--- title: Enhanced Security and Usability with New Fea | daily.dev description: Teleport 16 ships with a focus on defending against identity provider compromise and improving usability at scale. New features include phishing-resistant... canonical: https://daily.dev/posts/enhanced-security-and-usability-with-new-fea-0qv7wdgme twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Enhanced Security and Usability with New Fea | daily.dev og:description: Teleport 16 ships with a focus on defending against identity provider compromise and improving usability at scale. New features include phishing-resistant... og:url: https://daily.dev/posts/enhanced-security-and-usability-with-new-fea-0qv7wdgme og:image: https://api.daily.dev/og/posts/0Qv7Wdgme.png og:image:alt: Enhanced Security and Usability with New Fea og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Enhanced Security and Usability with New Fea **[Teleport](https://daily.dev/sources/teleport)** · 13 min read · 0 upvotes · 0 comments ## Summary Teleport 16 ships with a focus on defending against identity provider compromise and improving usability at scale. New features include phishing-resistant per-session MFA for applications, Device Trust for the Web UI, Teleport VNet (a VPN-like DNS-based access mechanism for TCP apps on macOS), kubectl exec from the Web UI, an SSH multiplexer, and Identity Security integrations with AWS, Microsoft Entra, and Okta. Several breaking changes accompany the release: Community Edition moves from Apache 2.0 to a commercial license restricting companies over 100 employees or $10MM revenue, self-hosted Enterprise now validates license files on startup, local users must have MFA enabled (second factor can no longer be disabled), incompatible old clients are rejected, DynamoDB backends need new IAM permissions, keyboard shortcuts changed in Teleport Connect, the Active Directory setup wizard was removed, and Teleport Assist/OpenAI integration was removed entirely. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What breaking changes come with upgrading to Teleport 16? Teleport 16 introduces several breaking changes: Community Edition switches from Apache 2.0 to a commercial license restricting companies with 100+ employees or over $10MM revenue; self-hosted Enterprise requires license file validation on startup; local users must have multi-factor authentication enabled since disabling second factor is no longer supported; incompatible old clients get rejected; and DynamoDB backends need the new dynamodb:ConditionCheckItem IAM permission. _daily.dev helps teams planning a Teleport 16 upgrade stay ahead of breaking changes before they hit production._ ### Is Teleport Community Edition still free and open source under Apache 2.0? No, starting with Teleport 16, Teleport Community Edition switches from the permissive Apache 2.0 license to a commercial license. Individuals can still use it freely for personal or hobby projects, but companies must have fewer than 100 employees and under $10MM in annual revenue to use it without contacting sales; larger companies must purchase a license, and reselling or embedding it is prohibited. _track licensing shifts like this on daily.dev before they affect which open-source tools your company can rely on._ ### What is Teleport VNet and how does it replace a traditional VPN for accessing TCP applications? Teleport VNet is a feature introduced in Teleport 16 that provides a virtual IP subnet and DNS server, automatically proxying connections to TCP applications protected by Teleport without requiring a traditional VPN or manual tunnel setup. It lets local scripts and CLI tools connect to apps like Jenkins or MinIO using regular DNS addresses, with optional MFA and Device Trust enforcement, and is powered by the Teleport Connect client, currently available for macOS only. _engineers evaluating VPN alternatives for TCP app access can follow tools like Teleport VNet on daily.dev._ --- Tags: [#cloud](https://daily.dev/tags/cloud), [#kubernetes](https://daily.dev/tags/kubernetes), [#authentication](https://daily.dev/tags/authentication) [View this post on daily.dev](https://daily.dev/posts/enhanced-security-and-usability-with-new-fea-0qv7wdgme) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Enhanced Security and Usability with New Fea","url":"https://daily.dev/posts/enhanced-security-and-usability-with-new-fea-0qv7wdgme","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/enhanced-security-and-usability-with-new-fea-0qv7wdgme"},"datePublished":"2026-08-23T12:21:47.956Z","dateModified":"2026-08-23T12:40:59.855Z","description":"Teleport 16 ships with a focus on defending against identity provider compromise and improving usability at scale. New features include phishing-resistant...","image":"https://media.daily.dev/image/upload/s--58gMhC4P--/f_auto/v1722860399/public/Placeholder%2012","thumbnailUrl":"https://media.daily.dev/image/upload/s--58gMhC4P--/f_auto/v1722860399/public/Placeholder%2012","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/enhanced-security-and-usability-with-new-fea-0qv7wdgme","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cloud,kubernetes,authentication","timeRequired":"PT13M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"Enhanced Security and Usability with New Fea"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/enhanced-security-and-usability-with-new-fea-0qv7wdgme#faq","mainEntity":[{"@type":"Question","name":"What breaking changes come with upgrading to Teleport 16?","acceptedAnswer":{"@type":"Answer","text":"Teleport 16 introduces several breaking changes: Community Edition switches from Apache 2.0 to a commercial license restricting companies with 100+ employees or over $10MM revenue; self-hosted Enterprise requires license file validation on startup; local users must have multi-factor authentication enabled since disabling second factor is no longer supported; incompatible old clients get rejected; and DynamoDB backends need the new dynamodb:ConditionCheckItem IAM permission. daily.dev helps teams planning a Teleport 16 upgrade stay ahead of breaking changes before they hit production."}},{"@type":"Question","name":"Is Teleport Community Edition still free and open source under Apache 2.0?","acceptedAnswer":{"@type":"Answer","text":"No, starting with Teleport 16, Teleport Community Edition switches from the permissive Apache 2.0 license to a commercial license. Individuals can still use it freely for personal or hobby projects, but companies must have fewer than 100 employees and under $10MM in annual revenue to use it without contacting sales; larger companies must purchase a license, and reselling or embedding it is prohibited. track licensing shifts like this on daily.dev before they affect which open-source tools your company can rely on."}},{"@type":"Question","name":"What is Teleport VNet and how does it replace a traditional VPN for accessing TCP applications?","acceptedAnswer":{"@type":"Answer","text":"Teleport VNet is a feature introduced in Teleport 16 that provides a virtual IP subnet and DNS server, automatically proxying connections to TCP applications protected by Teleport without requiring a traditional VPN or manual tunnel setup. It lets local scripts and CLI tools connect to apps like Jenkins or MinIO using regular DNS addresses, with optional MFA and Device Trust enforcement, and is powered by the Teleport Connect client, currently available for macOS only. engineers evaluating VPN alternatives for TCP app access can follow tools like Teleport VNet on daily.dev."}}]} ```