Mac Changelog

Stuff changes, see exactly what

v2.12.1 (Alpha)

Released: 2024/10/01
SHA-256: a743fe647e83c80bfa26fe52e9ed49d1e73184c59e06ed9f341905845c794160

- Improved description for packet size, clarifying that it doesn't do anything for TCP-based protocols.
- Improved behavior when trying to get SSID on macOS 15.
- Fixed installer window in wrong position during in-app update.
- Fixed unexpected permission prompt during upgrade.
- Fixed custom DNS may be bound to wrong interface due to firewall state cache.
- Fixed additional JSON & GUI input validation errors.
- Fixed debug log may fail to send. OpenSSL updated to the latest commit, version 3.4.0.
- Fixed double blinking cursors on custom config credential prompt.
- Fixed custom config auth data not deleted when custom config dir cleared.
- Fixed latency endpoint duplicate requests.
- Updated German translations provided by GitHub user Evonos.
- Updated Spanish translations provided by GitHub user IceString3.

v2.11.11

Released: 2024/09/16
SHA-256: 965f17aff5e2e551ce89d95aefa27f7d1cbb8cd2de4d4650dff67e940079fd20

- Added support for quantum-safe TLS and OpenVPN.
- Added CLI mechanisms to connect with a specific protocol, and improve help.
- Added port selection to proxy gateway.
- Improved debug log usefulness by adding routing table.
- Improved IPC sockets/lockfiles by consolidation.
- Improved installer archive generation and extraction to use built-in macOS utilities.
- Improved JSON import validation.
- Improved an error message when a custom config fails to connect with incorrect credentials.
- Improved dialog verbiage when secure hotspot is enabled without Wi-Fi.
- Fixed displayed IP not changing for split inclusive tunnels.
- Fixed potential application hang in system 'log' call when initiating an IKEv2 connection.
- Fixed disabling/restoring IPv6 may do so on non-existent interface.
- Fixed potential for uncaught exceptions thrown by the std::filesystem API to cause the app to crash.
- Fixed incorrect description for Client-side Keepalive preference.
- Fixed logged out when downgrading to earlier version.
- Fixed JSON & ini validation for Split DNS domains.
- Fixed JSON import not exporting/importing "Auto-Secure" setting.
- Fixed sorting by latency when some locations have no ping info.
- Fixed GUI allowing invalid proxy address/port.
- Fixed potential app crash if the app is connected and the system is restarted.
- Fixed installer may not exit after attempting to launch app.
- Fixed SSID detection not working in macOS 15.
- Fixed moving app window is not smooth.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed app not showing an error when ctrld fails to execute.
- Fixed app is very sluggish with many split tunnel hostnames.
- Fixed split tunneling may not function correctly on macOS 15.
- Fixed app crash when cancelling 'install helper' dialog.
- Fixed handling of 0.0.0.0 response from DNS server for split tunnel hostnames.
- Fixed proxy gateway port not displaying 'Auto' when edit is cancelled.
- Fixed a wrong translation in Ukrainian.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed app may be quarantined by macOS.
- Fixed displayed IP not changing for split inclusive tunnels.
- Fixed split tunnel include rules should not keep state.
- Fixed helper checks for URLs for custom DNS are too strict.
- Fixed windscribe-cli not working on macOS 11.
- Fixed windscribe group may not be added in some cases.
- Fixed scenario where displayed location does not match actual location.
- Fixed the timeout calculation in wsnet library. Added additional logs for tunnel tests.
- Fixed the error message when the remember checkbox wasn't ticked on the wrong credentials.
- Fixed DNS cache not cleared in wsnet when connecting or disconnecting to the VPN.
- Fixed macOS auto-update process fails to mount installer.
- Fixed spammy log when getting SSID.
- Updated Chinese (Simplified) translations provided by GitHub user YerongAI.
- Updated French translations provided by GitHub user RaphxelS.
- Updated Polish translations provided by GitHub user raspin0.
- Updated Ukrainian translations provided by GitHub users mljoke and Artem-CD.
- Updated libcurl, libcares, openvpn, and liboqs to the latest versions.

v2.11.9 (Beta)

Released: 2024/09/05
SHA256: 1a96ff314916bdaefe0c2cac87dd6c51aa2c862266602fdbd28696742bde998b

- Improved dialog verbiage when secure hotspot is enabled without Wi-Fi.
- Fixed the error message when the remember checkbox wasn't ticked on the wrong credentials.

v2.11.8 (Alpha)

Released: 2024/08/29
SHA-256: 0525a85b649be89b479fd87f582000399a34e36530633a155b013d1bf1432a7f

- Added the new parameter language to wsnet library.
- Improved an error message when a custom config fails to connect with incorrect credentials.
- Fixed scenario where displayed location does not match actual location.
- Fixed the timeout calculation in wsnet library. Added additional logs for tunnel tests.

v2.11.6 (Alpha)

Released: 2024/08/20
SHA-256: 5f4a78a53db766179af87ff4e84c6d0852383499a6e0942d4d5dace9b8aa92a5

- Fixed displayed IP not changing for split inclusive tunnels.
- Fixed potential application hang in system 'log' call when initiating an IKEv2 connection.
- Fixed disabling/restoring IPv6 may do so on non-existent interface.
- Fixed potential for uncaught exceptions thrown by the std::filesystem API to cause the app to crash.
- Fixed incorrect description for Client-side Keepalive preference.
- Fixed logged out when downgrading to earlier version.
- Fixed JSON & ini validation for Split DNS domains.
- Fixed JSON import not exporting/importing "Auto-Secure" setting.
- Fixed sorting by latency when some locations have no ping info.
- Fixed GUI allowing invalid proxy address/port.
- Fixed potential app crash if the app is connected and the system is restarted.
- Updated Chinese (Simplified) translations provided by GitHub user YerongAI.
- Updated French translations provided by GitHub user RaphxelS.
- Updated Polish translations provided by GitHub user raspin0.
- Updated Ukrainian translations provided by GitHub users mljoke and Artem-CD.

Note: please use one of the OpenVPN-based protocols if you have the anticensorship feature enabled. We are investigating a possible incompatibility with the feature and the WireGuard protocol.

v2.11.5 (Alpha)

Released: 2024/08/06
SHA-256: 1f3d71ea3b19b29de102e8cfb4a292573bf936ef95229b6547692704bf19024f

- Improved JSON import validation.
- Fixed displayed IP not changing for split inclusive tunnels.
- Fixed split tunnel include rules should not keep state.
- Fixed helper checks for URLs for custom DNS are too strict.
- Fixed windscribe-cli not working on macOS 11.
- Fixed windscribe group may not be added in some cases.
- Updated libcurl, libcares, openvpn, and liboqs to the latest versions.

v2.11.4 (Alpha)

Released: 2024/07/16
SHA-256: 73d70c0f979b9b8090b2500ab47f4ad9b6e1e365dbfe6b1bdc2521962cbd66f2

- Added support for quantum-safe TLS and OpenVPN.
- Added CLI mechanisms to connect with a specific protocol, and improve help.
- Added port selection to proxy gateway.
- Improved debug log usefulness by adding routing table.
- Improved IPC sockets/lockfiles by consolidation.
- Improved installer archive generation and extraction to use built-in macOS utilities.
- Fixed installer may not exit after attempting to launch app.
- Fixed SSID detection not working in MacOS 15.
- Fixed moving app window is not smooth.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed app not showing an error when ctrld fails to execute.
- Fixed app is very sluggish with many split tunnel hostnames.
- Fixed split tunneling may not function correctly on MacOS 15.
- Fixed app crash when cancelling 'install helper' dialog.
- Fixed handling of 0.0.0.0 response from DNS server for split tunnel hostnames.
- Fixed proxy gateway port not displaying 'Auto' when edit is cancelled.
- Fixed a wrong translation in Ukrainian.
- Fixed firewall-on-boot may not function until the app starts.
- Fixed app may be quarantined by MacOS.

v2.10.15

Released: 2024/07/02
SHA-256: a204f64bdc1448c23c6b8b6c4609158455fd393131b74a4b25c4f0801aa3fd94

- Added support for private key passwords in OpenVPN custom configs.
- Added wsnet library + switched to vcpkg dependency management system.
- Added taskbar notification when the app needs attention.
- Added a limit of 50 hostname split tunnel entries to ensure stability.
- Improved best location selection to lean towards 10 Gbps servers.
- Improved OpenVPN and WireGuard anti-censorship.
- Improved internal error handling.
- Improved IPC message passing to adhere to best practices.
- Improved helper upgrade flow.
- Improved retry efficiency for requests that are blocked [wsnet].
- Improved custom DNS to not use ctrld if custom DNS is set to an IPv4 address.
- Improved conditions for network connectivity detection.
- Improved installer robustness in error situations.
- Improved failover retry on WireGuard.
- Improved UI header transparency and color.
- Improved stability of DNS resolution for hostnames when using split tunneling.
- Improved UX of the protocol/port line when protocol selection is not available.
- Improved the look and translations on the Emergency Connect screen.
- Improved handling of custom configs with "dev tap", overriding automatically to "dev tun".
- Improved location search by allowing search by country code.
- Improved updating random hashed domains in a timely manner.
- Improved operation in Lockdown Mode by removing IKEv2 where applicable, or displaying a meaningful error.
- Improved Polish translations.
- Improved custom config credential prompt.
- Improved IP display to "---.---.---.---" if unable to get local IP, instead of "N/A".
- Improved emergency connect to always connect with the more secure algorithms.
- Improved LZMA dependency management.
- Improved exponential back-off algorithm for pings to determine failed nodes.
- Fixed tooltip not displaying when mouse hovers over protocol line for a custom config.
- Fixed app crash if app exits during startup.
- Fixed MacOS 11 bug, unable to open app after installing.
- Fixed WireGuard takes too long to connect and tunnel tests are randomly slow.
- Fixed not adding the windscribe group in the helper.
- Fixed Mac pid checking vulnerability.
- Fixed crash when using custom configs.
- Fixed a scenario where IKEv2 would be attempted in Lockdown Mode.
- Fixed Free Data usage in app doesn't update.
- Fixed failed assertion in log for EmailItem.
- Fixed Secure Hotspot password not masked in UI.
- Fixed serverlist API country_override parameter doesn't enable Circumvent Censorship on first app launch.
- Fixed ignore country override when connected to a VPN.
- Fixed right clicking on login screen may show context menu away from the widget.
- Fixed custom config stays connected if folder is removed.
- Fixed getting SSID from MacOS 14.4 since it no longer reports it via scutil.
- Fixed various compile warnings introduced in 2.10.x.
- Fixed DNS servers in the wsnet library not updating on the client connection/disconnection events.
- Fixed protocol selector should not be available in external config mode.
- Fixed selected location not reset after removing custom config folder.
- Fixed another display issue and crash in custom config credential prompt.
- Fixed display issue and crash in custom config credential prompt.
- Fixed anti-censorship flag (TLS stuffing) does not work for server API.
- Removed MAC spoofing feature if using MacOS 14.4 or later.
- Updated ctrld dependency to 1.3.7.
- Updated README.md to indicate usage of Xcode 14.2.
- Updated dependencies, c-ares to 1.25.0 and boost to 1.84.0.
- Updated README.md file (build instructions).

v2.10.14 (Beta)

Released: 2024/06/25
SHA-256: 236f93a5196ba5f8ff05ad7e7f16fe8ea471bf543821f7faa250465d317a51fe

- Improved best location selection to lean towards 10 Gbps servers.

v2.10.12 (Beta)

Released: 2024/06/17
SHA-256: 0899cd1ec4ed0e64f95753c4107660309f54b82612be319213fb05ed624d1a8c

- Improved OpenVPN and WireGuard anti-censorship.
- Improved wsnet to use TLS padding when anti-censorship is enabled.
- Fixed wsnet thread synchronization issue that could cause a crash.

v2.10.11 (Alpha)

Released: 2024/06/05
SHA-256: 765783f3d1dfb55c9132102453f373778070aff79f9f78aa77b0c1a508e43dae

- Improved internal error handling.
- Improved limit of 50 split tunnel entries to only apply to hostnames.
- Improved IPC message passing to adhere to best practices.
- Improved helper upgrade flow.
- Fixed tooltip not displaying when mouse hovers over protocol line for a custom config.
- Fixed app crash if app exits during startup.
- Fixed wsnet bug sometimes causing the library to freeze.
- Fixed MacOS 11 bug, unable to open app after installing.
- Fixed Wireguard takes too long to connect and tunnel tests are randomly slow.
- Fixed not adding the windscribe group in the helper.
- Fixed Mac pid checking vulnerability.
- Updated ctrld dependency to 1.3.7.

v2.10.8 (Alpha)

Released: 2024/04/08
SHA-256: d8cd97ba4d170eb87b2d5fb433c557a32b1cc82fbecc6d522a83130fc1eaba80

- Fixed anti-censorship flag (TLS stuffing) does not work for server API.

v2.10.6 (Alpha)

Released: 2024/04/01
SHA-256: 209ee0a4992a9568bce7480b5f2672f9257a11b29f247732b1a72f575b632861

- Added a limit of 50 split tunnel entries to ensure stability.
- Improved retry efficiency for requests that are blocked [wsnet].
- Improved custom DNS to not use ctrld if custom DNS is set to an IPv4 address.
- Improved conditions for network connectivity detection.
- Improved installer robustness in error situations.
- Fixed crash when using custom configs.
- Fixed a scenario where IKEv2 would be attempted in Lockdown Mode.
- Fixed callback may not be called on error [wsnet].

v2.10.5 (Alpha)

Released: 2024/03/19
SHA-256: 2f5e58b0bbd0c4062b5a45a1f66e83612badae5741fe01e5320eecab5ceac112

- Added support for private key passwords in OpenVPN custom configs.
- Added the user-agent request header to all HTTP-requests [wsnet].
- Added new API endpoints needed for mobile [wsnet].
- Improved failover retry on WireGuard.
- Improved UI header transparency and color.
- Improved stability of DNS resolution for hostnames when using split tunneling.
- Improved UX of the protocol/port line when protocol selection is not available.
- Improved the look and translations on the Emergency Connect screen.
- Improved handling of custom configs with "dev tap", overriding automatically to "dev tun".
- Improved location search by allowing search by country code.
- Improved updating random hashed domains in a timely manner.
- Improved operation in Lockdown Mode by removing IKEv2 where applicable, or displaying a meaningful error.
- Fixed getting SSID from MacOS 14.4 since it no longer reports it via scutil.
- Fixed various compile warnings introduced in 2.10.x.
- Fixed DNS servers in the wsnet library not updating on the client connection/disconnection events.
- Fixed protocol selector should not be available in external config mode.
- Fixed wsnet versioning to be the same as the client application [wsnet].
- Fixed selected location not reset after removing custom config folder.
- Fixed another display issue and crash in custom config credential prompt.
- Fixed display issue and crash in custom config credential prompt.
- Removed MAC spoofing feature if using MacOS 14.4 or later.
- Updated ctrld dependency to 1.3.5.
- Updated README.md to indicate usage of Xcode 14.2.

v2.10.2 (Alpha)

Released: 2024/02/29
SHA-256: 30af20f4e43d2413123ea665b3a75dfafe5ce85450a00a7532b3988ff6e9e681

- Added wsnet library + switched to vcpkg dependency management system.
- Added taskbar notification when the app needs attention.
- Improved anti-censorship measures in WireGuard and OpenSSL.
- Improved Polish translations.
- Improved secrets organization in the wsnet library.
- Improved custom config credential prompt.
- Improved IP display to "---.---.---.---" if unable to get local IP, instead of "N/A".
- Improved emergency connect to always connect with the more secure algorithms.
- Improved LZMA dependency management.
- Improved exponential back-off algorithm for pings to determine failed nodes.
- Fixed Free Data usage in app doesn't update.
- Fixed some bugs in the wsnet library regarding mutlithreading/deadlocks.
- Fixed failed assertion in log for EmailItem.
- Fixed advanced parameter ws-use-icmp-pings ignored by app.
- Fixed Secure Hotspot password not masked in UI.
- Fixed serverlist API country_override parameter doesn't enable Circumvent Censorship on first app launch.
- Fixed ignore country override when connected to a VPN.
- Fixed Help screen to only show human support link for Pro accounts, and update descriptions.
- Fixed right clicking on login screen may show context menu away from the widget.
- Fixed custom config stays connected if folder is removed.
- Updated dependencies, c-ares to 1.25.0 and boost to 1.84.0.
- Updated README.md file (build instructions).

v2.9.9

Released: 2024/02/20
SHA-256: 683093d718680f1cb8b5fe0c4ec14fd1fdad357c9a9a46438feeb19331ffb185

- Added feature to export/import preferences to/from JSON file.
- Added password reveal/hide button for main login.
- Added 'status' command to the CLI.
- Added advanced parameter for specifying specific wireguard server.
- Improved anti-censorship measures in WireGuard and OpenVPN.
- Improved labels and descriptions in preferences to match the mobile app.
- Improved debug log feature to include the installer log.
- Improved installer to support keyboard shortcuts (ESC/Enter/etc.).
- Fixed WireGuard anti-censorship.
- Fixed app may become unresponsive when using tray locations menu.
- Fixed transition to 2FA screen when logging in.
- Fixed importing/exporting preferences closes the app window if docked.
- Fixed banned/disabled message not showing during login.
- Fixed update screen may not be clickable after an alert is shown.
- Fixed reveal password icon may be slightly cut off at certain scaling.
- Fixed pressing Login from external config mode causes UI to not display.
- Fixed returning to login screen does not set focus to username field.
- Fixed user is forcefully logged out on some server errors.
- Fixed imported split tunneling settings not reflecting in the GUI until after app restart.
- Fixed right-click also triggering Static IP link.
- Fixed various minor UX issues on login screen and preferences.
- Fixed hard-to-read 10 Gbps location icon.
- Fixed possible crash during app exit.
- Fixed advanced parameter file location differs between Guinea Pig vs Beta/Release builds.
- Fixed misdetection of TCP error during OpenVPN connection.
- Fixed installer log reordering in merge log.
- Fixed escaping of the OpenVPN password.
- Fixed incorrect translation of 'Quit' in French translation.
- Fixed in-app update to 2.9.2 by reverting change for deduplicating libraries in installer.
- Fixed ARM installer error that is a regression after LZMA migration.
- Fixed path reference with wrong case which breaks with case-sensitive APFS.
- Removed unnecessary threads running on helper service.
- Removed misleading logs indicating errors when it's benign.
- Removed unnecessary parameters for server list request API call.
- Updated boost, c-ares, and lzma dependencies.
- Updated ctrld dependency to 1.3.3.

v2.9.7 (Beta)

Released: 2024/02/09
SHA-256: 854b0fb74f0bfd58a274529b4a8fb913c9099f6daf437962b72531d046418dba

- Improved anti-censorship measures.
- Fixed exporting preferences closes the app window if docked.

v2.9.6 (Alpha)

Released: 2024/02/05
SHA-256: 879cae5d21443d073a7098cd78f276541f202fd761cac8e7c1b04b13301fe798

- Improved anti-censorship measures in WireGuard and OpenVPN.
- Fixed update screen may not be clickable after an alert is shown.
- Fixed reveal password icon may be slightly cut off at certain scaling.
- Fixed pressing Login from external config mode causes UI to not display.
- Fixed returning to login screen does not set focus to username field.
- Fixed user is forcefully logged out on some server errors.

v2.9.4 (Alpha)

Released: 2024/01/26
SHA-256: d0954c76dafdf36429ae7e3bba6584d40b141a6c6486c25c81e6c7b3cc95a21a

- Added password reveal/hide button for main login.
- Improved UX for the export/import preferences feature and filter irrelevant preferences when importing.
- Fixed WireGuard anti-censorship.
- Fixed imported split tunneling settings not reflecting in the GUI until after app restart.
- Fixed right-click also triggering Static IP link.
- Fixed various minor UX issues on login screen and preferences.
- Fixed hard-to-read 10 Gbps location icon.
- Fixed possible crash during app exit.
- Fixed in-app update failure by reverting change for deduplicating libraries in installer.
- Removed unnecessary threads running on helper service.
- Removed changes causing credential issues with OpenVPN custom config.
- Updated ctrld dependency to 1.3.3.

v2.9.2 (Alpha)

Released: 2024/01/11
SHA-256: 18c16c3fcaa01d7cf7382d09b8c76a3bcb20c482cbed600644624a685e1a5571

- Added feature to export/import preferences to/from JSON file.
- Added feature to support custom OpenVPN configs requiring a user name and password.
- Added 'status' command to the CLI.
- Added special logging category to the client log containing random hash code of the given connection.
- Added advanced parameter for specifying specific wireguard server.
- Improved labels and descriptions in preferences to match the mobile app.
- Improved debug log feature to include the installer log.
- Improved installer to support keyboard shortcuts (ESC/Enter/etc.).
- Fixed incorrect translation of 'Quit' in French translation.
- Fixed advanced parameter file location differs between Guinea Pig vs Beta/Release builds.
- Fixed misdetection of TCP error during OpenVPN connection.
- Fixed path reference with incorrect case which breaks with case-sensitive APFS.
- Fixed duplicate frameworks bloating installer size.
- Removed misleading logs indicating errors when it's benign.
- Removed unnecessary parameters for server list request API call.
- Updated boost, c-ares, and lzma dependencies.

v2.8.6

Released: 2023/12/14
SHA-256: 20b57229c9c336ab9d2b66d48931f4cffae2e62134c738c4cd2beefcd79ba0a8

- Added machine-generated translations for Chinese (Traditional), Indonesian, Italian, Japanese, Korean, Persian/Farsi, Polish, Portuguese, Turkish, Ukrainian, and Vietnamese.
- Added language localization to the installer.
- Added minimize and close-to-tray feature.
- Added advanced parameter to control server list (locations) functionality in censored countries.
- Improved anti-censorship feature. Feature automatically enabled for first-run users in censored countries.
- Improved the appearance of the sign out button.
- Improved error message when the connected DNS utility (ctrld) fails to start.
- Improved uninstall. Helper and CLI symlink are removed on OS reboot if the app has been uninstalled.
- Improved app and installer main icon.
- Improved installer to unify it with the Windows installer.
- Improved the connection mode description in preferences.
- Improved in-app upgrade message to indicate the update will be downloaded before terminating connections.
- Improved firewall functionality while using split tunneling.
- Improved build instructions in the README.
- Fixed IP does not change on GUI when using inclusive split tunnel.
- Fixed (potentially) Air Drop, Handoff, Airplay and other local Mac sharing features are partially functional or blocked with Allow LAN turned on.
- Fixed MAC spoofing to ensure we do not undo spoofs that did not originate from us.
- Fixed symlink for windscribe-cli isn't created.
- Fixed debug log to more clearly indicate that a custom dns is being used.
- Fixed double-right-clicking on the IP address makes it blurry on the main screen.
- Fixed top of password dots on login screen are clipped.
- Fixed UI 'weirdness' on the login screen when secure hotspot or proxy gateway feature is enabled and a SSL-error occurs.
- Fixed ESC text is misaligned with the close button in preferences.
- Fixed incorrect padding in 'out of data' screen.
- Fixed load indicator for bottom-most location is slightly clipped.
- Fixed clicking the blog link in the About menu doesn't do anything.
- Fixed pressing Cmd+Q results in the exit prompt showing, but the app exiting immediately anyway.
- Fixed drop-down menus can be resized or moved.
- Fixed installer main window can be resized.
- Fixed misleading error message displayed during first time use of MAC Spoofing feature.
- Fixed special user account for helper is displayed.
- Fixed reconnect not triggered when OpenVPN reports a tunnel connectivity failure.
- Fixed search icon on locations screen may overlap the All icon.
- Fixed UI issue when the hotspot feature is enabled and a SSL error occurs.
- Fixed app may not reconnect after Internet is restored when using OpenVPN.
- Fixed app gets stuck on the logging in screen after accepting the 'ignore SSL errors' prompt.
- Fixed split tunneling rules not reapplied if firewall state is toggled.
- Fixed in-app update fails when updating from 2.7.
- Fixed using the dock menu and clicking "Quit" causes the app to crash.
- Fixed split tunneling description suggests app supports per-app split tunneling.
- Fixed some text in preferences not matching with the mobile app.
- Fixed auto-connect not triggering when reconnecting to the same network.
- Fixed using the dock menu and clicking "Quit" causes the app to crash.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues when anti-abuse is triggered.
- Fixed UI connection state may stick at 'connecting' when disconnecting and connecting to a different location rapidly.
- Fixed bottom information bar on connect screen is not displayed after upgrade screen is dismissed.
- Fixed firewall does not disable on failed connection to non-existent location.
- Fixed opening locations drop down when prompted to save preferred protocol causes errant UI behavior or may crash the app.
- Fixed UI screen transition issues (UI may freeze) when account is expired or anti-abuse is triggered.
- Fixed firewall not blocking traffic while disconnected in split inclusive mode.
- Fixed 'OK' text in installer is not centered underneath the checkmark button for some languages.
- Fixed wireguard binary contains debug symbols.
- Updated app dependencies (cURL/OpenSSL/OpenVPN etc.) to latest available version.
- Updated connected DNS utility (ctrld) to v1.3.2.

v2.8.5 (Beta)

Released: 2023/12/07
SHA-256: 552c0bb165effc7d6bf85fbb7793152ea45b09eade3744ab849a22b577fda1b9

- Fixed some text in preferences not matching with the mobile app.
- Fixed auto-connect not triggering when reconnecting to the same network.
- Fixed ctrld binary, used for custom DNS, was not marked executable.

v2.8.4 (Alpha)

Released: 2023/12/01
SHA-256: 98022ebcd0769de69c2d4d41531ae184f7a8f6e9413a56399a3f316a8758448c

- Improved anti-censorship feature. Feature automatically enabled for first-run users in censored countries.
- Fixed using the dock menu and clicking "Quit" causes the app to crash.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues when anti-abuse is triggered.
- Fixed UI connection state may stick at 'connecting' when disconnecting and connecting to a different location rapidly.
- Fixed bottom information bar on connect screen is not displayed after upgrade screen is dismissed.
- Fixed firewall does not disable on failed connection to non-existent location.
- Fixed opening locations drop down when prompted to save preferred protocol causes errant UI behavior or may crash the app.
- Fixed UI issue where search tab may overlay other tabs.
- Fixed UI screen transition issues (UI may freeze) when account is expired or anti-abuse is triggered.
- Fixed firewall not blocking traffic while disconnected in split inclusive mode.
- Fixed 'OK' text in installer is not centered underneath the checkmark button for some languages.
- Fixed wireguard binary contains debug symbols.
- Updated to OpenVPN 2.6.8.

v2.8.2 (Alpha)

Released: 2023/11/24
SHA-256: e64cf32be745d74d935e390098975bbb194c28b287b7936742efa51a92ca73ad

- Added advanced parameter to control server list (locations) functionality in censored countries.
- Improved the appearance of the sign out button.
- Improved error message when ctrld (custom DNS) fails to start.
- Improved build instructions in the README.
- Fixed reconnect not triggered when OpenVPN reports a tunnel connectivity failure.
- Fixed search icon on locations screen may overlap the All icon.
- Fixed UI issue when the hotspot feature is enabled and a SSL error occurs.
- Fixed app may not reconnect after Internet is restored when using OpenVPN.
- Fixed app gets stuck on the logging in screen after accepting the 'ignore SSL errors' prompt.
- Fixed split tunneling rules not reapplied if firewall state is toggled.
- Fixed symlink for windscribe-cli isn't created.
- Fixed in-app update fails when updating from 2.7.
- Fixed using the dock menu and clicking "Quit" causes the app to crash.
- Fixed split tunneling description suggests app supports per-app split tunneling.
- Upgraded app dependencies to latest available version.

v2.8.1 (Alpha)

Released: 2023/11/08
SHA-256: ce41cbc26656d6623db06cb6f50c4596a3ba4aa7801691ca8d564aecdd6a30f5

- Added machine-generated translations for Chinese (Traditional), Indonesian, Italian, Japanese, Korean, Persian/Farsi, Polish, Portuguese, Turkish, Ukrainian, and Vietnamese.
- Added language localization to the installer.
- Added minimize and close-to-tray feature.
- Improved uninstall. Helper and CLI symlink are removed on OS reboot if the app has been uninstalled.
- Improved app and installer main icon.
- Improved installer to unify it with the Windows installer.
- Improved the connection mode description in preferences.
- Improved in-app upgrade message to indicate the update will be downloaded before terminating connections.
- Improved firewall functionality while using split tunneling.
- Fixed IP does not change on GUI when using inclusive split tunnel.
- Fixed (potentially) Air Drop, Handoff, Airplay and other local Mac sharing features are partially functional or blocked with Allow LAN turned on.
- Fixed MAC spoofing to ensure we do not undo spoofs that did not originate from us.
- Fixed symlink for windscribe-cli isn't created.
- Fixed debug log to more clearly indicate that a custom dns is being used.
- Fixed double-right-clicking on the IP address makes it blurry on the main screen.
- Fixed top of password dots on login screen are clipped.
- Fixed UI 'weirdness' on the login screen when secure hotspot or proxy gateway feature is enabled and a SSL-error occurs.
- Fixed ESC text is misaligned with the close button in preferences.
- Fixed incorrect padding in 'out of data' screen.
- Fixed load indicator for bottom-most location is slightly clipped.
- Fixed clicking the blog link in the About menu doesn't do anything.
- Fixed pressing Cmd+Q results in the exit prompt showing, but the app exiting immediately anyway.
- Fixed drop-down menus can be resized or moved.
- Fixed installer main window can be resized.
- Fixed misleading error message displayed during first time use of MAC Spoofing feature.
- Fixed special user account for helper is displayed.
- Upgraded bundled ctrld utility to v1.3.1.

v2.7.14

Released: 2023/10/23
SHA-256: e7e5d7a08699a0f2c9a0b9e792f824c9497b54901d88ff9c38cf9418a5568277

- Added anti-censorship toggle in preferences.
- Added anti-censorship feature: WireGuard UDP stuffing.
- Added anti-censorship feature: use domain fronting via CDN for API requests.
- Added anti-censorship feature: OpenVPN TCP split-reset, UDP stuffing, Stunnel extra padding.
- Added anti-censorship feature: use extra TLS padding for fallback API requests.
- Added translations for Arabic, Czech, French, German, Hindi, Russian, Simplified Chinese, and Spanish.
- Added an icon on the main screen to indicate anti-censorship mode is enabled.
- Added new in-house Stealth/Wstunnel application.
- Added a small loading spinner to some operations which may take a long time.
- Added feature to remember last locations tab on exit and default to that tab on startup.
- Added support for DNS-over-HTTPS (DoH) and split DNS to the 'Connected DNS' feature.
- Added custom alert screens, replacing the native OS message boxes.
- Added icon on connect screen indicating if connection is auto, manual, or network preferred protocol.
- Added new logout and quit screens.
- Improved latency (ping) algorithm to reduce ping frequency, especially during app startup.
- Improved installer icons.
- Fixed DNS failures with firewall enabled on macOS 14 Sonoma.
- Fixed Stealth/Wstunnel sometimes can't connect.
- Fixed app may open locations screen to a random tab.
- Fixed "All protocols failed" prompt doesn't show.
- Fixed LAN-hosted DNS server cannot be accessed when using a custom OpenVPN config.
- Fixed OpenVPN not using custom DNS.
- Fixed spinner animation on the ROBERT page continues after the website has already been opened.
- Fixed Logout/Quit screen UI bugs.
- Fixed Manage ROBERT rules link click does nothing.
- Fixed UI overlap and alignment issues.
- Fixed loading spinner in Manage Account preference slows down.
- Fixed access to server IP to be only allowed for Windscribe & system apps.
- Fixed incorrect error message in the DNS domain screen when a domain name is not valid.
- Fixed WireGuard may not recover correctly in manual mode.
- Fixed OpenVPN UDP and TCP may not work with certain commented out Advanced Parameters.
- Fixed executable signature checking mechanism disabled in the helper and CLI.
- Fixed app may become non-responsive and eventually crash.
- Fixed app to appear on the active virtual desktop when user clicks either the menubar icon or dock icon.
- Fixed firewall disabled on computer startup when firewall mode set to Always On.
- Fixed validation of the domains entered by the user.
- Fixed some user interface transitions involving the "SSL error" alert.
- Fixed split tunnel hostname and IP validation errors are unclear.
- Fixed firewall's enabled state not restored if it was enabled when the Windscribe firewall was turned on.
- Fixed window shadow incorrectly sized on logout/exit screens.
- Fixed login screen height may be truncated.
- Fixed alert screen may overlap other screens (e.g. news feed, protocol change).
- Fixed notifications are missing after marking all as read, leaving the notifications screen, and returning to it.
- Fixed view/send log functionality to truncate the log if it is too large to view/send.
- Fixed firewall settings updated repeatedly when pinging locations.
- Fixed installer built on Apple Silicon crashes on launch.
- Fixed app update takes a long time if done while connected.
- Fixed protocol badge not immediately updated on network changes.
- Fixed app removes user's static IPv6 configuration and does not restore it.
- Fixed Air Drop, Handoff, Airplay and other local Mac sharing features are partially functional or blocked with Allow LAN turned on.
- Fixed helper holds installer executable hostage after installing app.
- Fixed always-on firewall bug causing app to hang on startup.
- Removed redundant signature verification method.
- Removed incorrect primary IP check when enabling the Allow LAN Traffic preference.
- Removed full directory paths from log to obscure user's PII.
- Removed timestamp from news feed items.
- Updated app to use server-supplied ping (latency) values.
- Updated app warnings and error messages.
- Updated to OpenVPN 2.6 and OpenSSL 3.

v2.7.12 (Beta)

Released: 2023/10/03
SHA-256: 5e0b65e8c7949d1dddde027e72c8f60f4ced3535268a873c366b9ee0011c8634

- Removed firewall patch introduced for macOS 14 Sonoma Beta.

v2.7.11 (Alpha)

Released: 2023/09/23
SHA-256: b9c594d4736e26cc31aca7f28bebaeafdb51c9a462907fcb4b787d9bd9e3772d

- Improved latency (ping) algorithm to reduce ping frequency, especially during app startup.
- Fixed LAN-hosted DNS server cannot be accessed when using a custom OpenVPN config.

v2.7.10 (Alpha)

Released: 2023/09/11
SHA-256: 2eaf1e0933ce38a713c8c8b5b5c675aa95463d01f7705bddb9cff57c3d4bb0b4

- Added anti-censorship feature: use domain fronting via CDN for API requests.
- Added new in-house Stealth/Wstunnel application.
- Fixed app may open locations screen to a random tab.
- Fixed "All protocols failed" prompt doesn't show.
- Fixed DNS failures with firewall enabled on macOS 14 Sonoma.
- Fixed Stealth/Wstunnel sometimes can't connect.

v2.7.9 (Alpha)

Released: 2023/08/10
SHA-256: 5f831e987e96ca5d4d2c824a03ab96337dbc52812a0d990c36754c4524106f98

- Added anti-censorship feature: OpenVPN TCP split-reset, UDP stuffing, Stunnel extra padding.
- Added anti-censorship feature: use extra TLS padding for fallback API requests.
- Added anti-censorship feature: WireGuard UDP stuffing.
- Added anti-censorship toggle in preferences.
- Added Czech language translation.
- Added an icon on the main screen to indicate anti-censorship mode is enabled.
- Fixed Logout/Quit screen UI bugs.
- Fixed Manage ROBERT rules link click does nothing.
- Fixed Russian translation.
- Fixed spinner animation on the ROBERT page continues after the website has already been opened.
- Removed timestamp from news feed items.

v2.7.6 (Alpha)

Released: 2023/06/20
SHA-256: d771d535f8484d75893088e5967fecc933e6a0d14644367b0fc1d1f02e352efe

- Fixed UI overlap and alignment issues.
- Fixed loading spinner in Manage Account preference slows down.
- Fixed access to server IP to be only allowed for Windscribe & system apps.
- Fixed incorrect error message in the DNS domain screen when a domain name is not valid.
- Fixed WireGuard may not recover correctly in manual mode.
- Fixed OpenVPN UDP and TCP may not work with certain commented out Advanced Parameters.
- Fixed executable signature checking mechanism disabled in the helper and CLI.
- Fixed app may become non-responsive and eventually crash.
- Fixed app to appear on the active virtual desktop when user clicks either the menubar icon or dock icon.
- Fixed firewall disabled on computer startup when firewall mode set to Always On.
- Removed incorrect primary IP check when enabling the Allow LAN Traffic preference.
- Removed full directory paths from log to obscure user's PII.

v2.7.5 (Alpha)

Released: 2023/06/01
SHA-256: e623e1cdaecb0f7478bc6a62c71304359c381508c43d98ad30efcb05c20b7ce4

- Added a small loading spinner to some operations which may take a long time.
- Added custom connected DNS placeholder text.
- Added feature to remember last locations tab on exit and default to that tab on startup.
- Fixed missing ?int=ws in the URI when making queries if user supplies DoH resolver that's on *.controld.com.
- Fixed validation of the domains entered by the user.
- Fixed transition to the initialization window to hide the general message window shadow.
- Fixed some user interface transitions involving the "SSL error" alert.
- Fixed missing port number for the CURLOPT_RESOLVE parameter.
- Fixed redundant updateFirewallSettings calls being made during pings.
- Fixed split tunnel hostname and IP validation errors are unclear.
- Fixed firewall's enabled state not restored if it was enabled when the Windscribe firewall was turned on.
- Fixed menubar icon not showing app on the current virtual desktop.
- Updated ctrld binary to v1.2.0.

v2.7.4 (Alpha)

Released: 2023/05/23
SHA-256: d2fc12b77309fce4c45b2a1fff1f755fed1f698b84327efc4fa497cfd13aa666

- Fixed installer built on Apple Silicon crashes on launch.
- Fixed app update takes a long time if done while connected.
- Fixed window shadow incorrectly sized on logout/exit screens.
- Fixed login screen height may be truncated.
- Fixed alert screen may overlap other screens (e.g. news feed, protocol change).
- Fixed notifications are missing after marking all as read, leaving the notifications screen, and returning to it.
- Fixed changing languages in app causes the news feed screen to become smaller.
- Fixed view/send log functionality to truncate the log if it is too large to view/send.
- Fixed firewall settings updated repeatedly when pinging locations.
- Removed redundant signature verification method.

v2.7.3 (Alpha)

Released: 2023/05/01

- Added machine-generated translations for Arabic, French, German, Hindi, Russian, Simplified Chinese, and Spanish.
- Added new logout and quit screens.
- Added support for DNS-over-HTTPS (DoH) and split DNS to the 'Connected DNS' feature.
- Added custom alert screens, replacing the native OS message boxes.
- Added icon on connect screen indicating if connection is auto, manual, or network preferred protocol.
- Fixed busy spinner displayed when exiting is not centered.
- Fixed ROBERT screen loading icon not antialiased.
- Fixed protocol badge not immediately updated on network changes.
- Fixed emergency connect feature not working.
- Fixed app crash during startup.
- Fixed python scripts to conform to the pep8 style guide.
- Fixed 'out of data' screen isn't vertically centered.
- Fixed preference items are sometimes expanded when they shouldn't be.
- Fixed app removes user's static IPv6 configuration and does not restore it.
- Fixed Air Drop, Handoff, Airplay and other local Mac sharing features are partially functional or blocked with Allow LAN turned on.
- Fixed helper holds installer executable hostage after installing app.
- Fixed always-on firewall bug causing app to hang on startup.
- Updated installer to use new icons.
- Updated app to use server-supplied ping (latency) values.
- Updated app warnings and error messages.
- Updated build system to use cmake for all projects.
- Updated to OpenVPN 2.6.1.
- Removed unnecessary code from when the UI and engine were separate executables.
- Removed use of OpenSSL 1.1.1.

v2.6.14

Released: 2023/03/27

- Fixed free accounts not pinging pro locations.
- Fixed upgrade widget not hidden when returning to login screen.
- Fixed 'out of data' screen isn't vertically centered.
- Fixed MAC address spoofing toggle state isn't saved.
- Fixed crash when reconnecting to different servers.

v2.6.12 (Alpha)

Released: 2023/03/13

- Added use of Encrypted Client Hello (ECH) as a fail-over mechanism to circumvent SNI filtering.
- Added all secrets to the domain generation algorithm library and removed them from the app code.
- Added OpenSSL 1.1.1t due to an OpenSSL security advisory.
- Added hover highlighting to the protocol change screen.
- Added a descriptive error message on the login screen when the user is disabled or rate-limited.
- Fixed crash may occur when switching protocol window modes.
- Fixed disconnecting a WireGuard connection while it is connecting may disconnect, then start connecting again once the WireGuard dynamic configuration has been acquired.
- Fixed a successful failover did not trigger the 'save preferred protocol' screen.
- Fixed server API request would never be processed by curl due to bug in curl libs 7.83/7.85.
- Fixed new notifications appear at the bottom of the News Feed screen.
- Fixed notification age label to display "Today" instead of "0 days ago" for new notifications.
- Fixed server API request pipeline to ensure requests are processed as quickly as possible.
- Fixed confirm email feature doesn't work.
- Fixed high CPU usage while idle.
- Fixed firewall to allow apps to reach the local interface address.
- Fixed firewall to always allow localhost (127.0.0.0/8 and ::1).
- Fixed out of place cancel button and overlapping entries in the change protocol screen.
- Fixed change protocol screen should not be available when using a custom config.
- Fixed WireGuard doesn't reconnect upon waking from sleep.
- Fixed manual-mode connections should not timeout.
- Fixed login screen overlay bugs.
- Fixed default notification message color, displayed when there are no notifications.
- Fixed protocols window expansion bug.
- Fixed potential app crash when exiting due to an OS restart.
- Fixed data counter appears in custom config mode.
- Fixed location latency checks (pings) displaying "-2" for many locations when connected.
- Fixed ON/OFF icon not centered on some display scale factors.
- Fixed "We've detected that your network settings may interfere with Windscribe" dialog displays multiple times.
- Fixed alignment of some icon and text widgets on the main app screen.
- Fixed 'App Internal DNS' preference description to indicate 'OS Default' may cause DNS leaks.
- Fixed location latency checks (pings) to only be performed when the app is disconnected.
- Fixed odd menu entry in macOS dock right-click popup menu.
- Fixed attempting to update the app using the installer causes the app to freeze and the installer to hang at 100%.
- Fixed DGA library not compatible with ARM-based Macs.
- Fixed domain generation algorithm library signature check.
- Fixed installer to allow helper downgrade.
- Fixed auto-connect on system launch does not work.
- Fixed potential app crash when performing an in-app upgrade.
- Fixed issues connecting with TCP-based protocols on macOS.
- Updated 'App Internal DNS' preference to default to Cloudflare.

v2.6.6 (Alpha)

Released: 2023/01/17

- Added user interface improvements to indicate the app is failing over to another protocol.
- Fixed potential app crash when verifying an IP's validity.
- Fixed failure to connect after reboot when Launch on Startup and Auto-Connect are enabled.
- Fixed Location/Favourites/Static Ip/Configured menus in top menu bar not working.

v2.6.5 (Alpha)

- Added IP/hostname split tunneling support on macOS BigSur and newer.
- Fixed app will use Preferred Protocol for a network even if it's disabled.
- Fixed HTTP/SOCKS Proxy Gateway setting to warn user the Allow LAN Traffic option must be enabled.
- Fixed privilege escalation vulnerability in usage of OpenVPN up/down directives.
- Fixed notice on the login screen when user is disabled or rate-limited.
- Fixed app to save a successful failover between program launches.
- Fixed error message when user tries logging in with their email address.
- Fixed preferences cache not cleared when doing a factory reset during install.
- Fixed privilege escalation vulnerabilities in communication mechanism between the app and helper.

v2.5.18

- Fixed potential app crash when the app is failing over to another protocol.

v2.5.17 (Beta)

- Fixed app crash when Mac sleeps on one network and wakes on a different network.
- Fixed potential app crash when reading saved WireGuard config data created by the v2.4 app.
- Fixed potential app crash when network online state changes.

v2.5.14 (Beta)

- Fixed split tunneling driver not being installed when upgrading from 2.4 or older.

v2.5.12 (Beta)

- Fixed failover not triggering on TLS/SSL connection error.
- Fixed locations menu appearing randomly.
- Fixed build-a-plan users cannot use their static IPs.

v2.5.11 (Beta)

- Added alternative earless main UI (Van Gogh mode).
- Added Preferred Protocol support to Network Options.
- Added ROBERT controls to Preferences.
- Added installer command-line parameter to prevent automatic app launch.
- Added login and logout functionality to the CLI app.
- Added 'factory reset' option to installer.
- Added sticky server list support to keep the altered server list in restricted regions.
- Added Auto Connect toggle to Connection Preferences.
- Added trigger to connect/disconnect when Network Whitelist/Auto Connect preferences are changed.
- Added loading indicator to ROBERT screen in Preferences.
- Added divider line above login/logout button in Preferences.
- Added Apple silicon (arm64) support.
- Updated Preferences UI.
- Updated notifications screen.
- Updated to Qt 6.3.
- Updated locations tray for better performance / cleaner code.
- Updated automatic connection mode to use WireGuard protocol by default.
- Fixed various routing/firewall issues.
- Fixed escape and enter keys not working in settings edit boxes.
- Fixed display scaling issues.
- Fixed incorrect app position during launch on multi-monitor setups.
- Fixed app giving incorrect latencies and best location.
- Fixed unnecessary spam in the debug log.
- Fixed mouse wheel issues in the notifications and preferences windows.
- Fixed app does not resize correctly when dragging app between different DPI displays.
- Fixed favorite locations lost after app update from some versions.
- Fixed news feed messages are the wrong width at some display scales.
- Fixed failure of connection to a location via CLI.
- Fixed port forwarding when using the WireGuard protocol.
- Fixed scrolling in news feed and preferences.
- Fixed detection for hanging OpenVPN/WireGuard processes when app starts.
- Fixed incorrect tooltip on login/logout button in Preferences.
- Fixed a number of user interface bugs when updating the app to a new version.
- Fixed notification read state not remembered if the user restarts/logs out of their PC before exiting the application.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed CLI app to return 0 on success, 1 on failure.
- Fixed disconnected notification showing incorrect bandwidth usage.
- Fixed preferences screen does not retain user selected height upon app re-launch.
- Fixed preferred protocol doesn't reconnect when Wi-Fi hopping.
- Fixed Manual Packet Size (MTU) and network proxy settings do not retain their values upon app re-launch.
- Fixed app does not remember last used location if system crashes or app is forcefully terminated.
- Fixed incorrect data remaining value in Accounts page for build-a-plan accounts with unlimited data.
- Fixed secure hotspot feature is available when network adapter doesn't support it.
- Fixed bottom information bar hidden when something connects to proxy/hotspot.
- Fixed signing into an expired account causes app to hang.
- Fixed the working connection setting isn't saved.
- Fixed TLS/SSL interception causes logout and crash.
- Fixed custom configs do not have DNS connectivity if internal DNS (RFC1918) is used.
- Fixed Proxy Gateway IP display goes blank when the proxy is connected to.
- Fixed a crash caused by a bug in the failover logic.
- Fixed helper installation fails when previous helper explicitly disabled in launch control.
- Fixed reconnect issue if the computer sleeps on one network and wakes on another.

v2.5.10 (Alpha)

- Fixed TLS/SSL interception causes logout and crash.
- Fixed custom configs do not have DNS connectivity if internal DNS (RFC1918) is used.
- Fixed Proxy Gateway IP display goes blank when the proxy is connected to.
- Fixed a crash caused by a bug in the failover logic.

v2.5.9 (Alpha)

- Fixed bottom information bar hidden when something connects to proxy/hotspot.
- Fixed signing into an expired account causes app to hang.
- Fixed the working connection setting isn't saved.
- Fixed settings synced immediately.

v2.5.8 (Alpha)

- Updated automatic connection mode to use WireGuard protocol by default.
- Fixed CLI app to return 0 on success, 1 on failure.
- Fixed disconnected notification showing incorrect bandwidth usage.
- Fixed some minor UI bugs.
- Fixed preferences screen does not retain user selected height upon app re-launch.
- Fixed preferred protocol doesn't reconnect when Wi-Fi hopping.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed Manual Packet Size (MTU) and network proxy settings do not retain their values upon app re-launch.
- Fixed app does not remember last used location if system crashes or app is forcefully terminated.
- Fixed incorrect data remaining value in Accounts page for build-a-plan accounts with unlimited data.
- Fixed helper installation fails when previous helper explicitly disabled in launch control.
- Fixed reconnect issue if the computer sleeps on one network and wakes on another.

v2.5.7 (Alpha)

- Added loading indicator to R.O.B.E.R.T. screen in Preferences.
- Added divider line above login/logout button in Preferences.
- Fixed incorrect tooltip on login/logout button in Preferences.
- Fixed a number of user interface bugs when updating the app to a new version.
- Fixed notification read state not remembered if the user restarts/logs out of their PC before exiting the application.
- Fixed RFC1918 traffic is routed over VPN tunnel.
- Fixed app crash after upgrade from 2.4 to 2.5.x when using IKEv2.

v2.5.6 (Alpha)

This is a major update! Things can be broken.

- Added alternative earless main UI (Van Gogh mode).
- Added Preferred Protocol support to Network Options.
- Added ROBERT controls to Preferences
- Added command-line parameter to skip TUN/TAP driver installation.
- Added command-line parameter to prevent automatic app launch in installer.
- Added login and logout functionality to the CLI app.
- Added log for any code assert statements that are triggered in a release build.
- Added 'factory reset' option to installer.
- Added sticky server list support to keep the altered server list in restricted regions.
- Added TUN/TAP automatic driver reinstallation if removed.
- Added advanced parameter ws-tunnel-test-no-error and allow ws-tunnel-test-attempts to be 0.
- Added trigger to connect/disconnect when Network Whitelist/Auto Connect preferences are changed.
- Added auto-connect toggle to Connection Preferences.
- Added native Apple ARM processor support and ported to Qt 6. Minimum macOS version now 10.14.
- Added debug data to log if firewall state was manipulated externally on macOS.
- Added Additional debug logging to macOS installer.
- Added macOS helper text file log (instead of syslog), in the same format as other logs.
- Added log merge between macOS helper and main program.
- Updated Preferences UI.
- Updated notifications screen.
- Updated to Qt 6.
- Updated locations tray for better performance / cleaner code.
- Updated to latest Wireguard (0.0.20220316) for macOS & Linux.
- Updated copyright dates updated in all macOS plists.
- Fixed GUI hang on macOS when app is connected and an in-app upgrade is performed.
- Fixed slow startup on macOS after initial install, upgrade, or reboot.
- Fixed missing macOS system tray icon.
- Fixed macOS installer install button text is not centered and button is not fully round.
- Fixed no connectivity after waking from sleep with WireGuard on macOS.
- Fixed WireGuard service rejects custom config file with no PSK.
- Fixed various routing/firewall issues
- Fixed some tunnel test parameter bugs
- Fixed escape and enter keys not working in settings edit boxes.
- Fixed display scaling issues.
- Fixed incorrect app position during launch on multi-monitor setups.
- Fixed app giving incorrect latencies and best location.
- Fixed unnecessary spam in the debug log.
- Fixed hostname-level exclusive split tunneling.
- Fixed WireGuard connection stalls if Internet access is interrupted for more than 3 minutes.
- Fixed incorrect DPI detection
- Fixed app does not resize correctly when dragging app between different DPI displays.
- Fixed start minimized preference.
- Fixed favorite locations lost after app update from some versions.
- Fixed news feed messages are the wrong width at some display scales.
- Fixed failure of connection to a location via CLI.
- Fixed port forwarding when using the WireGuard protocol.
- Fixed scrolling in news feed and preferences.
- Fixed detection for hanging OpenVPN/Wireguard processes when app starts.
- Fixed installation failure if TAP adapter install fails.
- Fixed DLL search path for the installer to only look in the system path.
- Fixed WireGuard tunnel shutdown if client app terminates unexpectedly (crashes).
- Removed use of the old method in the ServerLocations API.

v2.4.11

- Update 10Gbps badge and location load when best location changes
- Added new flags
- UDP fails to connect on Mac fixed
- Fixed crash on bad server locations list
- Fixed OpenVPN infinite reconnection loop in some cases
- Dynamic Wireguard Interface Allocation Support
- Privilege escalation vulnerability fixed
- Fixed cut off long favorites location names in the tray menu
- Fixed static IPs display issue in tray menu
- Standardized API interaction timers
- Fixed automatic firewall deactivation when account status changes to disabled
- Fixed protocol selection not immediately saved to disk
- Updated app icons in menu bar
- Fixed app crash on Emergency Connect.
- Increased service start wait time to 20 seconds.
- Refactored wireguard connection to avoid blocking engine thread
- Fetch session when app receives focus
- Fixed firewall silently enabling by itself in rare cases
- Misc bug fixes

v2.4.9 (Beta)

- Same as last Alpha release

v2.4.6 (Alpha)

- Fixed app crash on Emergency Connect.
- Increased service start wait time to 20 seconds.
- Refactored wireguard connection to avoid blocking engine thread
- Fetch session when app receives focus
- Fixed firewall silently enabling by itself in rare cases

v2.4.5 (Alpha)

- Fixed crash on bad server locations list
- Fixed OpenVPN infinite reconnection loop in some cases
- Dynamic Wireguard Interface Allocation Support
- Privilege escalation vulnerability fixed
- Fixed cut off long favorites location names in the tray menu
- Fixed static IPs display issue in tray menu
- Standardized API interaction timers
- Fixed automatic firewall deactivation when account status changes to disabled
- Fixed protocol selection not immediately saved to disk
- Updated app icons in menu bar

v2.4.2 (Alpha)

- Update 10Gbps badge and location load when best location changes
- Added new flags
- UDP fails to connect on Mac fixed
- Misc bug fixes

v2.3.16

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs
- Fixed hard crash in certain cases
- Fixed connect Info scaling issue
- Fixed system icon issues on Big Sur
- Fixed incorrect bandwidth used notification on MacOS fixed.
- Fixed Mac OS message boxes do not display spaces after periods
- Fixed GUI lock issue
- Fixed incorrect external IP
- Added "View Licenses" button to Debug Preferences menu
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log
- Fixed blur on IP
- Fixed helper reinstall edge case
- Added a dependency on the autoconnect state for the initial firewall state
- Keep the firewall state on update if autoconnect option is enabled
- Added installer debug log
- Updated wstunnel binary to v4
- Require elevated privilege to accept insecure custom config dir
- Removed device specific info from debug logs
- Fixed abnormal program self-termination after extended run time
- Fixed GUI crash edge case
- Open source app build improvements
- Reduced verbosity of debug log
- Fixed superuser validation on MacOS
- Fixed reconnect loop on MacOS Monterey
- Fixed MAC address spoofing on MacOS

v2.3.15 (Beta)

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs
- Fixed hard crash in certain cases
- Fixed connect Info scaling issue
- Fixed system icon issues on Big Sur
- Fixed incorrect bandwidth used notification on MacOS fixed.
- Fixed Mac OS message boxes do not display spaces after periods
- Fixed GUI lock issue
- Fixed incorrect external IP
- Added "View Licenses" button to Debug Preferences menu
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log
- Fixed blur on IP
- Fixed helper reinstall edge case
- Added a dependency on the autoconnect state for the initial firewall state
- Keep the firewall state on update if autoconnect option is enabled
- Added installer debug log
- Updated wstunnel binary to v4
- Require elevated privilege to accept insecure custom config dir
- Removed device specific info from debug logs
- Fixed abnormal program self-termination after extended run time
- Fixed GUI crash edge case
- Open source app build improvements
- Reduced verbosity of debug log
- Fixed superuser validation on MacOS
- Fixed reconnect loop on MacOS Monterey
- Fixed MAC address spoofing on MacOS

v2.3.11 (Alpha)

- Fixed GUI lock issue
- Fixed incorrect external IP
- Added "View Licenses" button to Debug Preferences menu
- Updated dependencies/libraries to latest versions
- Fixed svg flag error in log
- Fixed blur on IP
- Fixed helper reinstall edge case

v2.3.10 (Alpha)

- Improve task kill process for OpenVPN.
- Fix stealth protocol not working for some users
- Faster connection time via OpenVPN
- Better engine recovery process that doesn't cause subsequent crash on recovery
- Fixed assert in engine server API
- Fixed usage of local DNS server
- Always fetch ovpn server credentials and configs together
- Fixed runtime reinstallation of tap/wintun drivers
- Fixed app crash when resolution changes
- Prompt to repair hosts file permissions and reconnect
- Fixed blank message box displayed when custom config cannot be opened
- Fixed click event on Upgrade button bleeds through to Preferences screen.
- Fixed incorrect network statistics when disconnecting ikev2
- Added "Start minimized" option.
- Fixed custom configs sorting by latency
- Injected verify-x509-name into OpenVPN config
- Fixed privilege escalation vulnerability with custom OpenVPN configs
- Fixed hard crash in certain cases
- Fixed connect Info scaling issue
- Fixed system icon issues on Big Sur
- Fixed incorrect bandwidth used notification on MacOS fixed.
- Fixed Mac OS message boxes do not display spaces after periods

v2.03.3 (Beta)

- Added custom DNS server support
- Added meme support and ability to upload custom background images
- Added ability to blur IP via double click
- Added subtle shadows to main screen assets
- Fixed crash when hiding main windows when log viewer dialog is opened
- Fixed installer error if firewall is ON while disconnected
- Fixed crash on OS X Sierra (10.12)

v2.02.10

- Detection of the authorization error for IKEv2 made to be more specific
- Reduced debug log verbosity
- Emergency connect description updated

v2.02.9 (Alpha)

- Fixed inclusive split routing issue
- Removed useless messages from log
- Prevented keypress navigation to other locations from config-only mode.
- Fixed auto-hide of docked app on showing external OS dialogs
- Fixed negative remaining bytes issue
- Open newsfeed to the first unread message, if any
- Fixed sending of large debug logs
- Added Export Log button
- Don't terminate TCP sockets of processes that are not tunneled
- Set "TCP socket termination" option ON by default.
- Linked option "TCP socket termination" with closing sockets in split tunneling mode
- Secure hotspot fix for openVPN

v2.02.7 (Beta)

- Fixed Windscribe beta installer failure on macOS standard accounts
- Detect unsupported OS version, download legacy installer
- Remove helper from version 1 when installing 2.0
- Update installer position tweaks for future updates
- Fixed wonky trackpad scrolling on Big Sur
- Removed account tab from preferences in external config mode.
- Improvements to preferences and combobox menus.
- Fixed rare crash on Mac when using comboboxes and tooltips.
- UX improvements to location window.
- Fixed latency display always as bars on some screens.
- Fixed OVPN custom config issues with protocol names.
- Fixed custom config error message.
- Added SIGTERM signal processing for Mac.
- Fixed incorrect timestamps in service log.
- Finish all active connections on app start (Mac).
- Fixed the program hangs on the welcome screen on Mac when installed in the folder with spaces.
- Fixed Custom config does not change DNS server on MacOS.
- Fixed WireGuard on wake connect issue.
- Fixed Cmd+Q shortcut confirmation regression on Mac.

v2.02.3 (Alpha)

- Added location search.
- Improved domain name validation in GUI preferences.
- Fixed GUI and DPI scaling issues for API resolution in GUI preferences.
- Fixed network level split routing defaults
- Removed initialization timeout in GUI.
- Fixed Mac UI bug with static ips and custom configs ribbon.
- Recreate DNS-resolver when network state changes
- Fixed Hyper-V host network bridge detection.
- Fixed OVPN pipe-related deadlock issue
- Fixed refetch WG config after logout.
- Improved service logging, log merging and improved readability in GUI internal viewer.
- Added year to logs
- Fixed custom configs OVPN protocol detection.
- Fixed Localhost blocked in inclusive Split Routing mode
- Fixed inclusive split tunneling breaks BattleNet agent
- Fixed default cipher problem with OVPN custom configs.
- Fixed FUI crash on Mac when opening or closing laptop lid in some cases
- Fixed reconnect on external IKEv2 failure, fixed DNS server list size issue
- Hide "Connection settings" in external config mode.
- Fixed EXE selection for a WoW64 GUI process.
- Updated split tunneling driver for Win7 support.
- Removed sensitive info from logs.
- Fixed app lock up when the file explorer is shown
- Fixed locations ribbon UI regression.
- Fixed PingTest log spam.
- Added workaround for openvpn error "write_wintun(): head/tail value is over capacity".
- Check correctness of IP/CIDR combination in GUI.
- Updated "ESC" button/icon in the installer.

v2.02.1 (Alpha)

- Extended tray menu to show Static IPs, custom configs and favorites
- Split tunneling driver updated for Windows 8 support
- Added show flags preference
- Fixed WireGuard custom config issues with no PSK and ipv6
- Added support for Unicode SSIDs
- Formatted WireGuard output to be readable
- Attempted to fix not displaying static ip device name
- Service error 29 removed from service
- Prevent blank manual IP in API resolution
- Fixed Win32 service WireGuard issues and added crashdump support for the service
- By default use udp protocol for custom OVPN configs if no proto defined
- Fixed blinking cursor issue
- Fixed favorites not being saved on shutdown
- Show static ip as sublocation name
- Refactored TAP-adapter detection for split tunneling
- Fixed split tunneling being disabled with WG

v2.01.3 (Beta)

Bug Fixes:
-----------------------
- Fixed possible IP leak on OS start
- Fixed IP leak during auto-upgrade process
- Fixed OS default DNS problem after reboot on Mac.
- Fixed Location tab background color
- Fixed incorrect UI placement in Docked mode on Mac
- Fixed notification logic
- Start minimized after reboot if minimize to tray option is on.
- Disable firewall in auto mode for custom configs that don't redirect gateway
- Allow AirDrop when firewall is enabled with LAN bypass on
- Stunnel updated to latest version 5.57
- Protobuf updated to latest version 3.14.0
- New connecting animation
- Fixed Firewall frozen in incorrect state across sign out/in
- Fixed GUI crash on Mac when opening or closing laptop lid in some cases
- Attempt to fix IPC server listen error

v2.01.1 (Alpha)

Bug Fixes:
-----------------------
- Fixed possible IP leak on OS start
- Fixed IP leak during auto-upgrade process
- Fixed OS default DNS problem after reboot on Mac.
- Fixed Location tab background color
- Fixed incorrect UI placement in Docked mode on Mac
- Fixed notification logic
- Start minimized after reboot if minimize to tray option is on.
- Disable firewall in auto mode for custom configs that don't redirect gateway
- Allow AirDrop when firewall is enabled with LAN bypass on
- Stunnel updated to latest version 5.57
- Protobuf updated to latest version 3.14.0

v2.00.42 (Beta)

New Features:
-----------------------
- New design
- Split tunneling
- WireGuard support
- Network awareness
- MAC spoofing
- Custom config support (WireGuard and OpenVPN)
- Packet size adjustment
- Tabbed location list

Bug Fixes:
-----------------------
- Too many to list

v2.00.39 (Alpha)

New Features:
-----------------------
- New design
- Split tunneling
- WireGuard support
- Network awareness
- MAC spoofing
- Custom config support (WireGuard and OpenVPN)
- Packet size adjustment
- Tabbed location list

Bug Fixes:
-----------------------
- Too many to list

v2.00.38 (Alpha)

Test auto-update functionality from 1.83 to 2.0

v1.83.22

New Features:
-----------------------
- Show Static IP device ID in the UI
- Ability to select DNS server used by the app while disconnected

Bug Fixes:
-----------------------
- Build-a-Plan locations sometimes not showing correctly
- Prevent WindscribeService crash if DNS settings change
- Custom configs can now be connected to while expired
- Bypass anti-abuse check if Build-a-Plan is activated
- Fixed SSL CA bundle issue

v1.83.18

New Features:
-----------------------
- WebSocket stealth protocol support
- Location list sorting methods: Geography, alphabet, latency
- Build-a-Plan support (future feature)
- Static IP + port forwarding support (future feature)
- Custom OpenVPN config support

Bug Fixes:
-----------------------
- Stuck on login in China
- App prevents graceful Windows shutdown
- App freezes in “Windscribe is shutting down” state
- Bad IKEv2 connection causes client to lock up
- Don’t disable server location on ping test failure

v1.83.17 (Beta)

No changelog

v1.83.8 (Beta)

No changelog

v1.82.17

New Features:
-----------------------
- Favorite locations
- Setting to show actual latency instead of signal bars

Bug Fixes:
-----------------------
- IKEv2 traffic not counted on MacOS
- NULL DACL vulnerability (CVE-2018–1133)
- “Better” Best Location detection
- Default to AES-256-GCM cipher in OpenVPN
- Don’t make HTTP requests when disconnected to reduce strain on the API
- Redact sensitive info from the debug log

v1.82.13 (Beta)

No changelog

v1.82.7 (Beta)

No changelog

v1.81.43

New Features:
-----------------------
- IKEv2 protocol support (manual and automatic mode)
- Emergency Connect / Secure Login

Bug Fixes:
-----------------------
- Wifi-sharing not working after wakeup
- Forcibly close all TCP sockets after tunnel up
- Don’t forcibly disconnect if currently connected node is missing from the server list
- Language detection defaults to English instead of Arabic
- Reinstall/enable WAN miniport adapters if missing/disabled
- Adjusted DPI to work with multiple scale factors
- Added “Disconnecting” state
- Eliminated redundant API calls
- Reduced the server ping frequency
- Updated OpenVPN binaries to latest version
- Don't auto-enable the firewall (in Automatic mode) on computer start up if auto-connect is false
- Simplified installer flow + additional “custom install” options
- Async DNS resolver
- Adjusted node selection algorithm to favor lower latency nodes
- Forcibly expand certain locations when the country name is clicked
- Detect if LAN range is RFC-1918 complaint

v1.81.40 (Beta)

No changelog

v1.81.36 (Beta)

No changelog

v1.81.30 (Beta)

No changelog

v1.81.14 (Beta)

No changelog

v1.80.30

New Features:
-----------------------
- LAN proxy gateway — https://windscribe.com/features/proxy-gateway
- Secure Hotspot (Experimental) — https://windscribe.com/features/secure-hotspot
- Variable location drawer height
- Auto login after signup
- Ability to choose NDIS5 TAP driver
- Upgrade to OpenVPN 2.4.x with 2.3.x fallback
- Service notifications
- Show Pro data-centers to free users
- Location latency tool-tips added to signal bars

Bug Fixes:
-----------------------
- Always on firewall not working on OS boot on some machines
- Application crashes after connection attempts are exceeded with “minimize to tray” option checked
- Application freeze with firewall ON requires reboot
- API calls not made if app starts with no Internet connectivity
- Custom installation now allows for non-standard install path
- Auto-enable disabled TAP adapter
- 100% CPU when app starts with no Internet connectivity
- Don’t try UDP protocol if system proxy is configured
- Constant application window size on variable DPI screens
- Login form DPI bug
- On multi-screen computers, tool-tips show on primary monitor
- Leave firewall ON if ran out of free bandwidth to prevent IP leak
- Increase reconnect timeout from 5 min to 1 hour
- Server list source changed
- Moved server location update process to separate thread
- Only do ping tests while disconnected
- Update available UI change
- Output installed anti-virus software into debug log for troubleshooting
- Open survey on application uninstall
- Installer command line arg support
- Black and white top bar icon on MacOS
- Ping nodes in batches instead of all at the same time
- Allow for verbose OpenVPN logging via Advanced Parameters screen
- When beta channel is selected, check for updates right away

v1.80.24 (Beta)

No changelog

v1.70.4

New Features:
-----------------------
- Added city level location selection
- Added Automatic Connection mode
- Added support for 22 languages
- Added custom TAP adapter
- Added “Ignore SSL Errors” option
- Added notifications when firewall is ON and application not connected
- Added “Advanced Parameters” screen
- Added EULA to the installer
- Added IPv6 connectivity disable button, to prevent WebRTC leaks over IPv6 in some situations
- Added Touch support
- Added Beta channel

Bug Fixes:
-----------------------
- Fixed auto-start bug on some systems
- Fixed Internet connectivity check
- Fixed persistent session storage
- Fixed API connectivity on restrictive networks
- Fixed unquoted service path
- Fixed disappearing Best Location
- Fixed WSD port connectivity while firewall is ON
- Fixed PlayStation UPNP connectivity while firewall is ON
- Fixed reconnection bug on computer wake up on some systems
- Changed the Preferences screens
- Changed the connecting spinner animation

v1.61.1 (Deprecated)

No changelog

v1.60.1 (Deprecated)

No changelog

v1.59.1 (Deprecated)

No changelog

v1.58.1 (Deprecated)

No changelog

v1.57.1 (Deprecated)

No changelog

v1.56.1 (Deprecated)

No changelog

v1.46.1 (Deprecated)

No changelog

Open Source Software Attributions