DFINITY Foundation

ICDevs.org

CryptoIsGood

Anvil

ICPL.app

ysyms

The Accumulators’ Neuron

RawTech Venture

Paul Young

ICPMANUAL

8YearGangDAO

Isaac Valadez

Krzysztof Żelazko

Nicolas.ic

Smaug’s Neuron for Retail Investors

ICLight.io

Taggr Network

Sonic AMM

Rakeoff.io

OpenChat

ELNA AI

GEEKFACTORY

ICP Hub México

ICP Hub Poland

Jerry Banfield

WaterNeuron

ICP Hub Bulgaria

Gold DAO

NeuronPool

LORIMER ♾️ 🐶

B3Pay

ZenithCode

Aviate Labs

D-QUORUM

Yuku AI

CO.DELTA △

DragginCorp

Gwojda

Thyassa

🌮 TACO DAO Neuron

Ωmega-reject

Ωmega-vote

αlpha-vote

Cybersecurity

cyberowl

Dexter Caff/acc

CodeGov.org

Cosmicrafts

Wenzel

Synapse (see neuron merger plan with the Wenzel known neuron)

$STACK

John Wiegley

This is Internet Identity release [release-2025-11-21](https://github.com/dfinity/internet-identity/releases/tag/release-2025-11-21) for commit [1115f8a35978aa6813690dd916b932668b6112ad](https://github.com/dfinity/internet-identity/commit/1115f8a35978aa6813690dd916b932668b6112ad).
The sha256 of production asset [internet_identity_production.wasm.gz](https://github.com/dfinity/internet-identity/releases/download/release-2025-11-21/internet_identity_production.wasm.gz) is [efa795280181b5fbd51069bab813e885ebf95dcef478c52f37deabcd62e63907](https://github.com/dfinity/internet-identity/actions/runs/19568585752/job/56036491332#step:7:1).

This release doesn't include any user facing implementation changes this time around, instead it includes ongoing implementation work around recovery phrase creation, usage and an updated data migration (for the identity by recovery phrase lookup).

One user facing configuration change this release is in the updated OpenId configurations, which now includes colored icons that replace the current monochrome ones.

## What's Changed
* fix: No more dangling identity anchors and make data migration work with non-existent anchors by @aterga in https://github.com/dfinity/internet-identity/pull/3502
* refactor: Even safer anchor allocation by @aterga in https://github.com/dfinity/internet-identity/pull/3504
* test: Adjust `sync_anchor_indices_migration` test to reflect the recent bug fix by @aterga in https://github.com/dfinity/internet-identity/pull/3506
* Implement recovery phrase wizard. by @sea-snake in https://github.com/dfinity/internet-identity/pull/3500
* chore: Bump astro by @aterga in https://github.com/dfinity/internet-identity/pull/3509
* Enter name after recovery flow by @lmuntaner in https://github.com/dfinity/internet-identity/pull/3501
* Add identity to local storage if missing after adding an access method by @lmuntaner in https://github.com/dfinity/internet-identity/pull/3505
* Update create recovery phrase views by @sea-snake in https://github.com/dfinity/internet-identity/pull/3510
* Reduce logo sizes further. by @sea-snake in https://github.com/dfinity/internet-identity/pull/3513


**Full Changelog**: https://github.com/dfinity/internet-identity/compare/release-2025-11-14...release-2025-11-21
## Build flavors

For more information please see the [Build flavors](https://github.com/dfinity/internet-identity/tree/release-2025-11-21#build-features-and-flavors) section of the README.

| Filename | sha256 (links to CI Run) |
| --- | --- |
|[internet_identity_production.wasm.gz](https://github.com/dfinity/internet-identity/releases/download/release-2025-11-21/internet_identity_production.wasm.gz)|[`efa795280181b5fbd51069bab813e885ebf95dcef478c52f37deabcd62e63907`](https://github.com/dfinity/internet-identity/actions/runs/19568585752/job/56036491332#step:7:1)|
|[internet_identity_dev.wasm.gz](https://github.com/dfinity/internet-identity/releases/download/release-2025-11-21/internet_identity_dev.wasm.gz)|[`4d845df4e4a89c91918cab3d6a5f48a259c81c9bae86b5289302d96568cef905`](https://github.com/dfinity/internet-identity/actions/runs/19568585752/job/56036491328#step:7:1)|
|[internet_identity_test.wasm.gz](https://github.com/dfinity/internet-identity/releases/download/release-2025-11-21/internet_identity_test.wasm.gz)|[`3ac76609d2855b184200d6948ea58700aac074a1b38a20359b4cbd522de46ef5`](https://github.com/dfinity/internet-identity/actions/runs/19568585752/job/56036491326#step:7:1)|
|[archive.wasm.gz](https://github.com/dfinity/internet-identity/releases/download/release-2025-11-21/archive.wasm.gz)|[`ce746c2055fb6a0d6320535934cfccec6b47baef42e5c04f51742cf0fca95900`](https://github.com/dfinity/internet-identity/actions/runs/19568585752/job/56036491290#step:6:1)|
|[vc_demo_issuer.wasm.gz](https://github.com/dfinity/internet-identity/releases/download/release-2025-11-21/vc_demo_issuer.wasm.gz)|[`f079d2118fc6932b2812f627f78841e3c1f4e850362a820716aa27792bf58f4d`](https://github.com/dfinity/internet-identity/actions/runs/19568585752/job/56036467120#step:8:1)|

## Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the [Internet Identity repository](https://github.com/dfinity/internet-identity):
```
git pull # to ensure you have the latest changes.
git checkout 1115f8a35978aa6813690dd916b932668b6112ad
./scripts/verify-hash --ii-hash efa795280181b5fbd51069bab813e885ebf95dcef478c52f37deabcd62e63907
```

Make sure to compare the hashes also with the proposal payload when verifying canister upgrade proposals.



## Argument Verification

Run the following command to verify the upgrade argument hash:

```
didc encode '(
  opt record {
    openid_configs = opt vec {
      record {
        name = "Google";
        logo = "<svg viewBox=\"0 0 24 24\"><clipPath id=\"__google-logo-path\"><path d=\"M12 10v4.5h6.47c-.5 2.7-3 4.74-6.47 4.74-3.9 0-7.1-3.3-7.1-7.25S8.1 4.75 12 4.75c1.8 0 3.35.6 4.6 1.8l3.4-3.4C18 1.2 15.24 0 12 0 5.4 0 0 5.4 0 12s5.4 12 12 12c7 0 11.5-4.9 11.5-11.7 0-.8-.1-1.54-.2-2.3H12z\"></path></clipPath><g style=\"clip-path:url(#__google-logo-path); transform: scale(0.75); transform-origin: center center;\"><foreignObject height=\"28\" transform=\"translate(-2,-2)\" width=\"28\"><div style=\"width:100%;height:100%;background:conic-gradient(#FF4641,#FD5061 40deg,#FD5061 60deg,#3186FF 85deg,#3186FF 117deg,#00A5B7 142deg,#0EBC5F 167deg,#0EBC5F 200deg,#6CC500 226deg,#FFCC00 253deg,#FFD314 268deg,#FFCC00 292deg,#FF4641 327deg)\"></div></foreignObject><rect fill=\"#3186FF\" height=\"8\" width=\"16\" x=\"11\" y=\"8\"></rect></g></svg>";
        issuer = "https://accounts.google.com";
        client_id = "775077467414-rgoesk3egruq26c61s6ta8bpjetjqvgo.apps.googleusercontent.com";
        jwks_uri = "https://www.googleapis.com/oauth2/v3/certs";
        auth_uri = "https://accounts.google.com/o/oauth2/v2/auth";
        auth_scope = vec { "openid"; "profile"; "email" };
        fedcm_uri = opt "";
      };
      record {
        name = "Apple";
        logo = "<svg viewBox=\"0 0 24 24\"><path d=\"M14.8 3.2c1-1.2 1.2-2.7 1-3.2-1 0-2.2.7-2.9 1.5-.9 1.2-1.1 2.6-.9 3 .6.2 2-.3 2.8-1.3ZM9.2 20c1.2 0 1.6-.8 3.2-.8 1.5 0 1.8.8 3.1.8s2.3-1.2 3-2.5c1-1.4 1.3-2.8 1.4-2.8 0 0-2.6-1.2-2.6-4.1 0-2.5 2-3.7 2.1-3.8a4.5 4.5 0 0 0-3.9-2c-1.4 0-2.6.8-3.4.8-.8 0-1.9-.8-3.2-.8-2.3 0-4.8 2-4.8 6 0 2.3 1 4.8 2 6.5 1 1.5 1.9 2.7 3 2.7Z\" style=\"fill: currentColor;\"></path></svg>";
        issuer = "https://appleid.apple.com";
        client_id = "ai.id.auth";
        jwks_uri = "https://appleid.apple.com/auth/keys";
        auth_uri = "https://appleid.apple.com/auth/authorize";
        auth_scope = vec { "openid" };
        fedcm_uri = opt "";
      };
      record {
        name = "Microsoft";
        logo = "<svg viewBox=\"0 0 24 24\"><path fill=\"#f25124\" d=\"M2.5 2.5h9v9h-9z\"/><path fill=\"#7eba02\" d=\"M12.5 2.5h9v9h-9z\"/><path fill=\"#01a3ee\" d=\"M2.5 12.5h9v9h-9z\"/><path fill=\"#feba01\" d=\"M12.5 12.5h9v9h-9z\"/></svg>";
        issuer = "https://login.microsoftonline.com/{tid}/v2.0";
        client_id = "80d5203e-9ba2-4acf-97a1-88d926a0bbbf";
        jwks_uri = "https://login.microsoftonline.com/common/discovery/v2.0/keys";
        auth_uri = "https://login.microsoftonline.com/common/oauth2/v2.0/authorize";
        auth_scope = vec { "openid"; "profile"; "email" };
        fedcm_uri = opt "";
      };
    };
  },
)' | xxd -r -p | sha256sum
```

The output should match the argument hash.


Upgrade Internet Identity Canister to 1115f8a3