3.4.0 introduces a few major features:
- pluggable password validation, including a built-in version that does complexity checking and pwned checking.
- a unified sign in mechanism allowing for much more flexible ways for applications to enable authentication - including different forms of identity, and different ways to generate and accept password/pass codes.
Please see the CHANGES document for details.