the experience around state changes where the application icon would flash at times other than when connecting to Twingate.

Added jitter to reconnection logic to avoid the “thundering herd” effect during service interruptions.

Resolved an issue where peer-to-peer connections were denied when an unusually large number of Resources is configured.

Added the ability to determine whether the Client should start on login to the initial connection screen.

Added a request for notifications to be enabled if they are disabled.

Resolved an issue to prevent multiple user authentication calls being generated for the same Resource request.

Introduced HTTP 429 throttling support for control plane requests.

Improved the reconnection behavior when switching between Connectors.

Improved the experience around state changes where the application icon would flash at times other than when connecting to Twingate.

Added jitter to reconnection logic to avoid the “thundering herd” effect during service interruptions.

Resolved an issue where peer-to-peer connections were denied when an unusually large number of Resources is configured.

Resolved an issue that prevented users from connecting to Twingate under certain circumstances due to a failure to communicate with the Twingate service.

Resolved an issue that prevented the Client service from starting on system boot.

Resolved a minor exception that would happen after some network change events.

Improved the security of the Client by checking for symbolic links and junction folders in the Client root folder structure.

Resolved an issue to prevent multiple user authentication calls being generated for the same Resource request.

Introduced HTTP 429 throttling support for control plane requests.

Improved the reconnection behavior when switching between Connectors.

Improved the experience around state changes where the application icon would flash at times other than when connecting to Twingate.

Added jitter to reconnection logic to avoid the “thundering herd” effect during service interruptions.

Resolved an issue where peer-to-peer connections were denied when an unusually large number of Resources is configured.

Added support for ThinPro OS.

Added support for device-only resource policies.

Resolved an issue where the connection to the controller could prematurely timeout over unreliable networks.

Added support for the Windows “Start Before Logon” workflow, which allows access to specifically-configured resources at the Windows logon prompt. This functionality also allows the completion of remote domain joins while connected to Twingate.

When users have access to more than 10 resources, the display of resources will now be collapsed. Display of fully-qualified DNS resources or IPs is prioritized over CIDR ranges or wildcard DNS names.

The client will now stay signed in between restarts unless the user specifically elects to log out. Access to resources will still require authentication after the client restarts.

Added support for device-only resource policies.

Resolved an issue where the connection to the controller could prematurely timeout over unreliable networks.

Resolved an incompatibility with the Admin By Request product.

Resolved an issue where the resources screen was not displayed after connecting to Twingate.

Resolved an issue where the glyph for “Share Diagnostics” was offset on certain iOS devices.

Added support for device-only resource policies.

Resolved an issue where the connection to the controller could prematurely timeout over unreliable networks.

When users have access to more than 10 resources, the display of resources will now be collapsed. Display of fully-qualified DNS resources or IPs is prioritized over CIDR ranges or wildcard DNS names.

The client will now stay signed in between restarts unless the user specifically elects to log out. Access to resources will still require authentication after the client restarts.

Added support for device-only resource policies.

Resolved an issue where the connection to the controller could prematurely timeout over unreliable networks.

Fixed slow loading of websites caused by additional proxy software on the endpoint implementing DNS over TLS.

Resolved misleading log messages relating to connector access tokens.

In the case of a failover, improved the connection handover logic between the connector and relay.

Addressed other minor bug fixes and improvements, including handling of recoverable errors.

Addressed a minor issue where new remote networks were inaccessible until the client connection was cycled.

Fixed slow loading of websites caused by additional proxy software on the endpoint implementing DNS over TLS.

Resolved misleading log messages relating to connector access tokens.

In the case of a failover, improved the connection handover logic between the connector and relay.

Addressed other minor bug fixes and improvements, including handling of recoverable errors.

Fixed slow loading of websites caused by additional proxy software on the endpoint implementing DNS over TLS.

Resolved misleading log messages relating to connector access tokens.

In the case of a failover, improved the connection handover logic between the connector and relay.

Addressed other minor bug fixes and improvements, including handling of recoverable errors.

Fixed slow loading of websites caused by additional proxy software on the endpoint implementing DNS over TLS.

Resolved misleading log messages relating to connector access tokens.

In the case of a failover, improved the connection handover logic between the connector and relay.

Addressed other minor bug fixes and improvements, including handling of recoverable errors.

Added support for pre-configuration via Apple property lists (.plist) in /Library/Managed Preferences/.

Added support for pre-configuration of Twingate start at login setting via Apple property lists (.plist).

Fixed slow loading of websites caused by additional proxy software on the endpoint implementing DNS over TLS.

Resolved misleading log messages relating to connector access tokens.

In the case of a failover, improved the connection handover logic between the connector and relay.

Addressed other minor bug fixes and improvements, including handling of recoverable errors.

Resolved an issue where we were unable to identify the correct network adapter, which would cause Twingate to fail to connect in previous versions. This most commonly occurred when a different application had previously installed the same type of TAP adapter.

Updated the .NET runtime installation component to v4.8.

Addressed a minor issue where new remote networks were inaccessible until the client connection was cycled.

Addressed a minor issue where new remote networks were inaccessible until the client connection was cycled.

Added support for service accounts and running in headless mode. Connectors must be upgraded to 1.30.0 or later in order to assign resources to service accounts.

Updated logging to include log level support and tag log lines with their assigned log level.

Addressed a compatibility issue specific to DNS SVCB requests.

Resolves an issue with the reauthentication process with unusually large delays (eg. due to network connectivity issues).

Slightly expanded token validity window in situations where clock synchronization on the client device is imprecise.

Fixed an issue where the client would incorrectly timeout on reauthentication.