Open WebUI 0.12.0 adds realtime voice calls and MFA

Open WebUI v0.12.0 was published on GitHub on October 10, 2026 by the open-webui project. According to the release notes, it adds realtime voice calls, animated avatars, two-factor sign-in, replies in shared chats, model controls and version history for models, tools and skills.

Release facts

What changed

• Realtime voice calls. Administrators can switch Call mode from Standard to Realtime in Audio settings. Voice mode then talks through an OpenAI Realtime voice model (gpt-realtime-2.1-mini with the Marin voice by default) that hands real questions to the chat's selected model. Calls need the Allow Call permission and end after an hour.
• Two-factor sign-in. Administrators can require an authenticator app for every user. Users get ten single-use recovery codes, and OAuth and trusted-header sign-ins can be let through with bypass settings.
• Replying in shared chats. A new Sharing mode setting can move from Clone only to Allow replies, so everyone a chat or folder is shared with can keep writing in the same conversation.
• Model controls. Model editors can add named controls, such as a Thinking control whose Low, Medium and High options each set reasoning effort.
• Compaction during long tool runs. With context compaction on and native function calling, a reply with many tool calls is compacted between tool rounds once it passes the token threshold.
• Multi-file skills and version history. Workspace skills can hold supporting files next to SKILL.md, and saves of skills, models, tools and functions keep versions that can be restored.

Questions

Who can use realtime voice calls? Per the release notes, an administrator switches Call mode to Realtime, and users need the Allow Call permission. Calls end after an hour, and tool approvals and questions still have to be answered in the chat.

Can two-factor sign-in skip OAuth users? Yes. The release notes say OAuth and trusted-header sign-ins can be let through without it using the "MFA_ALLOW_OAUTH_BYPASS" and "MFA_ALLOW_TRUSTED_HEADER_BYPASS" settings.

Where do model controls not apply? The release notes say controls cannot be set on pipe, direct connection or arena models and are not applied to automation runs.

See the Open WebUI hub, the Agent infra category, or the related E2B 2.56.0 launch.