Skip to content

Conversation

@mtliendo
Copy link

@mtliendo mtliendo commented Nov 25, 2025

⚠️ WARNING: Do not merge until the small edits to the Client Trust guide have been merged and deployed.

Added a warning about the introduction of Client Trust and its impact on MFA enforcement.

🔎 Previews:

image

What does this solve?

Seeing an uptick in seeing an uptick in mfa related questions since launching client trust since launching Client Trust

What changed?

Checklist

  • I have clicked on "Files changed" and performed a thorough self-review
  • All existing checks pass

Added a warning about the introduction of Client Trust and its impact on MFA enforcement.
@mtliendo mtliendo requested a review from a team as a code owner November 25, 2025 16:36
@vercel
Copy link

vercel bot commented Nov 25, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Updated (UTC)
clerk-docs Ready Ready Preview Nov 27, 2025 4:27pm

@SarahSoutoul
Copy link
Contributor

Merged main to fix the build as the Client trust PR was merged yesterday. So this is good to go I think. @mtliendo

{/* clerk/javascript file: https://github.com/clerk/javascript/blob/main/packages/backend/src/api/endpoints/UserApi.ts#L206 */}

> [!WARNING]
> On November 14, 2025, Clerk introduced **[Client Trust](/docs/guides/secure/client-trust)**. This free security protection automatically enforces MFA **the first time** a user logs in from a new device even if MFA is disabled. Learn more about Client Trust and our commitment to security by [visiting our changelog](https://clerk.com/changelog/2025-11-14-client-trust-credential-stuffing-killer).
Copy link
Contributor

@manovotny manovotny Dec 1, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • Removed domain from URL
  • Removed "by visiting our changelog" (optional)
Suggested change
> On November 14, 2025, Clerk introduced **[Client Trust](/docs/guides/secure/client-trust)**. This free security protection automatically enforces MFA **the first time** a user logs in from a new device even if MFA is disabled. Learn more about Client Trust and our commitment to security by [visiting our changelog](https://clerk.com/changelog/2025-11-14-client-trust-credential-stuffing-killer).
> On November 14, 2025, Clerk introduced [**Client Trust**](/docs/guides/secure/client-trust). This free security protection automatically enforces MFA **the first time** a user logs in from a new device even if MFA is disabled. Learn more about [Client Trust and our commitment to security](/changelog/2025-11-14-client-trust-credential-stuffing-killer).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants