What 2.3.0 changes: two-factor login on every site, automatic zero-downtime deploys, a long-standing SEO fix, and sessions that no longer drop.
jekcms 2.3.0 focuses on three things: making delivery reliable, hardening security, and removing two long-standing problems. Concretely:
Two-factor authentication on every site
Every site now has a 2FA setup card under Settings → Security. The QR code is generated on your own server — no third-party QR service, nothing leaves your infrastructure — and there is a manual key fallback if a device can't scan. Login enforcement is fail-open by design: if 2FA verification ever errors, you are let in rather than locked out. The benefit: account takeover via a stolen password alone is no longer enough, with zero lock-out risk.
Zero-downtime automatic delivery
Updates now reach every site automatically, within minutes, over HTTPS, followed by a post-deploy health check. There is no manual upload step and no fragile remote-shell process that can be rate-limited or blocked. The benefit: fixes ship the moment they are ready, consistently, across the whole fleet — not whenever someone has time to upload files.
Your site name in search results
A long-standing settings-storage issue caused search engines and social cards to fall back to the bare domain instead of the configured site name. This is fixed across every site: page titles, Open Graph cards and structured data now carry the real brand name. The benefit: correct brand presentation in Google and on social shares, which directly affects click-through.
Sessions that don't drop
Admins were being signed out far sooner than expected. Root cause: the server's session garbage-collection window was not aligned with the configured session lifetime, so session files were removed early. Now sessions persist until you explicitly sign out. The benefit: no more losing work or re-logging in mid-task.
Also in this release
Lighter documentation/screenshot assets (~73% smaller) and zero-layout-shift images for faster pages; a single source for footer and slogan text in General Settings (bilingual where applicable); and a consistent schema-name source for cleaner SEO.
Full technical list: changelog.