Bolt.new June 20, 2026 Changelog

This update is all about keeping the people who use your website safe from hackers. When people reuse passwords that were stolen in previous cyberattacks, hackers can easily break into their accounts. Bolt is stepping in to stop this from happening on your site, which is a huge win for anyone building web apps who wants top-tier security without having to write complex code to get it.

What's new

• Leaked Password Protection: Bolt now has a built-in shield called "Prevent Leaked Passwords." When someone signs up for your site or changes their password, Bolt checks their choice against a massive list of passwords exposed in real-world data breaches. If there is a match, Bolt blocks it and asks them to pick a safer one.

Improvements

• Safer Defaults: This security feature is now automatically turned on for any new database (the place where your app stores its information) you create.
• Easy Setup for Existing Projects: If you already have a database running, you can turn this protection on manually with just a few clicks in your database authentication settings. It won't force your existing users to change their passwords right away; it only checks them when they create a new password or update an old one.

Breaking changes

No breaking changes in this release.