# 🚀 Announcement: identity.ic0.app & identity.internetcomputer.org → id.ai (Internet Identity 2.0) **URL:** \ **Category:** internet-identity\ **Tags:** nns, internet-identity\ **Created:** [January 13, 2026, 10:44am UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566 "2026-01-13T10:44:47Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![aterga](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/aterga/32/4143_2.png) [@aterga](https://forum.dfinity.org/u/aterga)\ **Post date:** [January 13, 2026, 10:44am UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/1 "2026-01-13T10:44:47Z")
**Developer TL;DR;** Please consider switching your app to the new II domain ([https://id.ai](https://id.ai)) at your earliest convenience. Users of apps that haven’t yet switched to the new II domain by Jan 26 will automatically get the new interface, and will be prompted to upgrade their old identities. So your existing apps will continue to work even if you don’t switch by the date above. **User TL;DR;** 👇 ![https://id.ai](https://us1.discourse-cdn.com/flex023/uploads/dfn/original/3X/c/6/c6427d6da69b990fb2161f68a5a972f089d1aa58.png) ![https://id.ai](https://us1.discourse-cdn.com/flex023/uploads/dfn/original/3X/2/e/2eacb8fd2e7995253c51313c5798506540f95f94.png) * * * We’re announcing the upcoming deprecation of [https://identity.ic0.app](https://identity.ic0.app) and [https://identity.internetcomputer.org](https://identity.internetcomputer.org) in favor of our new Internet Identity experience: [https://id.ai](https://id.ai) (also known as Internet Identity 2.0). This change represents a major step forward in usability, flexibility, and ecosystem compatibility for both users and developers. * * * ## Why id.ai? (What’s new and improved) Internet Identity 2.0 ([https://id.ai](https://id.ai)) brings several significant improvements over the legacy Internet Identity experience: ### ✅ A better experience for users 1. **No more anchor numbers** Users no longer need to remember or manage anchor numbers to sign in. 2. **More sign-in options** In addition to passkeys, users can now sign in using: 3. **Seamless upgrade from legacy II** Users can keep their existing accounts and app relationships from legacy Internet Identity by completing a simple upgrade flow. 4. **Numerous UX improvements** The new product includes many usability and polish improvements compared to the legacy experience. ### 🧑‍💻 Benefits for developers 1. **Compatibility with existing [id.ai](http://id.ai) users** Upgrading your app to use id.ai allows users coming from newer apps like Caffeine to access your app using their existing Internet Identity accounts, without fragmentation. 2. **Onboard web2 users** With the additional sign-in options, your applications can reach more users with lower friction. * * * ## Guided upgrade flow for legacy users There is now a guided flow that helps users upgrade their existing Internet Identity to id.ai. To enable this today, applications need to set the following in their AuthClient config: ```typescript identityProvider: "https://id.ai/?feature_flag_guided_upgrade=true" ``` Your users will see the popup below: ![https://id.ai/#authorize](https://us1.discourse-cdn.com/flex023/uploads/dfn/original/3X/3/d/3d595c9f92b9f6b34f2709cc79a7cf8ac5e5c84d.png) ![https://id.ai/#authorize](https://us1.discourse-cdn.com/flex023/uploads/dfn/original/3X/4/4/44e0d69b1b94a317faec9de3dfbe861eba7fe5c5.png) With this enabled: - Users signing in with a legacy identity are automatically guided through the upgrade. - Their existing app accounts continue to work after the upgrade. * * * ## Timeline & upcoming change on legacy URLs The Identity team will propose the following on January 23: - Serve the new product on the legacy URLs ([https://identity.ic0.app](https://identity.ic0.app) and [https://identity.internetcomputer.org](https://identity.internetcomputer.org)) - Enable the guided upgrade flow by default on those URLs ### ⏰ What this means - We recommend all Internet Identity users to upgrade before January 26 at [https://id.ai](https://id.ai). - After this point, users accessing II via legacy URLs will see the new product and will be required to go through the upgrade flow before they can continue. * * * ## Call to action for community developers Given the timeline, we ask all community developers to: - Upgrade apps to use [https://id.ai](https://id.ai), see the “Guided upgrade flow” section above. - Report any concerns ASAP Early feedback is critical to ensuring a smooth transition for the entire ecosystem. * * * If you have questions, concerns, or run into issues while testing, please reply in this thread. Thank you for helping us make Internet Identity simpler, more powerful, and more accessible for everyone. 🙌 ---
**Author:** ![Henn91](https://avatars.discourse-cdn.com/v4/letter/h/edb3f5/32.png) [@Henn91](https://forum.dfinity.org/u/Henn91)\ **Post date:** [January 13, 2026, 10:56am UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/2 "2026-01-13T10:56:06Z")
> [@aterga](#): > > We recommend all Internet Identity users to upgrade before January 26 at [https://id.ai](https://id.ai). And if Users refuse? ---
**Author:** ![sea-snake](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/sea-snake/32/7243_2.png) [@sea-snake](https://forum.dfinity.org/u/sea-snake)\ **Post date:** [January 13, 2026, 10:59am UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/3 "2026-01-13T10:59:33Z")
> [@Henn91](#): > > And if Users refuse? > - After this point, users accessing II via legacy URLs will see the new product and will be required to go through the upgrade flow before they can continue. They’ll be asked to upgrade before they can continue to sign in. Keep in mind Internet Identity is a decentralized product, this means in practice that users will be able to upgrade long term if they haven’t heard about this announcement. As mentioned in the post: > - Serve the new product on the legacy URLs > ([https://identity.ic0.app](https://identity.ic0.app/) and [https://identity.internetcomputer.org](https://identity.internetcomputer.org/)) The old domains will continue to function to serve this purpose of enabling users to upgrade long term, given that passkeys are domain bound. ---
**Author:** ![peterparker](https://avatars.discourse-cdn.com/v4/letter/p/b9bd4f/32.png) [@peterparker](https://forum.dfinity.org/u/peterparker)\ **Post date:** [January 13, 2026, 11:04am UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/4 "2026-01-13T11:04:42Z")
Hi @artega, thanks for the information. > [@aterga](#): > > To enable this I’m unclear on the migration process. Can I simply replace `https://identity.internetcomputer.org` by `https://id.ai/?feature_flag_guided_upgrade=true` and this URL will support authentication for both legacy and upgraded identities? Do I understand correctly? I’m asking because I have absolutely no intention of displaying two separate “Sign in with Internet Identity” buttons in my applications. > [@aterga](#): > > January 26 I feel like less than two weeks notice is too short for a non-priority task. I’d prefer a bit more time (say e.g. 1 month) to include this in a proper release rather than having to deploy on mainnet a patch just for Internet Identity updates. Particularly if the version of Internet Indentity deployed in PocketIC will also be upgraded as it will also need upgrading test suite. And btw. if yes, will it support Google authentication, or will those options be hidden in that particular environment? ---
**Author:** ![quint](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/quint/32/40449_2.png) [@quint](https://forum.dfinity.org/u/quint)\ **Post date:** [January 13, 2026, 1:11pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/5 "2026-01-13T13:11:11Z")
Developer TL;DR; You don’t need to change anything. Users will just get the new interface, and will be prompted to migrate their old identities. So you can keep the old idp links (e.g. [https://identity.ic0.app](https://identity.ic0.app)). Migration TL;DR; 👇 ![Screenshot 2026-01-13 at 13.27.25](https://us1.discourse-cdn.com/flex023/uploads/dfn/original/3X/c/6/c6427d6da69b990fb2161f68a5a972f089d1aa58.png) ![Screenshot 2026-01-13 at 13.27.31](https://us1.discourse-cdn.com/flex023/uploads/dfn/original/3X/2/e/2eacb8fd2e7995253c51313c5798506540f95f94.png) ---
**Author:** ![ic.aitubi](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/ic.aitubi/32/14179_2.png) [@ic.aitubi](https://forum.dfinity.org/u/ic.aitubi)\ **Post date:** [January 13, 2026, 1:43pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/6 "2026-01-13T13:43:32Z")
> [@aterga](#): > > Users can keep their existing accounts and app relationships from legacy Internet Identity by completing a simple upgrade flow. HI Arshavir, is [this](https://identitysupport.dfinity.org/hc/en-us/articles/40243624646804-How-do-I-migrate-from-Internet-Identity-1-0-to-Internet-Identity-2-0?utm_source=chatgpt.com) the “upgrade flow” that you refer to? Unlike what suggested in this [guide](https://identitysupport.dfinity.org/hc/en-us/articles/40243624646804-How-do-I-migrate-from-Internet-Identity-1-0-to-Internet-Identity-2-0), on id.ai there does not seem to be a button “ **Upgrade from legacy identity”**. Will it ensure that my legacy II continues to work (i) in combination with a ledger HW wallet (for NNS) and (ii) with OISY? ---
**Author:** ![aterga](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/aterga/32/4143_2.png) [@aterga](https://forum.dfinity.org/u/aterga)\ **Post date:** [January 13, 2026, 2:10pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/7 "2026-01-13T14:10:21Z")
> [@ic.aitubi](#): > > HI Arshavir, is [this](https://identitysupport.dfinity.org/hc/en-us/articles/40243624646804-How-do-I-migrate-from-Internet-Identity-1-0-to-Internet-Identity-2-0?utm_source=chatgpt.com) the “upgrade flow” that you refer to? Unlike what suggested in this [guide](https://identitysupport.dfinity.org/hc/en-us/articles/40243624646804-How-do-I-migrate-from-Internet-Identity-1-0-to-Internet-Identity-2-0), on id.ai there does not seem to be a button “ **Upgrade from legacy identity”**. Hi - we’re currently updating the support pages; [this reply](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/5) from @quint above demonstrates how to reach the upgrade flow in the current UI. ---
**Author:** ![aterga](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/aterga/32/4143_2.png) [@aterga](https://forum.dfinity.org/u/aterga)\ **Post date:** [January 13, 2026, 2:24pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/8 "2026-01-13T14:24:52Z")
Thanks for the TL;DR, I’ve borrowed it (almost as-is) for the top section of the post. ---
**Author:** ![aterga](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/aterga/32/4143_2.png) [@aterga](https://forum.dfinity.org/u/aterga)\ **Post date:** [January 13, 2026, 2:30pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/9 "2026-01-13T14:30:33Z")
> [@peterparker](#): > > Can I simply replace `https://identity.internetcomputer.org` by `https://id.ai/?feature_flag_guided_upgrade=true` and this URL will support authentication for both legacy and upgraded identities? Yes, that’s correct. ---
**Author:** ![aterga](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/aterga/32/4143_2.png) [@aterga](https://forum.dfinity.org/u/aterga)\ **Post date:** [January 13, 2026, 2:34pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/10 "2026-01-13T14:34:46Z")
> [@peterparker](#): > > I feel like less than two weeks notice is too short for a non-priority task. I’d prefer a bit more time (say e.g. 1 month) to include this in a proper release rather than having to deploy on mainnet a patch just for Internet Identity updates. > > Particularly if the version of Internet Indentity deployed in PocketIC will also be upgraded as it will also need upgrading test suite. And btw. if yes, will it support Google authentication, or will those options be hidden in that particular environment? Please note that it is **safe** not to take any actions before Jan 26. We will update PocketIC and DFX to support the new product by default. > [@peterparker](#): > > will it support Google authentication, or will those options be hidden in that particular environment? Excellent question. Google and Microsoft authentication will be supported for local testing; to my knowledge, Apple doesn’t support localhost-based development at this time. ---
**Author:** ![sea-snake](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/sea-snake/32/7243_2.png) [@sea-snake](https://forum.dfinity.org/u/sea-snake)\ **Post date:** [January 13, 2026, 2:39pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/11 "2026-01-13T14:39:18Z")
> [@ic.aitubi](#): > > Will it ensure that my legacy II continues to work (i) in combination with a ledger HW wallet (for NNS) and (ii) with OISY? Yes, though if you’re using the ledger HW wallet as a passkey with II, you’ll need to create a new passkey using another method during the upgrade since the ledger HW wallet does not support discoverable passkeys at this moment. [https://identitysupport.dfinity.org/hc/en-us/articles/40276570234132-Internet-Identity-upgrade-FAQ#:~:text=Confirmed%20to%20have%20issues%20with%20Internet%20Identity%202.0%3A](https://identitysupport.dfinity.org/hc/en-us/articles/40276570234132-Internet-Identity-upgrade-FAQ#:~:text=Confirmed%20to%20have%20issues%20with%20Internet%20Identity%202.0%3A) [https://support.ledger.com/article/12350325732893-zd#:~:text=Does%20the%20Security%20Key%20app%20support%20resident%20keys%3F](https://support.ledger.com/article/12350325732893-zd#:~:text=Does%20the%20Security%20Key%20app%20support%20resident%20keys%3F) Regarding using a ledger HW wallet in the NNS directly, this remains unchanged. ---
**Author:** ![peterparker](https://avatars.discourse-cdn.com/v4/letter/p/b9bd4f/32.png) [@peterparker](https://forum.dfinity.org/u/peterparker)\ **Post date:** [January 13, 2026, 3:16pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/12 "2026-01-13T15:16:58Z")
Thanks for the answers, sounds great in general! > [@aterga](#): > > Please note that it is **safe** not to take any actions before Jan 26. It’s safe not to take any actions, but it’s advised to take one on Jan 26 if one cares about the UX of the upgrade, do I get it right? In that case, that’s IMO one more reason to provide more buffer between the announcement and the “disruption” than less than two weeks. > [@aterga](#): > > We will update PocketIC and DFX to support the new product by default. Nice! I guess I won’t miss the announcement, but when you do so, would you mind pinging me? This way I can upgrade the [internet-identity-playwright](https://github.com/dfinity/internet-identity-playwright) plugin accordingly. > [@aterga](#): > > Google and Microsoft authentication will be supported for local testing Oh that’s cool, really curious about this. I wonder if you’re gonna mock the flow or handle the Google and Microsoft credentials in some way to avoid shipping those. Anyway, not part of this thread. ---
**Author:** ![sea-snake](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/sea-snake/32/7243_2.png) [@sea-snake](https://forum.dfinity.org/u/sea-snake)\ **Post date:** [January 13, 2026, 3:40pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/13 "2026-01-13T15:40:30Z")
> [@peterparker](#): > > I wonder if you’re gonna mock the flow or handle the Google and Microsoft credentials in some way to avoid shipping those The Google and Microsoft OAuth 2.0 configurations have a dev and prod client configuration to isolate between those two (JWT will have a different `aud` claim between dev and prod). ---
**Author:** ![sea-snake](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/sea-snake/32/7243_2.png) [@sea-snake](https://forum.dfinity.org/u/sea-snake)\ **Post date:** [January 13, 2026, 3:47pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/14 "2026-01-13T15:47:01Z")
> [@peterparker](#): > > It’s safe not to take any actions, but it’s advised to take one on Jan 26 Yes, though it’s not particularly about the UX, since we’ll show the guided migration flow by default for applications that didn’t make the switch themselves as mentioned in the timeline of the main post. More importantly, we’re communicating this now to enable developers to actively communicate the switch to their users and test out the new flow with their product(s) before Jan 26. ---
**Author:** ![peterparker](https://avatars.discourse-cdn.com/v4/letter/p/b9bd4f/32.png) [@peterparker](https://forum.dfinity.org/u/peterparker)\ **Post date:** [January 13, 2026, 3:55pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/15 "2026-01-13T15:55:33Z")
> [@sea-snake](#): > > The Google and Microsoft OAuth 2.0 configurations have a dev Oh you gonna ship your dev credentials everywhere in the world. I see. ---
**Author:** ![peterparker](https://avatars.discourse-cdn.com/v4/letter/p/b9bd4f/32.png) [@peterparker](https://forum.dfinity.org/u/peterparker)\ **Post date:** [January 13, 2026, 4:00pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/16 "2026-01-13T16:00:29Z")
> [@sea-snake](#): > > since we’ll show the guided migration flow by default… So long story short, aside from the dev environment and E2E tests, if the guided UX becomes the default, there is nothing else to do, as @quint mentionned [above](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/5), aside from being aware of. Oki doki, gotcha. Thx. ---
**Author:** ![sea-snake](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/sea-snake/32/7243_2.png) [@sea-snake](https://forum.dfinity.org/u/sea-snake)\ **Post date:** [January 13, 2026, 4:14pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/17 "2026-01-13T16:14:05Z")
They’re public credentials and we don’t need the client secret for an implicit flow. ---
**Author:** ![EdSalazar](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/edsalazar/32/24584_2.png) [@EdSalazar](https://forum.dfinity.org/u/EdSalazar)\ **Post date:** [January 13, 2026, 4:26pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/18 "2026-01-13T16:26:10Z")
Quick Q which may seem stupid but worth having it crystal-clear: is it mandatory to upgrade any frontend currently serving [Internet Identity](https://identity.ic0.app/#authorize) as authentication method or things can be kept as-is? A side note: the recovery key verification procedure will be nightmarish to many (pivoting between the copied phrase and the selector for correct ordering). You should consider just allowing people to cut-and-paste what they have copied, which is what you are actually testing for. ---
**Author:** ![sea-snake](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/sea-snake/32/7243_2.png) [@sea-snake](https://forum.dfinity.org/u/sea-snake)\ **Post date:** [January 13, 2026, 4:54pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/19 "2026-01-13T16:54:37Z")
> [@EdSalazar](#): > > Quick Q which may seem stupid but worth having it crystal-clear: is it mandatory to upgrade any frontend currently serving [Internet Identity](https://identity.ic0.app/#authorize) as authentication method or things can be kept as-is? As mentioned in the post and discussions above, the legacy II domains will serve the new product after the 26th without any changes required by the dapp developer (backwards compatible). But nonetheless, we do highly recommend to switch to the new domain at the earliest when possible to do so as developer. > [@EdSalazar](#): > > You should consider just allowing people to cut-and-paste what they have copied, which is what you are actually testing for. In legacy Internet Identity we saw many support cases where users failed to correctly record their recovery phrase. Some did not write it down at all, others recorded it in the wrong order or with missing words, and many stored it digitally and later lost access. Our goal is to encourage users to write down their recovery phrase on physical paper rather than storing it digitally. We acknowledge this is less convenient for power users who trust their own storage practices. However, II primarily targets non-power users and is fully decentralized. As a result, the recovery phrase is the only way to regain access, unlike centralized products where support can help users recover access. For this reason, we require users to confirm the full recovery phrase rather than only part of it. To keep this step fast and user friendly on mobile, we use ordered buttons instead of text input fields. As a note for power users, on desktop you can switch once between the access methods and recovery phrase tabs to get a verification popup with text inputs instead (after closing the ordered buttons popup). ---
**Author:** ![EdSalazar](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/edsalazar/32/24584_2.png) [@EdSalazar](https://forum.dfinity.org/u/EdSalazar)\ **Post date:** [January 13, 2026, 5:01pm UTC](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566/20 "2026-01-13T17:01:04Z")
I see what you mean. It feels a bit awkward but that’s just my take. I would expect most people by default to digitally copying it, regardless. Copying it on paper does not prelude misplacement, loss or impairment (in fact, people frequently forget where the heck they left that notebook or post-it more often than not). You can do so much in terms of OpSec, unfortunately, other than educating users. [Next page](https://forum.dfinity.org/t/announcement-identity-ic0-app-identity-internetcomputer-org-id-ai-internet-identity-2-0/62566.md?page=2)