Matrix.org Will Migrate to MAS

Summary

On Monday 7th of April 2025 at 7am UTC, we will migrate the Matrix.org homeserver's authentication system over to MAS (Matrix Authentication Service) in order to benefit from Next-generation authentication. The migration will involve up to one hour of downtime. MSC3861 (Next-generation auth for Matrix, based on OAuth 2.0/OIDC) and its dependent MSCs have progressed sufficiently that the Foundation is confident in MAS and the new next-generation auth APIs.Specifically, all the MSCs are now in or have passed Final Period (FCP) with disposition to merge! 🎉 We expect the MSCs to finish FCP and get merged into the next spec release.The full list of core Next-gen Auth MSCs is: This is incredibly exciting, reflecting 4 years of work on next-generation auth, and brings with it a new account management interface, additional security, and a better registration experience. 🔗The account management interface You will be able to manage you account on a dedicated interface at account.matrix.org (accessible through your client or browser), where you can: See and delete your devices. Update your contact information, like your email address. Change your password and deactivate your account. 🔗Improved security MAS comes with a significant refactoring of how authentication works on Matrix. Without breaking compatibility with the former authentication API, it brings several benefits Now, only your server will be able to see your account credentials! No more typing your password in every client you’d like to log in to. Restricted access to sensitive operations, like deactivating your account. Clearer view of which clients are using your account. 🔗Improved registration experience Regardless of the client you use, the new registration and login experience makes it clear where your account lives, and it supports next-generation clients like Element X. 🔗Impact Your current sessions will remain active after the migration has taken effect. In other words, you will not be logged out of your cl...