Logto product updates

We’ve just brought v1.33, bringing Account Center configuration, MFA skip controls API, and a few handy improvements.

Darcy Ye

Developer

10/31/2025less than a minute read

Stop wasting weeks on user auth

Launch secure apps faster with Logto. Integrate user auth in minutes, and focus on your core product.

Highlights

Account Center Configuration: You can now fully configure the Account Center directly within the Logto Console.
MFA Skip Controls API: New API endpoints are introduced to manage Multi-Factor Authentication (MFA) skip controls for a more flexible user experience.
Experience Compatibility Fix: Resolved a critical bug that prevented Logto Experience from working on older Android and some browser versions.

Add Account Center Config Page: You can now configure the account center in the Logto Console.
Keep the “Third-party applications” tab permanently visible on the Applications page.

Add API for MFA Skip Controls: Expose logto_config endpoints in account and management APIs for managing MFA skip controls:
- /api/my-account/logto-configs
- /api/admin/users/:userId/logto-configs
Append applicationId to the Experience API audit logs for enhanced traceability.
Add Body-Based Personal Access Token APIs: Introduce PATCH/POST endpoints that accept token names in the request body to support special characters while keeping path-based routes for compatibility:
- PATCH /api/users/{userId}/personal-access-tokens
- POST /api/users/{userId}/personal-access-tokens/delete

Fix an issue that prevents Logto Experience from working in Android 11 and some older browser versions. The issue was introduced by the usage of the ||= operator, which is not supported in these older environments.
Fix the country code dropdown menu position on desktop. This includes fixing the initial position calculation and adding a max dropdown menu top position to prevent it from going off-screen on smaller displays.

Fix a bug that the locale parameter used in email templates does not respect the user custom languages.
Remove deprecated interaction API endpoints from OpenAPI swagger documentation, as they have been replaced by the Experience API endpoints.