Cloudflare API Tokens

Cloudflare recently changed their API token format in 2026. The new tokens start with a friendly prefix to tell you if it's a User ("cfut_") or Account ("cfat_") API token at a glance.

This required a change to Caddy to accept the new token format for wildcard SSL certificates. If you have an existing Hatchbox server, you can update it to get the latest Caddy for compatibility with these new Cloudflare API tokens. Just click the "Update" button on your server and you'll be ready to go!

If you have any questions, send us a message in support and we'll get you sorted!