Upgrade authentik
Upgrading to the latest version of authentik, whether a new major release or a patch, involves running a few commands to pull down the latest images and then restarting the servers and databases.
Important considerations
authentik does not support downgrading. Make sure to back up your database in case you need to revert an upgrade.
Preview the release notes: Be sure to carefully read the Release Notes for the specific version to which you plan to upgrade. The release might have special requirements or actions or contain breaking changes.
Database backup: Before upgrading, make a backup of your PostgreSQL database. You can create a backup by dumping your existing database. For detailed instructions, refer to the relevant guide for your deployment method (Docker Compose or Kubernetes).
Upgrade sequence: Upgrades must follow the sequence of major releases; do not skip directly from an older major version to the most recent version.
Always upgrade to the latest minor version (.x) within each major.minor version before upgrading to the next major version. For example, if you're currently running 2025.2.1, upgrade in the following order:
- Upgrade to the latest
2025.2.x. - Then to the latest
2025.4.x. - Finally to the latest
2025.6.x.
Outposts: The version of the authentik server and all authentik outposts must match. Ensure that all outposts are upgraded at the same time as the core authentik instance.
Upgrade authentik
- Docker Compose
- Kubernetes
- AWS Cloudformation ECS
In your terminal, navigate to your installation directory and follow these steps:
1. Retrieve latest docker-compose.yml file
Download the docker-compose.yml file using either wget -O docker-compose.yml https://goauthentik.io/docker-compose.yml or curl -O https://goauthentik.io/docker-compose.yml or a similar process.
2. Run upgrade commands
docker compose pull
docker compose up -d
In your terminal, navigate to your installation directory and run the following commands:
helm repo update
helm upgrade --install authentik authentik/authentik -f values.yaml
Navigate to your authentik AWS Cloudformation stack. Click on the Changesets tab and Create changeset.
Select Use existing template and follow the prompts to upgrade.
To upgrade to a specific version, select Replace existing template and use the following URL: https://authentik-cloudformation-templates.s3.amazonaws.com/authentik.ecs.VERSION.yaml replacing VERSION with the version you want to upgrade to. You can use latest to upgrade to the latest version.
Upgrade any outposts
Be sure to also upgrade any outposts when you upgrade your authentik instance.
Verify your upgrade
You can view the current version of your authentik instance by logging in to the Admin interface, and then navigating to Dashboards -> Overview.
Troubleshooting your upgrade
If you run the upgrade commands but your version on the Dashboard doesn’t change, follow this steps:
- Look at the server logs and search for an entry of
migration inconsistency. - If you see this entry, revert to your database backup.
- Now, upgrade to each subsequent higher version. That is, upgrade in sequence, do not skip directly to the most recent version.