diff --git a/CHANGELOG.txt b/CHANGELOG.txt
index cc532e51..bd517d9d 100644
--- a/CHANGELOG.txt
+++ b/CHANGELOG.txt
@@ -1,3 +1,12 @@
+2026-02-12
+fix: prevent AlreadySentError in BruteForceProtection plug
+  - Fixed production exception where the plug attempted to register a before_send 
+    callback after already sending a 403 response to banned IPs
+  - Modified call/2 to check conn.halted before calling maybe_track_404/2
+  - Updated test to verify proper behavior without AlreadySentError workaround
+  - Files: lib/towerops_web/plugs/brute_force_protection.ex, 
+    test/towerops_web/plugs/brute_force_protection_test.exs
+
 CHANGELOG - towerops-web
 ========================
 
diff --git a/priv/static/changelog.txt b/priv/static/changelog.txt
index 2feb37e7..90aa9f0a 100644
--- a/priv/static/changelog.txt
+++ b/priv/static/changelog.txt
@@ -6,6 +6,7 @@ Devices Tested & Working
 2026-02-12
 * Fixed delay when switching between device tabs
 * Improved stability during deployments (graceful shutdown handling)
+* Fixed brute force protection stability issues
 * Error reporting improvements
 * Performance improvements for larger deployments
 * Extended vendor support for WISP equipment (ePMP, Raisecom, Netonix)