Verification standard update - verification for the W3C Digital Credentials API and ISO/IEC 18013-7 Annex C is now more closely aligned with the interoperable browser-based flow
Trust-list decisions for IACA certificates - during Annex C and DC API verification, issuer trust is checked against the configured trust list using the issuer certificate or IACA
Stronger SSRF protection - protection against server-side request forgery is enabled by default, with internal service-to-service calls unaffected
Simpler Presentation Definition configuration - a new "Login and Risk-based Authentication (non-TS12)" transaction-data template can be attached to any verification without duplication
Verifier-side WUA removed - the enforce-WUA option and the "Partial" status are removed from verification history, while issuer-side and holder-side WUAs are unchanged
Clearer verification results and operations - failed checks identify the missing requested claims rather than a single generic message, and runtime logs produce clean, single-line entries for tools such as Grafana and Loki
More accurate credential issuance - issued credentials and previews align more closely with the expected SD-JWT VC and ISO/IEC 18013-5 mdoc formats
mdoc presentation over DC API matures - the wallet can now share mobile documents (mdoc) through browser-based API flows on both platforms
DCQL presentation requests - the wallet understands DCQL verification requests, giving verifiers an OpenID4VP-aligned way to request data through QR codes, deep links, and existing flows
Array-based selective disclosure for SD-JWT - the wallet resolves selectively disclosable list elements when displaying, presenting, and verifying SD-JWT credentials, with indexed array elements ordered correctly on iOS
Native UI refresh across both platforms - core screens rebuilt with SwiftUI on iOS and Jetpack Compose on Android for a cleaner, faster codebase
Performance improvements and optimisations - on Android, large credentials load after a backup restore and revocation and expiry checks use streamed parsing; on iOS, removing an account fully wipes the database and its sidecar files
Faster trust checks and issuer discovery - trust lists are prefetched and cached at launch, with a 30-minute cache refreshed when the app returns to the foreground
Payment and visual polish - on Android, scheduled payments support one-off, future-dated account payments; on iOS, payment authorisation falls back to the Wallet Unit Attestation key when a payment credential's key ID is empty
ISO 18013-7 Annex C device request over the DC API - securely define and share credentials on the same device or across devices, with signed and unsigned requests supported in iOS and Android browsers
Passwordless login extension with optional callback URI - tenants running an Identity Provider such as Keycloak can map an EUDI Wallet presentation to an existing user account using native identity matching, without a bespoke resolution endpoint
Claim validation at issuance - credential claims are validated against the credential definition when an offer is created, with a small set of standard claims such as jti permitted as issuer overrides
Age Verification extension - a template covering the claims and structure set out in the Blueprint, so relying parties can issue and verify age-verification credentials
Inspect SD-JWT, JWT, and CBOR in the dashboard - click any record to decode the raw token or mdoc bytes in place, with header, payload, and disclosures laid out side by side with the wire form
Developer API keys - organisation administrators can generate an API key and distribute it via email to multiple developers in the same workflow
ISO 18013-7 Annex C device request over the DC API - the wallet can be selected directly from the browser's wallet picker on iOS or Android to present mobile documents (mdoc), covering same-device and cross-device verification flows
Legacy Hyperledger Indy database removed - a leaner app on iOS and Android with faster load times across common flows, and credentials encrypted at rest under a single, well-maintained storage layer
Per-credential key binding for OpenID4VCI compliance - the wallet can independently prove possession of each credential
Demonstrating Proof of Possession (DPoP) for token and credential requests - when the issuer's metadata advertises DPoP, the wallet binds both the access token and credential request to its private key, protecting against token replay by another party
Multi-credential and credential-set verification over the DC API - more reliable cross-device verification against verifiers that exercise the full breadth of the W3C Digital Credentials API specification
Issuer JWKS with multiple signing keys - issuers that rotate signing keys or run more than one active key are now handled end-to-end
Backup reliability on Android - backups to Google Drive and DataPod are confirmed only after the file has uploaded successfully
Stability and polish - small visual consistency improvements on the home, connection, and credential card screens, with issuer-supplied background_image artwork honoured in connection metadata on both platforms
In-dashboard documentation search - search docs, APIs, and guides directly within the dashboard, with grouped results, filters, and relevance ranking
End-to-end Certificate Signing Requests (CSR) - generate, download, and submit CSRs; issued certificate chains within the Organisation Wallet bind keys and use them as X.509 certificates in flows
Templates for age verification and mobile driving license (mDL) - new templates aligned with the EU Digital Identity rulebooks reduce manual setup for common credential and verification use cases
Device-bound presentation for mdoc credentials - device-bound signatures with multi-document support in the EUDI Wallet, aligned with ISO/IEC 18013-5 and OpenID4VP
Passwordless login with any credential - authenticate using any wallet-held credential (ID, licence, account), removing the need for passwords
Stronger payment security (TS12 alignment) - Strong Customer Authentication (SCA) flows now meet TS12 requirements for EUDI wallet-based payments in Europe
Performance improvements - general speed, stability, and reliability enhancements