Recent Version History

• Ongoing local delete operation can be moved to a background queue (only on a remote tab, as local tabs do not have a queue).
• SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.82.
• WebDAV/HTTP core upgraded to neon 0.34.0.
• Better error message when trying to open an inaccessible local drive (such as locked BitLocker drive).
• https:// URL to S3 API at oraclecloud.com is interpreted as S3 protocol, instead of WebDAV.
• Bug fix: Hang when trying to open an inaccessible drive from drive drop down menu.
• But fix: On Windows 11, Windows 10 version was logged.
• Bug fix: Hang when opening path with duplicated backslash. 2330
• Bug fix: When moving an ongoing delete operation to background queue, it might attempt to delete the current file again, failing the operation.
• Bug fix: After system theme change panel context menus stop working. 2331
• Bug fix: It was possible to start synchronization in new window despite incompatible Selected files only option selected by Shift-clicking the OK button. 1870

• IDE upgraded to Embarcadero C++Builder 11. 618
• Change: Dropped support for Windows XP and Windows Vista. Minimal supported version is Windows 7.
• Improvements to Synchronization checklist window:
  • Command to find Move candidate.
  • Move command can be used with a set of orphaned files and new folder in source directory to create that directory on the target side and move the orphaned files there.
  • Added Calculate All command.
  • Added a keyboard shortcut to Calculate command.
  • Move command can be used with long local paths.
• Compatibility with new OneDrive WebDAV interface. 2321
• Optimized loading of file panels when switching between tabs with different filters. 2315
• Optimized browsing deep local directory trees.
• XML parser upgraded to Expat 2.6.3.
• Including PuTTY and OpenSSL versions in /info.
• Added new ap-southeast-5 AWS region.
• Gracefully handling invalid Unicode characters FFFF and FFFE in filenames in .NET assembly. 2325
• Bug fix: Failure when system theme change is broadcasted in short order.
• Bug fix: Browsing long paths was broken.
• Bug fix: After leaving subdirectory, it is not scrolled into view in the parent directory.
• Bug fix: Long local panel location was lost after some file operations.
• Bug fix: Editor font was scaled twice on monitors with different DPI than the primary one.
• Bug fix: Option to switch to Location profiles was shown on Open directory dialog even when not possible, while session was disconnected.
• Bug fix: After delete operation is moved to background, some operations (notably editing) do not work anymore. 2319
• Bug fix: Shift+Ctrl+P keyboard shortcut on Login dialog to open site in PuTTY without closing the dialog does not work. 2320
• Bug fix: Failure when opening TLS connection with invalid OpenSSL configuration file. 2327
• Bug fix: Rare incorrect conversion of line endings when downloading. 2324
• Bug fix: Hang when creating temporary files with temporary folder on locked drive. 2328

• Thumbnail view in file panels. 912
• Three selectable sizes of toolbar icons, showing slightly larger size by default. 2147
• Optimized working with large local directories: 2264
  • Loading large directory trees on the background.
  • Hidden directory trees are loaded only in the background.
  • Optimizing directory loading by checking existence of subfolders on the background.
  • Optimized reading directories for file panel.
  • Optimized browsing within directory tree with lots of subfolders.
• Dark theme for session tabs. 1806
• Improvements to AWS/S3 authentication and configuration handling:
  • Allowed assuming IAM role. 2249
  • Credential profiles in .aws/config file are also recognized.
  • Preferring configuration file defined using an environment variable over the default one.
  • Only profiles that contain both aws_access_key_id and aws_secret_access_key are listed on the Login dialog
  • Bug fix: The .aws/credentials file path was resolved using AWS_CONFIG_FILE environment variable instead of correct AWS_SHARED_CREDENTIALS_FILE.
• Incremental search improvements:
  • Search panel pops up on Ctrl+F to make the function easier to find. 2281
  • Layout of search panel on Login dialog improved.
  • Search options context menu added to the search panel on Login dialog.
• Remembering panel scroll position when switching tabs or refreshing. 1057
• Search for Preferences options.
• TLS/SSL core upgraded to OpenSSL 3.3.2.
• Site import from an INI file. 2290
• Preserve timestamp when duplicating remote file using SFTP extension copy-data (OpenSSH). 2307
• Changing caret position on the first click on an inactive editor window. 2304
• Change: Limiting SFTP version to 3 with non-well-known SFTP servers as a workaround for interoperability issues. 2247
• Installer upgraded to Inno Setup 6.3.1.
• In icons view, files are rearranged automatically when the panel is resized.
• Explorer interface view style toolbar button now shows icon for the current style, instead of the next style.
• Fallback to nonresumable transfer when temporary target file cannot be created. 2277
• Optionally disabled smooth scrolling in an internal editor. 128
• Prevented redrawing scrollbars when loading remote directory tree. 2313
• Open window maximized when closed while minimized from maximized state. 2305
• Compatibility with FTP servers that return an empty path in root. 2300
• Ignoring WebDAV PROPFIND result entries that do not belong to the requested directory. 2312
• Optionally following NoViewOnDrive policy. 2310
• Recognizing matching Azure certificate files. 2311
• Logging can be enabled for installer subtasks.
• Limited SFTP upload queue length to avoid networking congestion.
• Updated to JCL library 2.8 commit 6380ce72.
• Columns menu in Explorer interface is enabled only in Details view.
• With /rawconfig, session is never opened in an existing instance.
• Not including useless OpenSSL states in error reporting.
• Bug fix: Possibility that files in root folder were incorrectly used.
• Bug fix: Failure when system theme is changed at the same time directory change is detected. 2286
• Bug fix: Tree indentation does not scale correctly. 2288
• Bug fix: It was possible to start renaming a site by double-clicking its node while editing the site.
• Bug fix: Cannot download from WebDAV server when the request is redirected to the same path on another server. 2293
• Bug fix: Overlay images were not drawn in icons view when Name column in Details view was too narrow.
• Bug fix: Some Unicode texts, notably custom command names, were saved incorrectly in an INI file. 2301
• Bug fix: Caption of permissions group labels disappears when hovered over on Windows 11.

• Back-propagated improvements and fixes from 6.4.1 beta and 6.4.2 beta releases:
  • Compatibility with new OneDrive WebDAV interface. 2321
  • XML parser upgraded to Expat 2.6.3.
  • Added new ap-southeast-5 AWS region.
  • Bug fix: After delete operation is moved to background, some operations (notably editing) do not work anymore. 2319
  • Bug fix: Shift+Ctrl+P keyboard shortcut on Login dialog to open site in PuTTY without closing the dialog does not work. 2320
  • Bug fix: Hang when trying to open an inaccessible drive from drive drop down menu.
• Translations completed: Danish, and updated: Belarusian.

• TLS/SSL core upgraded to OpenSSL 3.2.3.
• XML parser upgraded to Expat 2.6.3.
• Better error message when server is using incompatible TLS protocol version. 2299
• Translations updated: Belarusian and Finnish.
• Bug fix: Incorrect “Credentials were not specified” error when authentication fails due to incorrect password with FTP protocol. 2302
• Bug fix: Stall when switching from S3 to other protocol on Login dialog on some networks. 2309

• TLS/SSL core upgraded to OpenSSL 3.2.2.
• Translations updated: Belarusian, Danish and Russian.
• Standalone executable installer can run over corrupted MSI installation. 2294
• Support for up-to 16KB WebDAV cookies. 2289
• Bug fix: Failure when trying to automate file synchronization by checksum on an SFTP server that does not support it natively. 2291
• Bug fix: Remote panel does not refresh after “ZIP and Upload”. 2292

• SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.81.
  It brings the following change:
  • Security fix for CVE-2024-31497: NIST P521/ecdsa-sha2-nistp521 signatures are no longer generated with biased values of k. The previous bias compromises private keys. 2285 vuln-p521-bias
• Translation updated: Belarusian.
• XML parser upgraded to Expat 2.6.2.
• Support for TortoiseMerge in Compare Files extension. 2279
• Bug fix: File panel does not have focus after Login in Explorer interface. 2276
• Bug fix: Failure when closing the last remote tab. 2283
• Bug fix: Copy and paste to another application in Store installation sometimes does not work. 2284

• Translation updated: Belarusian.
• XML parser upgraded to Expat 2.6.1.
• Optimized startup when right panel local directory tree is not visible.
• Workaround for SFTP servers (Cisco) which omit message field from status response. 2272
• Bug fix: Password pipe cannot be used to open a session in an existing instance. 2265
• Bug fix: Hang when canceling connection while reading remote directory. 2266
• Bug fix: Failure when canceling FTP connection while reading remote directory. 2267
• Bug fix: Cannot start on Windows XP. 2268
• Bug fix: Installation hangs when adding installation path to search path when executed in session 0. 2270
• Bug fix: Misplaced stored site use warning in scripting when session name is specified. 2271
• Bug fix: Correcting neon version in About box and logs.

• Translation completed: Norwegian.
• Bug fix: Badly encoded SFTP packet when renaming a file using SFTP version 5 and newer. 2259
• Bug fix: Failure when trying to synchronize files by checksum on server that does not support it. 2260
• Bug fix: Random hang/failure when closing FTP TLS 1.3 connection. 2261
• Bug fix: Cannot use IPv6 literal as hostname on Login dialog. 2263

• XML parser upgraded to Expat 2.6.0.
• Bug fix: Hang when prompt pops up while SFTP session is being reconnected. 2258

• Translations completed: Farsi, French, Japanese, Spanish and Traditional Chinese.
• TLS/SSL core upgraded to OpenSSL 3.2.1.
• WebDAV/HTTP core upgraded to neon 0.33.0.
• Bug fix: Failure when trying to upload file using double-click over disconnected session. 2254
• Bug fix: Failure after long frequent use of session tabs. 2255
• Bug fix: New tab icon is drawn incorrectly on Explorer interface with Show selective text labels turned off. 2257
• Bug fix: Failure when switching to another application while new session is being opened using New Tab tab. 2251

• Added new ca-west-1 AWS region.
• Translations completed: Catalan, Czech, Dutch, Finnish, German, Hungarian, Italian, Korean, Polish, Portuguese, Romanian, Russian, Simplified Chinese, Slovak, Turkish and Tamil; and updated: Japanese.
• Support for [email protected] SFTP extension. 2231
• When cleaning up application data, deleting even Martin Prikryl and WinSCP 2 root keys, if they remain empty.
• Ignoring attempts to directly move/duplicate file over itself, as if protocol requires deleting, the file would be lost.
• Configurable FTP TLS shutdown procedure. 2250
• Not failing connection when FTP server responds to CSID command with an error. 2253
• Bug fix: Certificate authority cache was not copied to new configuration storage nor cleaned up with other caches.
• Bug fix: ssh protocol URL handling was not completely unregistered.
• Bug fix: Reported transfer size is rarely incorrect during FTP downloads.
• Bug fix: Failure after connecting to server. 2251
• Bug fix: FTP CSID command does not end with semicolon. 2252

• SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.80.
  It brings the following change:
  • Mitigations for SSH protocol “Terrapin” vulnerability. 2246 vuln-terrapin
• Support for Include directive when importing sites from OpenSSH. 2239
• Change: .NET assembly collections are tagged with ClassInterfaceType.None to avoid warnings from regasm.
• Not using directory listing to keep FTP session alive by default. 2244
• Windows Store installation on Windows 11 was incorrectly using INI file for configuration storage by default. 2245
• Bug fix: Find dialog file list is scaled incorrectly on some multi monitor systems with different scaling. 2241
• Bug fix: Cannot browse long local paths. 2242

• File hash can be used as criterion for synchronization. 52
• Consistent behavior across protocols and protocol capabilities when duplicating remote files. 2233
• Columns > Reset Layout command added to Explorer interface too.
• TLS/SSL core upgraded to OpenSSL 3.2.0.
• Support for “Requester pays” S3 buckets. 2213
• Optional more prominent active session tab. 2229
• Optionally not shortening tab titles. 2202
• New winscp.net root certificate.
• Restored support for legacy version of the Digest algorithm specified in RFC 2069. 2109
• Restored consistent behavior of failing, between duplicating and moving/renaming files over existing file with WebDAV protocol in scripting and .NET assembly.
• When moving a folder by drag&drop to a path that already contains a subfolder with the same name, the existing folder is overwritten.
• Shorter and more friendly formatting of long time intervals. 2236
• When typing ambiguous port numbers in Login dialog, keeping the current protocol, even if it is not the default protocol for the port.
• Bug fix: Failure when New Tab is clicked while another session is still being loaded.
• Bug fix: Corrected some painting artifacts on session tabs, particularly on Windows 11.
• Bug fix: Shift+F5 shortcut operated with a focused file, rather than with selected files.
• Bug fix: OpenSSL version in About dialog was not up to date.
• Bug fix: Cannot leave directory entered via cache with SCP protocol if it was deleted meanwhile. 2234
• Bug fix: Failure when connection is lost while reading remote directory with SFTP protocol. 2235
• Bug fix: Multipart upload to Cloudflare R2 S3 interface fails due to too long upload ID. 2237
• Bug fix: Panel focus was lost in some situations.
• Bug fix: When S3 or WebDAV server did not provide file timestamp, downloaded file was set to oldest possible timestamp.
• Bug fix: When session URL is typed into Host name box or pasted using context menu of the box and the Login dialog is submitted using Enter key, the URL is not parsed correctly.
• Bug fix: Failure when saving edited file over reconnected session after previous reconnect attempt was aborted. 2238

Older versions