CiviCRM Extended Security Release (ESR) provides a longer release of CiviCRM, allowing for fewer upgrades but fewer new features. The latest release of ESR is version 5.7 and is available to sponsoring Partners and to end user organizations that subscribe to it. It is free for CiviCRM members.

The latest stable version of CiviCRM, which is released monthly, will continue as it currently does. It is free to download and use, same as it was yesterday. Same as it always will be.

Why Extended Security Release?

There are several reasons to consider using CiviCRM ESR. Here are a few:

  1. For large organizations with heavy customizations, it may be advantegous to forego new features in exchange for consistency.
  2. For smaller organizations without a CiviCRM partner, you may find it onerous to upgrade monthly.
  3. Maybe you just want to help fund CiviCRM and, well, using ESR is as good as using the latest stable.

No matter the reason, CiviCRM ESR is not a newer, better, or otherwise premium version of CiviCRM. It is an older version that's supported longer, allowing organizations that prefer longevity over new features to have just that.

Some details

  1. CiviCRM ESR was released on November 7th and officiall began with CiviCRM version 5.7.
  2. It will receive 6 months of support (security and critical bug fixes) initially, guaranteed. If we cannot manage it in sustainable manner, we will discontinue it.
  3. The CT will endeavor to extend the release to a full 12 months of support, depending on the financial viability of maintaining this version of CiviCRM.

Support CiviCRM Extended Security Release

CiviCRM ESR is a paid version of CiviCRM. It is available to 1) CiviCRM Partners, 2) CiviCRM Members and 3) end user organizations that subscribe explicitly to ESR.

  1. For CiviCRM partners that want to use and support ESR, log into and click "Sponsor CiviCRM ESR”
  2. If you are a service provider that wants to use ESR for clients, please apply for partnership with CiviCRM first
  3. If you’re an end user organization, we encourage you to become a member. If membership is not an option, you may license Extended Security Release here

Common Questions

We just subscribed, how do we access ESR?

First and foremost, thank you for supporting ESR. We’ve already received your support and are processing it. We will send you your access key to the email you provided shortly. That will allow you to download a copy of the ESR releases.

We are already a member. Where do we get our access key?

Head over to this form and we’ll send you a key promptly.

We are an end user organization that’s subscribed to ESR. How many access keys can we have?

Each organization will be provided one key. That key may be used on your organization’s primary site as well as any testing or staging sites you may have.

We are a partner and manage CiviCRM for several clients. How many keys can we have?

As a partner, you will only need on key for all of your clients.

We deploy a site with a custom workflow based on "git". How can we merge ESR changes into our project?

ESR includes an export of the git history.  Alongside the normal downloads (such as "civicrm-X.Y.Z-drupal.tar.gz" or ""), there is another file "civicrm-X.Y.Z-patchset.tar.gz". The export is generated via "git format-patch", and you can import with "git am </path/to/patch/files>".  Of course, we can't anticipate all the custom workflows out there.  Fortunately, the patch-file format is versatile and supported by many tools.

Where can we participate in ESR related discussions?

ESR discussions take place in a dedicated channel on Register for an account at and we’ll add you to the channel.

Thanks to the following CiviCRM partners for supporting Extended Security Release

Need help upgrading to the latest version of ESR? ESR Sponsors are experts at deploying and maintaining CiviCRM.

Palante Tech Cooperative

Progressive Technology Project Backoffice Thinking Nubay Services Blackfly Solutions

JMA ConsultingCompucorpGreenleafSkvare