We are proud to announce Matomo 3.11.0: a new release of Matomo Analytics. It is highly recommended to upgrade to this latest Matomo release.

What’s new?

This release includes security improvements (including a security fix) and also several performance improvements and bug fixes.

In terms of new feature, you can now create Goals that are triggered when visitors stay for a certain amount of time on the website (when the visit duration is greater than X minutes). This lets you measure and later segment your users who are more engaged and stay longer on your website.

In terms of security improvements, a basic rate limiter for password resets was added which prevents possible mass emailing (when many password resets are requested within a short time). Another issue has been fixed where affected users’ passwords were mistakenly changed to a weak value. Now minimal password strengths requirements are enforced (forcing users with very weak passwords to reset them). Also Matomo UI and reports will now send the ‘Referrer-Policy’ header which will prevent leaking the Matomo URL to other websites when you click on links to these websites within Matomo.

Several performance improvements were also implemented which can improve speed of some Matomo requests around 10%. Over the next few releases we’re hoping to continue making performance improvements. Also if your Matomo database is replicated (eg. Master-reader configuration) you can now easily configure Matomo to execute read queries on the database reader server, which will reduce CPU usage on the master server and improve speed of all requests (see the new [database_reader] section in the global.ini.php).

In terms of UX/Design, we’ve made minor tweaks to improve usability. For example the Websites drop down menu list is now wider and will show the full name of your websites.

Several bugs were fixed in the UI, Tracker API, Two-factor compatibility with embedding reports, archiver, and other more minor issues.

We are grateful for all community members who reported feedback and suggestions, our awesome team of translators for their work, and our Matomo Cloud hosting customers and Premium features customers for their amazing support!

67 tickets have been closed by more than 19 contributors!

After You Update

  • Please help us spread the word! Maybe you can write about the project on your blog, website, twitter, talk at conferences or let your friends and colleagues know what is Matomo. Already 1,000,000+ websites are keeping full control of their web analytics with Matomo!
  • Use the forums if you have any question or feedback (free support),
    or purchase a Support Plan to make the most of your Matomo Analytics and get professional support.
  • To improve Matomo in your language consider contributing to translations.
  • You can support our efforts by purchasing valuable Premium Features for Matomo or try our Matomo Cloud solution.

Security release

This release is rated critical.

An issue has been fixed where affected users’ passwords were mistakenly changed to a weak value. Now we enforce some minimal password strengths requirement and users who don’t meet them will have to request a password reset. The issue only affected very rare case where a user had their email address manually changed by another Super User in the UI and no password was set. Thank you to Christian Futterlieb for his responsible disclosure via the Hackerone program.

Our security bug bounty program welcomes & rewards researchers who discover and responsibly report to us any security issues found in Matomo or any of the plugins created by Matomo/InnoCraft.

Database upgrade

This release does not contain any major database upgrade.

Platform Changes

Matomo is an open analytics platform. In an effort to help Matomo developers learn about improvements and changes in the core APIs, we document the changes since the last release.

In this 3.11.0 release there are no change. Read more in Platform Changelog for Developers to see all changes to the platform and APIs.

New and updated SDKs (Tracking API Clients)

The Matomo team offers official SDKs (Tracking API Clients) for measuring your mobile apps and any other kind of apps.

Need help upgrading Matomo?

Read the Updating Matomo user guide or for more help contact the Matomo experts.

List of 67 tickets closed in Matomo 3.11.0

We are together creating the best open analytics platform in the world. You can help make Matomo even more awesome by getting involved in Matomo!