# Umami v3.3.1

- Product: Umami (https://whatsnew.fyi/product/umami)
- Vendor: Umami Software
- Date: 2026-08-20
- Version: v3.3.1
- Original notes: https://github.com/umami-software/umami/releases/tag/v3.3.1
- Permalink: https://whatsnew.fyi/product/umami/releases/v3.3.1

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Harden two-factor authentication when TWO_FACTOR_ENCRYPTION_KEY is missing or invalid with safer API enforcement and clearer configuration feedback
- **fixed** — Preserve the root path when REMOVE_TRAILING_SLASH is enabled and reset tracker visit state when a session drifts
- **fixed** — Fix event property filtering so fields and values respect the selected event name
- **fixed** — Preserve events without matching session records and stabilize relational event pagination
- **changed** — Improve expanded metrics query performance and fix funnel steps containing null event values
- **fixed** — Preserve zero and false values in website value responses
- **fixed** — Improve handling of username conflicts involving deleted users
- **added** — Add broader coverage for 2FA status, setup, verification, disable, admin, team, and login flows
- **fixed** — Preserve menu item actions in admin dropdowns
- **fixed** — Fix expanded-menu spacing and realtime search bar styling
- **added** — Add missing 2FA translations and polish Traditional Chinese 2FA copy

Umami `v3.3.1` is a maintenance release focused on safer upgrades, tracking correctness, analytics accuracy, and UI fixes.

##### Updates

- Hardened two-factor authentication when **TWO_FACTOR_ENCRYPTION_KEY** is missing or invalid, with safer API enforcement and clearer configuration feedback. #4443
- Preserved the root path when **REMOVE_TRAILING_SLASH** is enabled and reset tracker visit state when a session drifts. #4152
- Fixed event property filtering so fields and values respect the selected event name. #4461
- Preserved events without matching session records and stabilized relational event pagination. #4462
- Improved expanded metrics query performance and fixed funnel steps containing null event values.
- Preserved zero and false values in website value responses.
- Improved handling of username conflicts involving deleted users.
- Added broader coverage for 2FA status, setup, verification, disable, admin, team, and login flows.
- Preserved menu item actions in admin dropdowns. #4453
- Fixed expanded-menu spacing and realtime search bar styling.
- Added missing 2FA translations and polished Traditional Chinese 2FA copy.

##### Migrations

- Added prisma/migrations/24_lowercase_username to normalize usernames from pre-3.2 installations while safely handling conflicts with soft-deleted accounts.

##### Thanks

@nrps9909 @tomazic89 @NoiceHax

**Full Changelog**: https://github.com/umami-software/umami/compare/v3.3.0...v3.3.1