Windows Changelog

### Added
* Feature to clear Wi-Fi history. Details [here](https://github.com/Windscribe/Desktop-App/wiki/Clear-Wi%E2%80%90Fi-History-feature).
* Port selection on protocol change screen.

### Improved
* Edit box UX.
* CLI commands to return success when it is already in the correct state.
* WireGuard client IP determination and reduced dependency on server API.
* Tray menu UX for 'Show/Hide', replacing it with just 'Show app' on macOS and Linux.
* Automatic DNS manager detection on Linux.

### Fixed
* Helper resource leak on macOS and Linux.
* Editbox text may be cut off.
* Back button from captcha screen.
* IP rotate may be disabled unintentionally due to network changes.
* Invalid interfaces in MAC spoofing interface dropdown on Linux.

### Updated
* ctrld to 1.4.9.

### Added
* A reset password endpoint to wsnet.

### Improved
* Helper command robustness and removed unused commands.
* Windows helper code organization and interaction with the Service Control Manager.
* Logging & detection for abusers.
* Locations resizing behaviour.
* Window resizing behaviour and performance.
* Font sizing and contrast.
* Build system efficiency.
* Linux install scripts not to disable firewalld.

### Fixed
* WireGuard connection may not reconnect after Windows wakes from sleep mode.
* Potential crash in logging.
* macOS launcher, helper, and installer build config issues.
* macOS split tunneling extension not working after build system refactor.
* Helper commands sometimes get stuck on macOS 26.
* Package dependencies for arm64 architectures on Linux.
* Split tunnel toggles may be drawn at incorrect position.
* Tray icon sometimes can't be clicked on Linux.
* Text alignment in preferences.
* Scrollbar artifacts on curved border.
* Visual artifact when switching to ROBERT preferences.
* Context menu look on the custom config credentials prompt.
* Incorrectly calculated session token expiry in wsnet.
* Freshly launched app may not clean up stale interface on macOS and Linux.
* In-app data counter may be incorrect on macOS and Linux.
* Linux script not retaining SELinux context.

### Updated
* OpenVPN to 2.6.17.
* curl to the official 8.17.0 release.
* OpenSSL to 3.6.0, and deprecated use of oqsprovider for post-quantum algorithms.
* ctrld to 1.4.8.

### Added
* Individual toggle switches for split tunneling entries.
* Slovak translations from GitHub user `kubalav`.
* Greek (machine) translations.
* Prompt to use protocol as preferred after successful protocol failover.
* A backup endpoint for connectivity (tunnel) test in wsnet.

### Improved
* Connected DNS UX.
* Sorting of countries by latency.
* Protocol selection after failover.
* Manual connection mode to try alternate datacenter server, if available, when first connection attempt fails.
* Docked tray behaviour on Windows.
* UX when split tunneling is enabled but the macOS system extension has not been approved.
* German translations provided by GitHub user `Evonos`.
* Logging for account abuse.

### Fixed
* OpenVPN protocols not working on openSUSE Tumbleweed.
* Linux share proxy sometimes not working, particularly on CLI after reboot.
* IPv4/v6 DNS priority while connected on Linux.
* ctrld may not be terminated after disconnecting when using custom DNS preference.
* Protocol failover may cause IP pinning to fail.
* 'Firewall' label may be too long with some languages.
* One-time override not showing preferred protocol prompt.
* Background scaling issues on high DPI displays.
* Initial unhover opacity for IP utilities menu.
* Dropdown item order for sound notifications.
* Scrollbar was cutting off hover effect from location row.
* Window may extend beyond bottom of screen.
* A potential crash when clicking the login button multiple times.
* ws-no-pings advanced parameter is not respected.
* Rotating IP repeatedly and quickly may hit a rate limit.
* GUI misalignment and font when proxy gateway/secure hotspot are enabled.
* The login username input box losing focus when using the trackpad on macOS.
* Preferred protocol prompt should not be shown on IP rotate.
* A height calculation error for error descriptions.
* Installer background does not show on macOS 26.2 Beta.
* Tooltips not working at app launch until user clicks the main window on Linux.
* Qt log spam on Windows and Linux.

### Updated
* OpenVPN to 2.6.16.
* 7zr utility to 25.01 on Windows.

### Improved
* Additional Slovak translations from GitHub user kubalav.

### Fixed
* OpenVPN protocols not working on openSUSE Tumbleweed.
* 'Firewall' label may be too long with some languages.
* One-time override not showing preferred protocol prompt.
* Background scaling issues on high DPI displays.
* ctrld may not be terminated after disconnecting when using custom DNS preference.
* Initial unhover opacity for IP utilities menu.
* Dropdown item order for sound notifications.
* IPv4/v6 DNS priority while connected on Linux.

### Added
* A backup endpoint for connectivity (tunnel) test in wsnet.

### Improved
* German translations provided by GitHub user Evonos.
* Logging for account abuse.

### Fixed
* Preferred protocol prompt should not be shown on IP rotate.
* A height calculation error for error descriptions.
* Installer background does not show on macOS 26.2 Beta.
* Tooltips not working at app launch until user clicks the main window on Linux.
* Some Qt log spam on Windows.

### Added
* Individual toggle switches for split tunneling entries.
* Slovak translations from GitHub user kubalav.
* Greek (machine) translations.
* Prompt to use protocol as preferred after successful protocol failover.

### Improved
* Connected DNS UX.
* Sorting of countries by latency.
* Protocol selection after failover.
* Manual connection mode to try alternate datacenter server, if available, when first connection attempt fails.
* Docked tray behaviour on Windows.
* UX when split tunneling is enabled but the macOS system extension has not been approved.

### Fixed
* Scrollbar was cutting off hover effect from location row.
* Window may extend beyond bottom of screen.
* A potential crash when clicking the login button multiple times.
* ws-no-pings advanced parameter is not respected.
* Protocol failover may cause IP pinning to fail.
* Rotating IP repeatedly and quickly may hit a rate limit.
* Crash in wsnet on Android due to a limit on the maximum socket descriptor.
* Leftover windscribectrld instance may cause DNS conflict.
* GUI misalignment and font when proxy gateway/secure hotspot are enabled.
* The login username input box losing focus when using the trackpad on macOS.
* Linux share proxy sometimes not working, particularly on CLI after reboot.
* Qt log spam on Linux.

### Updated
* OpenVPN to 2.6.16.
* 7zr utility to 25.01 on Windows.

* [Added IP rotation & favourite functionality](https://windscribe.com/blog/ip-pinning-rotation/).
* Added 'Control D' option to Connected DNS.
* Added preference for specifying the tray icon color.
* Added optional port selection when connecting with windscribe-cli.
* Added WireGuard post-quantum encryption notice to the readme.
* Improved locations UI design.
* Improved Korean translations from GitHub user Alex4386.
* Improved detection when circumvent censorship should be enabled automatically.
* Improved tooltip usability.
* Fixed automatic connection mode does not try alternate datacenter server, if available, when first connection attempt fails.
* Fixed "Tray Icon Colour" preference location by moving it to the Look & Feel tab.
* Fixed unnecessary usage of environment variables for testing.
* Fixed GUI showing the wrong field for Connected DNS in some cases.
* Fixed GUI window not hidden correctly when transitioning.
* Fixed error message not hidden after successful fetching of Control D devices after a failed attempt.
* Fixed OpenSSL auto-loading openssl.cnf.
* Fixed wsnet may stop processing DNS queries.
* Fixed Internet connectivity detection in some cases.
* Fixed VPN interface network category is private. Reverted to default value of 'public'.
* Fixed OpenVPN daemon fails to start when using an HTTP LAN proxy.
* Removed Refresh button for locations.
* Removed advanced parameter for configuring the VPN adapter network category as public.
* Removed deprecated (as of W11 25H2) use of wmic utility.
* Updated ctrld to 1.4.7.

* Added IP rotation & favourite functionality.
* Added 'Control D' option to Connected DNS.
* Added WireGuard post-quantum encryption notice to the readme.
* Improved detection when circumvent censorship should be enabled automatically.
* Improved tooltip usability.
* Fixed OpenSSL auto-loading openssl.cnf security vulnerability (ZDI-CAN-27873).
* Fixed automatic connection mode does not try alternate datacenter server, if available, when first connection attempt fails.
* Fixed "Tray Icon Colour" preference location by moving it to the Look & Feel tab.
* Fixed unnecessary usage of environment variables for testing.
* Fixed GUI showing the wrong field for Connected DNS in some cases.
* Fixed GUI window not hidden correctly when transitioning.
* Fixed error message not hidden after successful fetching of Control D devices after a failed attempt.
* Fixed wsnet may stop processing DNS queries.

- Added Refresh button for locations.
- Added preference for specifying the tray icon color.
- Added optional port selection when connecting with windscribe-cli.
- Improved Korean translations from GitHub user Alex4386.
- Fixed Internet connectivity detection in some cases.
- Fixed VPN interface network category is private. Reverted to default value of 'public'.
- Fixed OpenVPN daemon fails to start when using an HTTP LAN proxy.
- Removed advanced parameter for configuring the VPN adapter network category as public.
- Removed deprecated (as of W11 25H2) use of wmic utility.
- Updated ctrld to 1.4.7.

- Added post-quantum cryptography server API integration.
- Added advanced parameters for overriding the API, assets, and checkip domains used in wsnet.
- Improved native window colours in accordance with OS theme.
- Improved the new UX introduced in 2.16.
- Improved icons on the favourites tab to be the country flag.
- Improved dependencies for audio.
- Improved highlight colours used in log viewer.
- Improved wsnet to use bearer token in all server API calls.
- Fixed high memory usage due to flag assets.
- Fixed unexpected scroll in the preferences screen when sending a debug log.
- Fixed resize bar in preferences screen is slightly offset when upgrade banner is visible.
- Fixed custom DNS preferences behaviour when user attempts to set Upstream 2 without first setting Upstream 1.
- Fixed playing a sound may capture the audio device, preventing Windows from sleeping.
- Fixed incorrect URL for the 'connection mode' help link in preferences.
- Fixed on certain screen scales the "Get more data" button is too large and overlaps the data counter.
- Fixed libcurl loading openssl.cnf from untrusted path.
- Fixed potential crash when operating with empty port map.
- Fixed some wsnet failover behaviour.
- Fixed wsnet not triggering failover on some invalid payloads.
- Fixed French translation of 'Release' update channel.
- Fixed pings may be invalidated while connected.
- Fixed last opened locations tab is not remembered.
- Fixed alert window cut off when showing an update error.
- Fixed installer alert border.
- Fixed app no longer debug logging to the system debugger.
- Fixed erroneous 'failed to set network category' error message from helper.
- Fixed account status bottom-bar widget sometimes not displayed.
- Updated OpenVPN DCO driver to v1.3.3.
- Updated ctrld to 1.4.6.
- Removed the API resolution settings from the GUI as they are superseded by the new advanced parameters noted above.

* Improved highlight colours used in log viewer.
* Fixed high memory usage due to flag assets.
* Fixed unexpected scroll in the preferences screen when sending a debug log.
* Fixed resize bar in preferences screen is slightly offset when upgrade banner is visible.
* Fixed custom DNS preferences behaviour when user attempts to set Upstream 2 without first setting Upstream 1.
* Fixed playing a sound may capture the audio device, preventing Windows from sleeping.
* Fixed incorrect URL for the 'connection mode' help link in preferences.
* Fixed on certain screen scales the "Get more data" button is too large and overlaps the data counter.

- Added post-quantum cryptography server API integration.
- Added advanced parameters for overriding the API, assets, and checkip domains used in wsnet.
- Improved native window colours in accordance with OS theme.
- Improved the new UX introduced in 2.16.
- Improved icons on the favourites tab to be the country flag.
- Improved dependencies for audio.
- Improved wsnet to use bearer token in all server API calls.
- Fixed libcurl loading openssl.cnf from untrusted path.
- Fixed potential crash when operating with empty port map.
- Fixed some wsnet failover behaviour.
- Fixed wsnet not triggering failover on some invalid payloads.
- Fixed French translation of 'Release' update channel.
- Fixed pings may be invalidated while connected.
- Fixed last opened locations tab is not remembered.
- Fixed alert window cut off when showing an update error.
- Fixed installer alert border.
- Fixed app no longer debug logging to the system debugger.
- Fixed erroneous 'failed to set network category' error message from helper.
- Updated OpenVPN DCO driver to v1.3.3.
- Updated ctrld to 1.4.6.
- Removed the API resolution settings from the GUI as they are superseded by the new advanced parameters noted above.

- Added new app UI design.
- Added bundled backgrounds and sound notifications.
- Added Look & Feel tab in preferences.
- Added two stage login and CAPTCHA.
- Added an advanced parameter to suppress pings (ws-no-pings).
- Added a new firewall mode Always On+.
- Added flags for new locations.
- Improved installer icon.
- Improved app logs to output GUI and engine settings in JSON format.
- Improved Chinese translation from GitHub user YerongAI.
- Improved build instructions.
- Improved WireGuard support on adverse networks by forcing a handshake after interface configuration.
- Improved inconsistent English spelling.
- Improved preferences import/export to include advanced parameters.
- Improved Russian translation.
- Fixed internet connectivity detection when using PPPoE.
- Fixed some blocking CLI commands may consume more CPU than intended.
- Fixed locations missing nicknames in tray menu.
- Fixed existing local DNS ignored when using custom DNS.
- Fixed Best Location may be chosen incorrectly.
- Fixed internet connectivity detection when using PPPoE.
- Fixed virtual network adapter may not show up in Network Options.
- Fixed build-a-plan shows as free account.
- Fixed OpenVPN config file path missing terminating double-quote in helper.
- Fixed in-app update download may fail prematurely on slow networks.
- Fixed (reduced) maximum CAPTCHA trail size which was causing login failures.
- Updated c-ares to 1.34.5, added additional logs to wsnet.
- Updated ctrld to 1.4.4.

- Added new app UI design.
- Added bundled backgrounds and sound notifications.
- Added Look & Feel tab in preferences.
- Added two stage login and CAPTCHA.
- Added an advanced parameter to suppress pings (ws-no-pings).
- Added a new firewall mode Always On+.
- Added flags for new locations.
- Improved installer icon.
- Improved app logs to output GUI and engine settings in JSON format.
- Improved Chinese translation from GitHub user YerongAI.
- Improved build instructions.
- Improved WireGuard® support on adverse networks by forcing a handshake after interface configuration.
- Improved inconsistent English spelling.
- Improved preferences import/export to include advanced parameters.
- Improved Russian translation.
- Fixed internet connectivity detection when using PPPoE.
- Fixed some blocking CLI commands may consume more CPU than intended.
- Fixed locations missing nicknames in tray menu.
- Fixed existing local DNS ignored when using custom DNS.
- Fixed Best Location may be chosen incorrectly.
- Fixed internet connectivity detection when using PPPoE.
- Fixed virtual network adapter may not show up in Network Options.
- Updated c-ares to 1.34.5, added additional logs to wsnet.
- Updated ctrld to 1.4.4.

- Added flag for Iran.
- Improved various issues with the new UI (e.g. colors, external config mode, keyboard handling in locations).
- Improved Russian translations.
- Fixed Look & Feel preferences not translated.
- Fixed 400 'header or cookie too large' for Cloudflare API endpoints.
- Fixed incorrectly formatted client log entries.
- Fixed misleading log message.
- Fixed playing a sound may capture the audio device, preventing Windows from sleeping.

- Fixed various UI bugs introduced by the UI redesign.
- Fixed app fails to connect when using 'remote' advanced parameter with WireGuard and connecting to a different location.
- Fixed flags which had rendering issues.
- Fixed curl timeouts in wsnet.

- Improved flag assets for new locations.
- Improved CAPTCHA screen design.
- Fixed minor UI bugs introduced with the new UI design.
- Fixed internet connectivity detection when using PPPoE.
- Updated ctrld to 1.4.4.

*** Known Issues ***
- Search for a location feature is a little wonky.

- Added new app UI design.
- Added bundled backgrounds and sound notifications.
- Added Look & Feel tab in preferences.
- Added two stage login and CAPTCHA.
- Added an advanced parameter to suppress pings (ws-no-pings).
- Added a new firewall mode Always On+.
- Improved app logs to output GUI and engine settings in JSON format.
- Improved Chinese translation from GitHub user YerongAI.
- Improved build instructions.
- Improved WireGuard support on adverse networks by forcing a handshake after interface configuration.
- Improved inconsistent English spelling.
- Improved preferences import/export to include advanced parameters.
- Fixed internet connectivity detection when using PPPoE.
- Fixed some blocking CLI commands may consume more CPU than intended.
- Fixed locations missing nicknames in tray menu.
- Fixed existing local DNS ignored when using custom DNS.
- Fixed Best Location may be chosen incorrectly.
- Updated c-ares to 1.34.5, added additional logs to wsnet.

### Windows
- Added location renaming feature.
- Added support for local DNS as connected DNS.
- Improved client log when unable to retrieve WireGuard config from server.
- Improved anti-censorship mechanisms.
- Improved IPC communication between the client and helper/service.
- Improved consistency of install package naming.
- Improved confusing "No P2P" icon.
- Improved flag assets.
- Improved UX when unable to connect to the Windscribe helper/service.
- Improved installer language detection to use app language if available.
- Improved behavior when the firewall is on and the app exits unexpectedly.
- Improved UX and fixed text overlaps on the static IPs screen.
- Fixed searching for nicknames not working after location renaming feature.
- Fixed Ecuador flag.
- Fixed the app freezing on exit.
- Fixed cursor may not change when a location becomes disabled/enabled.
- Fixed static IP link color may be incorrect.
- Fixed firewall may be briefly incorrectly disabled after in-app update.
- Fixed static IP locations that are unavailable are not displayed.
- Fixed window height is cut off if window transitions while being dragged.
- Fixed Best Location is chosen incorrectly.
- Fixed installer buttons not being transparent.
- Fixed unhandled -os_restart argument in the installer from older app versions.
- Fixed latency bars display 'full strength' when ping information is not available/failed for the location.
- Fixed translations for Arabic/Farsi in Decoy Traffic.
- Fixed incorrect comparison when importing renamed locations.
- Fixed custom config name is truncated too short.
- Updated OpenVPN to 2.6.13.
- Updated Qt to 6.8.3.
- Updated ctrld to 1.4.3.
- Updated liboqs to 0.12.0 and oqs-provider to 0.7.0.
- Removed -no-drivers argument from installer.
- Removed code usage of Qt5 compatibility module.

- Fixed unhandled -os_restart argument in the installer from older app versions.
- Fixed latency bars display 'full strength' when ping information is not available/failed for the location.
- Fixed translations for Arabic/Farsi in Decoy Traffic.
- Fixed incorrect comparison when importing renamed locations.
- Fixed custom config name is truncated too short.
- Updated ctrld to 1.4.3.

- Added location renaming.
- Added support for local DNS as connected DNS.
- Improved client log when unable to get WG config from server.
- Improved anti-censorship mechanisms.
- Improved IPC communication between the client and helper/service, refactoring without changing the functionality of the program.
- Improved consistency of install package naming.
- Improved confusing "No P2P" icon.
- Improved flag assets.
- Improved UX when unable to connect to the Windscribe helper/service.
- Improved installer language detection to use app language if available.
- Improved behavior when the firewall is on and the app exits unexpectedly.
- Improved UX and fixed text overlaps on the static IPs screen.
- Fixed postquantum KEMs should not be proposed for mobile platforms in wsnet.
- Fixed searching for nicknames not working after location renaming feature.
- Fixed Ecuador flag, redux.
- Fixed the app freezing on exit.
- Fixed cursor may not change when a location becomes disabled/enabled.
- Fixed static IP link color may be incorrect.
- Fixed firewall may be briefly incorrectly disabled after in-app update.
- Fixed static IP locations that are unavailable are not displayed.
- Fixed window height is cut off if window transitions while being dragged.
- Fixed Best Location is chosen incorrectly.
- Fixed installer buttons not being transparent.
- Updated OpenVPN to 2.6.13.
- Updated Qt to 6.8.3.
- Updated liboqs to 0.12.0 and oqs-provider to 0.7.0.
- Updated ctrld to 1.4.2.
- Removed -no-drivers argument for installer.
- Removed code usage of Qt5 compatibility module.

SHA-256: 56eb96462db9beaaa94920edfa85f3f1ccea457d4f64ba97bc4dc6341467b31c

- Added Decoy Traffic feature.
- Added extended cleanup logs in wsnet.
- Improved uninstaller folder security.
- Improved build process to produce statically linked executables.
- Improved Windows-on-Arm installer to use arm64 7-zip extractor.
- Improved custom connected DNS error UX.
- Improved flow when user enables "Show notifications" but system notifications are disabled.
- Improved initialization and preferences animations.
- Improved log frequency in wsnet.
- Improved reliability of wsnet in unstable network environments.
- Improved ping logging.
- Improved detection and logging of failures in the client<->helper communication mechanism.
- Improved the Decoy Traffic feature to upload and download independently, and improved its UI.
- Improved reliability of wsnet in unstable network environments.
- Fixed location tab transitions to search tab even when modifier keys are pressed.
- Fixed automatic-mode firewall remains on when Windows is restarted and the app is closed to the tray.
- Fixed app remains running, but non-functioning, if user cancels OS shutdown.
- Fixed app is launched minimized instead of minimized to tray when Start Minimized and Close to Tray are enabled.
- Fixed "start minimized" not working by reinstating workaround.
- Fixed docked window is sometimes in the wrong position.
- Fixed app stuck during login after accepting prompt to ignore SSL errors.
- Fixed incorrect post quantum KE algorithm.
- Fixed app does not retry login if first attempt failed due to lack of connectivity.
- Fixed Allow LAN traffic precedence.
- Fixed mangled ar/fa translations.
- Fixed VPN interface network category is public.
- Fixed install fails if uninstall registry information is missing.
- Fixed incorrect characters displayed in installer bootstrap error message.
- Fixed "System notifications are disabled" alert shown unexpectedly.
- Fixed app update fails when using pre-2.4 app.
- Fixed installer alerts may not fit in window for some translations.
- Fixed "reset date" being shown on account screen instead of "expiry date" for some plans.
- Fixed 2FA code expires before working endpoint can be found [wsnet].
- Fixed disconnecting due to out of data turns off firewall.
- Fixed incorrect check for LAN address for custom DNS.
- Fixed inconsistent behavior when starting app and 'close to tray' is enabled.
- Fixed window size after dismissing alert at the login window.
- Fixed error message box may be displayed by Windows when reinstalling deleted/disabled Windscribe service.
- Removed DLL injection mitigation due to false positives.
- Removed IPv6 split tunneling (for now) due to edge cases.
- Removed some log spam.
- Updated wstunnel dependency to v1.0.5. Adds support for anti-censorship TLS stuffing.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: df3a6a0d2bea84a5bf31a5fbda0c534330e7b08ca1279a292077d662d1113117

- Added Decoy Traffic feature.
- Added extended cleanup logs in wsnet.
- Improved uninstaller folder security.
- Improved build process to produce statically linked executables.
- Improved Windows-on-Arm installer to use arm64 7-zip extractor.
- Improved custom connected DNS error UX.
- Improved flow when user enables "Show notifications" but system notifications are disabled.
- Improved initialization and preferences animations.
- Improved log frequency in wsnet.
- Improved reliability of wsnet in unstable network environments.
- Improved ping logging.
- Improved detection and logging of failures in the client<->helper communication mechanism.
- Improved the Decoy Traffic feature to upload and download independently, and improved its UI.
- Improved reliability of wsnet in unstable network environments.
- Fixed location tab transitions to search tab even when modifier keys are pressed.
- Fixed automatic-mode firewall remains on when Windows is restarted and the app is closed to the tray.
- Fixed app remains running, but non-functioning, if user cancels OS shutdown.
- Fixed app is launched minimized instead of minimized to tray when Start Minimized and Close to Tray are enabled.
- Fixed "start minimized" not working by reinstating workaround.
- Fixed docked window is sometimes in the wrong position.
- Fixed app stuck during login after accepting prompt to ignore SSL errors.
- Fixed incorrect post quantum KE algorithm.
- Fixed app does not retry login if first attempt failed due to lack of connectivity.
- Fixed Allow LAN traffic precedence.
- Fixed mangled ar/fa translations.
- Fixed VPN interface network category is public.
- Fixed install fails if uninstall registry information is missing.
- Fixed incorrect characters displayed in installer bootstrap error message.
- Fixed "System notifications are disabled" alert shown unexpectedly.
- Fixed app update fails when using pre-2.4 app.
- Fixed installer alerts may not fit in window for some translations.
- Fixed "reset date" being shown on account screen instead of "expiry date" for some plans.
- Fixed 2FA code expires before working endpoint can be found [wsnet].
- Fixed disconnecting due to out of data turns off firewall.
- Fixed incorrect check for LAN address for custom DNS.
- Fixed inconsistent behavior when starting app and 'close to tray' is enabled.
- Fixed window size after dismissing alert at the login window.
- Fixed error message box may be displayed by Windows when reinstalling deleted/disabled Windscribe service.
- Removed DLL injection mitigation due to false positives.
- Removed IPv6 split tunneling (for now) due to edge cases.
- Removed some log spam.
- Updated wstunnel dependency to v1.0.5. Adds support for anti-censorship TLS stuffing.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: 316fca484b7e6b91a893d48a219cc07f5312777a7e4db43fddd7d16058cb0449

- Improved the Decoy Traffic feature to upload and download independently, and improved its UI.
- Improved reliability of wsnet in unstable network environments.
- Fixed location tab transitions to search tab even when modifier keys are pressed.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: f26f25f18e606d56df5ec188c6a9aad4be03cd057734abb39bdfe384dab02afa

- Improved reliability of wsnet in unstable network environments.
- Improved ping logging.
- Improved detection and logging of failures in the client<->helper communication mechanism.
- Fixed automatic-mode firewall remains on when Windows is restarted and the app is closed to the tray.
- Fixed app remains running, but non-functioning, if user cancels OS shutdown.
- Fixed app is launched minimized instead of minimized to tray when Start Minimized and Close to Tray are enabled.
- Fixed "start minimized" not working by reinstating workaround.


*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: 71a7c5916084a29bdeab9f893a63647f4a1e742d03a5faca904e02916146ef7c

- Added extended cleanup logs in wsnet.
- Improved initialization and preferences animations.
- Improved log frequency in wsnet.
- Fixed inconsistent behavior when starting app and 'close to tray' is enabled.
- Fixed window size after dismissing alert at the login window.
- Fixed error message box may be displayed by Windows when reinstalling deleted/disabled Windscribe service.


*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: a8f135c483ff347ceffb9c2e212715bcb4da9316e590e07e02385f09447c03cd

- Added Decoy Traffic feature.
- Improved uninstaller folder security.
- Fixed docked window is sometimes in the wrong position.
- Fixed app stuck during login after accepting prompt to ignore SSL errors.
- Fixed incorrect post quantum KE algorithm.
- Fixed app does not retry login if first attempt failed due to lack of connectivity.
- Fixed Allow LAN traffic precedence.
- Fixed mangled ar/fa translations.
- Fixed VPN interface network category is public.
- Fixed install fails if uninstall registry information is missing.
- Fixed incorrect characters displayed in installer bootstrap error message.
- Removed DLL injection mitigation due to false positives.
- Removed IPv6 split tunneling (for now) due to edge cases.
- Removed some log spam.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: 875ee772040c5276fa38b2de57df3593b804334f35f44aece35022a24068187c

- Added IPv6 support for split tunneling.
- Added static IP support in CLI.
- Added toggle to enable proxy gateway only while VPN is connected, based on contributions from GitHub user intangir.
- Added h3:// and sdns:// protocol support for ctrld (custom DNS preference).
- Added a changelog link in the About preferences screen.
- Added back translation keys for 'Release' and 'Beta' release channels.
- Improved location ordering when searching.
- Improved network detection and minimized location service requests on Windows 11 24H2.
- Improved UX for some CLI commands.
- Improved CLI entry of credentials when logging in.
- Improved Japanese translations from GitHub user Ue05.
- Improved Russian translations from GitHub user MedicalJewel105.
- Improved login/logout CLI flow.
- Improved UX and performance when dragging windows to different screens.
- Improved installer to notify the user if the helper service fails to install.
- Improved error reporting if installation to a custom folder fails.
- Improved logs in the client.
- Fixed potential local privilege escalation vulnerability in the installer bootstrap.
- Fixed autoconnect attempting to connect to invalid locations.
- Fixed scroll position not retained when leaving/reentering a window.
- Fixed importing JSON may put the Secure Hotspot preference in an invalid state.
- Fixed changelog link for many platforms was incorrect in General Preferences.
- Fixed incorrect firewall rule blocking IPv6 during inclusive split tunnel.
- Fixed missing interface in MAC spoofing dropdown.
- Fixed a potential program quit hang [wsnet].
- Fixed custom config path not checked when importing preferences.
- Fixed missing null pointer checks in the client application.
- Fixed window can't be dragged to a screen above the initial screen.
- Fixed window is invisible when app is docked and device pixel ratio is not 1.
- Fixed Static IP commands in CLI with GUI backend.
- Fixed the Ecuador flag.
- Removed ability to use Secure Hotspot together with inclusive split tunneling.
- Removed IPv6 toggle in preferences.
- Updated ctrld, utilized by the custom DNS preference, to 1.3.10.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: deab745ea6c79378cc1c8f25f9d20c42994af5d23ffe32ae0d3fe6a2ef8bba02

- Fixed installer unable to set folder permissions on non-English versions of Windows.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: 126fd0a141db56a8b45051fdfe163fd6bc0c8f02313d0e0993314bd835c7c473

- Fixed potential local privilege escalation vulnerability in the installer bootstrap.
- Fixed autoconnect attempting to connect to invalid locations.
- Fixed scroll position not retained when leaving/reentering a window.
- Fixed importing JSON may put the Secure Hotspot preference in an invalid state.
- Fixed changelog link for many platforms was incorrect in General Preferences.
- Fixed incorrect firewall rule blocking IPv6 during inclusive split tunnel.
- Fixed missing interface in MAC spoofing dropdown.

*** Known Issues ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: dc12eecc73a095078fb0b4a18d7d6ee0c3c306847325979dbd0764f8edff785b

- Added a changelog link in the About preferences screen.
- Improved installer to notify the user if the helper service fails to install.
- Improved network detection and minimized location service requests on Windows 11 24H2.
- Improved error reporting if installation to a custom folder fails.
- Fixed the Ecuador flag.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: 872cb121016eacf6c6266418796d011f1aae64fb4641f92cef59d54354667081

- Improved login/logout CLI flow.
- Improved UX and performance when dragging windows to different screens.
- Improved logs in the client.
- Fixed a potential program quit hang [wsnet].
- Fixed custom config path not checked when importing preferences.
- Fixed missing null pointer checks in the client application.
- Fixed window can't be dragged to a screen above the initial screen.
- Fixed window is invisible when app is docked and device pixel ratio is not 1.
- Removed ability to use Secure Hotspot together with inclusive split tunneling.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: 3c5e49edee598ab9954194d2098c903455266266f8cd579c1121499f8112e1bc

- Added IPv6 support for split tunneling.
- Added Static IP support in CLI.
- Added toggle to enable proxy gateway only while VPN is connected, based on contributions from GitHub user intangir.
- Added h3:// and sdns:// protocol support for ctrld (custom DNS preference).
- Added back translation keys for 'Release' and 'Beta' release channels.
- Improved location ordering when searching.
- Improved UX for some CLI commands.
- Improved CLI entry of credentials when logging in.
- Improved Japanese translations from GitHub user Ue05.
- Improved Russian translations from GitHub user MedicalJewel105.
- Fixed Static IP commands in CLI with GUI backend.
- Removed IPv6 toggle in preferences.
- Updated ctrld to 1.3.10.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: c6678edba05f5af3148e7777940de0eff7d5d5e030f28822d7b988e2c4d63dc7

- Added flags for new and upcoming locations.
- Added link to our website for further information about the Circumvent Censorship feature in preferences.
- Added additional curl logs for failed server API requests in wsnet.
- Improved UDP/TCP/Stealth/WStunnel protocol performance by using OpenVPN DCO kernel driver as their default driver.
- Improved behavior when querying the SSID on W11 24H2 and Location services is off.
- Improved description for packet size, clarifying that it doesn't do anything for TCP-based protocols.
- Improved error message when update download fails.
- Improved the failover algorithm in wsnet to prevent it from 'sticking' to one domain.
- Fixed docked app does not detect change in taskbar size and adjust position when displayed.
- Fixed app update may fail to stop and remove OpenVPN/Wireguard daemons.
- Fixed debug log may fail to send.
- Fixed double blinking cursors on custom config credentials prompt.
- Fixed custom config authorization data not deleted when custom config directory cleared.
- Fixed latency endpoint duplicate requests.
- Fixed imported JSON values may be incorrect.
- Fixed additional JSON & GUI input validation errors.
- Fixed proxy validation to only allow an IP address. Prior proxy configurations using a hostname will no longer function.
- Fixed proxy gateway sometimes sends invalid headers.
- Fixed memory leaks in wsnet.
- Fixed UDP protocol may fail to connect when Circumvent Censorship is enabled.
- Fixed "Secure Hotspot" feature not being disabled properly when using IKEv2.
- Fixed installer ignoring username/password command-line arguments.
- Fixed emergency connect fails to connect due to incompatibility with OpenVPN DCO driver.
- Updated OpenVPN DCO driver to v1.2.1.
- Updated German translations provided by GitHub user Evonos.
- Updated Spanish translations provided by GitHub user IceString3.
- Updated Russian translations in installer.
- Updated c-ares in wsnet to the latest version 1.33.1, increased timeouts for DNS requests.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: 1d525c211b67fe1a28c06bfdf498cddc318ceca4050c6c54c155bd58ed466320

- Fixed UDP protocol still failing to connect for some users when Circumvent Censorship is enabled.
- Fixed "Secure Hotspot" feature not being disabled properly when using IKEv2.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: 4f96643443199cb9b8cdcea2085fec2ea438b1a9159bff883dc134b4ffb5f2ff

- Added link to our website for further information about the Circumvent Censorship feature in preferences.
- Improved Circumvent Censorship behavior when using OpenVPN DCO driver.
- Fixed imported JSON values may be incorrect.
- Fixed proxy validation to only allow an IP address. Prior proxy configurations using a hostname will no longer function.
- Fixed proxy gateway sometimes sends invalid headers.
- Fixed memory leaks in wsnet.
- Updated Russian translations in installer.

*** Known Issue ***

The 'Circumvent Censorship' feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add `ws-use-openvpn-wintun` to the Advanced Parameters setting to force the use of the wintun driver.

SHA-256: ce61f8872b0bb46451160ddc1d76aed076a9f2f432945857f5ff5701b9d7c8ee

- Improved Spanish translations.
- Improved error message when update download fails.
- Improved the failover algorithm in wsnet, don't stick to one domain.
- Fixed docked app does not detect change in taskbar size and adjust position when displayed.
- Fixed app update may fail to stop and remove openvpn/wireguard daemons.
- Updated c-ares in wsnet to the latest version 1.33.1, increased timeouts for DNS requests.

*** Known Issue ***

The UDP/TCP/Stealth/WStunnel protocols may fail to connect if the Circumvent Censorship feature is enabled. Please use the 2.11.11 release if you require one of these protocols and the Circumvent Censorship feature. Alternatively, if you would like to use this build with Circumvent Censorship enabled, you can add 'ws-use-openvpn-wintun' to the Advanced Parameters setting to force the use of wintun.

Released: 2024/10/01
SHA-256: 7d8a75e3b80872eddf865b88a7e0aa25137fd1d5527163785f95bf923ca2f788

- Improved OpenVPN-based protocol performance by using DCO driver by default.
- Improved behavior when trying to get SSID on W11 24H2 and location is off.
- Improved description for packet size, clarifying that it doesn't do anything for TCP-based protocols.
- Fixed additional JSON & GUI input validation errors.
- Fixed debug log may fail to send. OpenSSL updated to the latest commit, version 3.4.0.
- Fixed double blinking cursors on custom config credential prompt.
- Fixed custom config auth data not deleted when custom config dir cleared.
- Fixed latency endpoint duplicate requests.
- Updated OpenVPN DCO driver to v1.2.1.
- Updated German translations provided by GitHub user Evonos.
- Updated Spanish translations provided by GitHub user IceString3.

*** Known Issues ***
- The UDP/TCP/Stealth/WStunnel protocols may fail to connect if the Circumvent Censorship feature is enabled. Please use the 2.11.11 release if you require one of these protocols and the Circumvent Censorship feature.

Released: 2024/09/16
SHA-256: 4fe31d4e40fb10cd0662cb5f4e8cedaf99abfa9e1dfd25d89a6601d6d03aa8fb

- Added support for quantum-safe TLS and OpenVPN.
- Added CLI mechanisms to connect with a specific protocol, and improve help.
- Added port selection to proxy gateway.
- Improved UX when an error occurs while enabling secure hotspot.
- Improved installer 7z extraction to use the 7zr utility and log the extraction process.
- Improved installer logging to consistently use wide strings.
- Improved debug log usefulness by adding routing table.
- Improved JSON import validation.
- Improved an error message when a custom config fails to connect with incorrect credentials.
- Improved dialog verbiage when secure hotspot is enabled without Wi-Fi.
- Fixed factory reset not executed if app is not installed.
- Fixed ctrld utility should always be tunneled via the VPN.
- Fixed WireGuard connection fails or is slow to connect with DoH.
- Fixed potential for uncaught exceptions thrown by the std::filesystem API to cause the app to crash.
- Fixed incorrect description for Client-side Keepalive preference.
- Fixed logged out when downgrading to earlier version.
- Fixed JSON & ini validation for Split DNS domains.
- Fixed JSON import not exporting/importing "Auto-Secure" setting.
- Fixed sorting by latency when some locations have no ping info.
- Fixed GUI allowing invalid proxy address/port.
- Fixed potential app crash if the app is connected and the system is restarted.
- Fixed ICMP pings crash [wsnet].
- Fixed handling of 0.0.0.0 response from DNS server for split tunnel hostnames.
- Fixed proxy gateway port not displaying 'Auto' when edit is cancelled.
- Fixed a wrong translation in Ukrainian.
- Fixed packet size not applying to WireGuard connections.
- Fixed app fails to start on Windows Server 2022.
- Fixed Program Files\Windscribe folder not cleaned up on uninstall if app is installed to a custom folder.
- Fixed main window can be dragged beyond the top of the screen.
- Fixed custom DNS feature fails if Windows DoH is enabled.
- Fixed scenario where displayed location does not match actual location.
- Fixed the timeout calculation in wsnet library. Added additional logs for tunnel tests.
- Fixed the error message when the remember checkbox wasn't ticked on the wrong credentials.
- Fixed tunnel tests don't work for WireGuard with firewall enabled.
- Fixed DNS cache not cleared in wsnet when connecting or disconnecting to the VPN.
- Fixed ctrld not starting even after external DNS service stopped.
- Updated Chinese (Simplified) translations provided by GitHub user YerongAI.
- Updated French translations provided by GitHub user RaphxelS.
- Updated Polish translations provided by GitHub user raspin0.
- Updated Ukrainian translations provided by GitHub users mljoke and Artem-CD.
- Updated libcurl, libcares, openvpn, and liboqs to the latest versions.

Released: 2024/09/05
SHA256: e2dd5e12772398755d37abbd48260d9ae74bb332049932a5e0b8d0ba62c37fa

- Improved dialog verbiage when secure hotspot is enabled without Wi-Fi.
- Fixed the error message when the remember checkbox wasn't ticked on the wrong credentials.
- Fixed tunnel tests don't work for WireGuard with firewall enabled.

Released: 2024/08/29
SHA-256: 151fb8372e0fc487bec9fcb387acffd3b78bd54547652d7a514d926cab131348

- Added the new parameter language to wsnet library.
- Improved an error message when a custom config fails to connect with incorrect credentials.
- Fixed scenario where displayed location does not match actual location.
- Fixed the timeout calculation in wsnet library. Added additional logs for tunnel tests.
- Fixed factory reset not executed if app is not installed.

Released: 2024/08/20
SHA-256: b18ca74f2c71005cbd96590f64af5a2a83da3eada087283ab821694ff03d405d

- Improved UX when an error occurs while enabling secure hotspot.
- Fixed windscribectrld.exe should always be tunneled via the VPN.
- Fixed WireGuard connection fails or is slow to connect with DoH.
- Fixed potential for uncaught exceptions thrown by the std::filesystem API to cause the app to crash.
- Fixed incorrect description for Client-side Keepalive preference.
- Fixed logged out when downgrading to earlier version.
- Fixed JSON & ini validation for Split DNS domains.
- Fixed JSON import not exporting/importing "Auto-Secure" setting.
- Fixed sorting by latency when some locations have no ping info.
- Fixed GUI allowing invalid proxy address/port.
- Fixed potential app crash if the app is connected and the system is restarted.
- Updated Chinese (Simplified) translations provided by GitHub user YerongAI.
- Updated French translations provided by GitHub user RaphxelS.
- Updated Polish translations provided by GitHub user raspin0.
- Updated Ukrainian translations provided by GitHub users mljoke and Artem-CD.

Note: please use one of the OpenVPN-based protocols if you have the anticensorship feature enabled. We are investigating a possible incompatibility with the feature and the WireGuard protocol.

Released: 2024/08/06
SHA-256: bc6e594c3da954536bb7090d564633552fe342065400e68327d0110b559f8a29

- Improved JSON import validation.
- Fixed custom DNS feature fails if Windows DoH is enabled.
- Updated curl, c-ares, openvpn, and liboqs to the latest versions.

Released: 2024/07/18
SHA-256: 36d8428d1e2f8116f288aed6a3466144d81c8a922cb589416ec3fae9a533f1ea

- Fixed app may lock up when attempting to disconnect an OpenVPN (UDP/TCP/Stealth/WSTunnel) connection while the connection attempt is in progress.

Released: 2024/07/16
SHA-256: f9edeec25bf60e2985461aaced441e4ef63d32e8c389bd46b430ba1e00af6e7f

- Added support for quantum-safe TLS and OpenVPN.
- Added CLI mechanisms to connect with a specific protocol, and improve help.
- Added port selection to proxy gateway.
- Improved installer 7z extraction to use the 7zr utility and log the extraction process.
- Improved installer logging to consistently use wide strings.
- Improved debug log usefulness by adding routing table.
- Fixed ICMP pings crash [wsnet].
- Fixed handling of 0.0.0.0 response from DNS server for split tunnel hostnames.
- Fixed proxy gateway port not displaying 'Auto' when edit is cancelled.
- Fixed a wrong translation in Ukrainian.
- Fixed packet size not applying to WireGuard connections.
- Fixed app fails to start on Windows Server 2022.
- Fixed Program Files\Windscribe folder not cleaned up on uninstall if app is installed to a custom folder.
- Fixed main window can be dragged beyond the top of the screen.

Released: 2024/07/02
SHA-256: 8a4bc3c07e092cff01adc4db11e1638425ce9659d1bc5ae7f2bf892786a25d71

- Added security warning in the installer when installing to a custom folder.
- Added support for private key passwords in OpenVPN custom configs.
- Added wsnet library + switched to vcpkg dependency management system.
- Added taskbar notification when the app needs attention.
- Added a limit of 50 hostname split tunnel entries to ensure stability.
- Improved best location selection to lean towards 10 Gbps servers.
- Improved OpenVPN and WireGuard anti-censorship.
- Improved internal error handling.
- Improved IPC message passing to adhere to best practices.
- Improved IPC handling and security between client app and helper.
- Improved retry efficiency for requests that are blocked [wsnet].
- Improved custom DNS to not use ctrld if custom DNS is set to an IPv4 address.
- Improved conditions for network connectivity detection.
- Improved installer robustness in error situations.
- Improved firewall behavior when logging out but not restarting.
- Improved monitoring of WireGuard service startup status when PC boots after a system crash or hard reset.
- Improved failover retry on WireGuard.
- Improved UI header transparency and color.
- Improved stability of DNS resolution for hostnames when using split tunneling.
- Improved UX of the protocol/port line when protocol selection is not available.
- Improved the look and translations on the Emergency Connect screen.
- Improved handling of custom configs with "dev tap", overriding automatically to "dev tun".
- Improved location search by allowing search by country code.
- Improved updating random hashed domains in a timely manner.
- Improved logic for enabling the BFE service.
- Improved error handling in UI for the secure hotspot feature, in case it fails.
- Improved log messages when installer is unable to copy Qt libs.
- Improved Polish translations.
- Improved custom config credential prompt.
- Improved IP display to "---.---.---.---" if unable to get local IP, instead of "N/A".
- Improved emergency connect to always connect with the more secure algorithms.
- Improved LZMA dependency management.
- Improved exponential back-off algorithm for pings to determine failed nodes.
- Improved IKEv2/IPsec proposals to match other platforms.
- Fixed OpenVPN adapter IP assertion.
- Fixed privilege escalation vulnerability allowing an attacker to inject a DLL into the client app and task kill any process (Reported by Zeze Lin working with Trend Micro Zero Day Initiative).
- Fixed privilege escalation vulnerability allowing an attacker to inject a DLL into the client app and start an arbitrary process as admin (Reported by Zeze Lin working with Trend Micro Zero Day Initiative).
- Fixed ICMP pings crash [wsnet].
- Fixed default install path not set for new installs.
- Fixed app crash when IKEv2 RAS callback function is called by the OS after the connection object has been deleted.
- Fixed installer crash logged in Event Viewer when installer exits (Reported by Haifang Wang working with the Windows App Assure ISV Outreach Team at Microsoft).
- Fixed possible delay in executable signature logic when it checks CRLs over the network.
- Fixed tooltip not displaying when mouse hovers over protocol line for a custom config.
- Fixed app crash if app exits during startup.
- Fixed wsnet bug sometimes causing the library to freeze.
- Fixed potential installer DoS vulnerability when installing the split tunnel driver.
- Fixed WireGuard service may fail to install when connection attempt initiated immediately after the PC boots.
- Fixed various compile warnings introduced in 2.10.x.
- Fixed DNS servers in the wsnet library not updating on the client connection/disconnection events.
- Fixed protocol selector should not be available in external config mode.
- Fixed selected location not reset after removing custom config folder.
- Fixed another display issue and crash in custom config credential prompt.
- Fixed display issue and crash in custom config credential prompt.
- Fixed MAC address does not auto-rotate when adapter is disabled then enabled.
- Fixed localhost range not encompassing entire 127/8 subnet.
- Fixed 'use ICMP pings' advanced parameter not being used.
- Fixed potential window scaling size issue.
- Fixed OpenVPN DCO network adapter number increments on every connection.
- Fixed Free Data usage in app doesn't update.
- Fixed some bugs in the wsnet library regarding mutlithreading/deadlocks.
- Fixed failed assertion in log for EmailItem.
- Fixed Secure Hotspot password not masked in UI.
- Fixed serverlist API country_override parameter doesn't enable Circumvent Censorship on first app launch.
- Fixed ignore country override when connected to a VPN.
- Fixed right clicking on login screen may show context menu away from the widget.
- Fixed custom config stays connected if folder is removed.
- Fixed anti-censorship flag (TLS stuffing) does not work for server API.
- Fixed install may silently be overridden to default folder instead of custom folder.
- Fixed wsnet thread synchronization issue that could cause a crash.
- Fixed installer window position during update.
- Fixed UDP traffic not being split tunneled correctly.
- Updated Windows-on-Arm split tunnel driver WHQL signing certificate.
- Updated ctrld dependency to 1.3.7.
- Updated dependencies, c-ares to 1.25.0 and boost to 1.84.0.
- Updated README.md file (build instructions).

Released: 2024/06/25
SHA-256: 60fc843c6af3daa6b4c78180a5ebb4b329f16e3e67aae473ac0ef5a3d93f2058

- Improved best location selection to lean towards 10 Gbps servers.
- Fixed installer window position during update.
- Fixed UDP traffic not being split tunneled correctly.

Released: 2024/06/17
SHA-256: 421c3d7dfad22b74a53163cd943a21288abc6665cbf4808d712c245d6c722036

- Improved OpenVPN and WireGuard anti-censorship.
- Improved wsnet to use TLS padding when anti-censorship is enabled.
- Fixed wsnet thread synchronization issue that could cause a crash.

Released: 2024/06/05
SHA-256: 872aab5e411c1576e12705cc6e5db29b6aace516c6d837f375bc3f3a2b623817

- Added security warning in the installer when installing to a custom folder.
- Added debugging information for wsnet.
- Improved internal error handling.
- Improved limit of 50 split tunnel entries to only apply to hostnames.
- Improved IPC message passing to adhere to best practices.
- Improved IPC handling and security between client app and helper.
- Fixed openvpn adapter IP assertion.
- Fixed privilege escalation vulnerability allowing an attacker to inject a DLL into the client app and task kill any process (Reported by Zeze Lin working with Trend Micro Zero Day Initiative).
- Fixed privilege escalation vulnerability allowing an attacker to inject a DLL into the client app and start an arbitrary process as admin (Reported by Zeze Lin working with Trend Micro Zero Day Initiative).
- Fixed ICMP pings crash [wsnet].
- Fixed default install path not set for new installs.
- Fixed app crash when IKEv2 RAS callback function is called by the OS after the connection object has been deleted.
- Fixed installer crash logged in Event Viewer when installer exits (Reported by Haifang Wang working with the Windows App Assure ISV Outreach Team at Microsoft).
- Fixed windscribectrld.exe should always be tunneled via the VPN, the split tunneling driver improved.
- Fixed possible delay in executable signature logic when it checks CRLs over the network.
- Fixed tooltip not displaying when mouse hovers over protocol line for a custom config.
- Fixed app crash if app exits during startup.
- Fixed wsnet bug sometimes causing the library to freeze.
- Updated ctrld dependency to 1.3.7.

Released: 2024/04/08
SHA-256: f1ce705f3bad60d19dc420a76dba3df8f6c131b1109fb5e8df7a257657b1365f

- Fixed anti-censorship flag (TLS stuffing) does not work for server API.
- Fixed install may silently be overridden to default folder instead of custom folder.

Released: 2024/04/01
SHA-256: a8ba97c9a5abc6c412c42f5282f5314472692cba6f4542b15b2e29ad7d382d7d

- Added a limit of 50 split tunnel entries to ensure stability.
- Improved retry efficiency for requests that are blocked [wsnet].
- Improved custom DNS to not use ctrld if custom DNS is set to an IPv4 address.
- Improved conditions for network connectivity detection.
- Improved installer robustness in error situations.
- Improved firewall behavior when logging out but not restarting.
- Improved monitoring of WireGuard service startup status when PC boots after a system crash or hard reset.
- Fixed callback may not be called on error [wsnet].
- Updated Windows-on-Arm split tunnel driver WHQL signing certificate.

Released: 2024/03/19
SHA-256: 84b86830f1c8f4f244568e15fe05ae66c7e6093fa811c290eacaae6ddae41df8

- Added support for private key passwords in OpenVPN custom configs.
- Added the user-agent request header to all HTTP-requests [wsnet].
- Added new API endpoints needed for mobile [wsnet].
- Improved failover retry on WireGuard.
- Improved UI header transparency and color.
- Improved stability of DNS resolution for hostnames when using split tunneling.
- Improved UX of the protocol/port line when protocol selection is not available.
- Improved the look and translations on the Emergency Connect screen.
- Improved handling of custom configs with "dev tap", overriding automatically to "dev tun".
- Improved location search by allowing search by country code.
- Improved updating random hashed domains in a timely manner.
- Improved logic for enabling the BFE service.
- Improved error handling in UI for the secure hotspot feature, in case it fails.
- Improved log messages when installer is unable to copy Qt libs.
- Fixed potential installer DoS vulnerability when installing the split tunnel driver.
- Fixed WireGuard service may fail to install when connection attempt initiated immediately after the PC boots.
- Fixed windscribectrld.exe should always be tunneled via the VPN.
- Fixed various compile warnings introduced in 2.10.x.
- Fixed DNS servers in the wsnet library not updating on the client connection/disconnection events.
- Fixed protocol selector should not be available in external config mode.
- Fixed wsnet versioning to be the same as the client application [wsnet].
- Fixed selected location not reset after removing custom config folder.
- Fixed another display issue and crash in custom config credential prompt.
- Fixed display issue and crash in custom config credential prompt.
- Fixed MAC address does not auto-rotate when adapter is disabled then enabled.
- Fixed localhost range not encompassing entire 127/8 subnet.
- Fixed 'use ICMP pings' advanced parameter not being used.
- Updated ctrld dependency to 1.3.5.

Known Issues:
- When connecting with inclusive split tunneling and using a custom DNS, the tunnel test may not succeed causing the connection to fail.
- When connecting with inclusive split tunneling and using a custom DNS, attempts to DNS query 127.0.0.1 fail with a 'no response from server' message.

Released: 2024/02/29
SHA-256: 75d070043f5502684eae13182b9ed98cef0092db895c5f26aa474c3e13d728f6

- Added wsnet library + switched to vcpkg dependency management system.
- Added taskbar notification when the app needs attention.
- Improved anti-censorship measures in WireGuard and OpenSSL.
- Improved Polish translations.
- Improved secrets organization in the wsnet library.
- Improved custom config credential prompt.
- Improved IP display to "---.---.---.---" if unable to get local IP, instead of "N/A".
- Improved emergency connect to always connect with the more secure algorithms.
- Improved LZMA dependency management.
- Improved exponential back-off algorithm for pings to determine failed nodes.
- Improved IKEv2/IPsec proposals to match other platforms.
- Fixed potential window scaling size issue.
- Fixed OpenVPN DCO network adapter number increments on every connection.
- Fixed Free Data usage in app doesn't update.
- Fixed some bugs in the wsnet library regarding mutlithreading/deadlocks.
- Fixed failed assertion in log for EmailItem.
- Fixed advanced parameter ws-use-icmp-pings ignored by app.
- Fixed Secure Hotspot password not masked in UI.
- Fixed serverlist API country_override parameter doesn't enable Circumvent Censorship on first app launch.
- Fixed ignore country override when connected to a VPN.
- Fixed Help screen to only show human support link for Pro accounts, and update descriptions.
- Fixed right clicking on login screen may show context menu away from the widget.
- Fixed custom config stays connected if folder is removed.
- Updated dependencies, c-ares to 1.25.0 and boost to 1.84.0.
- Updated README.md file (build instructions).

Released: 2024/02/20
SHA-256: d2a817e8f2738cacc646d3dc2194d7fd28f2ce1de435be24fa98ed8928b4daa2

- Added experimental support for the OpenVPN DCO driver.
- Added feature to export/import preferences to/from JSON file.
- Added password reveal/hide button for main login.
- Added 'status' command to the CLI.
- Added support for installing the app on Windows 10 builds older than our officially supported build (17763).
- Added feature to disable system-wide DoH configuration on connect in Windows 11.
- Added advanced parameter for specifying specific wireguard server.
- Improved anti-censorship measures in WireGuard and OpenVPN.
- Improved labels and descriptions in preferences to match the mobile app.
- Improved app start up time by starting the helper service during install.
- Improved IKEv2 profiles by disabling unnecessary features.
- Improved debug log feature to include the installer log.
- Improved installer to support keyboard shortcuts (ESC/Enter/etc.).
- Improved Secure Hotspot preference to automatically enable the Allow LAN Traffic preference.
- Fixed transition to 2FA screen when logging in.
- Fixed importing/exporting preferences closes the app window if docked.
- Fixed banned/disabled message not showing during login.
- Fixed update screen may not be clickable after an alert is shown.
- Fixed reveal password icon may be slightly cut off at certain scaling.
- Fixed pressing Login from external config mode causes UI to not display.
- Fixed returning to login screen does not set focus to username field.
- Fixed user is forcefully logged out on some server errors.
- Fixed imported split tunneling settings not reflecting in the GUI until after app restart.
- Fixed right-click also triggering Static IP link.
- Fixed various minor UX issues on login screen and preferences.
- Fixed hard-to-read 10 Gbps location icon.
- Fixed possible crash during app exit.
- Fixed advanced parameter file location differs between Guinea Pig vs Beta/Release builds.
- Fixed misdetection of TCP error during OpenVPN connection.
- Fixed installer log reordering in merge log.
- Fixed escaping of the OpenVPN password.
- Fixed incorrect translation of 'Quit' in French translation.
- Fixed some helper exes did not contain version information.
- Fixed tray menu items can be activated with right-click.
- Fixed app can be moved by dragging its shadow.
- Fixed updating from a build earlier than 2.4.10 does not work.
- Fixed a local privilege escalation vulnerability in the installer. Thanks @heegong123.
- Fixed DLL injection vulnerability in the installer.
- Fixed duplicate DLLs bloating installer size.
- Fixed uninstallation page opens in browser when reinstalling and user is not logged in.
- Fixed DOH registry disable in forced mode when EnableDohValue property originally does not exist.
- Fixed MAC address does not auto-rotate when changing networks and the MAC Spoofing Auto-Rotate MAC preference is enabled.
- Removed misleading logs indicating errors when it's benign.
- Removed unnecessary parameters for server list request API call.
- Updated boost, c-ares, and lzma dependencies.
- Updated ctrld dependency to 1.3.3.

Released: 2024/02/09
SHA-256: 9b164865a6efdf668c60497e5532991b45765d0db5e1cf3eb17987d8bb8f83b8

- Improved anti-censorship measures.
- Fixed exporting preferences closes the app window if docked.

Released: 2024/02/05
SHA-256: bb480be40badaf62576d7160dd777be550684fda997106bbd3924349371eee22

- Improved anti-censorship measures in WireGuard and OpenVPN.
- Fixed update screen may not be clickable after an alert is shown.
- Fixed reveal password icon may be slightly cut off at certain scaling.
- Fixed pressing Login from external config mode causes UI to not display.
- Fixed returning to login screen does not set focus to username field.
- Fixed user is forcefully logged out on some server errors.
- Fixed tray menu items can be activated with right-click.

Released: 2024/01/26
SHA-256: 6b8d54febbe2ee4424c126a2f242925cd40bfefeb2ba46a9e4b2fb9643518380

- Added experimental support for the OpenVPN DCO driver.
- Added password reveal/hide button for main login.
- Improved IKEv2 profiles by disabling unnecessary features.
- Improved UX for the export/import preferences feature and filter irrelevant preferences when importing.
- Fixed imported split tunneling settings not reflecting in the GUI until after app restart.
- Fixed right-click also triggering Static IP link.
- Fixed various minor UX issues on login screen and preferences.
- Fixed hard-to-read 10 Gbps location icon.
- Fixed possible crash during app exit.
- Fixed some helper exes did not contain version information.
- Fixed app can be moved by dragging its shadow.
- Removed changes causing credential issues with OpenVPN custom config.
- Updated ctrld dependency to 1.3.3.

Released: 2024/01/11
SHA-256: 5e33bb6c77193a0e76302bc3b504336245be87aebf60c3232d24b340f8feee14

- Added feature to export/import preferences to/from JSON file.
- Added feature to support custom OpenVPN configs requiring a user name and password.
- Added 'status' command to the CLI.
- Added support for installing the app on Windows 10 builds older than our officially supported build (17763).
- Added feature to disable system-wide DoH configuration on connect in Windows 11.
- Added special logging category to the client log containing random hash code of the given connection.
- Added advanced parameter for specifying specific wireguard server.
- Improved app start up time by starting the helper service during install.
- Improved debug log feature to include the installer log.
- Improved installer to support keyboard shortcuts (ESC/Enter/etc.).
- Improved Secure Hotspot preference to automatically enable the Allow LAN Traffic preference.
- Improved labels and descriptions in preferences to match the mobile app.
- Fixed incorrect translation of 'Quit' in French translation.
- Fixed advanced parameter file location differs between Guinea Pig vs Beta/Release builds.
- Fixed misdetection of TCP error during OpenVPN connection.
- Fixed updating from a build earlier than 2.4.10 does not work.
- Fixed DLL injection vulnerability in the installer.
- Fixed a local privilege escalation vulnerability in the installer.
- Fixed duplicate DLLs bloating installer size.
- Fixed uninstallation page opens in browser when reinstalling and user is not logged in.
- Fixed MAC address does not auto-rotate when changing networks and the MAC Spoofing Auto-Rotate MAC preference is enabled.
- Removed misleading logs indicating errors when it's benign.
- Removed unnecessary parameters for server list request API call.
- Updated boost, c-ares, and lzma dependencies.

Released: 2023/12/14
SHA-256: d43f1ef244e8c9a9e22eb6c792d7420436e904fcb80f4fa4eafd4e6fab29e702

- Added machine-generated translations for Chinese (Traditional), Indonesian, Italian, Japanese, Korean, Persian/Farsi, Polish, Portuguese, Turkish, Ukrainian, and Vietnamese.
- Added language localization to the installer.
- Added language localization to the uninstaller.
- Added advanced parameter to control server list (locations) functionality in censored countries.
- Improved anti-censorship feature. Feature automatically enabled for first-run users in censored countries.
- Improved wintun support by replacing custom wintun driver with OEM driver.
- Improved the appearance of the sign out button.
- Improved error message when the connected DNS utility (ctrld) fails to start.
- Improved app and installer main icon.
- Improved installer to unify it with the macOS installer.
- Improved the connection mode description in preferences.
- Improved in-app upgrade message to indicate the update will be downloaded before terminating connections.
- Improved error description in 'admin required' error screen.
- Improved build instructions in the README.
- Fixed installer/uninstaller local privilege escalation vulnerability.
- Fixed some text in preferences not matching with the mobile app.
- Fixed auto-connect not triggering when reconnecting to the same network.
- Fixed installer sometimes exiting during updates.
- Fixed misspelling in installer error message.
- Fixed "logging in" screen background color not matching with other OSes.
- Fixed DNS queries for hostname split tunnels sometimes not resolving.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed search icon on locations screen may overlap the All icon.
- Fixed UI screen transition issues when anti-abuse is triggered.
- Fixed UI connection state may stick at 'connecting' when disconnecting and connecting to a different location rapidly.
- Fixed bottom information bar on connect screen is not displayed after upgrade screen is dismissed.
- Fixed firewall does not disable on failed connection to non-existent location.
- Fixed opening locations drop down when prompted to save preferred protocol causes errant UI behavior or may crash the app.
- Fixed UI screen transition issues (UI may freeze) when account is expired or anti-abuse is triggered.
- Fixed 'OK' text in installer is not centered underneath the checkmark button for some languages.
- Fixed app icon in Windows task manager is blurry.
- Fixed reconnect not triggered when OpenVPN reports a tunnel connectivity failure.
- Fixed UI issue when the hotspot feature is enabled and a SSL error occurs.
- Fixed app may not reconnect after Internet is restored when using OpenVPN.
- Fixed app gets stuck on the logging in screen after accepting the 'ignore SSL errors' prompt.
- Fixed installer fails to launch if Windows version is incompatible.
- Fixed connect state badge icon not displayed on the taskbar icon when the app is closed to tray then restored.
- Fixed debug log to more clearly indicate that a custom dns is being used.
- Fixed double-right-clicking on the IP address makes it blurry on the main screen.
- Fixed top of password dots on login screen are clipped.
- Fixed UI 'weirdness' on the login screen when secure hotspot or proxy gateway feature is enabled and a SSL-error occurs.
- Fixed ESC text is misaligned with the close button in preferences.
- Fixed incorrect padding in 'out of data' screen.
- Fixed load indicator for bottom-most location is slightly clipped.
- Fixed clicking the blog link in the About menu doesn't do anything.
- Fixed IKEv2 connection may not clean up correctly.
- Fixed initial IKEv2 connection may fail after virgin install.
- Fixed update fails when app is running and split tunneling is enabled.
- Updated app dependencies (cURL/OpenSSL/OpenVPN etc.) to latest available version.
- Updated connected DNS utility (ctrld) to v1.3.2.
- Removed TAP adapter support. OpenVPN-based connections will always use wintun.

Released: 2023/12/07
SHA-256: ce813aa33ab7c21a9f918573aa5c3b70ca07dd9a367cef34e0e23f121b9a22d3

- Fixed some text in preferences not matching with the mobile app.
- Fixed auto-connect not triggering when reconnecting to the same network.
- Fixed installer sometimes exiting during updates.
- Fixed misspelling in installer error message.
- Fixed "logging in" screen background color not matching with other OSes.
- Fixed DNS queries for hostname split tunnels sometimes not resolving.

Released: 2023/12/01
SHA-256: e143357f13ceac6e16c8dbb5b00f2f1d97d0c1fb1c92fb985d5a80a018b66c5f

- Improved anti-censorship feature. Feature automatically enabled for first-run users in censored countries.
- Fixed custom OpenVPN configs fail to connect. This was due to a bug in OpenVPN 2.6.7.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues when anti-abuse is triggered.
- Fixed UI connection state may stick at 'connecting' when disconnecting and connecting to a different location rapidly.
- Fixed bottom information bar on connect screen is not displayed after upgrade screen is dismissed.
- Fixed firewall does not disable on failed connection to non-existent location.
- Fixed opening locations drop down when prompted to save preferred protocol causes errant UI behavior or may crash the app.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues (UI may freeze) when account is expired or anti-abuse is triggered.
- Fixed 'OK' text in installer is not centered underneath the checkmark button for some languages.
- Fixed app icon in Windows task manager is blurry.
- Updated to OpenVPN 2.6.8.

Released: 2023/11/24
SHA-256: 3cc1546f6a3de87fded7ffce22db5599f46e916da3ea070ab2eee375e1aea5ac

- Added advanced parameter to control server list (locations) functionality in censored countries.
- Improved the appearance of the sign out button.
- Improved error message when ctrld (custom DNS) fails to start.
- Improved build instructions in the README.
- Fixed reconnect not triggered when OpenVPN reports a tunnel connectivity failure.
- Fixed search icon on locations screen may overlap the All icon.
- Fixed UI issue when the hotspot feature is enabled and a SSL error occurs.
- Fixed app may not reconnect after Internet is restored when using OpenVPN.
- Fixed app gets stuck on the logging in screen after accepting the 'ignore SSL errors' prompt.
- Fixed installer fails to launch if Windows version is incompatible.
- Upgraded app dependencies to latest available version.

Released: 2023/11/08
SHA-256: 92bae87ddfdecf0b4a5bc3a8350fe1e39faf6643708f54b783b70722850a78ed

- Added machine-generated translations for Chinese (Traditional), Indonesian, Italian, Japanese, Korean, Persian/Farsi, Polish, Portuguese, Turkish, Ukrainian, and Vietnamese.
- Added language localization to the installer.
- Added language localization to the uninstaller.
- Improved app and installer main icon.
- Improved installer to unify it with the macOS installer.
- Improved the connection mode description in preferences.
- Improved in-app upgrade message to indicate the update will be downloaded before terminating connections.
- Improved wintun support by replacing custom wintun driver with OEM driver.
- Improved error description in 'admin required' error screen.
- Fixed connect state badge icon not displayed on the taskbar icon when the app is closed to tray then restored.
- Fixed debug log to more clearly indicate that a custom dns is being used.
- Fixed double-right-clicking on the IP address makes it blurry on the main screen.
- Fixed top of password dots on login screen are clipped.
- Fixed UI 'weirdness' on the login screen when secure hotspot or proxy gateway feature is enabled and a SSL-error occurs.
- Fixed ESC text is misaligned with the close button in preferences.
- Fixed incorrect padding in 'out of data' screen.
- Fixed load indicator for bottom-most location is slightly clipped.
- Fixed clicking the blog link in the About menu doesn't do anything.
- Fixed IKEv2 connection may not clean up correctly.
- Fixed initial IKEv2 connection may fail after virgin install.
- Fixed update fails when app is running and split tunneling is enabled.
- Removed TAP adapter support. OpenVPN-based connections will always use wintun.
- Upgraded bundled ctrld utility to v1.3.1.

Released: 2023/10/23
SHA-256: 70719f288bbf5f3b48c32624ae49f893cf850fd20fc335bad4d6f3e805d050e9

- Added anti-censorship toggle in preferences.
- Added anti-censorship feature: WireGuard UDP stuffing.
- Added anti-censorship feature: use domain fronting via CDN for API requests.
- Added anti-censorship feature: OpenVPN TCP split-reset, UDP stuffing, Stunnel extra padding.
- Added anti-censorship feature: use extra TLS padding for fallback API requests.
- Added translations for Arabic, Czech, French, German, Hindi, Russian, Simplified Chinese, and Spanish.
- Added an icon on the main screen to indicate anti-censorship mode is enabled.
- Added new in-house Stealth/Wstunnel application.
- Added support for native aarch64 (arm64) Windows build.
- Added split tunneling driver for Windows arm64.
- Added additional logging to diagnose service startup failure.
- Added a small loading spinner to some operations which may take a long time.
- Added feature to remember last locations tab on exit and default to that tab on startup.
- Added support for DNS-over-HTTPS (DoH) and split DNS to the 'Connected DNS' feature.
- Added custom alert screens, replacing the native OS message boxes.
- Added icon on connect screen indicating if connection is auto, manual, or network preferred protocol.
- Added new logout and quit screens.
- Added -username and -password command-line arguments to the installer.
- Improved latency (ping) algorithm to reduce ping frequency, especially during app startup.
- Improved installer icons.
- Fixed (reduced) tunnel test time when using OpenVPN-based protocols.
- Fixed helper security vulnerability when app installed to custom folder. Thanks TeamH4C.
- Fixed app may open locations screen to a random tab.
- Fixed "All protocols failed" prompt doesn't show.
- Fixed LAN-hosted DNS server cannot be accessed when using a custom OpenVPN config.
- Fixed OpenVPN not using custom DNS.
- Fixed spinner animation on the ROBERT page continues after the website has already been opened.
- Fixed Wifi hotpsot feature does not correctly detect "hosted network support".
- Fixed Unicode application names not supported for split tunneling apps.
- Fixed Logout/Quit screen UI bugs.
- Fixed Manage ROBERT rules link click does nothing.
- Fixed UI overlap and alignment issues.
- Fixed loading spinner in Manage Account preference slows down.
- Fixed access to server IP to be only allowed for Windscribe & system apps.
- Fixed incorrect error message in the DNS domain screen when a domain name is not valid.
- Fixed WireGuard may not recover correctly in manual mode.
- Fixed OpenVPN UDP and TCP may not work with certain commented out Advanced Parameters.
- Fixed executable signature checking mechanism disabled in the helper and CLI.
- Fixed possible helper (Windscribe service) hang during app startup.
- Fixed DNS resolver works with a noticeable delay after connecting.
- Fixed validation of the domains entered by the user.
- Fixed some user interface transitions involving the "SSL error" alert.
- Fixed split tunnel hostname and IP validation errors are unclear.
- Fixed x86_64 installer to block install on an arm64 PC and notify user they should download the arm64 version of the app.
- Fixed window shadow incorrectly sized on logout/exit screens.
- Fixed login screen height may be truncated.
- Fixed alert screen may overlap other screens (e.g. news feed, protocol change).
- Fixed notifications are missing after marking all as read, leaving the notifications screen, and returning to it.
- Fixed view/send log functionality to truncate the log if it is too large to view/send.
- Fixed firewall settings updated repeatedly when pinging locations.
- Fixed installer to force kill the app if it does not respond to the exit request.
- Fixed height of location entries is too large for some display scale factors.
- Fixed log files cannot be read when Windows account name contains Unicode characters.
- Fixed Windscribe service may hang if there are many split tunnel exclusive rules.
- Fixed protocol badge not immediately updated on network changes.
- Fixed app to apply split exclude rules even while disconnected, if the firewall is up.
- Fixed WireGuard service fails to start if Windows account name contains Unicode characters.
- Fixed Windows network discovery blocked by firewall.
- Fixed sharing Windscribe connection with Windows Hotspot doesn't work with firewall enabled.
- Removed incorrect primary IP check when enabling the Allow LAN Traffic preference.
- Removed full directory paths from log to obscure user's PII.
- Removed timestamp from news feed items.
- Updated app to use server-supplied ping (latency) values.
- Updated app warnings and error messages.
- Updated to OpenVPN 2.6 and OpenSSL 3.

Released: 2023/10/03
SHA-256: ee5329a5a9d3f2d1c048f6c0808ff8481477ffdd8fc8b300d4b256f9b0b0a696

- Fixed expired WHQL code signing signature for Windows-on-ARM split tunnel driver.

Released: 2023/09/23
SHA-256: 539cd1f6fce4de1ee3718526b9ff297f9ff11dff021a39587ac54e7fa4d9acd4

- Improved latency (ping) algorithm to reduce ping frequency, especially during app startup.
- Fixed LAN-hosted DNS server cannot be accessed when using a custom OpenVPN config.
- Fixed regression introduced in 2.7.10. Tunnel test fails if split tunneling enabled in exclusive mode and no apps are specified to exclude.

Released: 2023/09/11
SHA-256: 08e259b29fd9ef73147df1e77f5592b00a4d5a56d240f063f74b164f74292208

- Added anti-censorship feature: use domain fronting via CDN for API requests.
- Added new in-house Stealth/Wstunnel application.
- Added additional logging to diagnose service startup failure.
- Fixed app may open locations screen to a random tab.
- Fixed "All protocols failed" prompt doesn't show.
- Fixed (reduced) tunnel test time when using OpenVPN-based protocols.
- Fixed no DNS connectivity with custom DoH/DoT resolver and inclusive split tunneling.
- Fixed helper security vulnerability when app installed to custom folder.

Released: 2023/08/10
SHA-256: d256cc05a0a5da826ff5602712bb0a3aa3fcac121b3e571807264139459b6a7e

- Added anti-censorship feature: OpenVPN TCP split-reset, UDP stuffing, Stunnel extra padding.
- Added anti-censorship feature: use extra TLS padding for fallback API requests.
- Added anti-censorship feature: WireGuard UDP stuffing.
- Added anti-censorship toggle in preferences.
- Added an icon on the main screen to indicate anti-censorship mode is enabled.
- Added Czech language translation.
- Added split tunneling driver for Windows-on-Arm.
- Fixed Logout/Quit screen UI bugs.
- Fixed Manage ROBERT rules link click does nothing.
- Fixed Russian translation.
- Fixed spinner animation on the ROBERT page continues after the website has already been opened.
- Fixed DNS resolver issue.
- Fixed Wifi hotpsot feature does not correctly detect "hosted network support".
- Fixed DNS resolver bugs.
- Fixed Unicode application names not supported for split tunneling apps.
- Removed timestamp from news feed items.

Released: 2023/06/20
SHA-256: 8109b2b3ef46973d230d4251fdae0b4b54a86f85eaecbe6165cc35f4126e876f

- Fixed UI overlap and alignment issues.
- Fixed loading spinner in Manage Account preference slows down.
- Fixed access to server IP to be only allowed for Windscribe & system apps.
- Fixed incorrect error message in the DNS domain screen when a domain name is not valid.
- Fixed WireGuard may not recover correctly in manual mode.
- Fixed OpenVPN UDP and TCP may not work with certain commented out Advanced Parameters.
- Fixed executable signature checking mechanism disabled in the helper and CLI.
- Fixed DNS leaks when using openvpn + custom connected DNS (ctrld).
- Fixed possible helper (Windscribe service) hang during app startup.
- Fixed DNS resolver works with a noticeable delay after connecting.
- Removed incorrect primary IP check when enabling the Allow LAN Traffic preference.
- Removed full directory paths from log to obscure user's PII.

Released: 2023/06/01
SHA-256: 67454c067c80f69757a0c75953fb9619ffeeb466571841207fd966b8fd2df857

- Added a small loading spinner to some operations which may take a long time.
- Added custom connected DNS placeholder text.
- Added feature to remember last locations tab on exit and default to that tab on startup.
- Fixed missing ?int=ws in the URI when making queries if user supplies DoH resolver that's on *.controld.com.
- Fixed validation of the domains entered by the user.
- Fixed transition to the initialization window to hide the general message window shadow.
- Fixed some user interface transitions involving the "SSL error" alert.
- Fixed missing port number for the CURLOPT_RESOLVE parameter.
- Fixed redundant updateFirewallSettings calls being made during pings.
- Fixed split tunnel hostname and IP validation errors are unclear.
- Fixed x86_64 installer to block install on an arm64 PC and notify user they should download the arm64 version of the app.
- Updated ctrld binary to v1.2.0.

Released: 2023/05/23
SHA-256: ed7038847432c07c46a403d08b549273462bafae3c5125c18786cdeb18bfff57

- Added support for native aarch64 (arm64) Windows build.
- Fixed installer to force kill the app if it does not respond to the exit request.
- Fixed UI issue when invalid login credentials are supplied to the installer and app is in Alpha mode.
- Fixed height of location entries is too large for some display scale factors.
- Fixed log files cannot be read when Windows account name contains Unicode characters.
- Fixed Windscribe service may hang if there are many split tunnel exclusive rules.
- Fixed window shadow incorrectly sized on logout/exit screens.
- Fixed login screen height may be truncated.
- Fixed alert screen may overlap other screens (e.g. news feed, protocol change).
- Fixed notifications are missing after marking all as read, leaving the notifications screen, and returning to it.
- Fixed changing languages in app causes the news feed screen to become smaller.
- Fixed view/send log functionality to truncate the log if it is too large to view/send.
- Fixed firewall settings updated repeatedly when pinging locations.

Released: 2023/05/01

- Added machine-generated translations for Arabic, French, German, Hindi, Russian, Simplified Chinese, and Spanish.
- Added new logout and quit screens.
- Added support for DNS-over-HTTPS (DoH) and split DNS to the 'Connected DNS' feature.
- Added custom alert screens, replacing the native OS message boxes.
- Added icon on connect screen indicating if connection is auto, manual, or network preferred protocol.
- Added -username and -password command-line arguments to the installer.
- Fixed busy spinner displayed when exiting is not centered.
- Fixed ROBERT screen loading icon not antialiased.
- Fixed protocol badge not immediately updated on network changes.
- Fixed emergency connect feature not working.
- Fixed app crash during startup.
- Fixed python scripts to conform to the pep8 style guide.
- Fixed 'out of data' screen isn't vertically centered.
- Fixed preference items are sometimes expanded when they shouldn't be.
- Fixed app to apply split exclude rules even while disconnected, if the firewall is up.
- Fixed WireGuard service fails to start if Windows account name contains Unicode characters.
- Fixed Windows network discovery blocked by firewall.
- Fixed OpenVPN drivers are not installed at runtime after update to OpenVPN 2.6.1.
- Fixed sharing Windscribe connection with Windows Hotspot doesn't work with firewall enabled using app version 2.6.
- Fixed uninstall executable fails when uninstalling.
- Updated app to use server-supplied ping (latency) values.
- Updated app warnings and error messages.
- Updated build system to use cmake for all projects.
- Updated to OpenVPN 2.6.1.
- Updated installer to use new icons.
- Removed unnecessary code from when the UI and engine were separate executables.
- Removed use of OpenSSL 1.1.1.

Released: 2023/03/27

- Fixed free accounts not pinging pro locations.
- Fixed upgrade widget not hidden when returning to login screen.
- Fixed 'out of data' screen isn't vertically centered.
- Fixed MAC address spoofing toggle state isn't saved.

Released: 2023/03/13

- Added use of Encrypted Client Hello (ECH) as a fail-over mechanism to circumvent SNI filtering.
- Added new taskbar overlay icons (badges) displayed when connecting, connected, and if a connection error occurs.
- Added all secrets to the domain generation algorithm library and removed them from the app code.
- Added OpenSSL 1.1.1t due to an OpenSSL security advisory.
- Added hover highlighting to the protocol change screen.
- Added a descriptive error message on the login screen when the user is disabled or rate-limited.
- Fixed crash may occur when switching protocol window modes.
- Fixed disconnecting a WireGuard connection while it is connecting may disconnect, then start connecting again once the WireGuard dynamic configuration has been acquired.
- Fixed a successful failover did not trigger the 'save preferred protocol' screen.
- Fixed server API request would never be processed by curl due to bug in curl libs 7.83/7.85.
- Fixed new notifications appear at the bottom of the News Feed screen.
- Fixed notification age label to display "Today" instead of "0 days ago" for new notifications.
- Fixed server API request pipeline to ensure requests are processed as quickly as possible.
- Fixed confirm email feature doesn't work.
- Fixed high CPU usage while idle.
- Fixed firewall to allow apps to reach the local interface address.
- Fixed firewall to always allow localhost (127.0.0.0/8 and ::1).
- Fixed out of place cancel button and overlapping entries in the change protocol screen.
- Fixed change protocol screen should not be available when using a custom config.
- Fixed WireGuard doesn't reconnect upon waking from sleep.
- Fixed manual-mode connections should not timeout.
- Fixed login screen overlay bugs.
- Fixed default notification message color, displayed when there are no notifications.
- Fixed protocols window expansion bug.
- Fixed potential app crash when exiting due to an OS restart.
- Fixed data counter appears in custom config mode.
- Fixed location latency checks (pings) displaying "-2" for many locations when connected.
- Fixed ON/OFF icon not centered on some display scale factors.
- Fixed "We've detected that your network settings may interfere with Windscribe" dialog displays multiple times.
- Fixed alignment of some icon and text widgets on the main app screen.
- Fixed 'App Internal DNS' preference description to indicate 'OS Default' may cause DNS leaks.
- Fixed location latency checks (pings) to only be performed when the app is disconnected.
- Fixed installer/uninstaller local privilege escalation vulnerabilities.
- Fixed docked app on Windows 11 appears on left bottom of screen when displayed by tray icon menu click.
- Fixed firewall leak when using OpenVPN and firewall is on (firewall mode is always on or manual) after disconnecting.
- Fixed installer to allow install to root system folder (e.g. C:\Windscribe).
- Fixed unreasonably low ping values displayed for geographically distant locations.
- Fixed inclusive split tunneled app unable to listen on local interface when IKEv2 or OpenVPN protocols are used.
- Fixed installer to block, for security purposes, installation on a non-system drive.
- Updated 'App Internal DNS' preference to default to Cloudflare.

Released: 2023/01/17

- Added user interface improvements to indicate the app is failing over to another protocol.
- Fixed potential app crash when verifying an IP's validity.
- Fixed inclusive split tunneled apps unable to access localhost.
- Fixed error in the ping-via-icmp logic, used to test latency with custom configs.

- Fixed app will use Preferred Protocol for a network even if it's disabled.
- Fixed HTTP/SOCKS Proxy Gateway setting to warn user the Allow LAN Traffic option must be enabled.
- Fixed privilege escalation vulnerability in usage of OpenVPN up/down directives.
- Fixed notice on the login screen when user is disabled or rate-limited.
- Fixed app to save a successful failover between program launches.
- Fixed error message when user tries logging in with their email address.
- Fixed DNS leaks.
- Fixed incoming network connections on local LAN were not blocked by firewall.
- Fixed app exit when Windows network adapter information request fails.
- Fixed terminate sockets feature to exclude Microsoft services when calculating CPU utilization.
- Removed 'Windows Launcher' utility application.
- Removed WireGuard info-level diagnostic output from the log.

- Fixed potential app crash when the app is failing over to another protocol.

- Fixed potential app crash when reading saved WireGuard config data created by the v2.4 app.
- Fixed potential app crash caused by a display resolution detection (DPI) issue in the locations tray menu.

- Fixed split tunneling driver not being installed when upgrading from 2.4 or older.

- Fixed failover not triggering on TLS/SSL connection error.
- Fixed locations menu appearing randomly.
- Fixed build-a-plan users cannot use their static IPs.

- Added alternative earless main UI (Van Gogh mode).
- Added Preferred Protocol support to Network Options.
- Added ROBERT controls to Preferences.
- Added installer command-line parameter to skip TUN/TAP driver installation.
- Added installer command-line parameter to prevent automatic app launch.
- Added login and logout functionality to the CLI app.
- Added 'factory reset' option to installer.
- Added sticky server list support to keep the altered server list in restricted regions.
- Added TUN/TAP automatic driver reinstallation if removed.
- Added Auto Connect toggle to Connection Preferences.
- Added trigger to connect/disconnect when Network Whitelist/Auto Connect preferences are changed.
- Added loading indicator to ROBERT screen in Preferences.
- Added divider line above login/logout button in Preferences.
- Added detection of WireGuard adapter setup failure. Notify user of the failure if connection mode is manual.
- Updated Preferences UI.
- Updated notifications screen.
- Updated Windows build to 64-bit.
- Updated to Qt 6.3.
- Updated locations tray for better performance / cleaner code.
- Updated automatic connection mode to use WireGuard protocol by default.
- Fixed WireGuard service rejects custom config file with no PSK.
- Fixed various routing/firewall issues.
- Fixed escape and enter keys not working in settings edit boxes.
- Fixed display scaling issues.
- Fixed incorrect app position during launch on multi-monitor setups.
- Fixed app giving incorrect latencies and best location.
- Fixed unnecessary spam in the debug log.
- Fixed hostname-level exclusive split tunneling.
- Fixed WireGuard connection stalls if Internet access is interrupted for more than 3 minutes.
- Fixed incorrect DPI detection.
- Fixed mouse wheel issues in the notifications and preferences windows.
- Fixed app does not resize correctly when dragging app between different DPI displays.
- Fixed start minimized preference.
- Fixed favorite locations lost after app update from some versions.
- Fixed news feed messages are the wrong width at some display scales.
- Fixed failure of connection to a location via CLI.
- Fixed port forwarding when using the WireGuard protocol.
- Fixed scrolling in news feed and preferences.
- Fixed detection for hanging OpenVPN/WireGuard processes when app starts.
- Fixed installation failure if TAP adapter install fails.
- Fixed DLL search path for the installer to only look in the system path.
- Fixed WireGuard tunnel shutdown if client app terminates unexpectedly (crashes).
- Fixed incorrect tooltip on login/logout button in Preferences.
- Fixed a number of user interface bugs when updating the app to a new version.
- Fixed notification read state not remembered if the user restarts/logs out of their PC before exiting the application.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed installer privilege escalation vulnerability.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed split tunnel driver install/uninstall can be very slow.
- Fixed CLI app to return 0 on success, 1 on failure.
- Fixed disconnected notification showing incorrect bandwidth usage.
- Fixed preferences screen does not retain user selected height upon app re-launch.
- Fixed preferred protocol doesn't reconnect when Wi-Fi hopping.
- Fixed Manual Packet Size (MTU) and network proxy settings do not retain their values upon app re-launch.
- Fixed app does not remember last used location if system crashes or app is forcefully terminated.
- Fixed incorrect data remaining value in Accounts page for build-a-plan accounts with unlimited data.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed ws_com_server.exe command prompt window does not close after choosing custom config directory.
- Fixed bottom information bar hidden when something connects to proxy/hotspot.
- Fixed signing into an expired account causes app to hang.
- Fixed the working connection setting isn't saved.
- Fixed TLS/SSL interception causes logout and crash.
- Fixed custom configs do not have DNS connectivity if internal DNS (RFC1918) is used.
- Fixed Proxy Gateway IP display goes blank when the proxy is connected to.
- Fixed a crash caused by a bug in the failover logic.
- Removed support for 32-bit Windows.
- Removed support for Windows 7, 8, and 8.1.

- Added detection of WireGuard adapter setup failure. Notify user of the failure if connection mode is manual.
- Fixed TLS/SSL interception causes logout and crash.
- Fixed custom configs do not have DNS connectivity if internal DNS (RFC1918) is used.
- Fixed Proxy Gateway IP display goes blank when the proxy is connected to.
- Fixed a crash caused by a bug in the failover logic.

- Fixed bottom information bar hidden when something connects to proxy/hotspot.
- Fixed signing into an expired account causes app to hang.
- Fixed the working connection setting isn't saved.
- Fixed settings synced immediately.
- Removed fix introduced in 2.5.8 allowing inclusive split tunneled apps access to localhost.

- Updated automatic connection mode to use WireGuard protocol by default.
- Fixed CLI app to return 0 on success, 1 on failure.
- Fixed disconnected notification showing incorrect bandwidth usage.
- Fixed some minor UI bugs.
- Fixed preferences screen does not retain user selected height upon app re-launch.
- Fixed preferred protocol doesn't reconnect when Wi-Fi hopping.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed Manual Packet Size (MTU) and network proxy settings do not retain their values upon app re-launch.
- Fixed app does not remember last used location if system crashes or app is forcefully terminated.
- Fixed incorrect data remaining value in Accounts page for build-a-plan accounts with unlimited data.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed inclusive split tunneled apps unable to access localhost.
- Fixed ws_com_server.exe command prompt window does not close after choosing custom config directory.

- Added loading indicator to R.O.B.E.R.T. screen in Preferences.
- Added divider line above login/logout button in Preferences.
- Fixed incorrect tooltip on login/logout button in Preferences.
- Fixed a number of user interface bugs when updating the app to a new version.
- Fixed notification read state not remembered if the user restarts/logs out of their PC before exiting the application.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed installer privilege escalation vulnerability.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed split tunnel driver install/uninstall can be very slow.
- Removed support for Windows 8.1.

This is a major update!

- Added alternative earless main UI (Van Gogh mode).
- Added Preferred Protocol support to Network Options.
- Added ROBERT controls to Preferences
- Added command-line parameter to skip TUN/TAP driver installation.
- Added command-line parameter to prevent automatic app launch in installer.
- Added login and logout functionality to the CLI app.
- Added log for any code assert statements that are triggered in a release build.
- Added 'factory reset' option to installer.
- Added sticky server list support to keep the altered server list in restricted regions.
- Added TUN/TAP automatic driver reinstallation if removed.
- Added advanced parameter ws-tunnel-test-no-error and allow ws-tunnel-test-attempts to be 0.
- Added trigger to connect/disconnect when Network Whitelist/Auto Connect preferences are changed.
- Added auto-connect toggle to Connection Preferences.
- Updated Preferences UI.
- Updated notifications screen.
- Updated architecture to 64-bit. Support for 32-bit is dropped.
- Updated to Qt 6.
- Updated locations tray for better performance / cleaner code.
- Fixed WireGuard service rejects custom config file with no PSK.
- Fixed various routing/firewall issues
- Fixed some tunnel test parameter bugs
- Fixed escape and enter keys not working in settings edit boxes.
- Fixed display scaling issues.
- Fixed incorrect app position during launch on multi-monitor setups.
- Fixed app giving incorrect latencies and best location.
- Fixed unnecessary spam in the debug log.
- Fixed hostname-level exclusive split tunneling.
- Fixed WireGuard connection stalls if Internet access is interrupted for more than 3 minutes.
- Fixed incorrect DPI detection
- Fixed mouse wheel issues in the notifications and preferences windows.
- Fixed app does not resize correctly when dragging app between different DPI displays.
- Fixed start minimized preference.
- Fixed favorite locations lost after app update from some versions.
- Fixed news feed messages are the wrong width at some display scales.
- Fixed failure of connection to a location via CLI.
- Fixed port forwarding when using the WireGuard protocol.
- Fixed scrolling in news feed and preferences.
- Fixed detection for hanging OpenVPN/Wireguard processes when app starts.
- Fixed installation failure if TAP adapter install fails.
- Fixed DLL search path for the installer to only look in the system path.
- Fixed WireGuard tunnel shutdown if client app terminates unexpectedly (crashes).
- Removed support for 32-bit Windows.
- Removed support for Windows 7.
- Removed use of the old method in the ServerLocations API.

- Updated 10Gbps badge and location load when best location changes
- Added new flags
- Rasdial error 13868 fixed
- Added WireGuard NT support
- Fixed app crash on emergency connect in some cases
- Fixed crash on bad server locations list
- Various Wireguard NT fixes.
- Dynamic Wireguard Interface Allocation Support
- DPI fixes for the tray icon for Windows.
- Privilege escalation vulnerability fixed. Thanks Kim H.
- Fixed cut off long favorites location names in the tray menu
- Fixed static IPs display issue in tray menu
- Updated the version info in all Windows executables to follow standards
- Fixed uninstaller wiping the entire folder it is located in (to whoever installed Windscribe directly into root of Program Files - sorry about that)
- Standardized API interaction timers
- Fixed app main window does not display on Windows 11 preview builds
- Fixed OpenVPN on Windows 7
- Fixed automatic firewall deactivation when account status changes to disabled
- Fixed protocol selection not immediately saved to disk
- Updated app icons in system tray
- Fixed app crash on Emergency Connect.
- Increased service start wait time to 20 seconds.
- Refactored WireGuard connection to avoid blocking engine thread
- Fixed Inclusive split tunneling with WireGuard
- Fixed firewall state when app process is killed and Wireguard is used
- Fetch session when app receives focus
- Fixed firewall silently enabling by itself in rare cases

- Same as last Alpha release

- Fixed app crash on Emergency Connect.
- Increased service start wait time to 20 seconds.
- Refactored wireguard connection to avoid blocking engine thread
- Fixed Inclusive split tunneling with WireGuard
- Fixed firewall state when app process is killed and Wireguard is used
- Fetch session when app receives focus
- Fixed firewall silently enabling by itself in rare cases

- Fixed crash on bad server locations list
- Various Wireguard NT fixes.
- Dynamic Wireguard Interface Allocation Support
- DPI fixes for the tray icon for Windows.
- Privilege escalation vulnerability fixed
- Fixed cut off long favorites location names in the tray menu
- Fixed static IPs display issue in tray menu
- Updated the version info in all Windows executables to follow standards
- Fixed uninstaller wiping the entire folder it is located in (to whoever installed Windscribe directly into root of Program Files - sorry about that)
- Standardized API interaction timers
- Fixed app main window does not display on Windows 11 preview builds
- Fixed OpenVPN on Windows 7
- Fixed automatic firewall deactivation when account status changes to disabled
- Fixed protocol selection not immediately saved to disk
- Updated app icons in system tray

- Added WireGuard NT support (experimental)
- Fixed app crash on emergency connect in some cases

- Update 10Gbps badge and location load when best location changes
- Added new flags
- Rasdial error 13868 fixed
- Misc bug fixes

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs
- Updated system tray icons
- Fixed GUI lock issue
- Fixed incorrect external IP
- Improved tunnel test algorithm on Windows
- Added "View Licenses" button to Debug Preferences menu
- Fixed named pipe security flaw on Windows
- Added -silent install flag to installer
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log
- Added a dependency on the autoconnect state for the initial firewall state
- Keep the firewall state on update if autoconnect option is enabled
- Added installer debug log
- Updated wstunnel binary to v4
- Require elevated privilege to accept insecure custom config dir
- Removed device specific info from debug logs
- Fixed abnormal program self-termination after extended run time
- Fixed GUI crash edge case
- Open source app build improvements
- Reduced verbosity of debug log
- Fixed Wireguard on Windows 7 x64
- Disabled WireGuard on Windows 7 x86
- Fixed Rasdial issues on Windows 7
- Better dark mode detection on older Windows 10 versions
- Log failure to create the IPC named pipe on Windows

- Combine Engine + GUI processes
- Maintain same offset in docked mode
- Do not use pointer cursor on non clickable areas
- Fixed notification icon
- Added ControlD to App Internal DNS list
- Added 10gbps badge next to 10gbps capable datacenters
- Added location loads display Preference
- Fixed custom plan displays as Pro in Preference

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs
- Updated system tray icons
- Fixed GUI lock issue
- Fixed incorrect external IP
- Improved tunnel test algorithm on Windows
- Added "View Licenses" button to Debug Preferences menu
- Fixed named pipe security flaw on Windows
- Added -silent install flag to installer
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log
- Added a dependency on the autoconnect state for the initial firewall state
- Keep the firewall state on update if autoconnect option is enabled
- Added installer debug log
- Updated wstunnel binary to v4
- Require elevated privilege to accept insecure custom config dir
- Removed device specific info from debug logs
- Fixed abnormal program self-termination after extended run time
- Fixed GUI crash edge case
- Open source app build improvements
- Reduced verbosity of debug log
- Fixed Wireguard on Windows 7 x64
- Disabled WireGuard on Windows 7 x86
- Fixed Rasdial issues on Windows 7
- Better dark mode detection on older Windows 10 versions
- Log failure to create the IPC named pipe on Windows

- Updated system tray icons
- Fixed GUI lock issue
- Fixed incorrect external IP
- Improved tunnel test algorithm on Windows
- Added "View Licenses" button to Debug Preferences menu
- Fixed named pipe security flaw on Windows
- Added -silent install flag to installer
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs

- Added custom DNS server support
- Added meme support and ability to upload custom background images
- Added ability to blur IP via double click
- Added subtle shadows to main screen assets
- Fixed crash when hiding main windows when log viewer dialog is opened
- Fixed installer error if firewall is ON while disconnected

- Detection of the authorization error for IKEv2 made to be more specific
- Reduced debug log verbosity
- Emergency connect description updated

- Fixed inclusive split routing issue
- Removed useless messages from log
- Prevented keypress navigation to other locations from config-only mode.
- Fixed auto-hide of docked app on showing external OS dialogs
- Fixed negative remaining bytes issue
- Open newsfeed to the first unread message, if any
- Fixed sending of large debug logs
- Added Export Log button
- Don't terminate TCP sockets of processes that are not tunneled
- Set "TCP socket termination" option ON by default.
- Linked option "TCP socket termination" with closing sockets in split tunneling mode
- Secure hotspot fix for openVPN

- Detect unsupported OS version, download legacy installer
- Remove helper from version 1 when installing 2.0
- Update installer position tweaks for future updates
- Removed account tab from preferences in external config mode.
- Improvements to preferences and combobox menus.
- UX improvements to location window.
- Fixed latency display always as bars on some screens.
- Fixed OVPN custom config issues with protocol names.
- Fixed custom config error message.
- Fixed incorrect timestamps in service log.
- Fixed WireGuard on wake connect issue.

- Added location search.
- Improved domain name validation in GUI preferences.
- Fixed GUI and DPI scaling issues for API resolution in GUI preferences.
- Fixed network level split routing defaults
- Removed initialization timeout in GUI.
- Fixed Mac UI bug with static ips and custom configs ribbon.
- Recreate DNS-resolver when network state changes
- Fixed Hyper-V host network bridge detection.
- Fixed the auto-update algorithm on Windows to address signing errors
- Fixed OVPN pipe-related deadlock issue
- Fixed refetch WG config after logout.
- Improved service logging, log merging and improved readability in GUI internal viewer.
- Added year to logs
- Fixed custom configs OVPN protocol detection.
- Fixed Localhost blocked in inclusive Split Routing mode
- Added split tunneling for the inclusive mode for hostnames (Windows)
- Fixed inclusive split tunneling breaks BattleNet agent
- Fixed default cipher problem with OVPN custom configs.
- Fixed FUI crash on Mac when opening or closing laptop lid in some cases
- Fixed reconnect on external IKEv2 failure, fixed DNS server list size issue
- Hide "Connection settings" in external config mode.
- Fixed EXE selection for a WoW64 GUI process.
- Updated split tunneling driver for Win7 support.
- Removed sensitive info from logs.
- Fixed app lock up when the file explorer is shown
- Fixed locations ribbon UI regression.
- Fixed PingTest log spam.
- Added workaround for openvpn error "write_wintun(): head/tail value is over capacity".
- Check correctness of IP/CIDR combination in GUI.
- Updated "ESC" button/icon in the installer.

- Extended tray menu to show Static IPs, custom configs and favorites
- Split tunneling driver updated for Windows 8 support
- Added show flags preference
- Fixed WireGuard custom config issues with no PSK and ipv6
- Added support for Unicode SSIDs
- Formatted WireGuard output to be readable
- Attempted to fix not displaying static ip device name
- Service error 29 removed from service
- Prevent blank manual IP in API resolution
- Fixed Win32 service WireGuard issues and added crashdump support for the service
- By default use udp protocol for custom OVPN configs if no proto defined
- Fixed blinking cursor issue
- Fixed favorites not being saved on shutdown
- Show static ip as sublocation name
- Refactored TAP-adapter detection for split tunneling
- Fixed split tunneling being disabled with WG

Bug Fixes:
-----------------------
- Fixed possible IP leak on OS start
- Fixed IP leak during auto-upgrade process
- Fixed OS default DNS problem after reboot on Mac.
- Fixed Location tab background color
- Fixed incorrect UI placement in Docked mode on Mac
- Fixed notification logic
- Start minimized after reboot if minimize to tray option is on.
- Disable firewall in auto mode for custom configs that don't redirect gateway
- Allow AirDrop when firewall is enabled with LAN bypass on
- Stunnel updated to latest version 5.57
- Protobuf updated to latest version 3.14.0
- New connecting animation
- Fixed Firewall frozen in incorrect state across sign out/in
- Fixed GUI crash on Mac when opening or closing laptop lid in some cases
- Attempt to fix IPC server listen error

Bug Fixes:
-----------------------
- Fixed possible IP leak on OS start
- Fixed IP leak during auto-upgrade process
- Fixed Location tab background color
- Fixed notification logic
- Start minimized after reboot if minimize to tray option is on.
- Disable firewall in auto mode for custom configs that don't redirect gateway
- Stunnel updated to latest version 5.57
- Protobuf updated to latest version 3.14.0

New Features:
-----------------------
- New design
- Split tunneling
- WireGuard support
- Network awareness
- MAC spoofing
- Custom config support (WireGuard and OpenVPN)
- Packet size adjustment
- Tabbed location list

Bug Fixes:
-----------------------
- Too many to list

New Features:
-----------------------
- New design
- Split tunneling
- WireGuard support
- Network awareness
- MAC spoofing
- Custom config support (WireGuard and OpenVPN)
- Packet size adjustment
- Tabbed location list

Bug Fixes:
-----------------------
- Too many to list

Test auto-update functionality from 1.83 to 2.0

New Features:
-----------------------
- Show Static IP device ID in the UI
- Ability to select DNS server used by the app while disconnected

Bug Fixes:
-----------------------
- Build-a-Plan locations sometimes not showing correctly
- Prevent WindscribeService crash if DNS settings change
- Custom configs can now be connected to while expired
- Bypass anti-abuse check if Build-a-Plan is activated

New Features:
-----------------------
- Show Static IP device ID in the UI
- Ability to select DNS server used by the app while disconnected

Bug Fixes:
-----------------------
- Build-a-Plan locations sometimes not showing correctly
- Prevent WindscribeService crash if DNS settings change
- Custom configs can now be connected to while expired
- Bypass anti-abuse check if Build-a-Plan is activated

New Features:
-----------------------
- WebSocket stealth protocol support
- Location list sorting methods: Geography, alphabet, latency
- Build-a-Plan support (future feature)
- Static IP + port forwarding support (future feature)
- Custom OpenVPN config support

Bug Fixes:
-----------------------
- Stuck on login in China
- App prevents graceful Windows shutdown
- App freezes in “Windscribe is shutting down” state
- Bad IKEv2 connection causes client to lock up
- Don’t disable server location on ping test failure

No changelog

No changelog

New Features:
-----------------------
- Favorite locations
- Setting to show actual latency instead of signal bars
- Setting to disable TCP socket termination (Windows only)
- Automatic detection of high CPU usage caused by other apps when TCP sockets are terminated

Bug Fixes:
-----------------------
- IKEv2 traffic not counted on MacOS
- NULL DACL vulnerability (CVE-2018–1133)
- “Better” Best Location detection
- Default to AES-256-GCM cipher in OpenVPN
- Windows systray connection status information
- Don’t make HTTP requests when disconnected to reduce strain on the API
- Redact sensitive info from the debug log

No changelog

No changelog

No changelog

No changelog

No changelog

No changelog

New Features:
-----------------------
- LAN proxy gateway — https://windscribe.com/features/proxy-gateway
- Secure Hotspot (Experimental) — https://windscribe.com/features/secure-hotspot
- Variable location drawer height
- Auto login after signup
- Ability to choose NDIS5 TAP driver
- Upgrade to OpenVPN 2.4.x with 2.3.x fallback
- Service notifications
- Show Pro data-centers to free users
- Location latency tool-tips added to signal bars

Bug Fixes:
-----------------------
- Always on firewall not working on OS boot on some machines
- Application crashes after connection attempts are exceeded with “minimize to tray” option checked
- Application freeze with firewall ON requires reboot
- API calls not made if app starts with no Internet connectivity
- Custom installation now allows for non-standard install path
- Auto-enable disabled TAP adapter
- 100% CPU when app starts with no Internet connectivity
- Don’t try UDP protocol if system proxy is configured
- Constant application window size on variable DPI screens
- Login form DPI bug
- On multi-screen computers, tool-tips show on primary monitor
- Leave firewall ON if ran out of free bandwidth to prevent IP leak
- Increase reconnect timeout from 5 min to 1 hour
- Server list source changed
- Moved server location update process to separate thread
- Only do ping tests while disconnected
- Update available UI change
- Output installed anti-virus software into debug log for troubleshooting
- Open survey on application uninstall
- Installer command line arg support
- Black and white top bar icon on MacOS
- Ping nodes in batches instead of all at the same time
- Allow for verbose OpenVPN logging via Advanced Parameters screen
- When beta channel is selected, check for updates right away

No changelog

New Features:
-----------------------
- Added city level location selection
- Added Automatic Connection mode
- Added support for 22 languages
- Added custom TAP adapter
- Added “Ignore SSL Errors” option
- Added notifications when firewall is ON and application not connected
- Added “Advanced Parameters” screen
- Added EULA to the installer
- Added IPv6 connectivity disable button, to prevent WebRTC leaks over IPv6 in some situations
- Added Touch support
- Added Beta channel

Bug Fixes:
-----------------------
- Fixed auto-start bug on some systems
- Fixed Internet connectivity check
- Fixed persistent session storage
- Fixed API connectivity on restrictive networks
- Fixed unquoted service path
- Fixed disappearing Best Location
- Fixed WSD port connectivity while firewall is ON
- Fixed PlayStation UPNP connectivity while firewall is ON
- Fixed reconnection bug on computer wake up on some systems
- Changed the Preferences screens
- Changed the connecting spinner animation

No changelog

No changelog

No changelog

No changelog

No changelog

No changelog

No changelog

No changelog