releases.shpreview
Auth0/Auth0 Changelog/1.2

1.2

Deprecation of Weak TLS 1.2 Cipher Suites

December 15, 2025Auth0 Changelog
$npx -y @buildinternet/releases show rel_gnZhzmpcoCdn4pQaY7j8d

To ensure the highest security standards for your identity infrastructure, we are retiring specific weak TLS 1.2 cipher suites. This change affects all connections to Auth0 service endpoints and web applications, specifically:

  • Tenant Domains: All default (e.g., [tenant].auth0.com) and Custom Domains for both Public and Private Cloud.
  • Auth0 Tools: The Dashboard (manage.auth0.com), Marketplace, and Support Center.
  • Infrastructure: The Auth0 CDN.

Cipher Suites Scheduled for Removal: The following ciphers are being deprecated. For cross-reference, we have provided the unique Hex Code, IANA name, and a link to the OpenSSL equivalent.

Additional information is available through the Auth0 dashboard and Support Center notification.

Fetched April 18, 2026