Mac Changelog

### Added
* Feature to clear Wi-Fi history. Details [here](https://github.com/Windscribe/Desktop-App/wiki/Clear-Wi%E2%80%90Fi-History-feature).
* Port selection on protocol change screen.

### Improved
* Edit box UX.
* CLI commands to return success when it is already in the correct state.
* WireGuard client IP determination and reduced dependency on server API.
* Tray menu UX for 'Show/Hide', replacing it with just 'Show app' on macOS and Linux.
* Automatic DNS manager detection on Linux.

### Fixed
* Helper resource leak on macOS and Linux.
* Editbox text may be cut off.
* Back button from captcha screen.
* IP rotate may be disabled unintentionally due to network changes.
* Invalid interfaces in MAC spoofing interface dropdown on Linux.

### Updated
* ctrld to 1.4.9.

### Added
* A reset password endpoint to wsnet.

### Improved
* Helper command robustness and removed unused commands.
* Windows helper code organization and interaction with the Service Control Manager.
* Logging & detection for abusers.
* Locations resizing behaviour.
* Window resizing behaviour and performance.
* Font sizing and contrast.
* Build system efficiency.
* Linux install scripts not to disable firewalld.

### Fixed
* WireGuard connection may not reconnect after Windows wakes from sleep mode.
* Potential crash in logging.
* macOS launcher, helper, and installer build config issues.
* macOS split tunneling extension not working after build system refactor.
* Helper commands sometimes get stuck on macOS 26.
* Package dependencies for arm64 architectures on Linux.
* Split tunnel toggles may be drawn at incorrect position.
* Tray icon sometimes can't be clicked on Linux.
* Text alignment in preferences.
* Scrollbar artifacts on curved border.
* Visual artifact when switching to ROBERT preferences.
* Context menu look on the custom config credentials prompt.
* Incorrectly calculated session token expiry in wsnet.
* Freshly launched app may not clean up stale interface on macOS and Linux.
* In-app data counter may be incorrect on macOS and Linux.
* Linux script not retaining SELinux context.

### Updated
* OpenVPN to 2.6.17.
* curl to the official 8.17.0 release.
* OpenSSL to 3.6.0, and deprecated use of oqsprovider for post-quantum algorithms.
* ctrld to 1.4.8.

### Added
* Individual toggle switches for split tunneling entries.
* Slovak translations from GitHub user `kubalav`.
* Greek (machine) translations.
* Prompt to use protocol as preferred after successful protocol failover.
* A backup endpoint for connectivity (tunnel) test in wsnet.

### Improved
* Connected DNS UX.
* Sorting of countries by latency.
* Protocol selection after failover.
* Manual connection mode to try alternate datacenter server, if available, when first connection attempt fails.
* Docked tray behaviour on Windows.
* UX when split tunneling is enabled but the macOS system extension has not been approved.
* German translations provided by GitHub user `Evonos`.
* Logging for account abuse.

### Fixed
* OpenVPN protocols not working on openSUSE Tumbleweed.
* Linux share proxy sometimes not working, particularly on CLI after reboot.
* IPv4/v6 DNS priority while connected on Linux.
* ctrld may not be terminated after disconnecting when using custom DNS preference.
* Protocol failover may cause IP pinning to fail.
* 'Firewall' label may be too long with some languages.
* One-time override not showing preferred protocol prompt.
* Background scaling issues on high DPI displays.
* Initial unhover opacity for IP utilities menu.
* Dropdown item order for sound notifications.
* Scrollbar was cutting off hover effect from location row.
* Window may extend beyond bottom of screen.
* A potential crash when clicking the login button multiple times.
* ws-no-pings advanced parameter is not respected.
* Rotating IP repeatedly and quickly may hit a rate limit.
* GUI misalignment and font when proxy gateway/secure hotspot are enabled.
* The login username input box losing focus when using the trackpad on macOS.
* Preferred protocol prompt should not be shown on IP rotate.
* A height calculation error for error descriptions.
* Installer background does not show on macOS 26.2 Beta.
* Tooltips not working at app launch until user clicks the main window on Linux.
* Qt log spam on Windows and Linux.

### Updated
* OpenVPN to 2.6.16.
* 7zr utility to 25.01 on Windows.

### Improved
* Additional Slovak translations from GitHub user kubalav.

### Fixed
* OpenVPN protocols not working on openSUSE Tumbleweed.
* 'Firewall' label may be too long with some languages.
* One-time override not showing preferred protocol prompt.
* Background scaling issues on high DPI displays.
* ctrld may not be terminated after disconnecting when using custom DNS preference.
* Initial unhover opacity for IP utilities menu.
* Dropdown item order for sound notifications.
* IPv4/v6 DNS priority while connected on Linux.

### Added
* A backup endpoint for connectivity (tunnel) test in wsnet.

### Improved
* German translations provided by GitHub user Evonos.
* Logging for account abuse.

### Fixed
* Preferred protocol prompt should not be shown on IP rotate.
* A height calculation error for error descriptions.
* Installer background does not show on macOS 26.2 Beta.
* Tooltips not working at app launch until user clicks the main window on Linux.
* Some Qt log spam on Windows.

# Added
* Individual toggle switches for split tunneling entries.
* Slovak translations from GitHub user kubalav.
* Greek (machine) translations.
* Prompt to use protocol as preferred after successful protocol failover.

# Improved
* Connected DNS UX.
* Sorting of countries by latency.
* Protocol selection after failover.
* Manual connection mode to try alternate datacenter server, if available, when first connection attempt fails.
* Docked tray behaviour on Windows.
* UX when split tunneling is enabled but the macOS system extension has not been approved.

# Fixed
* Scrollbar was cutting off hover effect from location row.
* Window may extend beyond bottom of screen.
* A potential crash when clicking the login button multiple times.
* ws-no-pings advanced parameter is not respected.
* Protocol failover may cause IP pinning to fail.
* Rotating IP repeatedly and quickly may hit a rate limit.
* Crash in wsnet on Android due to a limit on the maximum socket descriptor.
* Leftover windscribectrld instance may cause DNS conflict.
* GUI misalignment and font when proxy gateway/secure hotspot are enabled.
* The login username input box losing focus when using the trackpad on macOS.
* Linux share proxy sometimes not working, particularly on CLI after reboot.
* Qt log spam on Linux.

# Updated
* OpenVPN to 2.6.16.
* 7zr utility to 25.01 on Windows.

* [Added IP rotation & favourite functionality](https://windscribe.com/blog/ip-pinning-rotation/).
* Added 'Control D' option to Connected DNS.
* Added optional port selection when connecting with windscribe-cli.
* Added WireGuard post-quantum encryption notice to the readme.
* Improved locations UI design.
* Improved Korean translations from GitHub user Alex4386.
* Improved implementation of ICMP pings in wsnet.
* Improved detection when circumvent censorship should be enabled automatically.
* Improved tooltip usability.
* Fixed AirDrop not working when using split tunneling.
* Fixed automatic connection mode does not try alternate datacenter server, if available, when first connection attempt fails.
* Fixed erroneous assert in the debug log during GUI preferences output.
* Fixed unnecessary usage of environment variables for testing.
* Fixed GUI showing the wrong field for Connected DNS in some cases.
* Fixed GUI window not hidden correctly when transitioning.
* Fixed an application crash when quitting.
* Fixed error message not hidden after successful fetching of Control D devices after a failed attempt.
* Fixed OpenSSL auto-loading openssl.cnf.
* Fixed wsnet may stop processing DNS queries.
* Fixed behaviour when menu bar icon is hidden via System Settings and app is docked.
* Fixed OpenVPN protocols not connecting due to script permission.
* Removed Refresh button for locations.
* Updated ctrld to 1.4.7.

* Added IP rotation & favourite functionality.
* Added 'Control D' option to Connected DNS.
* Added WireGuard post-quantum encryption notice to the readme.
* Improved detection when circumvent censorship should be enabled automatically.
* Improved tooltip usability.
* Fixed automatic connection mode does not try alternate datacenter server, if available, when first connection attempt fails.
* Fixed erroneous assert in the debug log during GUI preferences output.
* Fixed unnecessary usage of environment variables for testing.
* Fixed GUI showing the wrong field for Connected DNS in some cases.
* Fixed GUI window not hidden correctly when transitioning.
* Fixed AirDrop not working when using split tunneling.
* Fixed an application crash when quitting.
* Fixed OpenSSL auto-loading openssl.cnf security vulnerability (ZDI-CAN-27873).
* Fixed wsnet may stop processing DNS queries.

- Added Refresh button for locations.
- Added optional port selection when connecting with windscribe-cli.
- Improved Korean translations from GitHub user Alex4386.
- Improved implementation of ICMP pings in wsnet.
- Fixed behaviour when menu bar icon is hidden via System Settings and app is docked.
- Fixed OpenVPN protocols not connecting due to script permission.
- Updated ctrld to 1.4.7.

- Added post-quantum cryptography server API integration.
- Added advanced parameters for overriding the API, assets, and checkip domains used in wsnet.
- Improved native window colours in accordance with OS theme.
- Improved the new UX introduced in 2.16.
- Improved icons on the favourites tab to be the country flag.
- Improved dependencies for audio.
- Improved wsnet to use bearer token in all server API calls.
- Improved highlight colours used in log viewer.
- Fixed high memory usage due to flag assets.
- Fixed unexpected scroll in the preferences screen when sending a debug log.
- Fixed resize bar in preferences screen is slightly offset when upgrade banner is visible.
- Fixed custom DNS preferences behaviour when user attempts to set Upstream 2 without first setting Upstream 1.
- Fixed incorrect URL for the 'connection mode' help link in preferences.
- Fixed regression in the in-app updater on macOS for versions 2.17.2-2.17.4.
- Fixed on certain screen scales the "Get more data" button is too large and overlaps the data counter.
- Fixed libcurl loading openssl.cnf from untrusted path.
- Fixed potential crash when operating with empty port map.
- Fixed some wsnet failover behaviour.
- Fixed wsnet not triggering failover on some invalid payloads.
- Fixed French translation of 'Release' update channel.
- Fixed pings may be invalidated while connected.
- Fixed last opened locations tab is not remembered.
- Fixed alert window cut off when showing an update error.
- Fixed installer alert border.
- Fixed app no longer debug logging to stdout.
- Fixed account status bottom-bar widget sometimes not displayed.
- Updated ctrld to 1.4.6.
- Removed the API resolution settings from the GUI as they are superseded by the new advanced parameters noted above.

* Improved highlight colours used in log viewer.
* Fixed high memory usage due to flag assets.
* Fixed unexpected scroll in the preferences screen when sending a debug log.
* Fixed resize bar in preferences screen is slightly offset when upgrade banner is visible.
* Fixed custom DNS preferences behaviour when user attempts to set Upstream 2 without first setting Upstream 1.
* Fixed incorrect URL for the 'connection mode' help link in preferences.
* Fixed regression in the in-app updater on macOS for versions 2.17.2-2.17.4.
* Fixed on certain screen scales the "Get more data" button is too large and overlaps the data counter.

- Added post-quantum cryptography server API integration.
- Added advanced parameters for overriding the API, assets, and checkip domains used in wsnet.
- Improved native window colours in accordance with OS theme.
- Improved the new UX introduced in 2.16.
- Improved icons on the favourites tab to be the country flag.
- Improved dependencies for audio.
- Improved wsnet to use bearer token in all server API calls.
- Fixed libcurl loading openssl.cnf from untrusted path.
- Fixed potential crash when operating with empty port map.
- Fixed some wsnet failover behaviour.
- Fixed wsnet not triggering failover on some invalid payloads.
- Fixed French translation of 'Release' update channel.
- Fixed pings may be invalidated while connected.
- Fixed last opened locations tab is not remembered.
- Fixed alert window cut off when showing an update error.
- Fixed installer alert border.
- Fixed app no longer debug logging to stdout.
- Updated ctrld to 1.4.6.
- Removed the API resolution settings from the GUI as they are superseded by the new advanced parameters noted above.

- Added new app UI design.
- Added bundled backgrounds and sound notifications.
- Added Look & Feel tab in preferences.
- Added two stage login and CAPTCHA.
- Added an advanced parameter to suppress pings (ws-no-pings).
- Added a new firewall mode Always On+.
- Added flags for new locations.
- Improved installer icon.
- Improved app logs to output GUI and engine settings in JSON format.
- Improved Chinese translation from GitHub user YerongAI.
- Improved build instructions.
- Improved WireGuard support on adverse networks by forcing a handshake after interface configuration.
- Improved inconsistent English spelling.
- Improved preferences import/export to include advanced parameters.
- Improved Russian translation.
- Fixed the Firewall Always On+ mode doesn't keep state on reboot.
- Fixed some blocking CLI commands may consume more CPU than intended.
- Fixed locations missing nicknames in tray menu.
- Fixed reconnection after waking from sleep may fail if split tunneling.
- Fixed Best Location may be chosen incorrectly.
- Fixed app firewall blocking Sidecar/Continuity features.
- Fixed build-a-plan shows as free account.
- Fixed in-app update download may fail prematurely on slow networks.
- Fixed (reduced) maximum CAPTCHA trail size which was causing login failures.
- Updated wireguard-go to 0.0.20250515.
- Updated c-ares to 1.34.5, added additional logs to wsnet.
- Updated ctrld to 1.4.4.

- Added new app UI design.
- Added bundled backgrounds and sound notifications.
- Added Look & Feel tab in preferences.
- Added two stage login and CAPTCHA.
- Added an advanced parameter to suppress pings (ws-no-pings).
- Added a new firewall mode Always On+.
- Added flags for new locations.
- Improved installer icon.
- Improved app logs to output GUI and engine settings in JSON format.
- Improved Chinese translation from GitHub user YerongAI.
- Improved build instructions.
- Improved WireGuard® support on adverse networks by forcing a handshake after interface configuration.
- Improved inconsistent English spelling.
- Improved preferences import/export to include advanced parameters.
- Improved Russian translation.
- Fixed the Firewall Always On+ mode doesn't keep state on reboot.
- Fixed some blocking CLI commands may consume more CPU than intended.
- Fixed locations missing nicknames in tray menu.
- Fixed reconnection after waking from sleep may fail if split tunneling.
- Fixed Best Location may be chosen incorrectly.
- Fixed app firewall blocking Sidecar/Continuity features.
- Updated wireguard-go to 0.0.20250515.
- Updated c-ares to 1.34.5, added additional logs to wsnet.
- Updated ctrld to 1.4.4.

- Added flag for Iran.
- Improved various issues with the new UI (e.g. colors, external config mode, keyboard handling in locations).
- Improved Russian translations.
- Improved detection of valid tray icon coordinates for the docked mode.
- Fixed wsnet sometimes not detecting OS Default DNS server when using DHCP on the app start.
- Fixed Look & Feel preferences not translated.
- Fixed 400 'header or cookie too large' for Cloudflare API endpoints.
- Fixed incorrectly formatted client log entries.
- Fixed misleading log message.
- Fixed app firewall blocking Sidecar/Continuity features.

- Fixed various UI bugs introduced by the UI redesign.
- Fixed app fails to connect when using 'remote' advanced parameter with WireGuard and connecting to a different location.
- Fixed flags which had rendering issues.
- Fixed curl timeouts in wsnet.

- Improved flag assets for new locations.
- Improved CAPTCHA screen design.
- Fixed minor UI bugs introduced with the new UI design.
- Updated ctrld to 1.4.4.

*** Known Issues ***
- Search for a location feature is a little wonky.

- Added new app UI design.
- Added bundled backgrounds and sound notifications.
- Added Look & Feel tab in preferences.
- Added two stage login and CAPTCHA.
- Added an advanced parameter to suppress pings (ws-no-pings).
- Added a new firewall mode Always On+.
- Improved app logs to output GUI and engine settings in JSON format.
- Improved Chinese translation from GitHub user YerongAI.
- Improved build instructions.
- Improved WireGuard support on adverse networks by forcing a handshake after interface configuration.
- Improved inconsistent English spelling.
- Improved preferences import/export to include advanced parameters.
- Fixed the Firewall Always On+ mode doesn't keep state on reboot.
- Fixed some blocking CLI commands may consume more CPU than intended.
- Fixed locations missing nicknames in tray menu.
- Fixed reconnection after waking from sleep may fail if split tunneling.
- Fixed Best Location may be chosen incorrectly.
- Updated wireguard-go to 0.0.20250515.
- Updated c-ares to 1.34.5, added additional logs to wsnet.

- Fixed MacOS app consuming memory extremely quickly after opening the app when docked.

### macOS
- Added location renaming feature.
- Added support for local DNS as connected DNS.
- Improved client log when unable to retrieve WireGuard config from server.
- Improved anti-censorship mechanisms.
- Improved IPC communication between the client and helper/service.
- Improved consistency of install package naming.
- Improved confusing "No P2P" icon.
- Improved flag assets.
- Improved UX when unable to connect to the Windscribe helper/service.
- Improved installer language detection to use app language if available.
- Improved behavior when the firewall is on and the app exits unexpectedly.
- Improved UX and fixed text overlaps on the static IPs screen.
- Improved UX when user connects with split tunneling enabled, but has not approved the extension.
- Improved startup time when not docked.
- Fixed searching for nicknames not working after location renaming feature.
- Fixed Ecuador flag.
- Fixed firewall blocking VPN connections on port 53.
- Fixed potential crash at exit.
- Fixed the app freezing on exit.
- Fixed cursor may not change when a location becomes disabled/enabled.
- Fixed static IP link color may be incorrect.
- Fixed firewall may be briefly incorrectly disabled after in-app update.
- Fixed tooltip sometimes shows behind main window.
- Fixed static IP locations that are unavailable are not displayed.
- Fixed window height is cut off if window transitions while being dragged.
- Fixed Best Location is chosen incorrectly.
- Fixed docked window is sometimes in the wrong position.
- Fixed double installation of the helper in the installer.
- Fixed translations for Arabic/Farsi in Decoy Traffic.
- Fixed incorrect comparison when importing renamed locations.
- Fixed custom config name is truncated too short.
- Fixed delayed app shutdown when connection preferences screen is visited and app exited shortly thereafter.
- Updated OpenVPN to 2.6.13.
- Updated Qt to 6.8.3.
- Updated ctrld to 1.4.3.
- Updated liboqs to 0.12.0 and oqs-provider to 0.7.0.
- Removed code usage of Qt5 compatibility module.

*** Known Issues ***
- On macOS Monterey/Ventura, due to an OS bug, using split tunneling with a TCP-based VPN protocol may result in a failure to connect. Please disable split tunneling or use a different protocol to work around this issue.

- Improved startup time when not docked.
- Fixed double installation of the helper in the installer.
- Fixed translations for Arabic/Farsi in Decoy Traffic.
- Fixed incorrect comparison when importing renamed locations.
- Fixed custom config name is truncated too short.
- Removed partial workaround for ctrld panic.
- Updated ctrld to 1.4.3.

- Added location renaming.
- Added support for local DNS as connected DNS.
- Improved client log when unable to get WG config from server.
- Improved anti-censorship mechanisms.
- Improved IPC communication between the client and helper/service, refactoring without changing the functionality of the program.
- Improved consistency of install package naming.
- Improved confusing "No P2P" icon.
- Improved flag assets.
- Improved UX when unable to connect to the Windscribe helper/service.
- Improved installer language detection to use app language if available.
- Improved behavior when the firewall is on and the app exits unexpectedly.
- Improved UX and fixed text overlaps on the static IPs screen.
- Improved UX when user connects with split tunneling enabled, but has not approved the extension.
- Fixed postquantum KEMs should not be proposed for mobile platforms in wsnet.
- Fixed searching for nicknames not working after location renaming feature.
- Fixed Ecuador flag, redux.
- Fixed firewall blocking VPN connections on port 53.
- Fixed potential crash at exit.
- Fixed the app freezing on exit.
- Fixed cursor may not change when a location becomes disabled/enabled.
- Fixed static IP link color may be incorrect.
- Fixed firewall may be briefly incorrectly disabled after in-app update.
- Fixed tooltip sometimes shows behind main window.
- Fixed static IP locations that are unavailable are not displayed.
- Fixed window height is cut off if window transitions while being dragged.
- Fixed Best Location is chosen incorrectly.
- Fixed docked window is sometimes in the wrong position.
- Updated OpenVPN to 2.6.13.
- Updated Qt to 6.8.3.
- Updated liboqs to 0.12.0 and oqs-provider to 0.7.0.
- Updated ctrld to 1.4.2.
- Removed code usage of Qt5 compatibility module.

*** Known Issue ***

Only premium Control D DoH resolvers, and any IPv4 DNS resolver, will work as a custom DNS on macOS 14+.

SHA-256: 46c0f014bc4b9da72c911fd960d6557f4558c39668d0221d8fcfa999cb8addeb

- Added initial implementation of per-app split tunneling.
- Added Decoy Traffic feature.
- Added extended cleanup logs in wsnet.
- Improved multi-desktop app window behavior.
- Improved app split tunneling to not require signature identifier.
- Improved custom connected DNS error UX.
- Improved initialization and preferences animations.
- Improved log frequency in wsnet.
- Improved reliability of wsnet in unstable network environments.
- Improved ping logging.
- Improved the Decoy Traffic feature to upload and download independently, and improved its UI.
- Improved reliability of wsnet in unstable network environments.
- Fixed location tab transitions to search tab even when modifier keys are pressed.
- Fixed unnecessary delay when disconnecting.
- Fixed DNS not working on macOS 15.4 Beta 2.
- Fixed toggling split tunneling mode while connected with WireGuard may cause loss of connection.
- Fixed app is launched minimized instead of minimized to tray when Start Minimized and Close to Tray are enabled.
- Fixed split tunnel extension sometimes not started.
- Fixed potential crash in ProcessManager [wsnet].
- Fixed inclusive split tunneling, IPv6 interactions, and split tunneling extension versioning.
- Fixed app stuck during login after accepting prompt to ignore SSL errors.
- Fixed incorrect post quantum KE algorithm.
- Fixed app does not retry login if first attempt failed due to lack of connectivity.
- Fixed Allow LAN traffic precedence.
- Fixed mangled ar/fa translations.
- Fixed codesigning for macOS 11.
- Fixed sometimes IP does not change after connecting with inclusive split tunnel.
- Fixed incorrect network status detection.
- Fixed missing firewall rule allowing the VPN DNS when using IKEv2.
- Fixed installer alerts may not fit in window for some translations.
- Fixed "reset date" being shown on account screen instead of "expiry date" for some plans.
- Fixed 2FA code expires before working endpoint can be found [wsnet].
- Fixed disconnecting due to out of data turns off firewall.
- Fixed incorrect check for LAN address for custom DNS.
- Fixed inconsistent behavior when starting app and 'close to tray' is enabled.
- Fixed window size after dismissing alert at the login window.
- Fixed split tunnel extension versioning.
- Fixed DNS no longer allowed by firewall if toggled while connected.
- Removed IPv6 split tunneling (for now) due to edge cases.
- Removed some log spam.
- Updated wstunnel dependency to v1.0.5. Adds support for anti-censorship TLS stuffing.

SHA-256: 0210daf83ffb18ac4266bc03ee4768c7c1be3c9d673d35a69b3518cd7bef6ccd

- Added initial implementation of per-app split tunneling.
- Added Decoy Traffic feature.
- Added extended cleanup logs in wsnet.
- Improved multi-desktop app window behavior.
- Improved app split tunneling to not require signature identifier.
- Improved custom connected DNS error UX.
- Improved initialization and preferences animations.
- Improved log frequency in wsnet.
- Improved reliability of wsnet in unstable network environments.
- Improved ping logging.
- Improved the Decoy Traffic feature to upload and download independently, and improved its UI.
- Improved reliability of wsnet in unstable network environments.
- Fixed location tab transitions to search tab even when modifier keys are pressed.
- Fixed unnecessary delay when disconnecting.
- Fixed DNS not working on macOS 15.4 Beta 2.
- Fixed toggling split tunneling mode while connected with WireGuard may cause loss of connection.
- Fixed app is launched minimized instead of minimized to tray when Start Minimized and Close to Tray are enabled.
- Fixed split tunnel extension sometimes not started.
- Fixed potential crash in ProcessManager [wsnet].
- Fixed inclusive split tunneling, IPv6 interactions, and split tunneling extension versioning.
- Fixed app stuck during login after accepting prompt to ignore SSL errors.
- Fixed incorrect post quantum KE algorithm.
- Fixed app does not retry login if first attempt failed due to lack of connectivity.
- Fixed Allow LAN traffic precedence.
- Fixed mangled ar/fa translations.
- Fixed code signing for macOS 11.
- Fixed sometimes IP does not change after connecting with inclusive split tunnel.
- Fixed incorrect network status detection.
- Fixed missing firewall rule allowing the VPN DNS when using IKEv2.
- Fixed installer alerts may not fit in window for some translations.
- Fixed "reset date" being shown on account screen instead of "expiry date" for some plans.
- Fixed 2FA code expires before working endpoint can be found [wsnet].
- Fixed disconnecting due to out of data turns off firewall.
- Fixed incorrect check for LAN address for custom DNS.
- Fixed inconsistent behavior when starting app and 'close to tray' is enabled.
- Fixed window size after dismissing alert at the login window.
- Fixed split tunnel extension versioning.
- Fixed DNS no longer allowed by firewall if toggled while connected.
- Removed IPv6 split tunneling (for now) due to edge cases.
- Removed some log spam.
- Updated wstunnel dependency to v1.0.5. Adds support for anti-censorship TLS stuffing.

SHA-256: 1b75f4f08679b701e229fd5559ddf269d0f979c2a47064255a858f36d5ac3d1e

- Improved the Decoy Traffic feature to upload and download independently, and improved its UI.
- Improved reliability of wsnet in unstable network environments.
- Fixed location tab transitions to search tab even when modifier keys are pressed.
- Fixed unnecessary delay when disconnecting.
- Fixed DNS not working on macOS 15.4 Beta 2.
- Fixed toggling split tunneling mode while connected with WireGuard may cause loss of connection.

SHA-256: 5d92214f0de1a834d896f0fdbbcd29286ac23cef2ebf4b8c663f5838c462cfaf

- Improved reliability of wsnet in unstable network environments.
- Improved ping logging.
- Fixed app is launched minimized instead of minimized to tray when Start Minimized and Close to Tray are enabled.
- Fixed split tunnel extension sometimes not started.

SHA-256: 20927f9c016f996540dd28902dd268fcd1929dd1f47ddeed556f70509975ae47

- Added extended cleanup logs in wsnet.
- Improved initialization and preferences animations.
- Improved log frequency in wsnet.
- Fixed inconsistent behavior when starting app and 'close to tray' is enabled.
- Fixed window size after dismissing alert at the login window.
- Fixed split tunnel extension versioning.
- Fixed DNS no longer allowed by firewall if toggled while connected. **


*** Known Issue ***

** If you are already running 2.14.x, this fix will only be applied if you drag the app to trash, reboot, then install this new version.

SHA-256: 0e773e7816052e7ae8673563e04ebffc9dfe927cb98416a69b568a502b12fceb

- Added Decoy Traffic feature.
- Improved multi-desktop app window behavior.
- Improved app split tunneling to not require signature identifier.
- Fixed potential crash in ProcessManager [wsnet].
- Fixed inclusive split tunneling, IPv6 interactions, and split tunneling extension versioning.
- Fixed app stuck during login after accepting prompt to ignore SSL errors.
- Fixed incorrect post quantum KE algorithm.
- Fixed app does not retry login if first attempt failed due to lack of connectivity.
- Fixed Allow LAN traffic precedence.
- Fixed mangled ar/fa translations.
- Fixed codesigning for macOS 11.
- Fixed sometimes IP does not change after connecting with inclusive split tunnel.
- Removed IPv6 split tunneling (for now) due to edge cases.
- Removed some log spam.

SHA-256: e03b28b2e3dac57b817602835fabe79f5449474e60ff51d6787516ef90260468

- Added intial implementation of per-app split tunneling.
- Improved custom connected DNS error UX.
- Fixed incorrect network status detection.
- Fixed missing firewall rule allowing the VPN DNS when using IKEv2.
- Fixed installer alerts may not fit in window for some translations.
- Fixed "reset date" being shown on account screen instead of "expiry date" for some plans.
- Fixed 2FA code expires before working endpoint can be found [wsnet].
- Fixed disconnecting due to out of data turns off firewall.
- Fixed incorrect check for LAN address for custom DNS.
- Updated wstunnel dependency to v1.0.5. Adds support for anti-censorship TLS stuffing.

SHA-256: 7e297e284037891f31e0a1e465a512cc980b9bf50ba55f4d725c82366acd5328

- Added IPv6 support for split tunneling.
- Added static IP support in CLI.
- Added toggle to enable proxy gateway only while VPN is connected, based on contributions from GitHub user intangir.
- Added h3:// and sdns:// protocol support for ctrld (custom DNS preference).
- Added a changelog link in the About preferences screen.
- Added back translation keys for 'Release' and 'Beta' release channels.
- Improved location ordering when searching.
- Improved UX for some CLI commands.
- Improved CLI entry of credentials when logging in.
- Improved Japanese translations from GitHub user Ue05.
- Improved Russian translations from GitHub user MedicalJewel105.
- Improved login/logout CLI flow.
- Improved UX and performance when dragging windows to different screens.
- Improved logs in the client.
- Fixed autoconnect attempting to connect to invalid locations.
- Fixed incorrect static device name.
- Fixed scroll position not retained when leaving/reentering a window.
- Fixed importing JSON may put the Secure Hotspot preference in an invalid state.
- Fixed changelog link for many platforms was incorrect in General Preferences.
- Fixed incorrect connectivity detection on MacOS 15.x+ when rebooting the OS with the firewall set to always on.
- Fixed a potential program quit hang [wsnet].
- Fixed custom config path not checked when importing preferences.
- Fixed missing null pointer checks in the client application.
- Fixed symlink target for windscribe-cli.
- Fixed additional 'Start Minimized' use cases.
- Fixed static IP commands in CLI with GUI backend.
- Fixed CLI symlink sometimes not created on macOS.
- Fixed Start Minimized may not work when "Minimize windows into application icon" is on.
- Fixed missing null checks.
- Fixed the Ecuador flag.
- Removed IPv6 enabling/disabling.
- Updated ctrld, utilized by the custom DNS feature, to 1.3.10.

SHA-256: 1d31dc3cf00884fcac4cec7761751d70c085040b17d6d6adc1afd736e5b5abd2

- Fixed autoconnect attempting to connect to invalid locations.
- Fixed incorrect static device name.
- Fixed scroll position not retained when leaving/reentering a window.
- Fixed importing JSON may put the Secure Hotspot preference in an invalid state.
- Fixed changelog link for many platforms was incorrect in General Preferences.
- Fixed incorrect connectivity detection on MacOS 15.x+ when rebooting the OS with the firewall set to always on.

SHA-256: aefb32260c1e5ccc9ba58f7f8054ab1eafaea763c79370e5e862873b1da38219

- Added a changelog link in the About preferences screen.
- Fixed the Ecuador flag.

SHA-256: 4170a85aed13c9d9a53cb4bbc2272e353bbfb4ebb493319b2e588b7ff26cec02

- Improved login/logout CLI flow.
- Improved UX and performance when dragging windows to different screens.
- Improved logs in the client.
- Fixed a potential program quit hang [wsnet].
- Fixed custom config path not checked when importing preferences.
- Fixed missing null pointer checks in the client application.
- Fixed symlink target for windscribe-cli.
- Fixed additional 'Start Minimized' use cases.

SHA-256: 1b6438ba884d24da5b6939696bcc6539ad0ff70b2903d939559b6be1358ae340

- Added IPv6 support for split tunneling.
- Added Static IP support in CLI.
- Added toggle to enable proxy gateway only while VPN is connected, based on contributions from GitHub user intangir.
- Added h3:// and sdns:// protocol support for ctrld (custom DNS preference).
- Added back translation keys for 'Release' and 'Beta' release channels.
- Improved location ordering when searching.
- Improved UX for some CLI commands.
- Improved CLI entry of credentials when logging in.
- Improved Japanese translations from GitHub user Ue05.
- Improved Russian translations from GitHub user MedicalJewel105.
- Fixed Static IP commands in CLI with GUI backend.
- Fixed CLI symlink sometimes not created on macOS.
- Fixed Start Minimized may not work when "Minimize windows into application icon" is on.
- Fixed missing null checks.
- Removed IPv6 enabling/disabling.
- Updated ctrld to 1.3.10.

SHA-256: e49a734482fb1f6aaf8775ab3138abdd359b2e331519bd8c62ab68650e60b579

- Added flags for new and upcoming locations.
- Added link to our website for further information about the Circumvent Censorship feature in preferences.
- Added additional curl logs for failed server API requests in wsnet.
- Improved description for packet size, clarifying that it doesn't do anything for TCP-based protocols.
- Improved behavior when querying the SSID on macOS 15.
- Improved error message when update download fails.
- Improved the failover algorithm in wsnet to prevent it from 'sticking' to one domain.
- Fixed installer may mangle the 'windscribe' user if it's a regular user.
- Fixed always-on firewall may not be enabled after reboot.
- Fixed installer window in wrong position during in-app update.
- Fixed unexpected permission prompt during upgrade.
- Fixed custom DNS may be bound to wrong interface due to firewall state cache.
- Fixed imported JSON values may be incorrect.
- Fixed additional JSON & GUI input validation errors.
- Fixed debug log may fail to send.
- Fixed double blinking cursors on custom config credentials prompt.
- Fixed custom config authorization data not deleted when custom config directory cleared.
- Fixed latency endpoint duplicate requests.
- Fixed potential app crash when App Internal DNS setting is 'OS Default'.
- Fixed potential app crash when installing helper.
- Fixed memory leaks in IPC and other macOS-specific code.
- Fixed proxy validation to only allow an IP address. Prior proxy configurations using a hostname will no longer function.
- Fixed proxy gateway sometimes sends invalid headers.
- Fixed memory leaks in wsnet.
- Updated German translations provided by GitHub user Evonos.
- Updated Spanish translations provided by GitHub user IceString3.
- Updated Russian translations in installer.
- Updated c-ares in wsnet to the latest version 1.33.1, increased timeouts for DNS requests.

SHA-256: 64af04504306dc12778f5498cb9f397ff7ef7ee9507757f20c14f0bfd181a260

- No changes from 2.12.3.

SHA-256: 1efb6e9846fb690b897c06701b75ea35287a2e29f2406fc760feeb13d53bd22e

- Added link to our website for further information about the Circumvent Censorship feature in preferences.
- Fixed potential app crash when App Internal DNS setting is 'OS Default'.
- Fixed potential app crash when installing helper.
- Fixed memory leaks in IPC and other macOS-specific code.
- Fixed imported JSON values may be incorrect.
- Fixed proxy validation to only allow an IP address. Prior proxy configurations using a hostname will no longer function.
- Fixed proxy gateway sometimes sends invalid headers.
- Fixed memory leaks in wsnet.
- Updated Russian translations in installer.

SHA-256: a57f63fe99a16e01ca5722b0fe91089a8826fc67aebd7250a68c02313f234c14

- Improved Spanish translations.
- Improved error message when update download fails.
- Improved the failover algorithm in wsnet, don't stick to one domain.
- Fixed installer may mangle the 'windscribe' user if it's a regular user.
- Fixed always-on firewall may not be enabled after reboot.
- Updated c-ares in wsnet to the latest version 1.33.1, increased timeouts for DNS requests.

Released: 2024/10/01
SHA-256: a743fe647e83c80bfa26fe52e9ed49d1e73184c59e06ed9f341905845c794160

- Improved description for packet size, clarifying that it doesn't do anything for TCP-based protocols.
- Improved behavior when trying to get SSID on macOS 15.
- Fixed installer window in wrong position during in-app update.
- Fixed unexpected permission prompt during upgrade.
- Fixed custom DNS may be bound to wrong interface due to firewall state cache.
- Fixed additional JSON & GUI input validation errors.
- Fixed debug log may fail to send. OpenSSL updated to the latest commit, version 3.4.0.
- Fixed double blinking cursors on custom config credential prompt.
- Fixed custom config auth data not deleted when custom config dir cleared.
- Fixed latency endpoint duplicate requests.
- Updated German translations provided by GitHub user Evonos.
- Updated Spanish translations provided by GitHub user IceString3.

Released: 2024/09/16
SHA-256: 965f17aff5e2e551ce89d95aefa27f7d1cbb8cd2de4d4650dff67e940079fd20

- Added support for quantum-safe TLS and OpenVPN.
- Added CLI mechanisms to connect with a specific protocol, and improve help.
- Added port selection to proxy gateway.
- Improved debug log usefulness by adding routing table.
- Improved IPC sockets/lockfiles by consolidation.
- Improved installer archive generation and extraction to use built-in macOS utilities.
- Improved JSON import validation.
- Improved an error message when a custom config fails to connect with incorrect credentials.
- Improved dialog verbiage when secure hotspot is enabled without Wi-Fi.
- Fixed displayed IP not changing for split inclusive tunnels.
- Fixed potential application hang in system 'log' call when initiating an IKEv2 connection.
- Fixed disabling/restoring IPv6 may do so on non-existent interface.
- Fixed potential for uncaught exceptions thrown by the std::filesystem API to cause the app to crash.
- Fixed incorrect description for Client-side Keepalive preference.
- Fixed logged out when downgrading to earlier version.
- Fixed JSON & ini validation for Split DNS domains.
- Fixed JSON import not exporting/importing "Auto-Secure" setting.
- Fixed sorting by latency when some locations have no ping info.
- Fixed GUI allowing invalid proxy address/port.
- Fixed potential app crash if the app is connected and the system is restarted.
- Fixed installer may not exit after attempting to launch app.
- Fixed SSID detection not working in macOS 15.
- Fixed moving app window is not smooth.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed app not showing an error when ctrld fails to execute.
- Fixed app is very sluggish with many split tunnel hostnames.
- Fixed split tunneling may not function correctly on macOS 15.
- Fixed app crash when cancelling 'install helper' dialog.
- Fixed handling of 0.0.0.0 response from DNS server for split tunnel hostnames.
- Fixed proxy gateway port not displaying 'Auto' when edit is cancelled.
- Fixed a wrong translation in Ukrainian.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed app may be quarantined by macOS.
- Fixed displayed IP not changing for split inclusive tunnels.
- Fixed split tunnel include rules should not keep state.
- Fixed helper checks for URLs for custom DNS are too strict.
- Fixed windscribe-cli not working on macOS 11.
- Fixed windscribe group may not be added in some cases.
- Fixed scenario where displayed location does not match actual location.
- Fixed the timeout calculation in wsnet library. Added additional logs for tunnel tests.
- Fixed the error message when the remember checkbox wasn't ticked on the wrong credentials.
- Fixed DNS cache not cleared in wsnet when connecting or disconnecting to the VPN.
- Fixed macOS auto-update process fails to mount installer.
- Fixed spammy log when getting SSID.
- Updated Chinese (Simplified) translations provided by GitHub user YerongAI.
- Updated French translations provided by GitHub user RaphxelS.
- Updated Polish translations provided by GitHub user raspin0.
- Updated Ukrainian translations provided by GitHub users mljoke and Artem-CD.
- Updated libcurl, libcares, openvpn, and liboqs to the latest versions.

Released: 2024/09/05
SHA256: 1a96ff314916bdaefe0c2cac87dd6c51aa2c862266602fdbd28696742bde998b

- Improved dialog verbiage when secure hotspot is enabled without Wi-Fi.
- Fixed the error message when the remember checkbox wasn't ticked on the wrong credentials.

Released: 2024/08/29
SHA-256: 0525a85b649be89b479fd87f582000399a34e36530633a155b013d1bf1432a7f

- Added the new parameter language to wsnet library.
- Improved an error message when a custom config fails to connect with incorrect credentials.
- Fixed scenario where displayed location does not match actual location.
- Fixed the timeout calculation in wsnet library. Added additional logs for tunnel tests.

Released: 2024/08/20
SHA-256: 5f4a78a53db766179af87ff4e84c6d0852383499a6e0942d4d5dace9b8aa92a5

- Fixed displayed IP not changing for split inclusive tunnels.
- Fixed potential application hang in system 'log' call when initiating an IKEv2 connection.
- Fixed disabling/restoring IPv6 may do so on non-existent interface.
- Fixed potential for uncaught exceptions thrown by the std::filesystem API to cause the app to crash.
- Fixed incorrect description for Client-side Keepalive preference.
- Fixed logged out when downgrading to earlier version.
- Fixed JSON & ini validation for Split DNS domains.
- Fixed JSON import not exporting/importing "Auto-Secure" setting.
- Fixed sorting by latency when some locations have no ping info.
- Fixed GUI allowing invalid proxy address/port.
- Fixed potential app crash if the app is connected and the system is restarted.
- Updated Chinese (Simplified) translations provided by GitHub user YerongAI.
- Updated French translations provided by GitHub user RaphxelS.
- Updated Polish translations provided by GitHub user raspin0.
- Updated Ukrainian translations provided by GitHub users mljoke and Artem-CD.

Note: please use one of the OpenVPN-based protocols if you have the anticensorship feature enabled. We are investigating a possible incompatibility with the feature and the WireGuard protocol.

Released: 2024/08/06
SHA-256: 1f3d71ea3b19b29de102e8cfb4a292573bf936ef95229b6547692704bf19024f

- Improved JSON import validation.
- Fixed displayed IP not changing for split inclusive tunnels.
- Fixed split tunnel include rules should not keep state.
- Fixed helper checks for URLs for custom DNS are too strict.
- Fixed windscribe-cli not working on macOS 11.
- Fixed windscribe group may not be added in some cases.
- Updated libcurl, libcares, openvpn, and liboqs to the latest versions.

Released: 2024/07/16
SHA-256: 73d70c0f979b9b8090b2500ab47f4ad9b6e1e365dbfe6b1bdc2521962cbd66f2

- Added support for quantum-safe TLS and OpenVPN.
- Added CLI mechanisms to connect with a specific protocol, and improve help.
- Added port selection to proxy gateway.
- Improved debug log usefulness by adding routing table.
- Improved IPC sockets/lockfiles by consolidation.
- Improved installer archive generation and extraction to use built-in macOS utilities.
- Fixed installer may not exit after attempting to launch app.
- Fixed SSID detection not working in MacOS 15.
- Fixed moving app window is not smooth.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed app not showing an error when ctrld fails to execute.
- Fixed app is very sluggish with many split tunnel hostnames.
- Fixed split tunneling may not function correctly on MacOS 15.
- Fixed app crash when cancelling 'install helper' dialog.
- Fixed handling of 0.0.0.0 response from DNS server for split tunnel hostnames.
- Fixed proxy gateway port not displaying 'Auto' when edit is cancelled.
- Fixed a wrong translation in Ukrainian.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed app may be quarantined by MacOS.

Released: 2024/07/02
SHA-256: a204f64bdc1448c23c6b8b6c4609158455fd393131b74a4b25c4f0801aa3fd94

- Added support for private key passwords in OpenVPN custom configs.
- Added wsnet library + switched to vcpkg dependency management system.
- Added taskbar notification when the app needs attention.
- Added a limit of 50 hostname split tunnel entries to ensure stability.
- Improved best location selection to lean towards 10 Gbps servers.
- Improved OpenVPN and WireGuard anti-censorship.
- Improved internal error handling.
- Improved IPC message passing to adhere to best practices.
- Improved helper upgrade flow.
- Improved retry efficiency for requests that are blocked [wsnet].
- Improved custom DNS to not use ctrld if custom DNS is set to an IPv4 address.
- Improved conditions for network connectivity detection.
- Improved installer robustness in error situations.
- Improved failover retry on WireGuard.
- Improved UI header transparency and color.
- Improved stability of DNS resolution for hostnames when using split tunneling.
- Improved UX of the protocol/port line when protocol selection is not available.
- Improved the look and translations on the Emergency Connect screen.
- Improved handling of custom configs with "dev tap", overriding automatically to "dev tun".
- Improved location search by allowing search by country code.
- Improved updating random hashed domains in a timely manner.
- Improved operation in Lockdown Mode by removing IKEv2 where applicable, or displaying a meaningful error.
- Improved Polish translations.
- Improved custom config credential prompt.
- Improved IP display to "---.---.---.---" if unable to get local IP, instead of "N/A".
- Improved emergency connect to always connect with the more secure algorithms.
- Improved LZMA dependency management.
- Improved exponential back-off algorithm for pings to determine failed nodes.
- Fixed tooltip not displaying when mouse hovers over protocol line for a custom config.
- Fixed app crash if app exits during startup.
- Fixed MacOS 11 bug, unable to open app after installing.
- Fixed WireGuard takes too long to connect and tunnel tests are randomly slow.
- Fixed not adding the windscribe group in the helper.
- Fixed Mac pid checking vulnerability.
- Fixed crash when using custom configs.
- Fixed a scenario where IKEv2 would be attempted in Lockdown Mode.
- Fixed Free Data usage in app doesn't update.
- Fixed failed assertion in log for EmailItem.
- Fixed Secure Hotspot password not masked in UI.
- Fixed serverlist API country_override parameter doesn't enable Circumvent Censorship on first app launch.
- Fixed ignore country override when connected to a VPN.
- Fixed right clicking on login screen may show context menu away from the widget.
- Fixed custom config stays connected if folder is removed.
- Fixed getting SSID from MacOS 14.4 since it no longer reports it via scutil.
- Fixed various compile warnings introduced in 2.10.x.
- Fixed DNS servers in the wsnet library not updating on the client connection/disconnection events.
- Fixed protocol selector should not be available in external config mode.
- Fixed selected location not reset after removing custom config folder.
- Fixed another display issue and crash in custom config credential prompt.
- Fixed display issue and crash in custom config credential prompt.
- Fixed anti-censorship flag (TLS stuffing) does not work for server API.
- Removed MAC spoofing feature if using MacOS 14.4 or later.
- Updated ctrld dependency to 1.3.7.
- Updated README.md to indicate usage of Xcode 14.2.
- Updated dependencies, c-ares to 1.25.0 and boost to 1.84.0.
- Updated README.md file (build instructions).

Released: 2024/06/25
SHA-256: 236f93a5196ba5f8ff05ad7e7f16fe8ea471bf543821f7faa250465d317a51fe

- Improved best location selection to lean towards 10 Gbps servers.

Released: 2024/06/17
SHA-256: 0899cd1ec4ed0e64f95753c4107660309f54b82612be319213fb05ed624d1a8c

- Improved OpenVPN and WireGuard anti-censorship.
- Improved wsnet to use TLS padding when anti-censorship is enabled.
- Fixed wsnet thread synchronization issue that could cause a crash.

Released: 2024/06/05
SHA-256: 765783f3d1dfb55c9132102453f373778070aff79f9f78aa77b0c1a508e43dae

- Improved internal error handling.
- Improved limit of 50 split tunnel entries to only apply to hostnames.
- Improved IPC message passing to adhere to best practices.
- Improved helper upgrade flow.
- Fixed tooltip not displaying when mouse hovers over protocol line for a custom config.
- Fixed app crash if app exits during startup.
- Fixed wsnet bug sometimes causing the library to freeze.
- Fixed MacOS 11 bug, unable to open app after installing.
- Fixed Wireguard takes too long to connect and tunnel tests are randomly slow.
- Fixed not adding the windscribe group in the helper.
- Fixed Mac pid checking vulnerability.
- Updated ctrld dependency to 1.3.7.

Released: 2024/04/08
SHA-256: d8cd97ba4d170eb87b2d5fb433c557a32b1cc82fbecc6d522a83130fc1eaba80

- Fixed anti-censorship flag (TLS stuffing) does not work for server API.

Released: 2024/04/01
SHA-256: 209ee0a4992a9568bce7480b5f2672f9257a11b29f247732b1a72f575b632861

- Added a limit of 50 split tunnel entries to ensure stability.
- Improved retry efficiency for requests that are blocked [wsnet].
- Improved custom DNS to not use ctrld if custom DNS is set to an IPv4 address.
- Improved conditions for network connectivity detection.
- Improved installer robustness in error situations.
- Fixed crash when using custom configs.
- Fixed a scenario where IKEv2 would be attempted in Lockdown Mode.
- Fixed callback may not be called on error [wsnet].

Released: 2024/03/19
SHA-256: 2f5e58b0bbd0c4062b5a45a1f66e83612badae5741fe01e5320eecab5ceac112

- Added support for private key passwords in OpenVPN custom configs.
- Added the user-agent request header to all HTTP-requests [wsnet].
- Added new API endpoints needed for mobile [wsnet].
- Improved failover retry on WireGuard.
- Improved UI header transparency and color.
- Improved stability of DNS resolution for hostnames when using split tunneling.
- Improved UX of the protocol/port line when protocol selection is not available.
- Improved the look and translations on the Emergency Connect screen.
- Improved handling of custom configs with "dev tap", overriding automatically to "dev tun".
- Improved location search by allowing search by country code.
- Improved updating random hashed domains in a timely manner.
- Improved operation in Lockdown Mode by removing IKEv2 where applicable, or displaying a meaningful error.
- Fixed getting SSID from MacOS 14.4 since it no longer reports it via scutil.
- Fixed various compile warnings introduced in 2.10.x.
- Fixed DNS servers in the wsnet library not updating on the client connection/disconnection events.
- Fixed protocol selector should not be available in external config mode.
- Fixed wsnet versioning to be the same as the client application [wsnet].
- Fixed selected location not reset after removing custom config folder.
- Fixed another display issue and crash in custom config credential prompt.
- Fixed display issue and crash in custom config credential prompt.
- Removed MAC spoofing feature if using MacOS 14.4 or later.
- Updated ctrld dependency to 1.3.5.
- Updated README.md to indicate usage of Xcode 14.2.

Released: 2024/02/29
SHA-256: 30af20f4e43d2413123ea665b3a75dfafe5ce85450a00a7532b3988ff6e9e681

- Added wsnet library + switched to vcpkg dependency management system.
- Added taskbar notification when the app needs attention.
- Improved anti-censorship measures in WireGuard and OpenSSL.
- Improved Polish translations.
- Improved secrets organization in the wsnet library.
- Improved custom config credential prompt.
- Improved IP display to "---.---.---.---" if unable to get local IP, instead of "N/A".
- Improved emergency connect to always connect with the more secure algorithms.
- Improved LZMA dependency management.
- Improved exponential back-off algorithm for pings to determine failed nodes.
- Fixed Free Data usage in app doesn't update.
- Fixed some bugs in the wsnet library regarding mutlithreading/deadlocks.
- Fixed failed assertion in log for EmailItem.
- Fixed advanced parameter ws-use-icmp-pings ignored by app.
- Fixed Secure Hotspot password not masked in UI.
- Fixed serverlist API country_override parameter doesn't enable Circumvent Censorship on first app launch.
- Fixed ignore country override when connected to a VPN.
- Fixed Help screen to only show human support link for Pro accounts, and update descriptions.
- Fixed right clicking on login screen may show context menu away from the widget.
- Fixed custom config stays connected if folder is removed.
- Updated dependencies, c-ares to 1.25.0 and boost to 1.84.0.
- Updated README.md file (build instructions).

Released: 2024/02/20
SHA-256: 683093d718680f1cb8b5fe0c4ec14fd1fdad357c9a9a46438feeb19331ffb185

- Added feature to export/import preferences to/from JSON file.
- Added password reveal/hide button for main login.
- Added 'status' command to the CLI.
- Added advanced parameter for specifying specific wireguard server.
- Improved anti-censorship measures in WireGuard and OpenVPN.
- Improved labels and descriptions in preferences to match the mobile app.
- Improved debug log feature to include the installer log.
- Improved installer to support keyboard shortcuts (ESC/Enter/etc.).
- Fixed WireGuard anti-censorship.
- Fixed app may become unresponsive when using tray locations menu.
- Fixed transition to 2FA screen when logging in.
- Fixed importing/exporting preferences closes the app window if docked.
- Fixed banned/disabled message not showing during login.
- Fixed update screen may not be clickable after an alert is shown.
- Fixed reveal password icon may be slightly cut off at certain scaling.
- Fixed pressing Login from external config mode causes UI to not display.
- Fixed returning to login screen does not set focus to username field.
- Fixed user is forcefully logged out on some server errors.
- Fixed imported split tunneling settings not reflecting in the GUI until after app restart.
- Fixed right-click also triggering Static IP link.
- Fixed various minor UX issues on login screen and preferences.
- Fixed hard-to-read 10 Gbps location icon.
- Fixed possible crash during app exit.
- Fixed advanced parameter file location differs between Guinea Pig vs Beta/Release builds.
- Fixed misdetection of TCP error during OpenVPN connection.
- Fixed installer log reordering in merge log.
- Fixed escaping of the OpenVPN password.
- Fixed incorrect translation of 'Quit' in French translation.
- Fixed in-app update to 2.9.2 by reverting change for deduplicating libraries in installer.
- Fixed ARM installer error that is a regression after LZMA migration.
- Fixed path reference with wrong case which breaks with case-sensitive APFS.
- Removed unnecessary threads running on helper service.
- Removed misleading logs indicating errors when it's benign.
- Removed unnecessary parameters for server list request API call.
- Updated boost, c-ares, and lzma dependencies.
- Updated ctrld dependency to 1.3.3.

Released: 2024/02/09
SHA-256: 854b0fb74f0bfd58a274529b4a8fb913c9099f6daf437962b72531d046418dba

- Improved anti-censorship measures.
- Fixed exporting preferences closes the app window if docked.

Released: 2024/02/05
SHA-256: 879cae5d21443d073a7098cd78f276541f202fd761cac8e7c1b04b13301fe798

- Improved anti-censorship measures in WireGuard and OpenVPN.
- Fixed update screen may not be clickable after an alert is shown.
- Fixed reveal password icon may be slightly cut off at certain scaling.
- Fixed pressing Login from external config mode causes UI to not display.
- Fixed returning to login screen does not set focus to username field.
- Fixed user is forcefully logged out on some server errors.

Released: 2024/01/26
SHA-256: d0954c76dafdf36429ae7e3bba6584d40b141a6c6486c25c81e6c7b3cc95a21a

- Added password reveal/hide button for main login.
- Improved UX for the export/import preferences feature and filter irrelevant preferences when importing.
- Fixed WireGuard anti-censorship.
- Fixed imported split tunneling settings not reflecting in the GUI until after app restart.
- Fixed right-click also triggering Static IP link.
- Fixed various minor UX issues on login screen and preferences.
- Fixed hard-to-read 10 Gbps location icon.
- Fixed possible crash during app exit.
- Fixed in-app update failure by reverting change for deduplicating libraries in installer.
- Removed unnecessary threads running on helper service.
- Removed changes causing credential issues with OpenVPN custom config.
- Updated ctrld dependency to 1.3.3.

Released: 2024/01/11
SHA-256: 18c16c3fcaa01d7cf7382d09b8c76a3bcb20c482cbed600644624a685e1a5571

- Added feature to export/import preferences to/from JSON file.
- Added feature to support custom OpenVPN configs requiring a user name and password.
- Added 'status' command to the CLI.
- Added special logging category to the client log containing random hash code of the given connection.
- Added advanced parameter for specifying specific wireguard server.
- Improved labels and descriptions in preferences to match the mobile app.
- Improved debug log feature to include the installer log.
- Improved installer to support keyboard shortcuts (ESC/Enter/etc.).
- Fixed incorrect translation of 'Quit' in French translation.
- Fixed advanced parameter file location differs between Guinea Pig vs Beta/Release builds.
- Fixed misdetection of TCP error during OpenVPN connection.
- Fixed path reference with incorrect case which breaks with case-sensitive APFS.
- Fixed duplicate frameworks bloating installer size.
- Removed misleading logs indicating errors when it's benign.
- Removed unnecessary parameters for server list request API call.
- Updated boost, c-ares, and lzma dependencies.

Released: 2023/12/14
SHA-256: 20b57229c9c336ab9d2b66d48931f4cffae2e62134c738c4cd2beefcd79ba0a8

- Added machine-generated translations for Chinese (Traditional), Indonesian, Italian, Japanese, Korean, Persian/Farsi, Polish, Portuguese, Turkish, Ukrainian, and Vietnamese.
- Added language localization to the installer.
- Added minimize and close-to-tray feature.
- Added advanced parameter to control server list (locations) functionality in censored countries.
- Improved anti-censorship feature. Feature automatically enabled for first-run users in censored countries.
- Improved the appearance of the sign out button.
- Improved error message when the connected DNS utility (ctrld) fails to start.
- Improved uninstall. Helper and CLI symlink are removed on OS reboot if the app has been uninstalled.
- Improved app and installer main icon.
- Improved installer to unify it with the Windows installer.
- Improved the connection mode description in preferences.
- Improved in-app upgrade message to indicate the update will be downloaded before terminating connections.
- Improved firewall functionality while using split tunneling.
- Improved build instructions in the README.
- Fixed IP does not change on GUI when using inclusive split tunnel.
- Fixed (potentially) Air Drop, Handoff, Airplay and other local Mac sharing features are partially functional or blocked with Allow LAN turned on.
- Fixed MAC spoofing to ensure we do not undo spoofs that did not originate from us.
- Fixed symlink for windscribe-cli isn't created.
- Fixed debug log to more clearly indicate that a custom dns is being used.
- Fixed double-right-clicking on the IP address makes it blurry on the main screen.
- Fixed top of password dots on login screen are clipped.
- Fixed UI 'weirdness' on the login screen when secure hotspot or proxy gateway feature is enabled and a SSL-error occurs.
- Fixed ESC text is misaligned with the close button in preferences.
- Fixed incorrect padding in 'out of data' screen.
- Fixed load indicator for bottom-most location is slightly clipped.
- Fixed clicking the blog link in the About menu doesn't do anything.
- Fixed pressing Cmd+Q results in the exit prompt showing, but the app exiting immediately anyway.
- Fixed drop-down menus can be resized or moved.
- Fixed installer main window can be resized.
- Fixed misleading error message displayed during first time use of MAC Spoofing feature.
- Fixed special user account for helper is displayed.
- Fixed reconnect not triggered when OpenVPN reports a tunnel connectivity failure.
- Fixed search icon on locations screen may overlap the All icon.
- Fixed UI issue when the hotspot feature is enabled and a SSL error occurs.
- Fixed app may not reconnect after Internet is restored when using OpenVPN.
- Fixed app gets stuck on the logging in screen after accepting the 'ignore SSL errors' prompt.
- Fixed split tunneling rules not reapplied if firewall state is toggled.
- Fixed in-app update fails when updating from 2.7.
- Fixed using the dock menu and clicking "Quit" causes the app to crash.
- Fixed split tunneling description suggests app supports per-app split tunneling.
- Fixed some text in preferences not matching with the mobile app.
- Fixed auto-connect not triggering when reconnecting to the same network.
- Fixed using the dock menu and clicking "Quit" causes the app to crash.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues when anti-abuse is triggered.
- Fixed UI connection state may stick at 'connecting' when disconnecting and connecting to a different location rapidly.
- Fixed bottom information bar on connect screen is not displayed after upgrade screen is dismissed.
- Fixed firewall does not disable on failed connection to non-existent location.
- Fixed opening locations drop down when prompted to save preferred protocol causes errant UI behavior or may crash the app.
- Fixed UI screen transition issues (UI may freeze) when account is expired or anti-abuse is triggered.
- Fixed firewall not blocking traffic while disconnected in split inclusive mode.
- Fixed 'OK' text in installer is not centered underneath the checkmark button for some languages.
- Fixed wireguard binary contains debug symbols.
- Updated app dependencies (cURL/OpenSSL/OpenVPN etc.) to latest available version.
- Updated connected DNS utility (ctrld) to v1.3.2.

Released: 2023/12/07
SHA-256: 552c0bb165effc7d6bf85fbb7793152ea45b09eade3744ab849a22b577fda1b9

- Fixed some text in preferences not matching with the mobile app.
- Fixed auto-connect not triggering when reconnecting to the same network.
- Fixed ctrld binary, used for custom DNS, was not marked executable.

Released: 2023/12/01
SHA-256: 98022ebcd0769de69c2d4d41531ae184f7a8f6e9413a56399a3f316a8758448c

- Improved anti-censorship feature. Feature automatically enabled for first-run users in censored countries.
- Fixed using the dock menu and clicking "Quit" causes the app to crash.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues when anti-abuse is triggered.
- Fixed UI connection state may stick at 'connecting' when disconnecting and connecting to a different location rapidly.
- Fixed bottom information bar on connect screen is not displayed after upgrade screen is dismissed.
- Fixed firewall does not disable on failed connection to non-existent location.
- Fixed opening locations drop down when prompted to save preferred protocol causes errant UI behavior or may crash the app.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues (UI may freeze) when account is expired or anti-abuse is triggered.
- Fixed firewall not blocking traffic while disconnected in split inclusive mode.
- Fixed 'OK' text in installer is not centered underneath the checkmark button for some languages.
- Fixed wireguard binary contains debug symbols.
- Updated to OpenVPN 2.6.8.

Released: 2023/11/24
SHA-256: e64cf32be745d74d935e390098975bbb194c28b287b7936742efa51a92ca73ad

- Added advanced parameter to control server list (locations) functionality in censored countries.
- Improved the appearance of the sign out button.
- Improved error message when ctrld (custom DNS) fails to start.
- Improved build instructions in the README.
- Fixed reconnect not triggered when OpenVPN reports a tunnel connectivity failure.
- Fixed search icon on locations screen may overlap the All icon.
- Fixed UI issue when the hotspot feature is enabled and a SSL error occurs.
- Fixed app may not reconnect after Internet is restored when using OpenVPN.
- Fixed app gets stuck on the logging in screen after accepting the 'ignore SSL errors' prompt.
- Fixed split tunneling rules not reapplied if firewall state is toggled.
- Fixed symlink for windscribe-cli isn't created.
- Fixed in-app update fails when updating from 2.7.
- Fixed using the dock menu and clicking "Quit" causes the app to crash.
- Fixed split tunneling description suggests app supports per-app split tunneling.
- Upgraded app dependencies to latest available version.

Released: 2023/11/08
SHA-256: ce41cbc26656d6623db06cb6f50c4596a3ba4aa7801691ca8d564aecdd6a30f5

- Added machine-generated translations for Chinese (Traditional), Indonesian, Italian, Japanese, Korean, Persian/Farsi, Polish, Portuguese, Turkish, Ukrainian, and Vietnamese.
- Added language localization to the installer.
- Added minimize and close-to-tray feature.
- Improved uninstall. Helper and CLI symlink are removed on OS reboot if the app has been uninstalled.
- Improved app and installer main icon.
- Improved installer to unify it with the Windows installer.
- Improved the connection mode description in preferences.
- Improved in-app upgrade message to indicate the update will be downloaded before terminating connections.
- Improved firewall functionality while using split tunneling.
- Fixed IP does not change on GUI when using inclusive split tunnel.
- Fixed (potentially) Air Drop, Handoff, Airplay and other local Mac sharing features are partially functional or blocked with Allow LAN turned on.
- Fixed MAC spoofing to ensure we do not undo spoofs that did not originate from us.
- Fixed symlink for windscribe-cli isn't created.
- Fixed debug log to more clearly indicate that a custom dns is being used.
- Fixed double-right-clicking on the IP address makes it blurry on the main screen.
- Fixed top of password dots on login screen are clipped.
- Fixed UI 'weirdness' on the login screen when secure hotspot or proxy gateway feature is enabled and a SSL-error occurs.
- Fixed ESC text is misaligned with the close button in preferences.
- Fixed incorrect padding in 'out of data' screen.
- Fixed load indicator for bottom-most location is slightly clipped.
- Fixed clicking the blog link in the About menu doesn't do anything.
- Fixed pressing Cmd+Q results in the exit prompt showing, but the app exiting immediately anyway.
- Fixed drop-down menus can be resized or moved.
- Fixed installer main window can be resized.
- Fixed misleading error message displayed during first time use of MAC Spoofing feature.
- Fixed special user account for helper is displayed.
- Upgraded bundled ctrld utility to v1.3.1.

Released: 2023/10/23
SHA-256: e7e5d7a08699a0f2c9a0b9e792f824c9497b54901d88ff9c38cf9418a5568277

- Added anti-censorship toggle in preferences.
- Added anti-censorship feature: WireGuard UDP stuffing.
- Added anti-censorship feature: use domain fronting via CDN for API requests.
- Added anti-censorship feature: OpenVPN TCP split-reset, UDP stuffing, Stunnel extra padding.
- Added anti-censorship feature: use extra TLS padding for fallback API requests.
- Added translations for Arabic, Czech, French, German, Hindi, Russian, Simplified Chinese, and Spanish.
- Added an icon on the main screen to indicate anti-censorship mode is enabled.
- Added new in-house Stealth/Wstunnel application.
- Added a small loading spinner to some operations which may take a long time.
- Added feature to remember last locations tab on exit and default to that tab on startup.
- Added support for DNS-over-HTTPS (DoH) and split DNS to the 'Connected DNS' feature.
- Added custom alert screens, replacing the native OS message boxes.
- Added icon on connect screen indicating if connection is auto, manual, or network preferred protocol.
- Added new logout and quit screens.
- Improved latency (ping) algorithm to reduce ping frequency, especially during app startup.
- Improved installer icons.
- Fixed DNS failures with firewall enabled on macOS 14 Sonoma.
- Fixed Stealth/Wstunnel sometimes can't connect.
- Fixed app may open locations screen to a random tab.
- Fixed "All protocols failed" prompt doesn't show.
- Fixed LAN-hosted DNS server cannot be accessed when using a custom OpenVPN config.
- Fixed OpenVPN not using custom DNS.
- Fixed spinner animation on the ROBERT page continues after the website has already been opened.
- Fixed Logout/Quit screen UI bugs.
- Fixed Manage ROBERT rules link click does nothing.
- Fixed UI overlap and alignment issues.
- Fixed loading spinner in Manage Account preference slows down.
- Fixed access to server IP to be only allowed for Windscribe & system apps.
- Fixed incorrect error message in the DNS domain screen when a domain name is not valid.
- Fixed WireGuard may not recover correctly in manual mode.
- Fixed OpenVPN UDP and TCP may not work with certain commented out Advanced Parameters.
- Fixed executable signature checking mechanism disabled in the helper and CLI.
- Fixed app may become non-responsive and eventually crash.
- Fixed app to appear on the active virtual desktop when user clicks either the menubar icon or dock icon.
- Fixed firewall disabled on computer startup when firewall mode set to Always On.
- Fixed validation of the domains entered by the user.
- Fixed some user interface transitions involving the "SSL error" alert.
- Fixed split tunnel hostname and IP validation errors are unclear.
- Fixed firewall's enabled state not restored if it was enabled when the Windscribe firewall was turned on.
- Fixed window shadow incorrectly sized on logout/exit screens.
- Fixed login screen height may be truncated.
- Fixed alert screen may overlap other screens (e.g. news feed, protocol change).
- Fixed notifications are missing after marking all as read, leaving the notifications screen, and returning to it.
- Fixed view/send log functionality to truncate the log if it is too large to view/send.
- Fixed firewall settings updated repeatedly when pinging locations.
- Fixed installer built on Apple Silicon crashes on launch.
- Fixed app update takes a long time if done while connected.
- Fixed protocol badge not immediately updated on network changes.
- Fixed app removes user's static IPv6 configuration and does not restore it.
- Fixed Air Drop, Handoff, Airplay and other local Mac sharing features are partially functional or blocked with Allow LAN turned on.
- Fixed helper holds installer executable hostage after installing app.
- Fixed always-on firewall bug causing app to hang on startup.
- Removed redundant signature verification method.
- Removed incorrect primary IP check when enabling the Allow LAN Traffic preference.
- Removed full directory paths from log to obscure user's PII.
- Removed timestamp from news feed items.
- Updated app to use server-supplied ping (latency) values.
- Updated app warnings and error messages.
- Updated to OpenVPN 2.6 and OpenSSL 3.

Released: 2023/10/03
SHA-256: 5e0b65e8c7949d1dddde027e72c8f60f4ced3535268a873c366b9ee0011c8634

- Removed firewall patch introduced for macOS 14 Sonoma Beta.

Released: 2023/09/23
SHA-256: b9c594d4736e26cc31aca7f28bebaeafdb51c9a462907fcb4b787d9bd9e3772d

- Improved latency (ping) algorithm to reduce ping frequency, especially during app startup.
- Fixed LAN-hosted DNS server cannot be accessed when using a custom OpenVPN config.

Released: 2023/09/11
SHA-256: 2eaf1e0933ce38a713c8c8b5b5c675aa95463d01f7705bddb9cff57c3d4bb0b4

- Added anti-censorship feature: use domain fronting via CDN for API requests.
- Added new in-house Stealth/Wstunnel application.
- Fixed app may open locations screen to a random tab.
- Fixed "All protocols failed" prompt doesn't show.
- Fixed DNS failures with firewall enabled on macOS 14 Sonoma.
- Fixed Stealth/Wstunnel sometimes can't connect.

Released: 2023/08/10
SHA-256: 5f831e987e96ca5d4d2c824a03ab96337dbc52812a0d990c36754c4524106f98

- Added anti-censorship feature: OpenVPN TCP split-reset, UDP stuffing, Stunnel extra padding.
- Added anti-censorship feature: use extra TLS padding for fallback API requests.
- Added anti-censorship feature: WireGuard UDP stuffing.
- Added anti-censorship toggle in preferences.
- Added Czech language translation.
- Added an icon on the main screen to indicate anti-censorship mode is enabled.
- Fixed Logout/Quit screen UI bugs.
- Fixed Manage ROBERT rules link click does nothing.
- Fixed Russian translation.
- Fixed spinner animation on the ROBERT page continues after the website has already been opened.
- Removed timestamp from news feed items.

Released: 2023/06/20
SHA-256: d771d535f8484d75893088e5967fecc933e6a0d14644367b0fc1d1f02e352efe

- Fixed UI overlap and alignment issues.
- Fixed loading spinner in Manage Account preference slows down.
- Fixed access to server IP to be only allowed for Windscribe & system apps.
- Fixed incorrect error message in the DNS domain screen when a domain name is not valid.
- Fixed WireGuard may not recover correctly in manual mode.
- Fixed OpenVPN UDP and TCP may not work with certain commented out Advanced Parameters.
- Fixed executable signature checking mechanism disabled in the helper and CLI.
- Fixed app may become non-responsive and eventually crash.
- Fixed app to appear on the active virtual desktop when user clicks either the menubar icon or dock icon.
- Fixed firewall disabled on computer startup when firewall mode set to Always On.
- Removed incorrect primary IP check when enabling the Allow LAN Traffic preference.
- Removed full directory paths from log to obscure user's PII.

Released: 2023/06/01
SHA-256: e623e1cdaecb0f7478bc6a62c71304359c381508c43d98ad30efcb05c20b7ce4

- Added a small loading spinner to some operations which may take a long time.
- Added custom connected DNS placeholder text.
- Added feature to remember last locations tab on exit and default to that tab on startup.
- Fixed missing ?int=ws in the URI when making queries if user supplies DoH resolver that's on *.controld.com.
- Fixed validation of the domains entered by the user.
- Fixed transition to the initialization window to hide the general message window shadow.
- Fixed some user interface transitions involving the "SSL error" alert.
- Fixed missing port number for the CURLOPT_RESOLVE parameter.
- Fixed redundant updateFirewallSettings calls being made during pings.
- Fixed split tunnel hostname and IP validation errors are unclear.
- Fixed firewall's enabled state not restored if it was enabled when the Windscribe firewall was turned on.
- Fixed menubar icon not showing app on the current virtual desktop.
- Updated ctrld binary to v1.2.0.

Released: 2023/05/23
SHA-256: d2fc12b77309fce4c45b2a1fff1f755fed1f698b84327efc4fa497cfd13aa666

- Fixed installer built on Apple Silicon crashes on launch.
- Fixed app update takes a long time if done while connected.
- Fixed window shadow incorrectly sized on logout/exit screens.
- Fixed login screen height may be truncated.
- Fixed alert screen may overlap other screens (e.g. news feed, protocol change).
- Fixed notifications are missing after marking all as read, leaving the notifications screen, and returning to it.
- Fixed changing languages in app causes the news feed screen to become smaller.
- Fixed view/send log functionality to truncate the log if it is too large to view/send.
- Fixed firewall settings updated repeatedly when pinging locations.
- Removed redundant signature verification method.

Released: 2023/05/01

- Added machine-generated translations for Arabic, French, German, Hindi, Russian, Simplified Chinese, and Spanish.
- Added new logout and quit screens.
- Added support for DNS-over-HTTPS (DoH) and split DNS to the 'Connected DNS' feature.
- Added custom alert screens, replacing the native OS message boxes.
- Added icon on connect screen indicating if connection is auto, manual, or network preferred protocol.
- Fixed busy spinner displayed when exiting is not centered.
- Fixed ROBERT screen loading icon not antialiased.
- Fixed protocol badge not immediately updated on network changes.
- Fixed emergency connect feature not working.
- Fixed app crash during startup.
- Fixed python scripts to conform to the pep8 style guide.
- Fixed 'out of data' screen isn't vertically centered.
- Fixed preference items are sometimes expanded when they shouldn't be.
- Fixed app removes user's static IPv6 configuration and does not restore it.
- Fixed Air Drop, Handoff, Airplay and other local Mac sharing features are partially functional or blocked with Allow LAN turned on.
- Fixed helper holds installer executable hostage after installing app.
- Fixed always-on firewall bug causing app to hang on startup.
- Updated installer to use new icons.
- Updated app to use server-supplied ping (latency) values.
- Updated app warnings and error messages.
- Updated build system to use cmake for all projects.
- Updated to OpenVPN 2.6.1.
- Removed unnecessary code from when the UI and engine were separate executables.
- Removed use of OpenSSL 1.1.1.

Released: 2023/03/27

- Fixed free accounts not pinging pro locations.
- Fixed upgrade widget not hidden when returning to login screen.
- Fixed 'out of data' screen isn't vertically centered.
- Fixed MAC address spoofing toggle state isn't saved.
- Fixed crash when reconnecting to different servers.

Released: 2023/03/13

- Added use of Encrypted Client Hello (ECH) as a fail-over mechanism to circumvent SNI filtering.
- Added all secrets to the domain generation algorithm library and removed them from the app code.
- Added OpenSSL 1.1.1t due to an OpenSSL security advisory.
- Added hover highlighting to the protocol change screen.
- Added a descriptive error message on the login screen when the user is disabled or rate-limited.
- Fixed crash may occur when switching protocol window modes.
- Fixed disconnecting a WireGuard connection while it is connecting may disconnect, then start connecting again once the WireGuard dynamic configuration has been acquired.
- Fixed a successful failover did not trigger the 'save preferred protocol' screen.
- Fixed server API request would never be processed by curl due to bug in curl libs 7.83/7.85.
- Fixed new notifications appear at the bottom of the News Feed screen.
- Fixed notification age label to display "Today" instead of "0 days ago" for new notifications.
- Fixed server API request pipeline to ensure requests are processed as quickly as possible.
- Fixed confirm email feature doesn't work.
- Fixed high CPU usage while idle.
- Fixed firewall to allow apps to reach the local interface address.
- Fixed firewall to always allow localhost (127.0.0.0/8 and ::1).
- Fixed out of place cancel button and overlapping entries in the change protocol screen.
- Fixed change protocol screen should not be available when using a custom config.
- Fixed WireGuard doesn't reconnect upon waking from sleep.
- Fixed manual-mode connections should not timeout.
- Fixed login screen overlay bugs.
- Fixed default notification message color, displayed when there are no notifications.
- Fixed protocols window expansion bug.
- Fixed potential app crash when exiting due to an OS restart.
- Fixed data counter appears in custom config mode.
- Fixed location latency checks (pings) displaying "-2" for many locations when connected.
- Fixed ON/OFF icon not centered on some display scale factors.
- Fixed "We've detected that your network settings may interfere with Windscribe" dialog displays multiple times.
- Fixed alignment of some icon and text widgets on the main app screen.
- Fixed 'App Internal DNS' preference description to indicate 'OS Default' may cause DNS leaks.
- Fixed location latency checks (pings) to only be performed when the app is disconnected.
- Fixed odd menu entry in macOS dock right-click popup menu.
- Fixed attempting to update the app using the installer causes the app to freeze and the installer to hang at 100%.
- Fixed DGA library not compatible with ARM-based Macs.
- Fixed domain generation algorithm library signature check.
- Fixed installer to allow helper downgrade.
- Fixed auto-connect on system launch does not work.
- Fixed potential app crash when performing an in-app upgrade.
- Fixed issues connecting with TCP-based protocols on macOS.
- Updated 'App Internal DNS' preference to default to Cloudflare.

Released: 2023/01/17

- Added user interface improvements to indicate the app is failing over to another protocol.
- Fixed potential app crash when verifying an IP's validity.
- Fixed failure to connect after reboot when Launch on Startup and Auto-Connect are enabled.
- Fixed Location/Favourites/Static Ip/Configured menus in top menu bar not working.

- Added IP/hostname split tunneling support on macOS BigSur and newer.
- Fixed app will use Preferred Protocol for a network even if it's disabled.
- Fixed HTTP/SOCKS Proxy Gateway setting to warn user the Allow LAN Traffic option must be enabled.
- Fixed privilege escalation vulnerability in usage of OpenVPN up/down directives.
- Fixed notice on the login screen when user is disabled or rate-limited.
- Fixed app to save a successful failover between program launches.
- Fixed error message when user tries logging in with their email address.
- Fixed preferences cache not cleared when doing a factory reset during install.
- Fixed privilege escalation vulnerabilities in communication mechanism between the app and helper.

- Fixed potential app crash when the app is failing over to another protocol.

- Fixed app crash when Mac sleeps on one network and wakes on a different network.
- Fixed potential app crash when reading saved WireGuard config data created by the v2.4 app.
- Fixed potential app crash when network online state changes.

- Fixed split tunneling driver not being installed when upgrading from 2.4 or older.

- Fixed failover not triggering on TLS/SSL connection error.
- Fixed locations menu appearing randomly.
- Fixed build-a-plan users cannot use their static IPs.

- Added alternative earless main UI (Van Gogh mode).
- Added Preferred Protocol support to Network Options.
- Added ROBERT controls to Preferences.
- Added installer command-line parameter to prevent automatic app launch.
- Added login and logout functionality to the CLI app.
- Added 'factory reset' option to installer.
- Added sticky server list support to keep the altered server list in restricted regions.
- Added Auto Connect toggle to Connection Preferences.
- Added trigger to connect/disconnect when Network Whitelist/Auto Connect preferences are changed.
- Added loading indicator to ROBERT screen in Preferences.
- Added divider line above login/logout button in Preferences.
- Added Apple silicon (arm64) support.
- Updated Preferences UI.
- Updated notifications screen.
- Updated to Qt 6.3.
- Updated locations tray for better performance / cleaner code.
- Updated automatic connection mode to use WireGuard protocol by default.
- Fixed various routing/firewall issues.
- Fixed escape and enter keys not working in settings edit boxes.
- Fixed display scaling issues.
- Fixed incorrect app position during launch on multi-monitor setups.
- Fixed app giving incorrect latencies and best location.
- Fixed unnecessary spam in the debug log.
- Fixed mouse wheel issues in the notifications and preferences windows.
- Fixed app does not resize correctly when dragging app between different DPI displays.
- Fixed favorite locations lost after app update from some versions.
- Fixed news feed messages are the wrong width at some display scales.
- Fixed failure of connection to a location via CLI.
- Fixed port forwarding when using the WireGuard protocol.
- Fixed scrolling in news feed and preferences.
- Fixed detection for hanging OpenVPN/WireGuard processes when app starts.
- Fixed incorrect tooltip on login/logout button in Preferences.
- Fixed a number of user interface bugs when updating the app to a new version.
- Fixed notification read state not remembered if the user restarts/logs out of their PC before exiting the application.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed CLI app to return 0 on success, 1 on failure.
- Fixed disconnected notification showing incorrect bandwidth usage.
- Fixed preferences screen does not retain user selected height upon app re-launch.
- Fixed preferred protocol doesn't reconnect when Wi-Fi hopping.
- Fixed Manual Packet Size (MTU) and network proxy settings do not retain their values upon app re-launch.
- Fixed app does not remember last used location if system crashes or app is forcefully terminated.
- Fixed incorrect data remaining value in Accounts page for build-a-plan accounts with unlimited data.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed bottom information bar hidden when something connects to proxy/hotspot.
- Fixed signing into an expired account causes app to hang.
- Fixed the working connection setting isn't saved.
- Fixed TLS/SSL interception causes logout and crash.
- Fixed custom configs do not have DNS connectivity if internal DNS (RFC1918) is used.
- Fixed Proxy Gateway IP display goes blank when the proxy is connected to.
- Fixed a crash caused by a bug in the failover logic.
- Fixed helper installation fails when previous helper explicitly disabled in launch control.
- Fixed reconnect issue if the computer sleeps on one network and wakes on another.

- Fixed TLS/SSL interception causes logout and crash.
- Fixed custom configs do not have DNS connectivity if internal DNS (RFC1918) is used.
- Fixed Proxy Gateway IP display goes blank when the proxy is connected to.
- Fixed a crash caused by a bug in the failover logic.

- Fixed bottom information bar hidden when something connects to proxy/hotspot.
- Fixed signing into an expired account causes app to hang.
- Fixed the working connection setting isn't saved.
- Fixed settings synced immediately.

- Updated automatic connection mode to use WireGuard protocol by default.
- Fixed CLI app to return 0 on success, 1 on failure.
- Fixed disconnected notification showing incorrect bandwidth usage.
- Fixed some minor UI bugs.
- Fixed preferences screen does not retain user selected height upon app re-launch.
- Fixed preferred protocol doesn't reconnect when Wi-Fi hopping.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed Manual Packet Size (MTU) and network proxy settings do not retain their values upon app re-launch.
- Fixed app does not remember last used location if system crashes or app is forcefully terminated.
- Fixed incorrect data remaining value in Accounts page for build-a-plan accounts with unlimited data.
- Fixed helper installation fails when previous helper explicitly disabled in launch control.
- Fixed reconnect issue if the computer sleeps on one network and wakes on another.

- Added loading indicator to R.O.B.E.R.T. screen in Preferences.
- Added divider line above login/logout button in Preferences.
- Fixed incorrect tooltip on login/logout button in Preferences.
- Fixed a number of user interface bugs when updating the app to a new version.
- Fixed notification read state not remembered if the user restarts/logs out of their PC before exiting the application.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed app crash after upgrade from 2.4 to 2.5.x when using IKEv2.

This is a major update! Things can be broken.

- Added alternative earless main UI (Van Gogh mode).
- Added Preferred Protocol support to Network Options.
- Added ROBERT controls to Preferences
- Added command-line parameter to skip TUN/TAP driver installation.
- Added command-line parameter to prevent automatic app launch in installer.
- Added login and logout functionality to the CLI app.
- Added log for any code assert statements that are triggered in a release build.
- Added 'factory reset' option to installer.
- Added sticky server list support to keep the altered server list in restricted regions.
- Added TUN/TAP automatic driver reinstallation if removed.
- Added advanced parameter ws-tunnel-test-no-error and allow ws-tunnel-test-attempts to be 0.
- Added trigger to connect/disconnect when Network Whitelist/Auto Connect preferences are changed.
- Added auto-connect toggle to Connection Preferences.
- Added native Apple ARM processor support and ported to Qt 6. Minimum macOS version now 10.14.
- Added debug data to log if firewall state was manipulated externally on macOS.
- Added Additional debug logging to macOS installer.
- Added macOS helper text file log (instead of syslog), in the same format as other logs.
- Added log merge between macOS helper and main program.
- Updated Preferences UI.
- Updated notifications screen.
- Updated to Qt 6.
- Updated locations tray for better performance / cleaner code.
- Updated to latest Wireguard (0.0.20220316) for macOS & Linux.
- Updated copyright dates updated in all macOS plists.
- Fixed GUI hang on macOS when app is connected and an in-app upgrade is performed.
- Fixed slow startup on macOS after initial install, upgrade, or reboot.
- Fixed missing macOS system tray icon.
- Fixed macOS installer install button text is not centered and button is not fully round.
- Fixed no connectivity after waking from sleep with WireGuard on macOS.
- Fixed WireGuard service rejects custom config file with no PSK.
- Fixed various routing/firewall issues
- Fixed some tunnel test parameter bugs
- Fixed escape and enter keys not working in settings edit boxes.
- Fixed display scaling issues.
- Fixed incorrect app position during launch on multi-monitor setups.
- Fixed app giving incorrect latencies and best location.
- Fixed unnecessary spam in the debug log.
- Fixed hostname-level exclusive split tunneling.
- Fixed WireGuard connection stalls if Internet access is interrupted for more than 3 minutes.
- Fixed incorrect DPI detection
- Fixed app does not resize correctly when dragging app between different DPI displays.
- Fixed start minimized preference.
- Fixed favorite locations lost after app update from some versions.
- Fixed news feed messages are the wrong width at some display scales.
- Fixed failure of connection to a location via CLI.
- Fixed port forwarding when using the WireGuard protocol.
- Fixed scrolling in news feed and preferences.
- Fixed detection for hanging OpenVPN/Wireguard processes when app starts.
- Fixed installation failure if TAP adapter install fails.
- Fixed DLL search path for the installer to only look in the system path.
- Fixed WireGuard tunnel shutdown if client app terminates unexpectedly (crashes).
- Removed use of the old method in the ServerLocations API.

- Update 10Gbps badge and location load when best location changes
- Added new flags
- UDP fails to connect on Mac fixed
- Fixed crash on bad server locations list
- Fixed OpenVPN infinite reconnection loop in some cases
- Dynamic Wireguard Interface Allocation Support
- Privilege escalation vulnerability fixed
- Fixed cut off long favorites location names in the tray menu
- Fixed static IPs display issue in tray menu
- Standardized API interaction timers
- Fixed automatic firewall deactivation when account status changes to disabled
- Fixed protocol selection not immediately saved to disk
- Updated app icons in menu bar
- Fixed app crash on Emergency Connect.
- Increased service start wait time to 20 seconds.
- Refactored wireguard connection to avoid blocking engine thread
- Fetch session when app receives focus
- Fixed firewall silently enabling by itself in rare cases
- Misc bug fixes

- Same as last Alpha release

- Fixed app crash on Emergency Connect.
- Increased service start wait time to 20 seconds.
- Refactored wireguard connection to avoid blocking engine thread
- Fetch session when app receives focus
- Fixed firewall silently enabling by itself in rare cases

- Fixed crash on bad server locations list
- Fixed OpenVPN infinite reconnection loop in some cases
- Dynamic Wireguard Interface Allocation Support
- Privilege escalation vulnerability fixed
- Fixed cut off long favorites location names in the tray menu
- Fixed static IPs display issue in tray menu
- Standardized API interaction timers
- Fixed automatic firewall deactivation when account status changes to disabled
- Fixed protocol selection not immediately saved to disk
- Updated app icons in menu bar

- Update 10Gbps badge and location load when best location changes
- Added new flags
- UDP fails to connect on Mac fixed
- Misc bug fixes

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs
- Fixed hard crash in certain cases
- Fixed connect Info scaling issue
- Fixed system icon issues on Big Sur
- Fixed incorrect bandwidth used notification on MacOS fixed.
- Fixed Mac OS message boxes do not display spaces after periods
- Fixed GUI lock issue
- Fixed incorrect external IP
- Added "View Licenses" button to Debug Preferences menu
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log
- Fixed blur on IP
- Fixed helper reinstall edge case
- Added a dependency on the autoconnect state for the initial firewall state
- Keep the firewall state on update if autoconnect option is enabled
- Added installer debug log
- Updated wstunnel binary to v4
- Require elevated privilege to accept insecure custom config dir
- Removed device specific info from debug logs
- Fixed abnormal program self-termination after extended run time
- Fixed GUI crash edge case
- Open source app build improvements
- Reduced verbosity of debug log
- Fixed superuser validation on MacOS
- Fixed reconnect loop on MacOS Monterey
- Fixed MAC address spoofing on MacOS

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs
- Fixed hard crash in certain cases
- Fixed connect Info scaling issue
- Fixed system icon issues on Big Sur
- Fixed incorrect bandwidth used notification on MacOS fixed.
- Fixed Mac OS message boxes do not display spaces after periods
- Fixed GUI lock issue
- Fixed incorrect external IP
- Added "View Licenses" button to Debug Preferences menu
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log
- Fixed blur on IP
- Fixed helper reinstall edge case
- Added a dependency on the autoconnect state for the initial firewall state
- Keep the firewall state on update if autoconnect option is enabled
- Added installer debug log
- Updated wstunnel binary to v4
- Require elevated privilege to accept insecure custom config dir
- Removed device specific info from debug logs
- Fixed abnormal program self-termination after extended run time
- Fixed GUI crash edge case
- Open source app build improvements
- Reduced verbosity of debug log
- Fixed superuser validation on MacOS
- Fixed reconnect loop on MacOS Monterey
- Fixed MAC address spoofing on MacOS

- Fixed GUI lock issue
- Fixed incorrect external IP
- Added "View Licenses" button to Debug Preferences menu
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log
- Fixed blur on IP
- Fixed helper reinstall edge case

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs
- Fixed hard crash in certain cases
- Fixed connect Info scaling issue
- Fixed system icon issues on Big Sur
- Fixed incorrect bandwidth used notification on MacOS fixed.
- Fixed Mac OS message boxes do not display spaces after periods

- Added custom DNS server support
- Added meme support and ability to upload custom background images
- Added ability to blur IP via double click
- Added subtle shadows to main screen assets
- Fixed crash when hiding main windows when log viewer dialog is opened
- Fixed installer error if firewall is ON while disconnected
- Fixed crash on OS X Sierra (10.12)

- Detection of the authorization error for IKEv2 made to be more specific
- Reduced debug log verbosity
- Emergency connect description updated

- Fixed inclusive split routing issue
- Removed useless messages from log
- Prevented keypress navigation to other locations from config-only mode.
- Fixed auto-hide of docked app on showing external OS dialogs
- Fixed negative remaining bytes issue
- Open newsfeed to the first unread message, if any
- Fixed sending of large debug logs
- Added Export Log button
- Don't terminate TCP sockets of processes that are not tunneled
- Set "TCP socket termination" option ON by default.
- Linked option "TCP socket termination" with closing sockets in split tunneling mode
- Secure hotspot fix for openVPN

- Fixed Windscribe beta installer failure on macOS standard accounts
- Detect unsupported OS version, download legacy installer
- Remove helper from version 1 when installing 2.0
- Update installer position tweaks for future updates
- Fixed wonky trackpad scrolling on Big Sur
- Removed account tab from preferences in external config mode.
- Improvements to preferences and combobox menus.
- Fixed rare crash on Mac when using comboboxes and tooltips.
- UX improvements to location window.
- Fixed latency display always as bars on some screens.
- Fixed OVPN custom config issues with protocol names.
- Fixed custom config error message.
- Added SIGTERM signal processing for Mac.
- Fixed incorrect timestamps in service log.
- Finish all active connections on app start (Mac).
- Fixed the program hangs on the welcome screen on Mac when installed in the folder with spaces.
- Fixed Custom config does not change DNS server on MacOS.
- Fixed WireGuard on wake connect issue.
- Fixed Cmd+Q shortcut confirmation regression on Mac.

- Added location search.
- Improved domain name validation in GUI preferences.
- Fixed GUI and DPI scaling issues for API resolution in GUI preferences.
- Fixed network level split routing defaults
- Removed initialization timeout in GUI.
- Fixed Mac UI bug with static ips and custom configs ribbon.
- Recreate DNS-resolver when network state changes
- Fixed Hyper-V host network bridge detection.
- Fixed OVPN pipe-related deadlock issue
- Fixed refetch WG config after logout.
- Improved service logging, log merging and improved readability in GUI internal viewer.
- Added year to logs
- Fixed custom configs OVPN protocol detection.
- Fixed Localhost blocked in inclusive Split Routing mode
- Fixed inclusive split tunneling breaks BattleNet agent
- Fixed default cipher problem with OVPN custom configs.
- Fixed FUI crash on Mac when opening or closing laptop lid in some cases
- Fixed reconnect on external IKEv2 failure, fixed DNS server list size issue
- Hide "Connection settings" in external config mode.
- Fixed EXE selection for a WoW64 GUI process.
- Updated split tunneling driver for Win7 support.
- Removed sensitive info from logs.
- Fixed app lock up when the file explorer is shown
- Fixed locations ribbon UI regression.
- Fixed PingTest log spam.
- Added workaround for openvpn error "write_wintun(): head/tail value is over capacity".
- Check correctness of IP/CIDR combination in GUI.
- Updated "ESC" button/icon in the installer.

- Extended tray menu to show Static IPs, custom configs and favorites
- Split tunneling driver updated for Windows 8 support
- Added show flags preference
- Fixed WireGuard custom config issues with no PSK and ipv6
- Added support for Unicode SSIDs
- Formatted WireGuard output to be readable
- Attempted to fix not displaying static ip device name
- Service error 29 removed from service
- Prevent blank manual IP in API resolution
- Fixed Win32 service WireGuard issues and added crashdump support for the service
- By default use udp protocol for custom OVPN configs if no proto defined
- Fixed blinking cursor issue
- Fixed favorites not being saved on shutdown
- Show static ip as sublocation name
- Refactored TAP-adapter detection for split tunneling
- Fixed split tunneling being disabled with WG

Bug Fixes:
-----------------------
- Fixed possible IP leak on OS start
- Fixed IP leak during auto-upgrade process
- Fixed OS default DNS problem after reboot on Mac.
- Fixed Location tab background color
- Fixed incorrect UI placement in Docked mode on Mac
- Fixed notification logic
- Start minimized after reboot if minimize to tray option is on.
- Disable firewall in auto mode for custom configs that don't redirect gateway
- Allow AirDrop when firewall is enabled with LAN bypass on
- Stunnel updated to latest version 5.57
- Protobuf updated to latest version 3.14.0
- New connecting animation
- Fixed Firewall frozen in incorrect state across sign out/in
- Fixed GUI crash on Mac when opening or closing laptop lid in some cases
- Attempt to fix IPC server listen error

Bug Fixes:
-----------------------
- Fixed possible IP leak on OS start
- Fixed IP leak during auto-upgrade process
- Fixed OS default DNS problem after reboot on Mac.
- Fixed Location tab background color
- Fixed incorrect UI placement in Docked mode on Mac
- Fixed notification logic
- Start minimized after reboot if minimize to tray option is on.
- Disable firewall in auto mode for custom configs that don't redirect gateway
- Allow AirDrop when firewall is enabled with LAN bypass on
- Stunnel updated to latest version 5.57
- Protobuf updated to latest version 3.14.0

New Features:
-----------------------
- New design
- Split tunneling
- WireGuard support
- Network awareness
- MAC spoofing
- Custom config support (WireGuard and OpenVPN)
- Packet size adjustment
- Tabbed location list

Bug Fixes:
-----------------------
- Too many to list

New Features:
-----------------------
- New design
- Split tunneling
- WireGuard support
- Network awareness
- MAC spoofing
- Custom config support (WireGuard and OpenVPN)
- Packet size adjustment
- Tabbed location list

Bug Fixes:
-----------------------
- Too many to list

Test auto-update functionality from 1.83 to 2.0

New Features:
-----------------------
- Show Static IP device ID in the UI
- Ability to select DNS server used by the app while disconnected

Bug Fixes:
-----------------------
- Build-a-Plan locations sometimes not showing correctly
- Prevent WindscribeService crash if DNS settings change
- Custom configs can now be connected to while expired
- Bypass anti-abuse check if Build-a-Plan is activated
- Fixed SSL CA bundle issue

New Features:
-----------------------
- WebSocket stealth protocol support
- Location list sorting methods: Geography, alphabet, latency
- Build-a-Plan support (future feature)
- Static IP + port forwarding support (future feature)
- Custom OpenVPN config support

Bug Fixes:
-----------------------
- Stuck on login in China
- App prevents graceful Windows shutdown
- App freezes in “Windscribe is shutting down” state
- Bad IKEv2 connection causes client to lock up
- Don’t disable server location on ping test failure

No changelog

No changelog

New Features:
-----------------------
- Favorite locations
- Setting to show actual latency instead of signal bars

Bug Fixes:
-----------------------
- IKEv2 traffic not counted on MacOS
- NULL DACL vulnerability (CVE-2018–1133)
- “Better” Best Location detection
- Default to AES-256-GCM cipher in OpenVPN
- Don’t make HTTP requests when disconnected to reduce strain on the API
- Redact sensitive info from the debug log

No changelog

No changelog

New Features:
-----------------------
- IKEv2 protocol support (manual and automatic mode)
- Emergency Connect / Secure Login

Bug Fixes:
-----------------------
- Wifi-sharing not working after wakeup
- Forcibly close all TCP sockets after tunnel up
- Don’t forcibly disconnect if currently connected node is missing from the server list
- Language detection defaults to English instead of Arabic
- Reinstall/enable WAN miniport adapters if missing/disabled
- Adjusted DPI to work with multiple scale factors
- Added “Disconnecting” state
- Eliminated redundant API calls
- Reduced the server ping frequency
- Updated OpenVPN binaries to latest version
- Don't auto-enable the firewall (in Automatic mode) on computer start up if auto-connect is false
- Simplified installer flow + additional “custom install” options
- Async DNS resolver
- Adjusted node selection algorithm to favor lower latency nodes
- Forcibly expand certain locations when the country name is clicked
- Detect if LAN range is RFC-1918 complaint

No changelog

No changelog

No changelog

No changelog

New Features:
-----------------------
- LAN proxy gateway — https://windscribe.com/features/proxy-gateway
- Secure Hotspot (Experimental) — https://windscribe.com/features/secure-hotspot
- Variable location drawer height
- Auto login after signup
- Ability to choose NDIS5 TAP driver
- Upgrade to OpenVPN 2.4.x with 2.3.x fallback
- Service notifications
- Show Pro data-centers to free users
- Location latency tool-tips added to signal bars

Bug Fixes:
-----------------------
- Always on firewall not working on OS boot on some machines
- Application crashes after connection attempts are exceeded with “minimize to tray” option checked
- Application freeze with firewall ON requires reboot
- API calls not made if app starts with no Internet connectivity
- Custom installation now allows for non-standard install path
- Auto-enable disabled TAP adapter
- 100% CPU when app starts with no Internet connectivity
- Don’t try UDP protocol if system proxy is configured
- Constant application window size on variable DPI screens
- Login form DPI bug
- On multi-screen computers, tool-tips show on primary monitor
- Leave firewall ON if ran out of free bandwidth to prevent IP leak
- Increase reconnect timeout from 5 min to 1 hour
- Server list source changed
- Moved server location update process to separate thread
- Only do ping tests while disconnected
- Update available UI change
- Output installed anti-virus software into debug log for troubleshooting
- Open survey on application uninstall
- Installer command line arg support
- Black and white top bar icon on MacOS
- Ping nodes in batches instead of all at the same time
- Allow for verbose OpenVPN logging via Advanced Parameters screen
- When beta channel is selected, check for updates right away

No changelog

New Features:
-----------------------
- Added city level location selection
- Added Automatic Connection mode
- Added support for 22 languages
- Added custom TAP adapter
- Added “Ignore SSL Errors” option
- Added notifications when firewall is ON and application not connected
- Added “Advanced Parameters” screen
- Added EULA to the installer
- Added IPv6 connectivity disable button, to prevent WebRTC leaks over IPv6 in some situations
- Added Touch support
- Added Beta channel

Bug Fixes:
-----------------------
- Fixed auto-start bug on some systems
- Fixed Internet connectivity check
- Fixed persistent session storage
- Fixed API connectivity on restrictive networks
- Fixed unquoted service path
- Fixed disappearing Best Location
- Fixed WSD port connectivity while firewall is ON
- Fixed PlayStation UPNP connectivity while firewall is ON
- Fixed reconnection bug on computer wake up on some systems
- Changed the Preferences screens
- Changed the connecting spinner animation

No changelog

No changelog

No changelog

No changelog

No changelog

No changelog

No changelog