Captivo Portal changelog — 2026 · Page 3 of 12

Fixes

• Being forwarded to Captivo Access now takes you to your own console. Yesterday's "go to the product you used last" change sent people to the shared setup address instead, where someone who already had a workspace was shown the address form again and only found out at the submit that the address was taken — by themselves.

Improvements

• The panel beside the sign-in form no longer advertises product features. You are already a customer when you read it; it now tells you what your account opens and where you are about to be taken.

Fixes

• The "Sign in with Captivo" button always took you to the Captivo Portal dashboard, ignoring the product you used last. It also lost your destination: if a link had sent you to a particular page and you were bounced to sign in, choosing that button dropped you on the dashboard instead. Both fixed — a link still wins, and without one you land in the product you used last.

Improvements

• Signing in now takes you to the Captivo product you last used. Someone whose daily work is in Captivo Access had to pass through the Portal dashboard and reach for the switcher every single time; they now carry on where they left off. There is nothing to configure — the product you enter is remembered, and the switcher stays one click away.
• If you arrived through a link to a specific page, that is where you go — the remembered product does not override it.

Fixes

• The notice bars at the top of the console had their left side hidden behind the sidebar, so the text began mid-sentence. It mattered most on the "a new version has been released" notice: that bar exists to explain why a click did nothing, and unreadable left you with two puzzles instead of one.

Improvements

• The console works better on a phone. Lists with many columns (Log Sources, archive, log reports, the guest import preview) can now be scrolled sideways — until now the right-hand columns were clipped on a narrow screen with no way to reach them.
• In the voucher batch, scheduled report and team invite forms, three side-by-side fields now stack on a phone. They used to squeeze into about a finger's width each, with labels breaking across three lines.
• The platform management console (SUPERADMIN) is now usable on a phone: the left menu hides and opens from a button in the header. It previously covered the screen while the page was squeezed into the strip left over.

Improvements

• The version number is now shown with the product name — "Captivo Portal version". The two Captivo products are numbered independently, and two bare numbers side by side were easy to confuse.
• Turkish characters in trusted-device names are now correct.

Fixes

• Two-factor authentication skipped by "remember this device" is now protected by a secret unique to that device. Until now a remembered device was recognised from what the browser reports about itself — its name, screen size and time zone — so someone who had your password could skip the second step by guessing those. All remembered devices have been reset as a precaution: your next sign-in asks for the second step once more, and you can choose to remember the device again.

Fixes

• The IP address on audit records is now taken only from a source the caller cannot set. Until now, someone adding a particular header to their request could choose the address that appeared on the record of their own action. The same gap affected two more places: rate limits (resettable by changing a header) and the maintenance-mode IP allow-list (bypassable by claiming an allowed address).

Improvements

• Moving to Captivo Access now takes one step. The Access card on your dashboard and the product switcher in the top bar take you straight in rather than to Access's sign-in page — the session you already have with your Captivo account carries over, so you do not sign in a second time.

Fixes

• Moving from Captivo Portal to Captivo Access failed with "No account for that identity — ask an administrator to invite you". Sign-in was refused even though you were entitled to use Access. Fixed.

New

• A page for your Captivo account: at id.captivo.io/account you can see your organisation and what you hold in each Captivo product — plan, limits and expiry where there is one — in one place. A product you have set up links straight through; one you have not is marked "Needs setup".

Improvements

• Changing your password now ends your open sessions. Until now a session opened with the old password kept working until it expired on its own; if you lose a device, changing the password now closes that session too.

New

• A product switcher in the dashboard header: if your account has more than one Captivo product, the menu at the top moves you between them. It goes straight to a product you have set up, and marks one you have not with "Needs setup". If you have a single product, the menu does not appear at all.

New

• A Captivo Access invitation on the dashboard: if your account has the free Access tier and you have not set Access up yet, a card at the top of the dashboard says so. It carries no dismiss button, because it disappears on its own the moment Access is set up.

Fixes

• On Log Server > Sources, a source could show fewer raw lines than events, which cannot happen. The two columns were answering over different periods: raw lines covered the last 7 days while events covered all time. Both now cover the same 7-day window, and the column headings say so.

New

• Creating an account now happens in one place: signing up creates your Captivo account, and you reach whichever products you are entitled to with that same account. The sign-up page and the way you sign in have not changed; your existing account works exactly as before.
• After signing up you receive a verification link by e-mail, and the screen now says so clearly. Following the link brings you back to the sign-in page.

Improvements

• A tab left open across a release now tells you about it. Previously, pressing a button in a tab that predated the release did nothing at all and said nothing; now a notice appears offering to reload.

Fixes

• As an administrator, creating a user with an e-mail address that already has a Captivo account is now refused with a clear message. It used to look as though it worked, while the temporary password you handed over did not.
• The phone number entered during sign-up is recorded on the user again.
• Guests could be refused with "daily SMS limit reached" even on their very first request. The daily SMS allowance now counts messages that actually went out; attempts that never reached the operator no longer consume it.
• Turkish characters missing from some of the error messages shown to guests have been corrected.

New

• You can now sign in with your Captivo account. The "Sign in with Captivo" button on the sign-in page lets you reach the panel without entering an e-mail and password separately for each product. Your existing sign-in still works exactly as before — use whichever you prefer. If two-step verification is on, it is still asked for; this button does not replace it.
• Captivo is now a brand with two products: Captivo Portal for guest WiFi and corporate network access, and Captivo Access for letting outside vendors reach your internal systems without a VPN. Both are described on the website. The product you use and your panel have not changed — only the name is clearer.

Fixes

• If you had set the panel language to English, arriving at the sign-in page from the Turkish site opened it in English. The page now opens in the language of the address you are on; your panel preference still applies in the panel.
• When signing in with your Captivo account was refused, you were returned to the sign-in page with no explanation. You now see the reason, and trying again lets you pick your account.
• The subject line of security notification e-mails always read "Captivo" instead of the site name set in your panel. If you run the product under your own brand, your name now appears there.

Improvements

• Auto-refresh on the Log Sources page now offers 10, 30 and 60 seconds. The figures on that page change less often than that, so refreshing faster showed the same numbers again while keeping the server busy.
• Clearing records past their retention period now runs in batches. On installations with very large volumes that cleanup could not finish in one pass and so never completed at all; each run now deletes part of it for good and picks up where it left off.

Fixes

• On installations with millions of records the Log Sources page would not open, hanging for a long time and then failing. The heavy calculation it used to do on every visit now happens once, when the record is received: in our measurements the page went from 28 seconds to under half a second.
• Once the parsing queue fell behind it could never catch up: the larger the queue grew, the slower it was processed, which made it grow further. Processing speed no longer depends on queue size, and an existing backlog clears on its own.
• While the slowdown above was happening, some scheduled jobs on the System page could briefly show as "Failed". The jobs themselves were fine — the server was simply busy at that moment.
• Customers running the product on their own server sometimes saw the marketing site when heading to the panel. Those pages no longer appear on self-hosted installations at all.

Improvements

• The platform admin panel (/admin) is now entirely in English — a single language. The tenant panel stays bilingual and your language choice there is unaffected.
• If you use the panel in English, audit log descriptions now appear in English. Most of those lines used to stay in Turkish.
• A few small labels that stayed in Turkish on the English panel were fixed (for example the "Per page" selector in lists).

New

• Licence key with automatic renewal: once the key is entered in the panel, the licence renews itself -- no more downloading and uploading a file. File upload still works for installations on closed networks.

Improvements

• When a licence expires, guest login and log collection no longer stop. Only the admin panel becomes read-only; guests' internet access and the 5651 records are unaffected.
• When a trial ends, guest login no longer stops the same day: the panel becomes read-only right away, but guests can still connect for 7 more days.
• The licence screen now surfaces renewal problems: if the key has moved to another installation, has been revoked, or renewal has been failing for a while, a persistent warning appears.
• (Platform admin) Customers, subscriptions and licence keys are now managed from a single screen.

Fixes

• Settings could still be changed on an installation whose licence had expired. Read-only now really means read-only.

Improvements

• The MAC whitelist import now accepts a file: you can pick the CSV directly instead of pasting it into a text box. Pasting still works.
• The import dialog now has a profile selector, applied to every imported device. Previously every imported device was silently added with no limits and nothing on screen said so.

Fixes

• Exporting the MAC whitelist and loading it back lost the devices' EXPIRY dates -- time-limited devices became permanent. There was no error and no warning, and the imported count still looked right. A file you export can now be loaded back as it is.
• If a device name or description contained a comma (or a quote), the exported file shifted its columns when loaded back. The file is now written to standard CSV rules.
• Lines that cannot be read are no longer skipped silently; the import reports which line they were.

New

• The Sessions page now has an "Ended" view. Until now it listed only open sessions; closed ones can now be seen too, with the time they ended and **why** (session timeout, idle timeout, terminated by the NAS, signal lost, and so on). This is where to look when investigating why a device dropped. The reason is shown for identities with no guest record as well -- MAC-whitelisted devices, 802.1X accounts and directory logins included.

Fixes

• The password a client submits is no longer written to the RADIUS authentication log. That record held the guest's portal password in the clear, beside the username and MAC that identify them, both in the database and in every nightly backup. Only whether a password was supplied is kept now. Authentication is unaffected; this applies to records written after the upgrade.
• IP addresses were being cut off in the Log Server breakdown tiles: "192.168.10.11" and "192.168.10.202" both displayed as "192.168.10.", so two different devices could not be told apart. The column now widens to the longest value in that tile.
• Dates and numbers in Log Server search results now follow the panel's language; English users were shown Turkish-formatted dates and thousands separators.

New

• The Log Sources page now shows live ingest: lines per second, how many arrived in the last 15 minutes, and whether any were dropped or failed to write. The only measure before was a daily average, so a device that started sending ten times as much in the afternoon went unnoticed until the next day.

Improvements

• The unrecognised-lines page now carries a third marker: "planned". Lines we recognise and whose content we know but have not parsed yet -- gateway monitoring records (dpinger), for instance -- are shown that way and left out of the unrecognised ratio, so the ratio answers "is a parser missing" correctly.
• pfSense/OPNsense captive portal login records are now parsed. On a pfSense device these are the only records that state the username, the MAC and the IP together -- the answer to "who was on this address". Accepts, disconnects, session timeouts and failed MAC attempts now appear in search and on the device pages. Lines recorded earlier are parsed retrospectively too.
• Log parsing now works through the whole backlog instead of stopping. It used to process a thousand rows every two seconds -- a fixed ceiling of 500 rows per second -- so on a busier installation search and the device pages fell behind and never caught up. The parse queue is now shown on the Log Sources page as well.
• Log ingest is much faster on busy sites: every single line waited for its own confirmed write to disk, which capped throughput at a few hundred lines per second on servers with mechanical disks. Writes are now grouped.
• Log lines that cannot reach us during a burst are now counted and shown in red on that page. They used to disappear silently, leaving the records merely looking calmer than the network was.
• When a write to the database fails, log lines are no longer lost: they stay in the on-disk queue and are retried. Previously the lines in flight at that moment were in neither the queue nor the database.
• In the Report Centre, when the "unmasked" option is switched off the page now says why and links to where it is enabled. It used to sit there disabled; the only explanation was a hover tooltip, which browsers do not show on disabled controls -- and it named the wrong page.
• In Log Server search, the "Saved queries" panel has moved out of the right-hand column into a single-line strip under the search box. As a fixed-width column it left the results table narrow, and on some screens the table grew a horizontal scrollbar. Saved queries still run with one click; creating, renaming and deleting live under the "Manage" button.
• The "your portal template is out of date" warning now appears only when the template has actually changed. It used to appear for everyone on every Captivo release -- even if you had downloaded it the day before -- which left the warning meaning nothing.
• The RADIUS authentication log (a record of every login attempt) is no longer kept indefinitely: entries older than 365 days are removed by the daily cleanup. These records could hold the submitted password alongside the username, MAC and connection details, and because nothing purged them they both grew without limit and were kept far longer than necessary.
• The Network Activity section on a guest's detail page said "narrow the window to see them all", but the time range there is fixed and there is no control to narrow. The text now says where the full set can be seen.

Fixes

• Log Server search could not export CSV/Excel/PDF unless a query had been typed: it answered "invalid query" for the very rows listed on screen. An empty search box now means "no filter" for the download too, so the records in the selected time range can be exported.

Fixes

• The "Multiple simultaneous sessions" switch in platform settings looked broken; it now matches the other switches on the page.
• Terminating a session from the panel did not drop the user off the network immediately: the record was closed while the device kept browsing, and was only refused once the idle timeout expired or it rejoined. The termination request was missing the IP address field the network device uses to identify the session. It is now sent and the device drops off at once. This never worked on MikroTik; termination is more reliable on other devices too.

Improvements

• When you terminate a session and the network device rejects the request, the panel now also states the reason the device reported. It used to say only "the NAS could not be reached", while a rejection actually means the packet arrived and was verified -- so neither the network nor the shared secret is at fault. The reason is recorded in the audit log as well.

New

• If the portal template on your network device is older than Captivo, the Portal Settings page now says so. The template is a downloaded file and is not refreshed when Captivo is upgraded, so features added since then were silently inactive with no way to see it. The guest's message following the portal language is one example -- the portal showed English while the SMS arrived in Turkish. When you see the warning, download the template again from that page and upload it to the device.

New

• The voucher code and local user login e-mails can now be edited under Message Templates. Both messages had an editable SMS and a fixed e-mail: changing the wording changed the SMS while the e-mail carrying the same details went out in ours. Both are now sent in your own wording, in the right language, with your brand colour.

Fixes

• The Log Server settings page did not open and showed "An error occurred". A query added to the storage estimate in the previous release was rejected by the database. Updating to this release is all that is needed.