Two things stand out in this release: you can now decide whether to spend storage on MP4 recordings, and an issue that let new accounts bypass mandatory two-factor authentication has been fixed.

New Features

• Automatic MP4 conversion can be turned off: A new site-wide switch (on by default). When off, MP4 recordings are no longer generated at the end of each session, which saves a significant amount of storage. When a file is actually needed, an administrator can convert it manually from the connection list and will be notified once it is ready. Playback is unaffected — every recording remains viewable.
• Configurable connection info bar position: The floating info bar on the remote desktop screen (device name, connection time, username) was fixed to the top. It can now be set to top, bottom, left or right in system settings.
• BrowserApp can open new tabs and windows: Browser-isolated access previously locked the session to a single window, blocking “open in new tab” links. New tabs and windows now work, while URL restrictions stay in place — addresses outside the allowlist are still blocked.
• Device permissions must be cleared before promoting to administrator: Promoting a user to administrator is now blocked while the account still holds individual device permissions. This prevents a stale, unmaintained permission set from being reused if the account is later demoted.

Bug Fixes

• New accounts were not covered by site-wide mandatory two-factor authentication: Accounts created after the site-wide 2FA switch was enabled were never asked to set up 2FA, effectively bypassing it. New accounts now inherit the current site-wide setting. If you have mandatory 2FA enabled, we recommend reviewing accounts created since.
• BrowserApp credential auto-fill did not work: BrowserApp devices failed to fill in the username and password on the target site, forcing users to type them manually. Fixed.
• Administrators were signed in automatically to devices that disallow it: When a device had “LDAP automatic sign-in” turned off, administrators were still signed in automatically. Administrator behaviour now matches regular users and respects the device setting.
• Reloading after changing pages returned to page one: Pagination in the device and connection lists did not update the address bar, so a reload went back to the first page. The URL now follows the current page.
• Recording playback page was broken on mobile widths: The title was cut off, the marker panel was squeezed into a thin strip, and the video was shrunk in the middle of the page. The layout now stacks vertically and fills the width on phones.
• Up to five minutes without connectivity after a restart: After each deployment or host restart, the connection service only became reachable once its health check passed, which could take five minutes. Recovery now takes about ten seconds.