Important security update: deprecating outdated TLS encryption

What is changing?

At Zapier, protecting our customers and their data is our top priority. As part of our ongoing security improvements, we're upgrading our infrastructure to the TLSv1.2_2021 security policy, which removes support for older Transport Layer Security (TLS) encryption methods (cipher suites) that no longer meet current security standards.

Supported cipher suites

Starting February 9, 2026, Zapier will only accept connections using the following cipher suites:

TLS 1.3 cipher suites:

  • TLS_AES_128_GCM_SHA256
  • TLS_AES_256_GCM_SHA384
  • TLS_CHACHA20_POLY1305_SHA256

TLS 1.2 cipher suites:

  • ECDHE-ECDSA-AES128-GCM-SHA256
  • ECDHE-ECDSA-AES256-GCM-SHA384
  • ECDHE-ECDSA-CHACHA20-POLY1305
  • ECDHE-RSA-AES128-GCM-SHA256
  • ECDHE-RSA-AES256-GCM-SHA384
  • ECDHE-RSA-CHACHA20-POLY1305

Timeline

Zapier encourages you to check and update your systems before January 12, 2025 to ensure a smooth transition.

Event Date Impact
24-hour connection test period January 12, 2026 Zapier will temporarily disable support for older cipher suites for 24 hours. Use this window to identify and update any systems that fail to connect.
Permanent change February 9, 2026 Older cipher suites will be permanently disabled. Systems using unsupported cipher suites will fail to connect to Zapier.

Why is it changing?

This update is essential to maintain the security of our systems and customer data. The deprecated cipher suites no longer meet current security standards and compliance requirements. Please check and update your systems accordingly. 

miscEye icon Note

This information was accurate at the time of publication. Please check out the latest product update notes for any updates or changes.

Was this article helpful?
0 out of 0 found this helpful