23 April, 2026

This release adds a built-in hosted password reset page, improved flow step observability, and several bug fixes.

Built-in Hosted Password Reset Page

Keel now provides a first-party hosted password reset experience out of the box. If you haven't configured a custom passwordResetUrl, password reset emails will automatically link to a built-in page at /auth/reset-password on your Keel runtime.

This means you can offer password reset functionality to your users without building a custom reset page. The hosted page handles the full flow — form display, validation, and success state — with no JavaScript required.

If you already have a custom passwordResetUrl configured, nothing changes for you. This only adds a built-in fallback for when no custom URL is set.

See the Password Authentication docs for more details on the password reset flow.

Fixes and Improvements

• SMTP email formatting — Fixed an issue where SMTP emails appended a trailing period to the message body, which could corrupt URLs such as password reset links.
• List action filter validation — Using File, Vector, Password, or Secret field types as implicit filters on list actions now produces a clear validation error instead of crashing the CLI.

For a full list of fixes and improvements, check out our GitHub releases page (opens in a new tab).

For any issues or feedback, please contact us at help@keel.so.

Thank you for using Keel!