Releases: Windscribe/Desktop-App
Releases · Windscribe/Desktop-App
v2.14.4-alpha
Added
- Decoy traffic feature.
--cacheonly to the update script for Fedora RPMs.
Improved
- Changed VPN interface network category from private to public on Windows.
- App split tunneling to not require signature identifier on macOS.
Fixed
- App stuck during login after accepting prompt to ignore SSL errors.
- Incorrect post quantum KE algorithm.
- Install fails if uninstall registry information is missing on Windows.
- Incorrect characters displayed in Windows installer bootstrap error message.
- Sometimes IP does not change after connecting with inclusive split tunnel on macOS.
- Codesigning for macOS 11.
- Some CLI commands may indicate that the operation was interrupted when it wasn't on Linux.
Removed
- DLL injection mitigation on Windows due to false positives.
- IPv6 split tunneling (for now) due to edge cases.
- Some log spam on Windows and macOS.
Known Issues:
- Windows: the
Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.
GUI Installer Hashes
| Installer |
SHA-256 hash |
| Windows x86_64 |
d472fe5e8b8984c08a01731756bdbae562afb7a6a927fae0df3250ff6aaa52f6 |
| Windows arm64 |
fc71289031a95b9506633453c3ceaf7e850d2ea559078ef96418ce6e11126daf |
| macOS universal |
6a73f6db3764ab43a789faf4f573078208449f3f094fa0479e50987a28e5e78a |
| Ubuntu x86_64 |
db1a5c5da71355e046a7fc2714c2710f5c4d3b3f10d4e3c0b0341e8c7326b384 |
| Ubuntu arm64 |
c9bc41305253fedefaa678d5d7e2f0f59c163925ad7a2d69fcc9f992eb491396 |
| Fedora x86_64 |
aaafd803af3d6ca13780ff3f03514b207046ab78f2cbaf11cfb28fa186d99292 |
| OpenSUSE x86_64 |
add26e13f5ec680dadd25006688b335305cd7053cd311f8868f454795e4f90b4 |
| Arch Linux x86_64 |
57f064a905e1636e5bac71b11262b31e6c667667789b3743ee30fad1be0ea902 |
CLI Installer Hashes
v2.14.3-alpha
Added
- Per-app split tunneling on macOS.
- Showing device name when requesting list of static IP locations in CLI on Linux.
Improved
- Build process to produce statically linked executables on Windows to mitigate code-injection attacks.
- Windows-on-Arm installer to use arm64 7-zip extractor.
- Flow when user enables
Show notifications but system notifications are disabled on Windows.
- Custom connected DNS error UX.
Fixed
reset date being shown on account screen instead of expiry date for some plans.- 2FA code expires before working endpoint can be found [wsnet].
System notifications are disabled alert shown unexpectedly on Windows.- App update fails when using pre-2.4 app on Windows.
- Installer alerts may not fit in window for some translations.
- Incorrect network status detection on macOS.
- Missing firewall rule to allow the VPN DNS when using IKEv2 on macOS.
- Disconnecting due to out of data turns off firewall.
- Incorrect check for LAN address for custom DNS.
Updated
- wstunnel dependency to v1.0.5. Adds support for anti-censorship TLS stuffing.
Known Issues:
- Windows: if you receive an error dialog with
Bad Image in the title and a message indicating the DLL ...is either not designed to run on Windows or it contains an error., this indicates software on your PC is attempting to inject the DLL into our app. The app contains a mitigation to block DLL injection unless the DLL originates from Microsoft. This mitigation is intended to prevent malware from injecting into the app and thus will block the app from loading.
- Windows: the
Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.
GUI Installer Hashes
| Installer |
SHA-256 hash |
| Windows x86_64 |
acf69ab31944c7fd3d2d434c841a50a7df084764e0ac22ac5b872b541a7e6569 |
| Windows arm64 |
ea5df0cc95d10022b27cae4927ff041053cba5c59143ba9089c17fcdc32f3ea1 |
| macOS universal |
e03b28b2e3dac57b817602835fabe79f5449474e60ff51d6787516ef90260468 |
| Ubuntu x86_64 |
cc0ae0e80ddfdef59ef438a7152bfa6a7971d19fd83f6f7c1538310d4ee1b2fa |
| Ubuntu arm64 |
f8a6239a6a4a50d0dc55c3917f88846474c442c33a78b6285300cdd1248103d6 |
| Fedora x86_64 |
f7351340f6d36e5469cc6d04ccdfe89bff6f8fdad5d331ff2fed546adb05bc62 |
| OpenSUSE x86_64 |
51df962baab882aed6402ce419228b649552bd8d742aae36aad29e5a3b6ae559 |
| Arch Linux x86_64 |
171ffe20379cdcccaa87f3116085638e6646e4d995e6459aa5737d1158618d93 |
CLI Installer Hashes
v2.13.8
Added
- IPv6 support for split tunneling.
- Static IP support in CLI.
- Toggle to enable proxy gateway only while VPN is connected, based on contributions from GitHub user
intangir.
- h3:// and sdns:// protocol support for ctrld (custom DNS preference).
- A changelog link in the About preferences screen.
- Translation keys for 'Release' and 'Beta' release channels.
Improved
- Location ordering when searching.
- Network detection and minimized location service requests on Windows 11 24H2.
- UX for some CLI commands.
- CLI entry of credentials when logging in.
- Japanese translations from GitHub user
Ue05.
- Russian translations from GitHub user
MedicalJewel105.
- Login/logout CLI flow.
- UX and performance when dragging windows to different screens.
- Installer to notify the user if the helper service fails to install on Windows.
- Error reporting if installation to a custom folder fails on Windows.
- Split tunneling apps list population on Linux, based on contributions from GitHub user
intangir.
Fixed
- Potential local privilege escalation vulnerability in the Windows installer bootstrap.
- Autoconnect attempting to connect to invalid locations.
- Incorrect static device name.
- Scroll position not retained when leaving/reentering a window.
- Importing JSON may put the Secure Hotspot preference in an invalid state.
- Changelog link for many platforms was incorrect in General Preferences.
- Incorrect connectivity detection on macOS 15.x+ when rebooting the OS with the firewall set to always on.
- A potential program quit hang [wsnet].
- Custom config path not checked when importing preferences.
- Symlink target for windscribe-cli.
- Additional 'Start Minimized' use cases.
- Static IP commands in CLI with GUI backend.
- CLI symlink sometimes not created on macOS.
- Start Minimized may not work when "Minimize windows into application icon" is enabled on macOS.
- Incorrect firewall rule blocking IPv6 during inclusive split tunnel on Windows.
- Missing interface in MAC spoofing dropdown.
- Window is invisible when app is docked in Windows and device pixel ratio is not 1.
- Missing 'psmisc' dependency on Linux.
- Incorrect usage of nmcli in the Linux CLI client.
- Incorrect log names for Linux CLI client.
- Invalid MAC spoofing loop when specifying an invalid address on Linux.
- The Ecuador flag.
- Missing null pointer checks in the client application.
Removed
- Ability to use Secure Hotspot together with inclusive split tunneling.
- IPv6 toggle in preferences.
Updated
- ctrld, utilized by the custom DNS preference, to 1.3.10.
Known Issues:
- Windows: the
Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.
GUI Installer Hashes
| Installer |
SHA-256 hash |
| Windows x86_64 |
875ee772040c5276fa38b2de57df3593b804334f35f44aece35022a24068187c |
| Windows arm64 |
4aad7c5c1cc8308b66d7f9d0cb49a0febc15efd63f16121bc661214debef086d |
| macOS universal |
7e297e284037891f31e0a1e465a512cc980b9bf50ba55f4d725c82366acd5328 |
| Ubuntu x86_64 |
e2d2fa841f5c9f71dec5641ca9953569f2e7f099cbb660a878259d2c0b2b41f1 |
| Ubuntu arm64 |
82847f8cfb8b940f535c5ce1368321700615c0a0a5129b7fc18c27301827cfa8 |
| Fedora x86_64 |
0c0622edeaa93cd2478302edd430e83df1d8524f58ded9b1db114a6292ee0e22 |
| OpenSUSE x86_64 |
f968bdfc6fbffb7a614fee4e9cf387baaa39ce4d3992848bbd42eee72ba1ec8c |
| Arch Linux x86_64 |
6203eff75add4d71735061bbbcfcce031710571742d4d7473ebc54a80bff270a |
CLI Installer Hashes
v2.13.7-beta
Fixed
- Installer unable to set folder permissions on non-English versions of Windows.
Known Issues:
- Windows: the
Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.
GUI Installer Hashes
| Installer |
SHA-256 hash |
| Windows x86_64 |
deab745ea6c79378cc1c8f25f9d20c42994af5d23ffe32ae0d3fe6a2ef8bba02 |
| Windows arm64 |
a8c3910cf4775239f5f44983346df7adafd5f8962dd212f8397258af067fba09 |
v2.13.6-beta
Fixed
- Autoconnect attempting to connect to invalid locations.
- Incorrect static device name on Mac/Linux.
- Incorrect firewall rule blocking IPv6 during inclusive split tunnel on Windows.
- Missing interface in MAC spoofing dropdown on Windows.
- Potential local privilege escalation vulnerability in the Windows installer bootstrap.
- Incorrect connectivity detection on macOS 15.x+ when rebooting the OS with the firewall set to always on.
- Missing 'psmisc' dependency for Linux.
Known Issues:
- Windows: the installer will not run on non-English versions of Windows.
- Windows: the
Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.
GUI Installer Hashes
| Installer |
SHA-256 hash |
| Windows x86_64 |
126fd0a141db56a8b45051fdfe163fd6bc0c8f02313d0e0993314bd835c7c473 |
| Windows arm64 |
489c6d4a5c456bd5bdca7db577a762ebd12fc2a9517274e6685145854b72dd53 |
| macOS universal |
1d31dc3cf00884fcac4cec7761751d70c085040b17d6d6adc1afd736e5b5abd2 |
| Ubuntu x86_64 |
6f26508c38687a05314b04f49068fca358472bb8dba8455253cb55c26f6fab0d |
| Ubuntu arm64 |
eb1c800dee7916c5bcb98b2eb1d22b72b77cd00444f2b4b6803b46f64246bf77 |
| Fedora x86_64 |
71fccec340365fd4bfab412239c954571be3b7c110b06361d7b475f2233ad8a0 |
| OpenSUSE x86_64 |
74b1c8e724f181d95b730d72ce5e6b82ffdeeb8cdbe1232ab47f88217acb1939 |
| Arch Linux x86_64 |
cd6628d8b952342bab87e2aba81d1d3bd8360b4386dca1ff24ccec35c46ff3e5 |
CLI Installer Hashes
v2.13.5-beta
Fixed
- Scroll position not retained when leaving/reentering a window.
- Importing JSON may put the Secure Hotspot preference in an invalid state.
- Changelog link for many platforms in General Preferences.
Known Issues:
- Windows: the
Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.
GUI Installer Hashes
| Installer |
SHA-256 hash |
| Windows x86_64 |
23f191ceba03da29a3a9e6657ee61fbe9a7fd9e24993bcc97a6c56de9ede33ea |
| Windows arm64 |
ca1948f4cd424da2f42eb581c8a1af1895b48f20c77488dd8f5cb8ee077316fc |
| macOS universal |
50b76df533f996baed009ac3e4f00f41688f8af236637eca31e4df02ccc3a179 |
| Ubuntu x86_64 |
92f45642d6d6db2db03665f1500cf6e8092f7cbb9e8ac4fc46ea99c1598f188d |
| Ubuntu arm64 |
048561c236b7b0cc5c42cce4ddcf419abd600cabe7bc13acc9bc4a3fe2809dfa |
| Fedora x86_64 |
9f14e29d2e19505c76bf4172e1acee6e8f329fe63c2265d81c71c61978ad29be |
| OpenSUSE x86_64 |
6771ea596c7b44a3a35e66dcd3723ea15e98ffc7f7d89382cf91dab552089a72 |
| Arch Linux x86_64 |
7e1a188723154040909f881c03b8952450b64ea6b4e99977015683db5c2d0cc8 |
CLI Installer Hashes
v2.13.4-alpha
Added
- A changelog link in the About preferences screen.
Improved
- Windows installer to notify the user if the helper service fails to install.
- Network detection and minimized location service requests on Windows 11 24H2.
- Error reporting if installation to a custom folder fails on Windows.
Fixed
- Ecuador flag.
- Invalid MAC spoofing loop when specifying an invalid address on Linux.
- Log entries from wsnet are double encapsulated on Linux.
Known Issues:
- Windows: the
Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.
GUI Installer Hashes
| Installer |
SHA-256 hash |
| Windows x86_64 |
dc12eecc73a095078fb0b4a18d7d6ee0c3c306847325979dbd0764f8edff785b |
| Windows arm64 |
a032783adb54d53650dca2b2322d1d19405deeb154986c595de030ad1e63c168 |
| macOS universal |
aefb32260c1e5ccc9ba58f7f8054ab1eafaea763c79370e5e862873b1da38219 |
| Ubuntu x86_64 |
fe439e7dd60546c4838e042ec2688abadac6f6c25ce0cb00368e412799681b8c |
| Ubuntu arm64 |
2e15704caaf7c556e737d211fae8508d5de5efe213e512d1f92849d842de7fd9 |
| Fedora x86_64 |
ec1cd59ad6fc29aeb29fc2fefbb13020751fe29c556c050ba702ecd1bdd69de5 |
| OpenSUSE x86_64 |
6ec96ea92e7594bfc87ad1595422a77e6bce05228c183e43d172f3b315d1511f |
| Arch Linux x86_64 |
d47e853c4d0ea35203a3aaffc05f7922175acaebaa7e3c294100673543256d52 |
CLI Installer Hashes
v2.13.3-alpha
Improved
- UX and performance when dragging windows to different screens.
- Split tunneling apps list population on Linux, based on contributions from GitHub user
intangir.
- Login/logout CLI flow
- Debug log content.
Fixed
- A potential app hang when exiting the app.
- App can't be dragged to a screen above the initial screen on Windows.
- App is positioned off-screen when it is docked and device pixel ratio is not 1 on Windows.
- Incorrect usage of
nmcli in the CLI client on Linux.
- Custom config path not verified when importing preferences from JSON.
- Symlink target for windscribe-cli incorrect on macOS.
- Additional 'Start Minimized' use cases on macOS.
- Incorrect log names for CLI client on Linux.
- Missing null check in GUI logic.
Removed
- Ability to use Secure Hotspot together with inclusive split tunneling on Windows.
Known Issues:
- Windows: the
Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.
GUI Installer Hashes
| Installer |
SHA-256 hash |
| Windows x86_64 |
872cb121016eacf6c6266418796d011f1aae64fb4641f92cef59d54354667081 |
| Windows arm64 |
e9f86176769415f9af6e6541bba2aa5811a339ae37604808e7ffa6536519a1f7 |
| macOS universal |
4170a85aed13c9d9a53cb4bbc2272e353bbfb4ebb493319b2e588b7ff26cec02 |
| Ubuntu x86_64 |
cf3797fb7672f578562aec85c74efafac4c65a5ac835c1f08054febf37c6ae6f |
| Ubuntu arm64 |
d278b1f6acee09aac56bb6c09abd2d98e8cf6e4e6de5a60ebab397c16663dce0 |
| Fedora x86_64 |
2c3e6d994a28016f873c29a4f024add89427003d3ac12ddf0b524ca0d1d9cf2b |
| OpenSUSE x86_64 |
790ed465f6b09fcf9d418d7159b2e60f0f4742bf8f02c290c3a3f2ea2aa6d6f9 |
| Arch Linux x86_64 |
f2224a9a78ad156dbebf9b015ebcec1ebf793733e2480cc59f023b45c14935c1 |
CLI Installer Hashes
v2.13.2-alpha
Added
- IPv6 support for split tunneling.
- Static IP support in CLI.
- Toggle to enable proxy gateway only while VPN is connected, based on contributions from GitHub user
intangir.
h3:// and sdns:// protocol support for ctrld (custom DNS preference).- Restored translations of 'Release' and 'Beta' release channels.
Improved
- Location ordering when searching.
- CLI entry of credentials when logging in.
- UX for some CLI commands.
- Japanese translations from GitHub user
Ue05.
- Russian translations from GitHub user
MedicalJewel105.
- Debug log content to facilitate automated debug log analysis.
- Null pointer checks in Objective-C code.
Fixed
- Static IP commands in CLI with GUI backend.
- CLI symlink sometimes not created on macOS.
Start Minimized prefernce may not work when Minimize windows into application icon is enabled on macOS.
Removed
- IPv6 toggle in preferences on Windows.
- IPv6 enabling/disabling on macOS.
Updated
Known Issues:
- Windows: the
Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.
GUI Installer Hashes
| Installer |
SHA-256 hash |
| Windows x86_64 |
3c5e49edee598ab9954194d2098c903455266266f8cd579c1121499f8112e1bc |
| Windows arm64 |
1eb0d6af44cb7725dc7583fac9735d5e63d062af8f1d25f2faa2ddc60edc7186 |
| macOS universal |
1b6438ba884d24da5b6939696bcc6539ad0ff70b2903d939559b6be1358ae340 |
| Ubuntu x86_64 |
d445a5969584ef4ba25d6cc504bb2255839805a1e0f6189adf02c106aaf9569b |
| Ubuntu arm64 |
7f786f80babbe0f39aa9809c0e20aeff08f025f4c54558d00308d4a5e10d077f |
| Fedora x86_64 |
4ba0908254910d8b1413901d4aead4867a72af468c70c480663ac69b84ef9b40 |
| OpenSUSE x86_64 |
b24cdbe2fa1877aac2a5e73d0a24ed056f9da1f7f7704a7e532be4b9dcd3efe0 |
| Arch Linux x86_64 |
b35184cfb5481aae349fcad9bda3b3467cbf53ad826962753a50b5dd3ccfdffa |
CLI Installer Hashes
v2.12.7
Added
- MAC spoofing in Linux.
- Support for in-app updates from many immutable Linux distros.
- Flags for new and upcoming locations.
- Link to our website for further information about the Circumvent Censorship feature in preferences.
- Additional curl logs for failed server API requests in wsnet.
Improved
- UDP/TCP/Stealth/WStunnel protocol performance on Windows by using the OpenVPN DCO kernel driver as their default driver.
- Behavior when querying the SSID on Windows 11 24H2 and Location services is off.
- Behavior when querying the SSID on macOS 15.
- Description for packet size, clarifying that it doesn't do anything for TCP-based protocols.
- Error message when update download fails.
- The failover algorithm in wsnet to prevent it from 'sticking' to one domain.
- Split tunneling behavior on Linux by doing a self-test at service start.
Fixed
- Docked Windows app does not detect change in taskbar size and adjust position when displayed.
- App update may fail to stop and remove OpenVPN/Wireguard daemons on Windows.
- Debug log may fail to send.
- Double blinking cursors on custom config credentials prompt.
- Custom config authorization data not deleted when custom config directory cleared.
- Latency endpoint duplicate requests.
- Imported JSON values may be incorrect.
- Additional JSON & GUI input validation errors.
- Proxy validation to only allow an IP address. Prior proxy configurations using a hostname will no longer function.
- Proxy gateway sometimes sends invalid headers.
- Memory leaks in wsnet.
- UDP protocol on Windows may fail to connect when Circumvent Censorship is enabled.
- "Secure Hotspot" feature not being disabled properly when using IKEv2 on Windows.
- Installer ignoring username/password command-line arguments on Windows.
- Emergency connect fails to connect due to incompatibility with OpenVPN DCO driver on Windows.
- macOS installer may mangle the 'windscribe' user if it's a regular user.
- Always-on firewall may not be enabled after reboot on macOS.
- Installer window in wrong position during in-app update on macOS.
- Unexpected permission prompt during upgrade on macOS.
- Custom DNS may be bound to wrong interface due to firewall state cache on macOS.
- Potential app crash on macOS when App Internal DNS setting is 'OS Default'.
- Potential app crash when installing helper on macOS.
- Memory leaks in IPC and other macOS-specific code.
- Linux helper may get stuck when disconnecting on Raspberry Pi with split tunneling enabled.
- openSUSE CLI install script not starting the helper service.
- Auto-rotate MAC not working when disconnecting and reconnecting to the same network on Linux.
- Linux helper service may not be restarted after update.
- Debian package dependencies for Debian Trixie.
- Possible delay when setting firewall rules on Linux.
- Update not working in Fedora Silverblue while connected.
Updated
- Windows OpenVPN DCO driver to v1.2.1.
- German translations provided by GitHub user Evonos.
- Spanish translations provided by GitHub user IceString3.
- Russian translations in installer.
- c-ares in wsnet to the latest version 1.33.1, increased timeouts for DNS requests.
Known Issues:
- Windows: the
Circumvent Censorship feature does nothing when using the TCP protocol due to a missing feature in the OpenVPN DCO driver. If you require use of the the TCP protocol and the Circumvent Censorship feature, you can add ws-use-openvpn-wintun to the Advanced Parameters setting to force the use of the wintun driver.
GUI Installer Hashes
| Installer |
SHA-256 hash |
| Windows x86_64 |
c6678edba05f5af3148e7777940de0eff7d5d5e030f28822d7b988e2c4d63dc7 |
| Windows arm64 |
3d13056ad15bd7bf5854a23b044b9c3dca41afca0e49cd264f3d51fb55367471 |
| macOS universal |
e49a734482fb1f6aaf8775ab3138abdd359b2e331519bd8c62ab68650e60b579 |
| Ubuntu x86_64 |
1eaec655553bf5bf949557df5e5752cf9037025e446a719ac26f452c0c5fa74b |
| Ubuntu arm64 |
11369dbe4d77cf15334e07ea28d4cc16bc94a59fcc593f8ccecbf65dc3e6ce0e |
| Fedora x86_64 |
7226f319ec8e979132399ee26078ff7919bb0153876079a64909bbd0f39dbf0c |
| OpenSUSE x86_64 |
39d7824bc2ed2c95886e40aca76c53cd3c68ee63f2de450a53c3e5b20ca0de46 |
| Arch Linux x86_64 |
f18883a9598008270931b17a4639bd2e0c1e56adae1391b0685f201a80441be7 |
CLI Installer Hashes
