TTRPG news · Source announcement: 2026-11-02
Foundry Virtual Tabletop’s November 2 update, Version 14 Stable 12 (14.370), combines a notable security recommendation with practical changes for GMs. Players can manage their own passwords, while a new tool lets GMs build Regions from selected grid spaces—including holes in existing Regions. The release also flags a breaking change affecting a world-time callback. For existing Version 14 users, the security fixes are the clearest reason to review the update; back up world data before installing, as Foundry advises.
Security is the update’s practical priority
Foundry’s release note is unusually direct: it strongly recommends updating to 14.370, especially for people already using Version 14, because the release includes security fixes for upstream Node.js software. That makes this more than a cosmetic interface refresh, even though the announcement also highlights user-interface improvements.
Foundry cautions that stable releases can still bring unexpected bugs or compatibility issues. Its advice is to make a complete backup of user data before updating. For a live campaign, that is sensible preparation rather than a guarantee that every module or setup will behave identically afterward.
Regions gain finer control over the grid
The most visible GM-facing addition is the Draw Grid Spaces tool on the Region Layer. It lets GMs add or remove geometry one grid space at a time; the first selected space becomes the Region’s origin, and adjacent selected spaces combine automatically.
Foundry also says existing Regions can be edited and new grid-space shapes can be made as holes when Measured Template Mode is deactivated. That opens up more precise boundaries for encounter areas or template effects—for example, excluding allies from an area or marking a table as cover. Those are examples in the announcement, not a promise of automated rules handling.
Players can manage their own passwords
Users can now set, wipe, or change their own passwords through the User Configuration dialog, without asking the GM to do it for them. GMs can still manage passwords through User Management, and Foundry says the dialog also gives GMs additional options to wipe or change an individual user’s password.
The update also clarifies invitation-link controls: the refresh button’s scope is clearer, and the Internet entry is explicitly identified as the IPv4 address. These are smaller administrative changes, but they may make routine access management less ambiguous.
Check the flagged breaking change before upgrading
The release labels a change to CalendarData#onUpdateWorldTime as breaking. Foundry explains that the callback was not receiving the deltaTime parameter as expected and says it recognizes some users may have built implementations around the incorrect behavior.
This is the main compatibility detail to pass along to anyone maintaining a world or package that depends on that callback. The announcement points affected users to the associated issue for further information; it does not describe a broad incompatibility with all modules or worlds.
What existing owners should do
If you are already on Version 14, review the release and plan an update with a complete backup first. If your setup includes custom code or package work using CalendarData#onUpdateWorldTime, check the breaking-change issue before proceeding. GMs can also let players know that password changes are now available from their own User Configuration dialog.
The announcement covers a stable Foundry VTT release and its included changes; it does not claim that every third-party package is compatible. For GMs who want a separate, optional prep aid, the tools below can help with map-grid work, but they are not integrations or official assets for this release.
Sources and image credits
Original reporting based on the publisher’s announcement; this is not a hands-on review. Product plans and crowdfunding estimates may change.
Original AI-assisted editorial illustration created for GMCraft Tavern. This conceptual scene is not official publisher artwork, a product cover, or a software screenshot. GMCraft Tavern is independent of the publishers covered.