DFINITY Foundation

ICDevs.org

CryptoIsGood

Anvil

ICPL.app

ysyms

The Accumulators’ Neuron

RawTech Venture

Paul Young

ICPMANUAL

8YearGangDAO

Isaac Valadez

Krzysztof

Nicolas.ic

Smaug’s Neuron for Retail Investors

ICLight.io

Taggr Network

Sonic AMM

Rakeoff.io

OpenChat

ELNA AI

GEEKFACTORY

ICP Hub México

ICP Hub Poland

Jerry Banfield

WaterNeuron

ICP Hub Bulgaria

Gold DAO

NeuronPool

LORIMER ♾️ 🐶

B3Pay

ZenithCode

Aviate Labs

D-QUORUM

Yuku AI

CO.DELTA △

DragginCorp

Gwojda

Thyassa

🌮 TACO DAO Neuron

Ωmega-reject

Ωmega-vote

αlpha-vote

Cybersecurity

cyberowl

Dexter Caff/acc

JMVR

Smacker

HashEra

Install, reinstall or upgrade code of a canister controlled by the NNS.

# Backend Canister Upgrade

SSO sign-in is faster and leaner: discovery results are now kept for a week, keys are fetched during sign-in, and the SSO caches hold only the data that verification needs. Failed SSO discoveries are now reported, apps can see a status for each domain, and the apps list shows only apps you’ve given a permission to and lets you forget them.

## What's Changed

_Since `proposal-backend-144196`_

- feat(be,fe): list only apps you gave a permission to, and let you forget them (#4425)
- feat(be,fe): report a failed SSO discovery, and an app-facing domain status (#4421)
- feat(be,fe): keep SSO discovery results for a week, fetch keys during sign-in (#4414)
- refactor(be): keep only what verification reads in the SSO caches (#4413)

[Full release notes](https://github.com/dfinity/internet-identity/releases/tag/release-2026-10-13)

## Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the [Internet Identity repository](https://github.com/dfinity/internet-identity):

```
git pull  # to ensure you have the latest changes.
git checkout 2f175eb56a339458618e218f8862fa121a621502
./scripts/verify-hash \
    --ii-hash a0e242ae7c802b688cfe18977878a56701eb92576aa75fef27da7a001b5a430c \
    --archive-hash 86d8e6fc493bba3513379e5df4a420efbdd531e2f8bf3589a4025afbcfaa693b
```

## Backend Argument Verification

Run the following command to verify the backend upgrade argument hash:

```
didc encode -d ./src/internet_identity/internet_identity.did -t '(opt InternetIdentityInit)' '(
  opt record {
    archive_config = opt record {
      polling_interval_ns = 15_000_000_000 : nat64;
      entries_buffer_limit = 10_000 : nat64;
      module_hash = blob "\86\d8\e6\fc\49\3b\ba\35\13\37\9e\5d\f4\a4\20\ef\bd\d5\31\e2\f8\bf\35\89\a4\02\5a\fb\cf\aa\69\3b";
      entries_fetch_limit = 1_000 : nat16;
    };
  },
)' | xxd -r -p | sha256sum
```

The output should match the argument hash.


Upgrade Internet Identity Backend Canister to 2f175eb56