Windows Changelog

Stuff changes, see exactly what

v2.10.12 (Beta)

Released: 2024/06/17
SHA-256: 421c3d7dfad22b74a53163cd943a21288abc6665cbf4808d712c245d6c722036

- Improved OpenVPN and WireGuard anti-censorship.
- Improved wsnet to use TLS padding when anti-censorship is enabled.
- Fixed wsnet thread synchronization issue that could cause a crash.

v2.10.11 (Alpha)

Released: 2024/06/05
SHA-256: 872aab5e411c1576e12705cc6e5db29b6aace516c6d837f375bc3f3a2b623817

- Added security warning in the installer when installing to a custom folder.
- Added debugging information for wsnet.
- Improved internal error handling.
- Improved limit of 50 split tunnel entries to only apply to hostnames.
- Improved IPC message passing to adhere to best practices.
- Improved IPC handling and security between client app and helper.
- Fixed openvpn adapter IP assertion.
- Fixed privilege escalation vulnerability allowing an attacker to inject a DLL into the client app and task kill any process (Reported by Zeze Lin working with Trend Micro Zero Day Initiative).
- Fixed privilege escalation vulnerability allowing an attacker to inject a DLL into the client app and start an arbitrary process as admin (Reported by Zeze Lin working with Trend Micro Zero Day Initiative).
- Fixed ICMP pings crash [wsnet].
- Fixed default install path not set for new installs.
- Fixed app crash when IKEv2 RAS callback function is called by the OS after the connection object has been deleted.
- Fixed installer crash logged in Event Viewer when installer exits (Reported by Haifang Wang working with the Windows App Assure ISV Outreach Team at Microsoft).
- Fixed windscribectrld.exe should always be tunneled via the VPN, the split tunneling driver improved.
- Fixed possible delay in executable signature logic when it checks CRLs over the network.
- Fixed tooltip not displaying when mouse hovers over protocol line for a custom config.
- Fixed app crash if app exits during startup.
- Fixed wsnet bug sometimes causing the library to freeze.
- Updated ctrld dependency to 1.3.7.

v2.10.8 (Alpha)

Released: 2024/04/08
SHA-256: f1ce705f3bad60d19dc420a76dba3df8f6c131b1109fb5e8df7a257657b1365f

- Fixed anti-censorship flag (TLS stuffing) does not work for server API.
- Fixed install may silently be overridden to default folder instead of custom folder.

v2.10.6 (Alpha)

Released: 2024/04/01
SHA-256: a8ba97c9a5abc6c412c42f5282f5314472692cba6f4542b15b2e29ad7d382d7d

- Added a limit of 50 split tunnel entries to ensure stability.
- Improved retry efficiency for requests that are blocked [wsnet].
- Improved custom DNS to not use ctrld if custom DNS is set to an IPv4 address.
- Improved conditions for network connectivity detection.
- Improved installer robustness in error situations.
- Improved firewall behavior when logging out but not restarting.
- Improved monitoring of WireGuard service startup status when PC boots after a system crash or hard reset.
- Fixed callback may not be called on error [wsnet].
- Updated Windows-on-Arm split tunnel driver WHQL signing certificate.

v2.10.5 (Alpha)

Released: 2024/03/19
SHA-256: 84b86830f1c8f4f244568e15fe05ae66c7e6093fa811c290eacaae6ddae41df8

- Added support for private key passwords in OpenVPN custom configs.
- Added the user-agent request header to all HTTP-requests [wsnet].
- Added new API endpoints needed for mobile [wsnet].
- Improved failover retry on WireGuard.
- Improved UI header transparency and color.
- Improved stability of DNS resolution for hostnames when using split tunneling.
- Improved UX of the protocol/port line when protocol selection is not available.
- Improved the look and translations on the Emergency Connect screen.
- Improved handling of custom configs with "dev tap", overriding automatically to "dev tun".
- Improved location search by allowing search by country code.
- Improved updating random hashed domains in a timely manner.
- Improved logic for enabling the BFE service.
- Improved error handling in UI for the secure hotspot feature, in case it fails.
- Improved log messages when installer is unable to copy Qt libs.
- Fixed potential installer DoS vulnerability when installing the split tunnel driver.
- Fixed WireGuard service may fail to install when connection attempt initiated immediately after the PC boots.
- Fixed windscribectrld.exe should always be tunneled via the VPN.
- Fixed various compile warnings introduced in 2.10.x.
- Fixed DNS servers in the wsnet library not updating on the client connection/disconnection events.
- Fixed protocol selector should not be available in external config mode.
- Fixed wsnet versioning to be the same as the client application [wsnet].
- Fixed selected location not reset after removing custom config folder.
- Fixed another display issue and crash in custom config credential prompt.
- Fixed display issue and crash in custom config credential prompt.
- Fixed MAC address does not auto-rotate when adapter is disabled then enabled.
- Fixed localhost range not encompassing entire 127/8 subnet.
- Fixed 'use ICMP pings' advanced parameter not being used.
- Updated ctrld dependency to 1.3.5.

Known Issues:
- When connecting with inclusive split tunneling and using a custom DNS, the tunnel test may not succeed causing the connection to fail.
- When connecting with inclusive split tunneling and using a custom DNS, attempts to DNS query 127.0.0.1 fail with a 'no response from server' message.

v2.10.2 (Alpha)

Released: 2024/02/29
SHA-256: 75d070043f5502684eae13182b9ed98cef0092db895c5f26aa474c3e13d728f6

- Added wsnet library + switched to vcpkg dependency management system.
- Added taskbar notification when the app needs attention.
- Improved anti-censorship measures in WireGuard and OpenSSL.
- Improved Polish translations.
- Improved secrets organization in the wsnet library.
- Improved custom config credential prompt.
- Improved IP display to "---.---.---.---" if unable to get local IP, instead of "N/A".
- Improved emergency connect to always connect with the more secure algorithms.
- Improved LZMA dependency management.
- Improved exponential back-off algorithm for pings to determine failed nodes.
- Improved IKEv2/IPsec proposals to match other platforms.
- Fixed potential window scaling size issue.
- Fixed OpenVPN DCO network adapter number increments on every connection.
- Fixed Free Data usage in app doesn't update.
- Fixed some bugs in the wsnet library regarding mutlithreading/deadlocks.
- Fixed failed assertion in log for EmailItem.
- Fixed advanced parameter ws-use-icmp-pings ignored by app.
- Fixed Secure Hotspot password not masked in UI.
- Fixed serverlist API country_override parameter doesn't enable Circumvent Censorship on first app launch.
- Fixed ignore country override when connected to a VPN.
- Fixed Help screen to only show human support link for Pro accounts, and update descriptions.
- Fixed right clicking on login screen may show context menu away from the widget.
- Fixed custom config stays connected if folder is removed.
- Updated dependencies, c-ares to 1.25.0 and boost to 1.84.0.
- Updated README.md file (build instructions).

v2.9.9

Released: 2024/02/20
SHA-256: d2a817e8f2738cacc646d3dc2194d7fd28f2ce1de435be24fa98ed8928b4daa2

- Added experimental support for the OpenVPN DCO driver.
- Added feature to export/import preferences to/from JSON file.
- Added password reveal/hide button for main login.
- Added 'status' command to the CLI.
- Added support for installing the app on Windows 10 builds older than our officially supported build (17763).
- Added feature to disable system-wide DoH configuration on connect in Windows 11.
- Added advanced parameter for specifying specific wireguard server.
- Improved anti-censorship measures in WireGuard and OpenVPN.
- Improved labels and descriptions in preferences to match the mobile app.
- Improved app start up time by starting the helper service during install.
- Improved IKEv2 profiles by disabling unnecessary features.
- Improved debug log feature to include the installer log.
- Improved installer to support keyboard shortcuts (ESC/Enter/etc.).
- Improved Secure Hotspot preference to automatically enable the Allow LAN Traffic preference.
- Fixed transition to 2FA screen when logging in.
- Fixed importing/exporting preferences closes the app window if docked.
- Fixed banned/disabled message not showing during login.
- Fixed update screen may not be clickable after an alert is shown.
- Fixed reveal password icon may be slightly cut off at certain scaling.
- Fixed pressing Login from external config mode causes UI to not display.
- Fixed returning to login screen does not set focus to username field.
- Fixed user is forcefully logged out on some server errors.
- Fixed imported split tunneling settings not reflecting in the GUI until after app restart.
- Fixed right-click also triggering Static IP link.
- Fixed various minor UX issues on login screen and preferences.
- Fixed hard-to-read 10 Gbps location icon.
- Fixed possible crash during app exit.
- Fixed advanced parameter file location differs between Guinea Pig vs Beta/Release builds.
- Fixed misdetection of TCP error during OpenVPN connection.
- Fixed installer log reordering in merge log.
- Fixed escaping of the OpenVPN password.
- Fixed incorrect translation of 'Quit' in French translation.
- Fixed some helper exes did not contain version information.
- Fixed tray menu items can be activated with right-click.
- Fixed app can be moved by dragging its shadow.
- Fixed updating from a build earlier than 2.4.10 does not work.
- Fixed a local privilege escalation vulnerability in the installer. Thanks @heegong123.
- Fixed DLL injection vulnerability in the installer.
- Fixed duplicate DLLs bloating installer size.
- Fixed uninstallation page opens in browser when reinstalling and user is not logged in.
- Fixed DOH registry disable in forced mode when EnableDohValue property originally does not exist.
- Fixed MAC address does not auto-rotate when changing networks and the MAC Spoofing Auto-Rotate MAC preference is enabled.
- Removed misleading logs indicating errors when it's benign.
- Removed unnecessary parameters for server list request API call.
- Updated boost, c-ares, and lzma dependencies.
- Updated ctrld dependency to 1.3.3.

v2.9.7 (Beta)

Released: 2024/02/09
SHA-256: 9b164865a6efdf668c60497e5532991b45765d0db5e1cf3eb17987d8bb8f83b8

- Improved anti-censorship measures.
- Fixed exporting preferences closes the app window if docked.

v2.9.6 (Alpha)

Released: 2024/02/05
SHA-256: bb480be40badaf62576d7160dd777be550684fda997106bbd3924349371eee22

- Improved anti-censorship measures in WireGuard and OpenVPN.
- Fixed update screen may not be clickable after an alert is shown.
- Fixed reveal password icon may be slightly cut off at certain scaling.
- Fixed pressing Login from external config mode causes UI to not display.
- Fixed returning to login screen does not set focus to username field.
- Fixed user is forcefully logged out on some server errors.
- Fixed tray menu items can be activated with right-click.

v2.9.4 (Alpha)

Released: 2024/01/26
SHA-256: 6b8d54febbe2ee4424c126a2f242925cd40bfefeb2ba46a9e4b2fb9643518380

- Added experimental support for the OpenVPN DCO driver.
- Added password reveal/hide button for main login.
- Improved IKEv2 profiles by disabling unnecessary features.
- Improved UX for the export/import preferences feature and filter irrelevant preferences when importing.
- Fixed imported split tunneling settings not reflecting in the GUI until after app restart.
- Fixed right-click also triggering Static IP link.
- Fixed various minor UX issues on login screen and preferences.
- Fixed hard-to-read 10 Gbps location icon.
- Fixed possible crash during app exit.
- Fixed some helper exes did not contain version information.
- Fixed app can be moved by dragging its shadow.
- Removed changes causing credential issues with OpenVPN custom config.
- Updated ctrld dependency to 1.3.3.

v2.9.2 (Alpha)

Released: 2024/01/11
SHA-256: 5e33bb6c77193a0e76302bc3b504336245be87aebf60c3232d24b340f8feee14

- Added feature to export/import preferences to/from JSON file.
- Added feature to support custom OpenVPN configs requiring a user name and password.
- Added 'status' command to the CLI.
- Added support for installing the app on Windows 10 builds older than our officially supported build (17763).
- Added feature to disable system-wide DoH configuration on connect in Windows 11.
- Added special logging category to the client log containing random hash code of the given connection.
- Added advanced parameter for specifying specific wireguard server.
- Improved app start up time by starting the helper service during install.
- Improved debug log feature to include the installer log.
- Improved installer to support keyboard shortcuts (ESC/Enter/etc.).
- Improved Secure Hotspot preference to automatically enable the Allow LAN Traffic preference.
- Improved labels and descriptions in preferences to match the mobile app.
- Fixed incorrect translation of 'Quit' in French translation.
- Fixed advanced parameter file location differs between Guinea Pig vs Beta/Release builds.
- Fixed misdetection of TCP error during OpenVPN connection.
- Fixed updating from a build earlier than 2.4.10 does not work.
- Fixed DLL injection vulnerability in the installer.
- Fixed a local privilege escalation vulnerability in the installer.
- Fixed duplicate DLLs bloating installer size.
- Fixed uninstallation page opens in browser when reinstalling and user is not logged in.
- Fixed MAC address does not auto-rotate when changing networks and the MAC Spoofing Auto-Rotate MAC preference is enabled.
- Removed misleading logs indicating errors when it's benign.
- Removed unnecessary parameters for server list request API call.
- Updated boost, c-ares, and lzma dependencies.

v2.8.6

Released: 2023/12/14
SHA-256: d43f1ef244e8c9a9e22eb6c792d7420436e904fcb80f4fa4eafd4e6fab29e702

- Added machine-generated translations for Chinese (Traditional), Indonesian, Italian, Japanese, Korean, Persian/Farsi, Polish, Portuguese, Turkish, Ukrainian, and Vietnamese.
- Added language localization to the installer.
- Added language localization to the uninstaller.
- Added advanced parameter to control server list (locations) functionality in censored countries.
- Improved anti-censorship feature. Feature automatically enabled for first-run users in censored countries.
- Improved wintun support by replacing custom wintun driver with OEM driver.
- Improved the appearance of the sign out button.
- Improved error message when the connected DNS utility (ctrld) fails to start.
- Improved app and installer main icon.
- Improved installer to unify it with the macOS installer.
- Improved the connection mode description in preferences.
- Improved in-app upgrade message to indicate the update will be downloaded before terminating connections.
- Improved error description in 'admin required' error screen.
- Improved build instructions in the README.
- Fixed installer/uninstaller local privilege escalation vulnerability.
- Fixed some text in preferences not matching with the mobile app.
- Fixed auto-connect not triggering when reconnecting to the same network.
- Fixed installer sometimes exiting during updates.
- Fixed misspelling in installer error message.
- Fixed "logging in" screen background color not matching with other OSes.
- Fixed DNS queries for hostname split tunnels sometimes not resolving.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed search icon on locations screen may overlap the All icon.
- Fixed UI screen transition issues when anti-abuse is triggered.
- Fixed UI connection state may stick at 'connecting' when disconnecting and connecting to a different location rapidly.
- Fixed bottom information bar on connect screen is not displayed after upgrade screen is dismissed.
- Fixed firewall does not disable on failed connection to non-existent location.
- Fixed opening locations drop down when prompted to save preferred protocol causes errant UI behavior or may crash the app.
- Fixed UI screen transition issues (UI may freeze) when account is expired or anti-abuse is triggered.
- Fixed 'OK' text in installer is not centered underneath the checkmark button for some languages.
- Fixed app icon in Windows task manager is blurry.
- Fixed reconnect not triggered when OpenVPN reports a tunnel connectivity failure.
- Fixed UI issue when the hotspot feature is enabled and a SSL error occurs.
- Fixed app may not reconnect after Internet is restored when using OpenVPN.
- Fixed app gets stuck on the logging in screen after accepting the 'ignore SSL errors' prompt.
- Fixed installer fails to launch if Windows version is incompatible.
- Fixed connect state badge icon not displayed on the taskbar icon when the app is closed to tray then restored.
- Fixed debug log to more clearly indicate that a custom dns is being used.
- Fixed double-right-clicking on the IP address makes it blurry on the main screen.
- Fixed top of password dots on login screen are clipped.
- Fixed UI 'weirdness' on the login screen when secure hotspot or proxy gateway feature is enabled and a SSL-error occurs.
- Fixed ESC text is misaligned with the close button in preferences.
- Fixed incorrect padding in 'out of data' screen.
- Fixed load indicator for bottom-most location is slightly clipped.
- Fixed clicking the blog link in the About menu doesn't do anything.
- Fixed IKEv2 connection may not clean up correctly.
- Fixed initial IKEv2 connection may fail after virgin install.
- Fixed update fails when app is running and split tunneling is enabled.
- Updated app dependencies (cURL/OpenSSL/OpenVPN etc.) to latest available version.
- Updated connected DNS utility (ctrld) to v1.3.2.
- Removed TAP adapter support. OpenVPN-based connections will always use wintun.

v2.8.5 (Beta)

Released: 2023/12/07
SHA-256: ce813aa33ab7c21a9f918573aa5c3b70ca07dd9a367cef34e0e23f121b9a22d3

- Fixed some text in preferences not matching with the mobile app.
- Fixed auto-connect not triggering when reconnecting to the same network.
- Fixed installer sometimes exiting during updates.
- Fixed misspelling in installer error message.
- Fixed "logging in" screen background color not matching with other OSes.
- Fixed DNS queries for hostname split tunnels sometimes not resolving.

v2.8.4 (Alpha)

Released: 2023/12/01
SHA-256: e143357f13ceac6e16c8dbb5b00f2f1d97d0c1fb1c92fb985d5a80a018b66c5f

- Improved anti-censorship feature. Feature automatically enabled for first-run users in censored countries.
- Fixed custom OpenVPN configs fail to connect. This was due to a bug in OpenVPN 2.6.7.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues when anti-abuse is triggered.
- Fixed UI connection state may stick at 'connecting' when disconnecting and connecting to a different location rapidly.
- Fixed bottom information bar on connect screen is not displayed after upgrade screen is dismissed.
- Fixed firewall does not disable on failed connection to non-existent location.
- Fixed opening locations drop down when prompted to save preferred protocol causes errant UI behavior or may crash the app.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues (UI may freeze) when account is expired or anti-abuse is triggered.
- Fixed 'OK' text in installer is not centered underneath the checkmark button for some languages.
- Fixed app icon in Windows task manager is blurry.
- Updated to OpenVPN 2.6.8.

v2.8.2 (Alpha)

Released: 2023/11/24
SHA-256: 3cc1546f6a3de87fded7ffce22db5599f46e916da3ea070ab2eee375e1aea5ac

- Added advanced parameter to control server list (locations) functionality in censored countries.
- Improved the appearance of the sign out button.
- Improved error message when ctrld (custom DNS) fails to start.
- Improved build instructions in the README.
- Fixed reconnect not triggered when OpenVPN reports a tunnel connectivity failure.
- Fixed search icon on locations screen may overlap the All icon.
- Fixed UI issue when the hotspot feature is enabled and a SSL error occurs.
- Fixed app may not reconnect after Internet is restored when using OpenVPN.
- Fixed app gets stuck on the logging in screen after accepting the 'ignore SSL errors' prompt.
- Fixed installer fails to launch if Windows version is incompatible.
- Upgraded app dependencies to latest available version.

v2.8.1 (Alpha)

Released: 2023/11/08
SHA-256: 92bae87ddfdecf0b4a5bc3a8350fe1e39faf6643708f54b783b70722850a78ed

- Added machine-generated translations for Chinese (Traditional), Indonesian, Italian, Japanese, Korean, Persian/Farsi, Polish, Portuguese, Turkish, Ukrainian, and Vietnamese.
- Added language localization to the installer.
- Added language localization to the uninstaller.
- Improved app and installer main icon.
- Improved installer to unify it with the macOS installer.
- Improved the connection mode description in preferences.
- Improved in-app upgrade message to indicate the update will be downloaded before terminating connections.
- Improved wintun support by replacing custom wintun driver with OEM driver.
- Improved error description in 'admin required' error screen.
- Fixed connect state badge icon not displayed on the taskbar icon when the app is closed to tray then restored.
- Fixed debug log to more clearly indicate that a custom dns is being used.
- Fixed double-right-clicking on the IP address makes it blurry on the main screen.
- Fixed top of password dots on login screen are clipped.
- Fixed UI 'weirdness' on the login screen when secure hotspot or proxy gateway feature is enabled and a SSL-error occurs.
- Fixed ESC text is misaligned with the close button in preferences.
- Fixed incorrect padding in 'out of data' screen.
- Fixed load indicator for bottom-most location is slightly clipped.
- Fixed clicking the blog link in the About menu doesn't do anything.
- Fixed IKEv2 connection may not clean up correctly.
- Fixed initial IKEv2 connection may fail after virgin install.
- Fixed update fails when app is running and split tunneling is enabled.
- Removed TAP adapter support. OpenVPN-based connections will always use wintun.
- Upgraded bundled ctrld utility to v1.3.1.

v2.7.14

Released: 2023/10/23
SHA-256: 70719f288bbf5f3b48c32624ae49f893cf850fd20fc335bad4d6f3e805d050e9

- Added anti-censorship toggle in preferences.
- Added anti-censorship feature: WireGuard UDP stuffing.
- Added anti-censorship feature: use domain fronting via CDN for API requests.
- Added anti-censorship feature: OpenVPN TCP split-reset, UDP stuffing, Stunnel extra padding.
- Added anti-censorship feature: use extra TLS padding for fallback API requests.
- Added translations for Arabic, Czech, French, German, Hindi, Russian, Simplified Chinese, and Spanish.
- Added an icon on the main screen to indicate anti-censorship mode is enabled.
- Added new in-house Stealth/Wstunnel application.
- Added support for native aarch64 (arm64) Windows build.
- Added split tunneling driver for Windows arm64.
- Added additional logging to diagnose service startup failure.
- Added a small loading spinner to some operations which may take a long time.
- Added feature to remember last locations tab on exit and default to that tab on startup.
- Added support for DNS-over-HTTPS (DoH) and split DNS to the 'Connected DNS' feature.
- Added custom alert screens, replacing the native OS message boxes.
- Added icon on connect screen indicating if connection is auto, manual, or network preferred protocol.
- Added new logout and quit screens.
- Added -username and -password command-line arguments to the installer.
- Improved latency (ping) algorithm to reduce ping frequency, especially during app startup.
- Improved installer icons.
- Fixed (reduced) tunnel test time when using OpenVPN-based protocols.
- Fixed helper security vulnerability when app installed to custom folder. Thanks TeamH4C.
- Fixed app may open locations screen to a random tab.
- Fixed "All protocols failed" prompt doesn't show.
- Fixed LAN-hosted DNS server cannot be accessed when using a custom OpenVPN config.
- Fixed OpenVPN not using custom DNS.
- Fixed spinner animation on the ROBERT page continues after the website has already been opened.
- Fixed Wifi hotpsot feature does not correctly detect "hosted network support".
- Fixed Unicode application names not supported for split tunneling apps.
- Fixed Logout/Quit screen UI bugs.
- Fixed Manage ROBERT rules link click does nothing.
- Fixed UI overlap and alignment issues.
- Fixed loading spinner in Manage Account preference slows down.
- Fixed access to server IP to be only allowed for Windscribe & system apps.
- Fixed incorrect error message in the DNS domain screen when a domain name is not valid.
- Fixed WireGuard may not recover correctly in manual mode.
- Fixed OpenVPN UDP and TCP may not work with certain commented out Advanced Parameters.
- Fixed executable signature checking mechanism disabled in the helper and CLI.
- Fixed possible helper (Windscribe service) hang during app startup.
- Fixed DNS resolver works with a noticeable delay after connecting.
- Fixed validation of the domains entered by the user.
- Fixed some user interface transitions involving the "SSL error" alert.
- Fixed split tunnel hostname and IP validation errors are unclear.
- Fixed x86_64 installer to block install on an arm64 PC and notify user they should download the arm64 version of the app.
- Fixed window shadow incorrectly sized on logout/exit screens.
- Fixed login screen height may be truncated.
- Fixed alert screen may overlap other screens (e.g. news feed, protocol change).
- Fixed notifications are missing after marking all as read, leaving the notifications screen, and returning to it.
- Fixed view/send log functionality to truncate the log if it is too large to view/send.
- Fixed firewall settings updated repeatedly when pinging locations.
- Fixed installer to force kill the app if it does not respond to the exit request.
- Fixed height of location entries is too large for some display scale factors.
- Fixed log files cannot be read when Windows account name contains Unicode characters.
- Fixed Windscribe service may hang if there are many split tunnel exclusive rules.
- Fixed protocol badge not immediately updated on network changes.
- Fixed app to apply split exclude rules even while disconnected, if the firewall is up.
- Fixed WireGuard service fails to start if Windows account name contains Unicode characters.
- Fixed Windows network discovery blocked by firewall.
- Fixed sharing Windscribe connection with Windows Hotspot doesn't work with firewall enabled.
- Removed incorrect primary IP check when enabling the Allow LAN Traffic preference.
- Removed full directory paths from log to obscure user's PII.
- Removed timestamp from news feed items.
- Updated app to use server-supplied ping (latency) values.
- Updated app warnings and error messages.
- Updated to OpenVPN 2.6 and OpenSSL 3.

v2.7.12 (Beta)

Released: 2023/10/03
SHA-256: ee5329a5a9d3f2d1c048f6c0808ff8481477ffdd8fc8b300d4b256f9b0b0a696

- Fixed expired WHQL code signing signature for Windows-on-ARM split tunnel driver.

v2.7.11 (Alpha)

Released: 2023/09/23
SHA-256: 539cd1f6fce4de1ee3718526b9ff297f9ff11dff021a39587ac54e7fa4d9acd4

- Improved latency (ping) algorithm to reduce ping frequency, especially during app startup.
- Fixed LAN-hosted DNS server cannot be accessed when using a custom OpenVPN config.
- Fixed regression introduced in 2.7.10. Tunnel test fails if split tunneling enabled in exclusive mode and no apps are specified to exclude.

v2.7.10 (Alpha)

Released: 2023/09/11
SHA-256: 08e259b29fd9ef73147df1e77f5592b00a4d5a56d240f063f74b164f74292208

- Added anti-censorship feature: use domain fronting via CDN for API requests.
- Added new in-house Stealth/Wstunnel application.
- Added additional logging to diagnose service startup failure.
- Fixed app may open locations screen to a random tab.
- Fixed "All protocols failed" prompt doesn't show.
- Fixed (reduced) tunnel test time when using OpenVPN-based protocols.
- Fixed no DNS connectivity with custom DoH/DoT resolver and inclusive split tunneling.
- Fixed helper security vulnerability when app installed to custom folder.

v2.7.9 (Alpha)

Released: 2023/08/10
SHA-256: d256cc05a0a5da826ff5602712bb0a3aa3fcac121b3e571807264139459b6a7e

- Added anti-censorship feature: OpenVPN TCP split-reset, UDP stuffing, Stunnel extra padding.
- Added anti-censorship feature: use extra TLS padding for fallback API requests.
- Added anti-censorship feature: WireGuard UDP stuffing.
- Added anti-censorship toggle in preferences.
- Added an icon on the main screen to indicate anti-censorship mode is enabled.
- Added Czech language translation.
- Added split tunneling driver for Windows-on-Arm.
- Fixed Logout/Quit screen UI bugs.
- Fixed Manage ROBERT rules link click does nothing.
- Fixed Russian translation.
- Fixed spinner animation on the ROBERT page continues after the website has already been opened.
- Fixed DNS resolver issue.
- Fixed Wifi hotpsot feature does not correctly detect "hosted network support".
- Fixed DNS resolver bugs.
- Fixed Unicode application names not supported for split tunneling apps.
- Removed timestamp from news feed items.

v2.7.6 (Alpha)

Released: 2023/06/20
SHA-256: 8109b2b3ef46973d230d4251fdae0b4b54a86f85eaecbe6165cc35f4126e876f

- Fixed UI overlap and alignment issues.
- Fixed loading spinner in Manage Account preference slows down.
- Fixed access to server IP to be only allowed for Windscribe & system apps.
- Fixed incorrect error message in the DNS domain screen when a domain name is not valid.
- Fixed WireGuard may not recover correctly in manual mode.
- Fixed OpenVPN UDP and TCP may not work with certain commented out Advanced Parameters.
- Fixed executable signature checking mechanism disabled in the helper and CLI.
- Fixed DNS leaks when using openvpn + custom connected DNS (ctrld).
- Fixed possible helper (Windscribe service) hang during app startup.
- Fixed DNS resolver works with a noticeable delay after connecting.
- Removed incorrect primary IP check when enabling the Allow LAN Traffic preference.
- Removed full directory paths from log to obscure user's PII.

v2.7.5 (Alpha)

Released: 2023/06/01
SHA-256: 67454c067c80f69757a0c75953fb9619ffeeb466571841207fd966b8fd2df857

- Added a small loading spinner to some operations which may take a long time.
- Added custom connected DNS placeholder text.
- Added feature to remember last locations tab on exit and default to that tab on startup.
- Fixed missing ?int=ws in the URI when making queries if user supplies DoH resolver that's on *.controld.com.
- Fixed validation of the domains entered by the user.
- Fixed transition to the initialization window to hide the general message window shadow.
- Fixed some user interface transitions involving the "SSL error" alert.
- Fixed missing port number for the CURLOPT_RESOLVE parameter.
- Fixed redundant updateFirewallSettings calls being made during pings.
- Fixed split tunnel hostname and IP validation errors are unclear.
- Fixed x86_64 installer to block install on an arm64 PC and notify user they should download the arm64 version of the app.
- Updated ctrld binary to v1.2.0.

v2.7.4 (Alpha)

Released: 2023/05/23
SHA-256: ed7038847432c07c46a403d08b549273462bafae3c5125c18786cdeb18bfff57

- Added support for native aarch64 (arm64) Windows build.
- Fixed installer to force kill the app if it does not respond to the exit request.
- Fixed UI issue when invalid login credentials are supplied to the installer and app is in Alpha mode.
- Fixed height of location entries is too large for some display scale factors.
- Fixed log files cannot be read when Windows account name contains Unicode characters.
- Fixed Windscribe service may hang if there are many split tunnel exclusive rules.
- Fixed window shadow incorrectly sized on logout/exit screens.
- Fixed login screen height may be truncated.
- Fixed alert screen may overlap other screens (e.g. news feed, protocol change).
- Fixed notifications are missing after marking all as read, leaving the notifications screen, and returning to it.
- Fixed changing languages in app causes the news feed screen to become smaller.
- Fixed view/send log functionality to truncate the log if it is too large to view/send.
- Fixed firewall settings updated repeatedly when pinging locations.

v2.7.3 (Alpha)

Released: 2023/05/01

- Added machine-generated translations for Arabic, French, German, Hindi, Russian, Simplified Chinese, and Spanish.
- Added new logout and quit screens.
- Added support for DNS-over-HTTPS (DoH) and split DNS to the 'Connected DNS' feature.
- Added custom alert screens, replacing the native OS message boxes.
- Added icon on connect screen indicating if connection is auto, manual, or network preferred protocol.
- Added -username and -password command-line arguments to the installer.
- Fixed busy spinner displayed when exiting is not centered.
- Fixed ROBERT screen loading icon not antialiased.
- Fixed protocol badge not immediately updated on network changes.
- Fixed emergency connect feature not working.
- Fixed app crash during startup.
- Fixed python scripts to conform to the pep8 style guide.
- Fixed 'out of data' screen isn't vertically centered.
- Fixed preference items are sometimes expanded when they shouldn't be.
- Fixed app to apply split exclude rules even while disconnected, if the firewall is up.
- Fixed WireGuard service fails to start if Windows account name contains Unicode characters.
- Fixed Windows network discovery blocked by firewall.
- Fixed OpenVPN drivers are not installed at runtime after update to OpenVPN 2.6.1.
- Fixed sharing Windscribe connection with Windows Hotspot doesn't work with firewall enabled using app version 2.6.
- Fixed uninstall executable fails when uninstalling.
- Updated app to use server-supplied ping (latency) values.
- Updated app warnings and error messages.
- Updated build system to use cmake for all projects.
- Updated to OpenVPN 2.6.1.
- Updated installer to use new icons.
- Removed unnecessary code from when the UI and engine were separate executables.
- Removed use of OpenSSL 1.1.1.

v2.6.14

Released: 2023/03/27

- Fixed free accounts not pinging pro locations.
- Fixed upgrade widget not hidden when returning to login screen.
- Fixed 'out of data' screen isn't vertically centered.
- Fixed MAC address spoofing toggle state isn't saved.

v2.6.12 (Alpha)

Released: 2023/03/13

- Added use of Encrypted Client Hello (ECH) as a fail-over mechanism to circumvent SNI filtering.
- Added new taskbar overlay icons (badges) displayed when connecting, connected, and if a connection error occurs.
- Added all secrets to the domain generation algorithm library and removed them from the app code.
- Added OpenSSL 1.1.1t due to an OpenSSL security advisory.
- Added hover highlighting to the protocol change screen.
- Added a descriptive error message on the login screen when the user is disabled or rate-limited.
- Fixed crash may occur when switching protocol window modes.
- Fixed disconnecting a WireGuard connection while it is connecting may disconnect, then start connecting again once the WireGuard dynamic configuration has been acquired.
- Fixed a successful failover did not trigger the 'save preferred protocol' screen.
- Fixed server API request would never be processed by curl due to bug in curl libs 7.83/7.85.
- Fixed new notifications appear at the bottom of the News Feed screen.
- Fixed notification age label to display "Today" instead of "0 days ago" for new notifications.
- Fixed server API request pipeline to ensure requests are processed as quickly as possible.
- Fixed confirm email feature doesn't work.
- Fixed high CPU usage while idle.
- Fixed firewall to allow apps to reach the local interface address.
- Fixed firewall to always allow localhost (127.0.0.0/8 and ::1).
- Fixed out of place cancel button and overlapping entries in the change protocol screen.
- Fixed change protocol screen should not be available when using a custom config.
- Fixed WireGuard doesn't reconnect upon waking from sleep.
- Fixed manual-mode connections should not timeout.
- Fixed login screen overlay bugs.
- Fixed default notification message color, displayed when there are no notifications.
- Fixed protocols window expansion bug.
- Fixed potential app crash when exiting due to an OS restart.
- Fixed data counter appears in custom config mode.
- Fixed location latency checks (pings) displaying "-2" for many locations when connected.
- Fixed ON/OFF icon not centered on some display scale factors.
- Fixed "We've detected that your network settings may interfere with Windscribe" dialog displays multiple times.
- Fixed alignment of some icon and text widgets on the main app screen.
- Fixed 'App Internal DNS' preference description to indicate 'OS Default' may cause DNS leaks.
- Fixed location latency checks (pings) to only be performed when the app is disconnected.
- Fixed installer/uninstaller local privilege escalation vulnerabilities.
- Fixed docked app on Windows 11 appears on left bottom of screen when displayed by tray icon menu click.
- Fixed firewall leak when using OpenVPN and firewall is on (firewall mode is always on or manual) after disconnecting.
- Fixed installer to allow install to root system folder (e.g. C:\Windscribe).
- Fixed unreasonably low ping values displayed for geographically distant locations.
- Fixed inclusive split tunneled app unable to listen on local interface when IKEv2 or OpenVPN protocols are used.
- Fixed installer to block, for security purposes, installation on a non-system drive.
- Updated 'App Internal DNS' preference to default to Cloudflare.

v2.6.6 (Alpha)

Released: 2023/01/17

- Added user interface improvements to indicate the app is failing over to another protocol.
- Fixed potential app crash when verifying an IP's validity.
- Fixed inclusive split tunneled apps unable to access localhost.
- Fixed error in the ping-via-icmp logic, used to test latency with custom configs.

v2.6.5 (Alpha)

- Fixed app will use Preferred Protocol for a network even if it's disabled.
- Fixed HTTP/SOCKS Proxy Gateway setting to warn user the Allow LAN Traffic option must be enabled.
- Fixed privilege escalation vulnerability in usage of OpenVPN up/down directives.
- Fixed notice on the login screen when user is disabled or rate-limited.
- Fixed app to save a successful failover between program launches.
- Fixed error message when user tries logging in with their email address.
- Fixed DNS leaks.
- Fixed incoming network connections on local LAN were not blocked by firewall.
- Fixed app exit when Windows network adapter information request fails.
- Fixed terminate sockets feature to exclude Microsoft services when calculating CPU utilization.
- Removed 'Windows Launcher' utility application.
- Removed WireGuard info-level diagnostic output from the log.

v2.5.18

- Fixed potential app crash when the app is failing over to another protocol.

v2.5.17

- Fixed potential app crash when reading saved WireGuard config data created by the v2.4 app.
- Fixed potential app crash caused by a display resolution detection (DPI) issue in the locations tray menu.

v2.5.14

- Fixed split tunneling driver not being installed when upgrading from 2.4 or older.

v2.5.12 (Beta)

- Fixed failover not triggering on TLS/SSL connection error.
- Fixed locations menu appearing randomly.
- Fixed build-a-plan users cannot use their static IPs.

v2.5.11 (Beta)

- Added alternative earless main UI (Van Gogh mode).
- Added Preferred Protocol support to Network Options.
- Added ROBERT controls to Preferences.
- Added installer command-line parameter to skip TUN/TAP driver installation.
- Added installer command-line parameter to prevent automatic app launch.
- Added login and logout functionality to the CLI app.
- Added 'factory reset' option to installer.
- Added sticky server list support to keep the altered server list in restricted regions.
- Added TUN/TAP automatic driver reinstallation if removed.
- Added Auto Connect toggle to Connection Preferences.
- Added trigger to connect/disconnect when Network Whitelist/Auto Connect preferences are changed.
- Added loading indicator to ROBERT screen in Preferences.
- Added divider line above login/logout button in Preferences.
- Added detection of WireGuard adapter setup failure. Notify user of the failure if connection mode is manual.
- Updated Preferences UI.
- Updated notifications screen.
- Updated Windows build to 64-bit.
- Updated to Qt 6.3.
- Updated locations tray for better performance / cleaner code.
- Updated automatic connection mode to use WireGuard protocol by default.
- Fixed WireGuard service rejects custom config file with no PSK.
- Fixed various routing/firewall issues.
- Fixed escape and enter keys not working in settings edit boxes.
- Fixed display scaling issues.
- Fixed incorrect app position during launch on multi-monitor setups.
- Fixed app giving incorrect latencies and best location.
- Fixed unnecessary spam in the debug log.
- Fixed hostname-level exclusive split tunneling.
- Fixed WireGuard connection stalls if Internet access is interrupted for more than 3 minutes.
- Fixed incorrect DPI detection.
- Fixed mouse wheel issues in the notifications and preferences windows.
- Fixed app does not resize correctly when dragging app between different DPI displays.
- Fixed start minimized preference.
- Fixed favorite locations lost after app update from some versions.
- Fixed news feed messages are the wrong width at some display scales.
- Fixed failure of connection to a location via CLI.
- Fixed port forwarding when using the WireGuard protocol.
- Fixed scrolling in news feed and preferences.
- Fixed detection for hanging OpenVPN/WireGuard processes when app starts.
- Fixed installation failure if TAP adapter install fails.
- Fixed DLL search path for the installer to only look in the system path.
- Fixed WireGuard tunnel shutdown if client app terminates unexpectedly (crashes).
- Fixed incorrect tooltip on login/logout button in Preferences.
- Fixed a number of user interface bugs when updating the app to a new version.
- Fixed notification read state not remembered if the user restarts/logs out of their PC before exiting the application.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed installer privilege escalation vulnerability.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed split tunnel driver install/uninstall can be very slow.
- Fixed CLI app to return 0 on success, 1 on failure.
- Fixed disconnected notification showing incorrect bandwidth usage.
- Fixed preferences screen does not retain user selected height upon app re-launch.
- Fixed preferred protocol doesn't reconnect when Wi-Fi hopping.
- Fixed Manual Packet Size (MTU) and network proxy settings do not retain their values upon app re-launch.
- Fixed app does not remember last used location if system crashes or app is forcefully terminated.
- Fixed incorrect data remaining value in Accounts page for build-a-plan accounts with unlimited data.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed ws_com_server.exe command prompt window does not close after choosing custom config directory.
- Fixed bottom information bar hidden when something connects to proxy/hotspot.
- Fixed signing into an expired account causes app to hang.
- Fixed the working connection setting isn't saved.
- Fixed TLS/SSL interception causes logout and crash.
- Fixed custom configs do not have DNS connectivity if internal DNS (RFC1918) is used.
- Fixed Proxy Gateway IP display goes blank when the proxy is connected to.
- Fixed a crash caused by a bug in the failover logic.
- Removed support for 32-bit Windows.
- Removed support for Windows 7, 8, and 8.1.

v2.5.10 (Alpha)

- Added detection of WireGuard adapter setup failure. Notify user of the failure if connection mode is manual.
- Fixed TLS/SSL interception causes logout and crash.
- Fixed custom configs do not have DNS connectivity if internal DNS (RFC1918) is used.
- Fixed Proxy Gateway IP display goes blank when the proxy is connected to.
- Fixed a crash caused by a bug in the failover logic.

v2.5.9 (Alpha)

- Fixed bottom information bar hidden when something connects to proxy/hotspot.
- Fixed signing into an expired account causes app to hang.
- Fixed the working connection setting isn't saved.
- Fixed settings synced immediately.
- Removed fix introduced in 2.5.8 allowing inclusive split tunneled apps access to localhost.

v2.5.8 (Alpha)

- Updated automatic connection mode to use WireGuard protocol by default.
- Fixed CLI app to return 0 on success, 1 on failure.
- Fixed disconnected notification showing incorrect bandwidth usage.
- Fixed some minor UI bugs.
- Fixed preferences screen does not retain user selected height upon app re-launch.
- Fixed preferred protocol doesn't reconnect when Wi-Fi hopping.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed Manual Packet Size (MTU) and network proxy settings do not retain their values upon app re-launch.
- Fixed app does not remember last used location if system crashes or app is forcefully terminated.
- Fixed incorrect data remaining value in Accounts page for build-a-plan accounts with unlimited data.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed inclusive split tunneled apps unable to access localhost.
- Fixed ws_com_server.exe command prompt window does not close after choosing custom config directory.

v2.5.7 (Alpha)

- Added loading indicator to R.O.B.E.R.T. screen in Preferences.
- Added divider line above login/logout button in Preferences.
- Fixed incorrect tooltip on login/logout button in Preferences.
- Fixed a number of user interface bugs when updating the app to a new version.
- Fixed notification read state not remembered if the user restarts/logs out of their PC before exiting the application.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed installer privilege escalation vulnerability.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed split tunnel driver install/uninstall can be very slow.
- Removed support for Windows 8.1.

v2.5.6 (Alpha)

This is a major update!

- Added alternative earless main UI (Van Gogh mode).
- Added Preferred Protocol support to Network Options.
- Added ROBERT controls to Preferences
- Added command-line parameter to skip TUN/TAP driver installation.
- Added command-line parameter to prevent automatic app launch in installer.
- Added login and logout functionality to the CLI app.
- Added log for any code assert statements that are triggered in a release build.
- Added 'factory reset' option to installer.
- Added sticky server list support to keep the altered server list in restricted regions.
- Added TUN/TAP automatic driver reinstallation if removed.
- Added advanced parameter ws-tunnel-test-no-error and allow ws-tunnel-test-attempts to be 0.
- Added trigger to connect/disconnect when Network Whitelist/Auto Connect preferences are changed.
- Added auto-connect toggle to Connection Preferences.
- Updated Preferences UI.
- Updated notifications screen.
- Updated architecture to 64-bit. Support for 32-bit is dropped.
- Updated to Qt 6.
- Updated locations tray for better performance / cleaner code.
- Fixed WireGuard service rejects custom config file with no PSK.
- Fixed various routing/firewall issues
- Fixed some tunnel test parameter bugs
- Fixed escape and enter keys not working in settings edit boxes.
- Fixed display scaling issues.
- Fixed incorrect app position during launch on multi-monitor setups.
- Fixed app giving incorrect latencies and best location.
- Fixed unnecessary spam in the debug log.
- Fixed hostname-level exclusive split tunneling.
- Fixed WireGuard connection stalls if Internet access is interrupted for more than 3 minutes.
- Fixed incorrect DPI detection
- Fixed mouse wheel issues in the notifications and preferences windows.
- Fixed app does not resize correctly when dragging app between different DPI displays.
- Fixed start minimized preference.
- Fixed favorite locations lost after app update from some versions.
- Fixed news feed messages are the wrong width at some display scales.
- Fixed failure of connection to a location via CLI.
- Fixed port forwarding when using the WireGuard protocol.
- Fixed scrolling in news feed and preferences.
- Fixed detection for hanging OpenVPN/Wireguard processes when app starts.
- Fixed installation failure if TAP adapter install fails.
- Fixed DLL search path for the installer to only look in the system path.
- Fixed WireGuard tunnel shutdown if client app terminates unexpectedly (crashes).
- Removed support for 32-bit Windows.
- Removed support for Windows 7.
- Removed use of the old method in the ServerLocations API.

v2.4.10

- Updated 10Gbps badge and location load when best location changes
- Added new flags
- Rasdial error 13868 fixed
- Added WireGuard NT support
- Fixed app crash on emergency connect in some cases
- Fixed crash on bad server locations list
- Various Wireguard NT fixes.
- Dynamic Wireguard Interface Allocation Support
- DPI fixes for the tray icon for Windows.
- Privilege escalation vulnerability fixed. Thanks Kim H.
- Fixed cut off long favorites location names in the tray menu
- Fixed static IPs display issue in tray menu
- Updated the version info in all Windows executables to follow standards
- Fixed uninstaller wiping the entire folder it is located in (to whoever installed Windscribe directly into root of Program Files - sorry about that)
- Standardized API interaction timers
- Fixed app main window does not display on Windows 11 preview builds
- Fixed OpenVPN on Windows 7
- Fixed automatic firewall deactivation when account status changes to disabled
- Fixed protocol selection not immediately saved to disk
- Updated app icons in system tray
- Fixed app crash on Emergency Connect.
- Increased service start wait time to 20 seconds.
- Refactored WireGuard connection to avoid blocking engine thread
- Fixed Inclusive split tunneling with WireGuard
- Fixed firewall state when app process is killed and Wireguard is used
- Fetch session when app receives focus
- Fixed firewall silently enabling by itself in rare cases

v2.4.8 (Beta)

- Same as last Alpha release

v2.4.6 (Alpha)

- Fixed app crash on Emergency Connect.
- Increased service start wait time to 20 seconds.
- Refactored wireguard connection to avoid blocking engine thread
- Fixed Inclusive split tunneling with WireGuard
- Fixed firewall state when app process is killed and Wireguard is used
- Fetch session when app receives focus
- Fixed firewall silently enabling by itself in rare cases

v2.4.5 (Alpha)

- Fixed crash on bad server locations list
- Various Wireguard NT fixes.
- Dynamic Wireguard Interface Allocation Support
- DPI fixes for the tray icon for Windows.
- Privilege escalation vulnerability fixed
- Fixed cut off long favorites location names in the tray menu
- Fixed static IPs display issue in tray menu
- Updated the version info in all Windows executables to follow standards
- Fixed uninstaller wiping the entire folder it is located in (to whoever installed Windscribe directly into root of Program Files - sorry about that)
- Standardized API interaction timers
- Fixed app main window does not display on Windows 11 preview builds
- Fixed OpenVPN on Windows 7
- Fixed automatic firewall deactivation when account status changes to disabled
- Fixed protocol selection not immediately saved to disk
- Updated app icons in system tray

v2.4.3 (Alpha)

- Added WireGuard NT support (experimental)
- Fixed app crash on emergency connect in some cases

v2.4.2 (Alpha)

- Update 10Gbps badge and location load when best location changes
- Added new flags
- Rasdial error 13868 fixed
- Misc bug fixes

v2.3.16

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs
- Updated system tray icons
- Fixed GUI lock issue
- Fixed incorrect external IP
- Improved tunnel test algorithm on Windows
- Added "View Licenses" button to Debug Preferences menu
- Fixed named pipe security flaw on Windows
- Added -silent install flag to installer
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log
- Added a dependency on the autoconnect state for the initial firewall state
- Keep the firewall state on update if autoconnect option is enabled
- Added installer debug log
- Updated wstunnel binary to v4
- Require elevated privilege to accept insecure custom config dir
- Removed device specific info from debug logs
- Fixed abnormal program self-termination after extended run time
- Fixed GUI crash edge case
- Open source app build improvements
- Reduced verbosity of debug log
- Fixed Wireguard on Windows 7 x64
- Disabled WireGuard on Windows 7 x86
- Fixed Rasdial issues on Windows 7
- Better dark mode detection on older Windows 10 versions
- Log failure to create the IPC named pipe on Windows

v2.4.1 (Alpha)

- Combine Engine + GUI processes
- Maintain same offset in docked mode
- Do not use pointer cursor on non clickable areas
- Fixed notification icon
- Added ControlD to App Internal DNS list
- Added 10gbps badge next to 10gbps capable datacenters
- Added location loads display Preference
- Fixed custom plan displays as Pro in Preference

v2.3.15 (Beta)

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs
- Updated system tray icons
- Fixed GUI lock issue
- Fixed incorrect external IP
- Improved tunnel test algorithm on Windows
- Added "View Licenses" button to Debug Preferences menu
- Fixed named pipe security flaw on Windows
- Added -silent install flag to installer
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log
- Added a dependency on the autoconnect state for the initial firewall state
- Keep the firewall state on update if autoconnect option is enabled
- Added installer debug log
- Updated wstunnel binary to v4
- Require elevated privilege to accept insecure custom config dir
- Removed device specific info from debug logs
- Fixed abnormal program self-termination after extended run time
- Fixed GUI crash edge case
- Open source app build improvements
- Reduced verbosity of debug log
- Fixed Wireguard on Windows 7 x64
- Disabled WireGuard on Windows 7 x86
- Fixed Rasdial issues on Windows 7
- Better dark mode detection on older Windows 10 versions
- Log failure to create the IPC named pipe on Windows

v2.3.11 (Alpha)

- Updated system tray icons
- Fixed GUI lock issue
- Fixed incorrect external IP
- Improved tunnel test algorithm on Windows
- Added "View Licenses" button to Debug Preferences menu
- Fixed named pipe security flaw on Windows
- Added -silent install flag to installer
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log

v2.3.10 (Alpha)

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs

v2.03.3 (Beta)

- Added custom DNS server support
- Added meme support and ability to upload custom background images
- Added ability to blur IP via double click
- Added subtle shadows to main screen assets
- Fixed crash when hiding main windows when log viewer dialog is opened
- Fixed installer error if firewall is ON while disconnected

v2.02.10

- Detection of the authorization error for IKEv2 made to be more specific
- Reduced debug log verbosity
- Emergency connect description updated

v2.02.9 (Alpha)

- Fixed inclusive split routing issue
- Removed useless messages from log
- Prevented keypress navigation to other locations from config-only mode.
- Fixed auto-hide of docked app on showing external OS dialogs
- Fixed negative remaining bytes issue
- Open newsfeed to the first unread message, if any
- Fixed sending of large debug logs
- Added Export Log button
- Don't terminate TCP sockets of processes that are not tunneled
- Set "TCP socket termination" option ON by default.
- Linked option "TCP socket termination" with closing sockets in split tunneling mode
- Secure hotspot fix for openVPN

v2.02.5 (Beta)

- Detect unsupported OS version, download legacy installer
- Remove helper from version 1 when installing 2.0
- Update installer position tweaks for future updates
- Removed account tab from preferences in external config mode.
- Improvements to preferences and combobox menus.
- UX improvements to location window.
- Fixed latency display always as bars on some screens.
- Fixed OVPN custom config issues with protocol names.
- Fixed custom config error message.
- Fixed incorrect timestamps in service log.
- Fixed WireGuard on wake connect issue.

v2.02.4 (Alpha)

- Added location search.
- Improved domain name validation in GUI preferences.
- Fixed GUI and DPI scaling issues for API resolution in GUI preferences.
- Fixed network level split routing defaults
- Removed initialization timeout in GUI.
- Fixed Mac UI bug with static ips and custom configs ribbon.
- Recreate DNS-resolver when network state changes
- Fixed Hyper-V host network bridge detection.
- Fixed the auto-update algorithm on Windows to address signing errors
- Fixed OVPN pipe-related deadlock issue
- Fixed refetch WG config after logout.
- Improved service logging, log merging and improved readability in GUI internal viewer.
- Added year to logs
- Fixed custom configs OVPN protocol detection.
- Fixed Localhost blocked in inclusive Split Routing mode
- Added split tunneling for the inclusive mode for hostnames (Windows)
- Fixed inclusive split tunneling breaks BattleNet agent
- Fixed default cipher problem with OVPN custom configs.
- Fixed FUI crash on Mac when opening or closing laptop lid in some cases
- Fixed reconnect on external IKEv2 failure, fixed DNS server list size issue
- Hide "Connection settings" in external config mode.
- Fixed EXE selection for a WoW64 GUI process.
- Updated split tunneling driver for Win7 support.
- Removed sensitive info from logs.
- Fixed app lock up when the file explorer is shown
- Fixed locations ribbon UI regression.
- Fixed PingTest log spam.
- Added workaround for openvpn error "write_wintun(): head/tail value is over capacity".
- Check correctness of IP/CIDR combination in GUI.
- Updated "ESC" button/icon in the installer.

v2.02.1 (Alpha)

- Extended tray menu to show Static IPs, custom configs and favorites
- Split tunneling driver updated for Windows 8 support
- Added show flags preference
- Fixed WireGuard custom config issues with no PSK and ipv6
- Added support for Unicode SSIDs
- Formatted WireGuard output to be readable
- Attempted to fix not displaying static ip device name
- Service error 29 removed from service
- Prevent blank manual IP in API resolution
- Fixed Win32 service WireGuard issues and added crashdump support for the service
- By default use udp protocol for custom OVPN configs if no proto defined
- Fixed blinking cursor issue
- Fixed favorites not being saved on shutdown
- Show static ip as sublocation name
- Refactored TAP-adapter detection for split tunneling
- Fixed split tunneling being disabled with WG

v2.01.3 (Beta)

Bug Fixes:
-----------------------
- Fixed possible IP leak on OS start
- Fixed IP leak during auto-upgrade process
- Fixed OS default DNS problem after reboot on Mac.
- Fixed Location tab background color
- Fixed incorrect UI placement in Docked mode on Mac
- Fixed notification logic
- Start minimized after reboot if minimize to tray option is on.
- Disable firewall in auto mode for custom configs that don't redirect gateway
- Allow AirDrop when firewall is enabled with LAN bypass on
- Stunnel updated to latest version 5.57
- Protobuf updated to latest version 3.14.0
- New connecting animation
- Fixed Firewall frozen in incorrect state across sign out/in
- Fixed GUI crash on Mac when opening or closing laptop lid in some cases
- Attempt to fix IPC server listen error

v2.01.1 (Alpha)

Bug Fixes:
-----------------------
- Fixed possible IP leak on OS start
- Fixed IP leak during auto-upgrade process
- Fixed Location tab background color
- Fixed notification logic
- Start minimized after reboot if minimize to tray option is on.
- Disable firewall in auto mode for custom configs that don't redirect gateway
- Stunnel updated to latest version 5.57
- Protobuf updated to latest version 3.14.0

v2.00.42 (Beta)

New Features:
-----------------------
- New design
- Split tunneling
- WireGuard support
- Network awareness
- MAC spoofing
- Custom config support (WireGuard and OpenVPN)
- Packet size adjustment
- Tabbed location list

Bug Fixes:
-----------------------
- Too many to list

v2.00.39 (Alpha)

New Features:
-----------------------
- New design
- Split tunneling
- WireGuard support
- Network awareness
- MAC spoofing
- Custom config support (WireGuard and OpenVPN)
- Packet size adjustment
- Tabbed location list

Bug Fixes:
-----------------------
- Too many to list

v2.00.38 (Alpha)

Test auto-update functionality from 1.83 to 2.0

v1.83.20

New Features:
-----------------------
- Show Static IP device ID in the UI
- Ability to select DNS server used by the app while disconnected

Bug Fixes:
-----------------------
- Build-a-Plan locations sometimes not showing correctly
- Prevent WindscribeService crash if DNS settings change
- Custom configs can now be connected to while expired
- Bypass anti-abuse check if Build-a-Plan is activated

v1.83.19 (Beta)

New Features:
-----------------------
- Show Static IP device ID in the UI
- Ability to select DNS server used by the app while disconnected

Bug Fixes:
-----------------------
- Build-a-Plan locations sometimes not showing correctly
- Prevent WindscribeService crash if DNS settings change
- Custom configs can now be connected to while expired
- Bypass anti-abuse check if Build-a-Plan is activated

v1.83.18

New Features:
-----------------------
- WebSocket stealth protocol support
- Location list sorting methods: Geography, alphabet, latency
- Build-a-Plan support (future feature)
- Static IP + port forwarding support (future feature)
- Custom OpenVPN config support

Bug Fixes:
-----------------------
- Stuck on login in China
- App prevents graceful Windows shutdown
- App freezes in “Windscribe is shutting down” state
- Bad IKEv2 connection causes client to lock up
- Don’t disable server location on ping test failure

v1.83.17 (Beta)

No changelog

v1.83.8 (Beta)

No changelog

v1.82.17

New Features:
-----------------------
- Favorite locations
- Setting to show actual latency instead of signal bars
- Setting to disable TCP socket termination (Windows only)
- Automatic detection of high CPU usage caused by other apps when TCP sockets are terminated

Bug Fixes:
-----------------------
- IKEv2 traffic not counted on MacOS
- NULL DACL vulnerability (CVE-2018–1133)
- “Better” Best Location detection
- Default to AES-256-GCM cipher in OpenVPN
- Windows systray connection status information
- Don’t make HTTP requests when disconnected to reduce strain on the API
- Redact sensitive info from the debug log

v1.82.13 (Beta)

No changelog

v1.82.6 (Beta)

No changelog

v1.81.39 (Beta)

No changelog

v1.81.36 (Beta)

No changelog

v1.81.30 (Beta)

No changelog

v1.81.13 (Beta)

No changelog

v1.80.33

New Features:
-----------------------
- LAN proxy gateway — https://windscribe.com/features/proxy-gateway
- Secure Hotspot (Experimental) — https://windscribe.com/features/secure-hotspot
- Variable location drawer height
- Auto login after signup
- Ability to choose NDIS5 TAP driver
- Upgrade to OpenVPN 2.4.x with 2.3.x fallback
- Service notifications
- Show Pro data-centers to free users
- Location latency tool-tips added to signal bars

Bug Fixes:
-----------------------
- Always on firewall not working on OS boot on some machines
- Application crashes after connection attempts are exceeded with “minimize to tray” option checked
- Application freeze with firewall ON requires reboot
- API calls not made if app starts with no Internet connectivity
- Custom installation now allows for non-standard install path
- Auto-enable disabled TAP adapter
- 100% CPU when app starts with no Internet connectivity
- Don’t try UDP protocol if system proxy is configured
- Constant application window size on variable DPI screens
- Login form DPI bug
- On multi-screen computers, tool-tips show on primary monitor
- Leave firewall ON if ran out of free bandwidth to prevent IP leak
- Increase reconnect timeout from 5 min to 1 hour
- Server list source changed
- Moved server location update process to separate thread
- Only do ping tests while disconnected
- Update available UI change
- Output installed anti-virus software into debug log for troubleshooting
- Open survey on application uninstall
- Installer command line arg support
- Black and white top bar icon on MacOS
- Ping nodes in batches instead of all at the same time
- Allow for verbose OpenVPN logging via Advanced Parameters screen
- When beta channel is selected, check for updates right away

v1.80.24 (Beta)

No changelog

v1.70.4

New Features:
-----------------------
- Added city level location selection
- Added Automatic Connection mode
- Added support for 22 languages
- Added custom TAP adapter
- Added “Ignore SSL Errors” option
- Added notifications when firewall is ON and application not connected
- Added “Advanced Parameters” screen
- Added EULA to the installer
- Added IPv6 connectivity disable button, to prevent WebRTC leaks over IPv6 in some situations
- Added Touch support
- Added Beta channel

Bug Fixes:
-----------------------
- Fixed auto-start bug on some systems
- Fixed Internet connectivity check
- Fixed persistent session storage
- Fixed API connectivity on restrictive networks
- Fixed unquoted service path
- Fixed disappearing Best Location
- Fixed WSD port connectivity while firewall is ON
- Fixed PlayStation UPNP connectivity while firewall is ON
- Fixed reconnection bug on computer wake up on some systems
- Changed the Preferences screens
- Changed the connecting spinner animation

v1.61.1 (Deprecated)

No changelog

v1.60.1 (Deprecated)

No changelog

v1.59.1 (Deprecated)

No changelog

v1.58.1 (Deprecated)

No changelog

v1.57.1 (Deprecated)

No changelog

v1.56.1 (Deprecated)

No changelog

v1.53.1 (Deprecated)

No changelog

v1.46.1 (Deprecated)

No changelog

Open Source Software Attributions