pypi / flask-wtf
flask-wtf
What changed in flask-wtf 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-25.
1 breaking5 new APIs and options1 performance2 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initflask-wtf 19 changes
Breaking changes 1
Deprecated items were removed.
New APIs and options 5
A helper for adding CSRF meta tags is available.
The RECAPTCHA_ENABLE setting can disable reCAPTCHA.
reCaptcha now allows a nonce.
Widgets support kwargs for adding custom HTML attributes.
Support was added for alternative captcha services.
Performance 1
Flask-WTF tries not to read uploaded files into memory.
Fixes and other changes 2
CSRFProtect.protect() now respects exemptions.
Flask-WTF adds support for Python 3.14.