One Lofenta ID for every sign-in, with a new account center, sign-in alerts and passkeys first. Teams can require two-factor, Eddy has spending limits, every custom domain gets a health page, and custom domains no longer need Cloudflare. Lofenta is also fast on phones and you can sign in with Apple.
A health page for every domain
Open any custom domain from the Domains page to see a live check: where its DNS points, whether HTTPS works, who issued the certificate and when it expires. If something is wrong you get the exact record to fix, ready to copy.
Set a monthly budget for premium Eddy models in Settings, under AI spending. You get an alert at 80% and at 100%, and you can choose to pause Claude and GPT once the budget is reached. Normal replies keep working either way.
Eddy in the sidebar
ImprovementEddy now has its own place in the dashboard sidebar and the command menu for everyone, one click from any page.
Passkeys first
New accounts are offered a passkey right after their first sign-in, so next time it is just Face ID, Touch ID or your device PIN. Skip it if you like, and add one later in Lofenta ID Security.
Require two-factor for your team
SecurityTeam owners can now require two-factor authentication for every member. Members without it see a reminder and cannot open the team's projects until they turn it on, and the Members list shows who still has it off.
New sign-in alerts
SecurityWhen your account signs in from a device or network we have not seen in the last 60 days, you get an email, an inbox message and a push on the Lofenta app. One tap on This wasn't me takes you to your devices to sign it out.
Lofenta ID account center
id.lofenta.com is now a full account center: a security checkup, every device you are signed in on, a complete activity log of sign-ins and changes, the apps that can use your account, and a download of all your data.
One sign-in for all of Lofenta
ImprovementEvery sign-in now goes through Lofenta ID, with GitHub, Google, GitLab, Apple, passkeys or an email link. Your two-factor settings, devices and activity live in one place, and one sign-in works across every Lofenta site.
Lofenta ID hardening
SecurityApp secrets for Sign in with Lofenta are now stored hashed, removing an app's access signs it out everywhere at once, and apps that ask you to sign in again now really get a fresh sign-in.
Accessible by default
ImprovementThe Lofenta home page now scores 100 for accessibility on phones and desktops. Small text is easier to read on the dark background, every button has a name for screen readers, and touch targets are large enough to tap.
Latest Next.js and React
ImprovementThe dashboard now runs on Next.js 16.4 and React 19.3, with the latest fixes and faster rebuilds on our side. Nothing changes for your apps.
Domain status you can trust
ImprovementEvery custom domain is now checked over HTTPS every 10 minutes, and your Domains page shows what visitors really get: HTTPS working or HTTPS down. No more domains stuck on SSL pending while they work fine.
PGP key for security reports
SecurityYou can now encrypt a vulnerability report to [email protected] with our PGP key. Download it from the Security page or run gpg --locate-keys [email protected]. The Security page also explains how we protect Lofenta and how often we check.
Real locations in your sessions
FixLofenta ID now shows the real IP address of each new sign-in in Security, instead of an internal Lofenta address.
Custom domains without Cloudflare
Add a domain, point a CNAME at origin.lofenta.app, and publish one TXT record to prove it is yours. You no longer need a Cloudflare account or proxy. Certificates are issued automatically once the domain is verified, and domains you already added keep working as before.
Sign in with Apple
You can now sign in to Lofenta with your Apple ID. Already have an account? Connect Apple from Lofenta ID Security and use either way to sign in.
Fast on every phone
ImprovementLofenta.com now loads in under a second on iPhone, even on reload, where it could take up to 20 seconds before. The 3D globe still spins, and the pages fit small screens properly.
Deploy a folder, no Git needed
Run lofenta deploy in any folder and the CLI uploads it and deploys it, no repository required. Secrets in .env files and build folders are left out automatically. Update with npm i -g @lofenta/cli@latest.
Redeploys work again for running apps
FixRedeploying an app that was already running could fail with port is already allocated. Redeploys now start the new version on a free port and switch traffic over with no downtime.
Security hardening across the platform
SecurityAfter a full review of every part of Lofenta we fixed what we found. Adding a passkey now asks for your 2FA code, team invites only work for the email they were sent to, new DNS zones must prove ownership with a TXT record, and sign-in links can no longer be used up by email scanners.