--- title: Teleport 10 Feature Overview | daily.dev description: Teleport 10 introduces passwordless, end-to-end FIDO2 WebAuthn-based authentication for infrastructure access, available in both Community and Enterprise... canonical: https://daily.dev/posts/teleport-10-feature-overview-oji29o7qr twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Teleport 10 Feature Overview | daily.dev og:description: Teleport 10 introduces passwordless, end-to-end FIDO2 WebAuthn-based authentication for infrastructure access, available in both Community and Enterprise... og:url: https://daily.dev/posts/teleport-10-feature-overview-oji29o7qr og:image: https://api.daily.dev/og/posts/oJI29o7qR.png og:image:alt: Teleport 10 Feature Overview og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Teleport 10 Feature Overview **[Teleport](https://daily.dev/sources/teleport)** · 11 min read · 0 upvotes · 0 comments ## Summary Teleport 10 introduces passwordless, end-to-end FIDO2 WebAuthn-based authentication for infrastructure access, available in both Community and Enterprise editions. Additional features across the 10.0-10.3 releases include resource-based just-in-time access requests, IP-bound short-lived certificates, automatic Linux user provisioning, expanded Machine ID support for Kubernetes and Application Access with CA rotation and host certificates, new database integrations (ElastiCache for Redis, MemoryDB, Elasticsearch, Cassandra), Microsoft SQL Server audit logging, Desktop Access directory sharing and simplified Active Directory setup, TCP-aware application proxying, proxy peering for large deployments, a Kubernetes operator, a move away from Kubernetes persistent volume storage, and upgrade notifications. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is passwordless access in Teleport 10? Teleport 10 introduces end-to-end passwordless authentication for infrastructure access based on FIDO2 WebAuthn, compatible with authenticator devices like Apple Touch ID, Yubikey, and Windows Hello. Previously, users still needed password-based credentials to log into an SSO system like Okta before receiving short-lived certificates; this requirement is now removed entirely. It is available in both Teleport Community and Enterprise editions. _daily.dev surfaces access-control releases like this for teams evaluating passwordless infrastructure security._ ### What new databases does Teleport 10 support for Database Access? Teleport 10 adds support for ElastiCache for Redis and MemoryDB in version 10.0, Elasticsearch in 10.2, and Cassandra in 10.3, all available in preview across both Community and Enterprise editions. It also adds protocol-level audit logging for Microsoft SQL Server access in 10.0, which had been supported since Teleport 9. _Teams tracking database access tooling changes can follow releases like this via daily.dev._ ### How does Teleport's proxy peering feature reduce latency in large deployments? Proxy peering, added in Teleport 10.0 for Enterprise edition, connects Teleport proxies internally via a bidirectional gRPC stream, letting clients reach nodes connected to a specific proxy without every node needing to connect to all proxies. This addresses network congestion and latency seen in node-heavy, multi-proxy deployments such as large customer installations or Teleport's own cloud offering. _daily.dev helps infrastructure engineers keep up with scaling changes like proxy peering in access platforms._ --- Tags: [#kubernetes](https://daily.dev/tags/kubernetes) [View this post on daily.dev](https://daily.dev/posts/teleport-10-feature-overview-oji29o7qr) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Teleport 10 Feature Overview","url":"https://daily.dev/posts/teleport-10-feature-overview-oji29o7qr","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/teleport-10-feature-overview-oji29o7qr"},"datePublished":"2026-08-23T12:19:43.167Z","dateModified":"2026-08-24T07:04:45.223Z","description":"Teleport 10 introduces passwordless, end-to-end FIDO2 WebAuthn-based authentication for infrastructure access, available in both Community and Enterprise...","image":"https://media.daily.dev/image/upload/s--0_ODbtD2--/f_auto/v1722860399/public/Placeholder%2008","thumbnailUrl":"https://media.daily.dev/image/upload/s--0_ODbtD2--/f_auto/v1722860399/public/Placeholder%2008","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/teleport-10-feature-overview-oji29o7qr","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"kubernetes","timeRequired":"PT11M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"Teleport 10 Feature Overview"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/teleport-10-feature-overview-oji29o7qr#faq","mainEntity":[{"@type":"Question","name":"What is passwordless access in Teleport 10?","acceptedAnswer":{"@type":"Answer","text":"Teleport 10 introduces end-to-end passwordless authentication for infrastructure access based on FIDO2 WebAuthn, compatible with authenticator devices like Apple Touch ID, Yubikey, and Windows Hello. Previously, users still needed password-based credentials to log into an SSO system like Okta before receiving short-lived certificates; this requirement is now removed entirely. It is available in both Teleport Community and Enterprise editions. daily.dev surfaces access-control releases like this for teams evaluating passwordless infrastructure security."}},{"@type":"Question","name":"What new databases does Teleport 10 support for Database Access?","acceptedAnswer":{"@type":"Answer","text":"Teleport 10 adds support for ElastiCache for Redis and MemoryDB in version 10.0, Elasticsearch in 10.2, and Cassandra in 10.3, all available in preview across both Community and Enterprise editions. It also adds protocol-level audit logging for Microsoft SQL Server access in 10.0, which had been supported since Teleport 9. Teams tracking database access tooling changes can follow releases like this via daily.dev."}},{"@type":"Question","name":"How does Teleport's proxy peering feature reduce latency in large deployments?","acceptedAnswer":{"@type":"Answer","text":"Proxy peering, added in Teleport 10.0 for Enterprise edition, connects Teleport proxies internally via a bidirectional gRPC stream, letting clients reach nodes connected to a specific proxy without every node needing to connect to all proxies. This addresses network congestion and latency seen in node-heavy, multi-proxy deployments such as large customer installations or Teleport's own cloud offering. daily.dev helps infrastructure engineers keep up with scaling changes like proxy peering in access platforms."}}]} ```