A new coordinated security fix for all Matrix server implementations is now published as part of the Matrix 1.16 off‑cycle spec update. Customers using Element Server Suite are covered by the update. Our blog includes all the details:
Element is now more accessible by design and by default, thanks to our work in the past months where we’ve made more than 40 accessibility improvements! Thanks to everyone from the community who has provided user feedback, accessibility audits, and been part of ongoing testing of our platforms!
Element's backend team has published a great postmortem of their work recovering the matrix.org postgres database from corruption over the last few weeks. For those interested in the work Element does to keep matrix.org running, check out
Acceptance at last? The US government’s unequivocal support for end-to-end encryption is likely to bring an end to the encryption debate.
We're proud to join the community of organisations conformant with OpenChain ISO/IEC 5230, the international standard for open source license compliance programs! 🎉
"An open standard is the key to digitally sovereign communications between multiple separate organisations.” @Matthew Hodgson Hodgson presents with UNICC's Tima Soni at UN Open Source Week about the importance of open standard federation for real time communications.
We’ve signed an open letter to the European Commission expressing our concerns around continued attempts to undermine encryption. We ask the Commission to reconsider ProtectEU, and acknowledge that encryption is a positive that improves security.
How do you manage group chats in a messaging app? Element Server Suite (ESS) provides advanced identity management and group access controls to ensure only the right people are in the right chat rooms. Admins can use Group Sync to synchronise group membership in real time from sources such as Microsoft Active Directory. Element gives governments a consumer-style messaging app, but with enterprise-grade control.
Candid analysis of the need for European governments to ensure their digital sovereignty from [@bert_hubert]( ) in [@republik_magazin]( ). He touches on the need for Europe-first software, AI’s ability to monitor multi-language communications at scale, and marketing fog from US vendors surrounding initiatives such as EU Data Boundary.
An off-cycle Synapse security release is out to address a High severity vulnerability (CVE-2025-30355 / ). The issue can disrupt federation and is being exploited in the wild - please upgrade as soon as possible!