Older Versions

• Translations completed: Brazilian Portuguese, Farsi and Portuguese; and updated: French and Italian.
• Support for file masks in Keep local directory up to date extension. 1892.
• TLS/SSL core upgraded to OpenSSL 1.1.1u.
• Bug fix: Patterns in default values of extension options were escaped in an extension tooltip.
• Bug fix: Calculate Directory Sizes command was redundantly in all local panel column context menus.
• Bug fix: Thanks and transitioning help toolbar message in Store installation was not readable in Dark theme. 2198
• Bug fix: MSI installer runs in Catalan language (or possibly fails) when used in GPO. 2199

• Translations completed: Catalan, Czech, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Polish, Romanian, Russian, Simplified Chinese, Spanish, Swedish and Turkish.
• Consistently open the nearest existing parent folder when the current local panel directory is deleted. 2182
• Visual feedback when control (drop down list particularly) is focused via keyboard accelerator.
• Building .NET assembly in Visual Studio 2022.
• Bug fix: Remote file pasted to an external HDD is downloaded twice. 2183
• Bug fix: Callstack debug logging in .NET assembly was broken.
• Bug fix: Corrected hint for Default session color command.
• Bug fix: When reading input Stream in .NET assembly upload fails in 64-bit process, the transfer is not interrupted.
• Bug fix: Failure when application log cannot be opened. 2186
• Bug fix: Work around key algorithm naming change in OpenSSH 7.7 and older (from pre-release of PuTTY 0.79). 2188
• Bug fix: With debug logging enabled, the echoed script commands and XML log group names miss the command name.

• When saving edited/opened file, optionally warning if it was modified meanwhile externally. 99
• Autoreconnecting a disconnected session when saving an edited file. 1858
• Even user-disconnected sessions can be reconnected when saving files opened from them.
• Allowed reads with non-zero offsets with stream returned by Session.GetFile. 2181
• puttygen switches --new-passphrase and --old-passphrase are recognized.
• Bug fix: When switching from a remote tab to a local tab, the “right” status bar does not show correct information.
• Bug fix: Edit Link command in Explorer interface has incorrect name Link.
• Bug fix: Mark > Select/Unselect command was behaving incorrectly.
• Bug fix: HTTP proxy authentication prompt was not localized.
• Bug fix: Directory tree does not adjust line height to custom panel font size. 2172
• Bug fix: Green artifacts at partial file icon overlay.
• Bug fix: The first copy&paste or drag&drop of remote files to other application might fail in Explorer interface. 2175
• Bug fix: Temporary directory is left behind when WinSCP is closed while it has some remote files copied to the clipboard. 2176
• Bug fix: Session.EnumerateRemoteFiles does not work correctly when the mask includes brackets and other symbols. 2177
• Bug fix: Location profiles should not be used unless the session is connected.

• Compare Directories command is available in local file manager mode.
• Installer upgraded to Inno Setup 6.2.2.
• Translations updated: German and Hungarian.
• Renamed File menu in Explorer interface to Files for consistency with Commander interface.
• Using plural Tabs for consistency with other menus.
• Using the same timestamp format in local and remote file panels.
• Option to allow box-drawing characters to render correctly in an Internal editor. 2169
• Bug fix: Failure when selecting S3 protocol in Login dialog with non-existing .aws/credentials file. 2166
• Bug fix: Tab close button of new session was drawn as clicked, if it was opened from Login dialog popped up after the last session was closed by clicking its close button.
• Bug fix: Rename tab dialog still says “Rename session”.
• Bug fix: Generated code uses obsolete SessionOptions.WebdavSecure property instead of current SessionOptions.Secure.
• Bug fix: Generated code for unsecure S3 protocol does not include SessionOptions.Secure property.
• Bug fix: Separation of Tab and Session menus was unintentionally not reverted for Explorer interface.
• Bug fix: Wrong behaviour when trying to open a workspace that does not contain any valid session.
• Bug fix: Ctrl+T opens the wrong type of tab.
• Bug fix: The !K and !\ custom command and PuTTY patterns were not included in syntax hint.
• Bug fix: Hang when FTP directory listing contains nul character. 2167
• Bug fix: Parent directory command was missing its keyboard shortcut in the menu.
• Bug fix: Workspace could not be saved when the active tab was not connected or was local.
• Bug fix: Some control labels were showing keyboard accelerators without keyboard intervention.
• Bug fix: Pressing Alt with some combo boxes focused did not show keyboard accelerators.
• Bug fix: Failure when starting with colored session. 2168

• Local file manager mode (two local panels). 1893
• Windows 11 flat style graphics.
• SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.78. It brings the following changes:
  • Support for OpenSSH certificates (for user authentication keys). 1873 ssh2-openssh-certkeys
  • Support for NTRU Prime post-quantum key exchange. ntru
  • Support for AES-GCM (in the OpenSSH style rather than RFC 5647, without hardware acceleration). aes-gcm
  • Support for more forms of Diffie-Hellman key exchange: new larger integer groups (such as group16 and group18), and support for using those and ECDH with GSSAPI. rfc8268-dh-groups gss-key-exchange-more-algs
• Ongoing delete operation can be moved to background queue. 194
• New DigiCert EV code signing certificate valid until February 2026 is used for signing binaries.
• Showing directory size in file panel. 41
• MSI installation package. 83
• TLS/SSL core upgraded to OpenSSL 1.1.1t.
• Translations updated: German and Russian.
• File checksum calculation support for SCP protocol and SFTP protocol via secondary shell session using shell commands like sha256sum.
• Tab titles are shortened to fit window width as needed. 1423
• AWS S3 profile selection. 2057
• Consistent behavior across protocols when renaming/moving remote files: 2120
  • Asking before overwriting existing files, both for renaming/moving.
  • Allowing overwriting existing files even with protocols that require deleting the existing file first and with WebDAV.
• Using SFTP copy-data extension to duplicate remote files with servers that do not support copy-file extension (OpenSSH).
• Allowed scrolling of background transfers queue list view while dragging a transfer. 2154
• Tabs show tooltips with full session name, username, hostname and paths.
• Displaying thanks and transitioning help toolbar message after Store installation over classic installation.
• Remembering remote directory tree nodes state when switching sessions. 1057
• Progress animations for Duplicate and Move To operations.
• Download edited/opened files with up-to-date timestamps. 2122
• Displaying current version on the New version notification. 2125
• Support for S3 servers without TLS encryption. 1995
• Support for redirected WebDAV downloads (even to other hosts). 1667
• Optionally reading password from a file. 2102
• Input files can be read from named pipes. 2118
• Shift-clicking New Session command opens the Login dialog in new WinSCP instance, instead of possibly opening new instance of workspace.
• Option to always sort directories by name. 1024
• Bookmark drop-down menu in Explorer interface. 2127
• Preserving changed passwords of ad-hoc sessions in workspace. 2128
• In file panel, file sorting by date and size is by default descending even when initiated by menu, toolbar or keyboard shortcut, consistently with sorting by clicking panel column header.
• Allowed opening all sites in a folder in PuTTY. 2079
• Allowing environment variables in custom INI file path. 2105
• Private key pattern !K in PuTTY command-line and custom commands. 2107
• Automatically reconnect when FTP server fails to open data connection with 426 code, if it previously worked. 2110
• Cleaning up temporary WinSCP PuTTY sessions.
• Clearing environment variables BLOCK_SIZE and LS_BLOCK_SIZE. 2129
• Added import from KiTTY directly to the Import dialog. 1551
• Warn when user selects too verbose logging level that degrades performance. 2155
• Contents of About dialog can be copied to the clipboard using Ctrl+C.
• Blocking Windows Rich Edit formatting keyboard shortcuts in Internal editor. 2108
• WebDAV/HTTP core upgraded to neon 0.32.5.
• PNG code upgraded to PngComponents 1.9.0.
• When switching tabs, prevent visibly scrolling the panels when focusing the last selected file.
• Removed the “compression” indicator from the status bar.
• Added GSSAPI key exchange algorithms to /info.
• Allowed normal behavior of double-click on a file even when resolving of symlinks is disabled. 2037
• Change: SessionOptions.WebdavSecure renamed to SessionOptions.Secure (and applies to S3 protocol too).
• Session.ExecutablePath returns detected or actual executable path when not set. 2055
• Change: Keyboard shortcut for Command Line command changed to Shift+Ctrl+M (Shift+Ctrl+N previously).
• Do not overwrite existing local file when FTP download fails to start. 2132
• Preventing construction of .NET assembly internal collection classes, what avoids them being unnecessarily registered for COM.
• Hidden configuration option to increase maximal number of background transfers at the same time. 2117
• Not animating taskbar button, when items are queued, but processing is disabled
• Removed gap in initial toolbar layout.
• Better formatting of feature list on Interface page of Preferences dialog.
• Optimizing adjusting to updated system font. 2149
• Consistency with loading icons synchronously and on the background. 2161
• Added new ap-southeast-4 AWS region.
• Selecting the best language with each installation. 2160
• Workaround for using /ini=nul on systems when reading nul file fails. 2163
• Support for FTP CSID command.
• Not logging supported SFTP extensions included directly in SSH_FXP_VERSION response as unknown.
• Bug fix: Failure when trying to switch session tabs while previous switch did not complete yet.
• Bug fix: When importing from FileZilla with KiTTY selected as SSH terminal, host keys were imported from KiTTY instead of FileZilla/PuTTY.
• Bug fix: Incorrect escaping of values in single-quoted patterns in custom commands.
• Bug fix: Configuration does not load when using /rawconfig command-line switch and read-only configuration sections.
• Bug fix: When file rename fails, wrong part of filename might be selected in the inline filename editor.
• Bug fix: Mouse cursor flickers while retrieving remote file properties.
• Bug fix: Using any keyboard shortcut with Alt key shows menu keyboard accelerators permanently.
• Bug fix: Session tabs cannot be dragged when the user has mouse buttons swapped.
• Bug fix: The “Keep temporary copies of remote files in deterministic paths” option applied when duplicating remote files via a local temporary copy and with custom commands, breaking their functionality. 2140
• Bug fix: S3 credentials checkbox on Login dialog had wrong tab order.
• Bug fix: Turned-off keepaliaves are not propagated to PuTTY. 2141
• Bug fix: With password storing administratively disabled, the /rawsettings switch cannot be used to set passwords. 2142
• Bug fix: Focus was lost after checking for updates.
• Bug fix: Failure on startup fatal error.
• Bug fix: Error when uploading file sized just below 32 kB boundary to FTP server over TLS 1.3. 2019
• Bug fix: Failure when doing agent forwarding with Pageant 0.74 or older. 2162
• Bug fix: Pressing Tab during incremental search on Login dialog never look into collapsed folders when more than one visible node matched the search.
• Bug fix: File on local network share treated as folder when uploading. 2056
• Bug fix: Failure when parsing FTP checksum response misses the actual response.

• Back-propagated fixes from 6.0 beta release:
  • Translations updated: German, Hungarian and Russian.
  • TLS/SSL core upgraded to OpenSSL 1.1.1t.
  • Updated links to online help.

• Improvements to official Batch Rename extension:
  • Made GUI refresh optional to allow standalone execution.
  • Not failing when specific file do not require any rename.
  • Bug fix: Rename fails when the filename contain file mask special characters. 2157
• Bug fix: Failure when system settings change after new version message box was displayed. 2148

• TLS/SSL core upgraded to OpenSSL 1.1.1s.
• XML parser upgraded to Expat 2.5.0.
• Translation updated: German.
• Setting $PSNativeCommandArgumentPassing to Legacy in generated WinSCP scripting PowerShell command-line, which is needed for PowerShell 7.3 compatibility. 2134
• Added new ap-south-2, eu-central-2 and eu-south-2 AWS regions and doubling region drop-down height.
• Bug fix: Moving WebDAV transfer to background aborts the transfer if the server commits the interrupted foreground transfer. 2126
• Bug fix: Failure when saving edited file while current tab is not connected. 2139
• Bug fix: When the current session is encrypted, saved edited file was uploaded using the current session instead of its source session. When the current session is not encrypted, edited files opened in any encrypted session was uploaded on the background, possibly leading to data inconsistent files.
• Bug fix: When reattaching edited file to re-connection session, the file was always attached to the current session instead of the possibly non-active re-connected session.

• Translation completed: Brazilian Portuguese.
• WebDAV/HTTP core upgraded to neon 0.32.4.
• XML parser upgraded to Expat 2.4.9.
• Preventing opening tunneled sessions in PuTTY from Login dialog as it cannot work. 2116
• Bug fix: Agent forwarding does not work. 2113
• Bug fix: Stall when new folder is detected and the drive contains folders with numerical names. 2114
• Bug fix: New version notification is not displaying.

• This is Microsoft Store-only release with the following fix:
  • The Donate command removed from the Help menu to comply with Store App policies.

• Translation updated: Ukrainian.
• Added new me-central-1 AWS region.
• Bug fix: Site with a stored password protected by master password cannot be opened from command-line. 2101
• Bug fix: Opening session in new window fails. 2104

• Translation completed: Farsi.
• TLS/SSL core upgraded to OpenSSL 1.1.1q.
• Initial implementation of application logging.
• Bug fix: “Hidden files showing toggled” message displays opposite status.
• Bug fix: Cannot authenticate to WebDAV server with username containing some special characters. 2095
• Bug fix: Checkbox to set permissions recursively on Properties dialog is missing, when changing owner and group is not supported. 2097
• Bug fix: .NET assembly type library cannot be used in WSH. 2098
• Bug fix: DLL hijacking protection was not working. 1459

• Translation completed: Polish.
• TLS/SSL core upgraded to OpenSSL 1.1.1p.
• Not offering to create a link to parent directory, when it happens to be selected, when starting to create a link. 2091
• Bug fix: Extension options dialog layout broken on systems with multiple monitors with different text scaling. 2090
• Bug fix: Failure when starting parallel FTP background transfers. 2093
• Bug fix: Directory coloring rules on remote panel do not work. 2094

• Bug fix: Hang when entering small directories with FTP protocol. 2087
• Bug fix: Lag when moving files from remote panel using drag&drop. 2088
• Bug fix: After certain operations, drive that was ever opened in local file panel cannot be safely removed temporarily.

• SSH core and SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.77. It brings the following changes:
  • Pageant: Option --openssh-config to allow easy interoperation with Windows’s ssh.exe. win-pageant-openssh-interop
  • Bug fix: PuTTYgen’s mouse-based entropy collection now handles high-frequency mice without getting confused. win-puttygen-entropy-rate-limit
  • Bug fix: Pageant can now handle large numbers of concurrent connections without hanging or crashing. win-pageant-max-connections-2
  • Bug fix: If Pageant is started multiple times simultaneously, the instances should reliably agree on one of them to be the persistent server. win-pageant-concurrent-startup
• Improved error message when FTP server returns malformed response. 2077
• Translations updated: German and Slovak.
• Not listing remote directory when downloading file using FTP protocol with overwrite confirmations off. 2084
• Workaround for calls to system API failing when used first time against some network shares (Samba) with paths over the legacy Windows limit. 2082
• Workaround for an apparent bug in Windows 11 that prevents WinSCP from stopping Windows going to the sleep mode during transfers. 2083
• Workaround for specific encoding of commas in filenames (and particularly directory names) by OneDrive WebDAV interface. 2085
• Bug fix: When transferring a growing file, after its original size is reached, the Session.FileTransferProgress event starts being triggered continuously. 2078
• Bug fix: Restored pre-5.20.3 behaviour with MVS systems. 2086

• Translations completed: Catalan, Czech, Dutch, Finnish, French, German, Hungarian, Italian, Japanese, Korean, Portuguese, Romanian, Russian, Simplified Chinese, Slovak, Spanish, Swedish, Traditional Chinese, Turkish and Ukrainian; and updated: Vietnamese
• Streaming support in .NET assembly and scripting for FTP protocol. 1945
• Improved compatibility with MVS systems. 2069
• New .NET assembly method Session.TryGetFileInfo. Thanks to @RachamimYaakobov. 2068
• Expanding environment variables in Open Directory/Location Profiles dialogs in local paths. 909
• Optimized loading of large directories. 1631
• TLS/SSL core upgraded to OpenSSL 1.1.1o.
• Installer upgraded to Inno Setup 6.2.1.
• When group (Site/Shared) to which new location profile is added is changed, switching the page to the target group.
• Preventing occasional exhaustion of resources while testing WinSCP executable version on repeated use of .NET assembly. 2075
• Bug fix: Capabilities of S3 sessions were not shown.
• Bug fix: Misplaced warning about unused scripting parameters when /rawsettings command-line switch is used. 2070
• Bug fix: File panels malfunction when files are dropped from other application to it. 2071
• Bug fix: When logging transfer statistics, recent transfer speed was logged instead of average speed of whole transfer. 2073
• Bug fix: z/OS PDS members without ISPF statistics are omitted in directory listing. 2076

• Translations updated: German and Vietnamese.
• SSH core upgraded to pre-release build of PuTTY 0.77.
  It brings the following changes:
  • Support for HTTP Digest authentication for proxies. http-digestauth
  • Interactive username/password prompts for proxy authentication. 468 proxy-password-prompt
• TLS/SSL core upgraded to OpenSSL 1.1.1n.
• WebDAV core upgraded to neon 0.32.2.
• XML parser upgraded to Expat 2.4.8.
• Allowed uploading edited files over encrypted session. 1989
• Building .NET assembly in Visual Studio 2019.
• Optionally not flashing taskbar button when WinSCP needs attention while in the background. 2067
• In .NET assembly or scripting with “nul” configuration, when WinSCP registry key does not exist, do not write statistics to INI file. 2066
• New less prominent icon for Quit command.
• Bug fix: Failure when attempting to switch to an unconnected sessions using keyboard shortcuts while another session is being connected.
• Bug fix: Removing all custom commands resets the default ones when INI file is used. 2059
• Bug fix: Failure when changing remote folder using directory tree while previous directory is still loading. 2060
• Bug fix: Drive that was ever opened in local file panel cannot be safely removed until WinSCP is closed. 2061
• Bug fix: “Optimize connection buffer size” checkbox was disabled for S3 although it has effect for the protocol. 2058
• Bug fix: Custom commands menu fail to open. 2062
• Bug fix: Local drive menu does not reflect some changes. 2063
• Bug fix: Using drive menu to change to an invalid drive fails silently.
• Bug fix: Scripting command ls in FTP session displays timestamps without year even if the server (notably IIS) provided the year, if it did not provide seconds. 2065

• File masks relative to the root of an operation. 2052
• Private key can be provided as string in .NET assembly and scripting. 2044
• Support for importing key files that are specified using home ~ prefix from OpenSSH config file. 2053
• Translation updated: German.
• TLS/SSL core upgraded to OpenSSL 1.1.1m.
• Commands that do not fit on Custom Commands toolbar are presented in drop-down menu, instead of a horizontal bar. 554
• First hiding right-most Custom Commands toolbar commands that do not fit.
• Prevent hang when dragging files without drag&drop shell extensions when some mapped network drive is not available. 2054
• Added new ap-southeast-3 AWS region.
• XML parser upgraded to Expat 2.4.2.
• Bug fix: When initial remote directory specified in the open command does not exist, the error was silently ignored.
• Bug fix: File color rules with path mask do not work for local files.

• Support for ACL for S3 protocol. 1641
• SSH core upgraded to PuTTY 0.76. 1984
  It brings the following changes:
  • Support Curve448 key exchange method. curve448
  • Support Ed448 user and host keys. ed448
  • Support rsa-sha2-256 and rsa-sha2-512 SSH public key algorithms. 1952 rsa-sha2
  • Change: SHA-256 fingerprints are not padded anymore.
• It is possible to import sessions from OpenSSH config file. 1896
• Change: Removed support for SSH-1.
• Optionally keeping symbolic link name in path instead of resolving it with SFTP protocol. 81
• Improved shortening long paths, when single level name is too long on its own. 2043
• WebDAV core upgraded to neon 0.32.1.
• Allow displaying all VMS file revisions with FTP protocol. 1944
• Support reading S3 credentials from AWS CLI configuration. 1941
• Bytes transferred are recorded in XML log and available in .NET assembly API. 597
• Generating PPK3 keys.
• It is possible to copy information to the clipboard from the Properties dialog.
• Made WinSCP.exe be deployed even when WinSCP NuGet package is included as transitive dependency. 2017
• When performing a single-item atomic operation, displaying indeterminate progress status.
• S3 Security token session option renamed to a more appropriate Session Token.
• Not resetting protocol to WebDAV when S3 protocol is selected and HTTP URL is pasted on the Login dialog. 2045
• Automatically reconnect when FTP server fails to open data connection, if it previously worked. 2046
• Confirm closing when multiple tabs are opened and auto workspace saving is not enabled, even when none of the tabs contain an active remote session.
• Including host key of tunnel session in generated code. 2006
• Support for custom certificate store files with configurable path. 2034
• Allowed providing tunnel private key passphrase in scripting. 2029
• Improved handling of long shell command error messages. 1949
• Considering global passive/active mode settings when importing sessions from FileZilla
• Automatically retry when S3 transfer fails with 503 code (Slow down or Service unavailable). 2047
• Improving formatting of errors displayed after an operation completed in Continue on error mode.
• Shift+Ctrl+R keyboard shortcut for Reconnect Session command.
• Change: Keyboard shortcut for Restore Selection command changed to Shift+Ctrl+S (Shift+Ctrl+R previously).
• Change: Monitoring A: and B: drives. 2014
• Preventing beep when using Alt+Enter to open the Properties dialog.
• When collecting list of files for background transfer, say “Listing” instead of “Calculating” not to give an impression that it is a superfluous operation. 2026
• Checking for too many parameters with /keygen switch.
• PNG code upgraded to PngComponents 1.7.0.
• Warning when selecting too new key file.
• Warning when opening more than 100 tabs. 1997
• Including HTTP message into S3 error message.
• Bug fix: Do not say “Terminated by user” when the session has actually timed out.
• Bug fix: Cannot use passwords and passphrases longer than 255 characters in automation and various other purposes. 1988
• Bug fix: When size of a file downloaded with FTP protocol changes (or when ASCII mode is used) the logged size did not reflect the actual transfer size.
• Bug fix: When connecting disconnected session the directory might be loaded twice.
• Bug fix: Failure when entering directory that contains file with a slash in its name. 2016
• Bug fix: When S3 authentication region changes during session, previously visited buckets from the original authentication region could not be accessed anymore. 2027
• Bug fix: Failure when using multiple connections with local proxy command. 2028
• Bug fix: Configuration import did not remove old sites and did not load all GUI settings. 2040
• Bug fix: When S3 transfer fatally fails, error details were lost.

• Translation updated: German.
• Back-propagated fixes from 5.20–5.20.2 releases:
  • TLS/SSL core upgraded to OpenSSL 1.1.1m.
  • XML parser upgraded to Expat 2.4.6.

• Compatibility with Google Cloud S3 API when duplicating files. 2038
• Compatibility with Google Cloud S3 API when deleting implicitly existing directories. 2042
• Translation updated: Turkish.
• Logging a reference to 1952 when an OpenSSH 8.8 (or newer) server refuses the key.
• Bug fix: Crash when new contents is copied to the clipboard while downloading files pasted from the clipboard. 2036
• Bug fix: Browse Remote Directory command on Synchronization checklist did not locate file with spaces.
• Bug fix: Extension ZIP and Upload does not work with files in a drive root. 2039
• Bug fix: Path on Console window was not shortened when it did not fit.

• Translation updated: Hungarian.
• Showing release date on the About dialog.
• Support for custom certificate store files. 2034
• Allow other 2xx responses to PWD command, not only the standard 257. 1768
• Bug fix: When there are both site folder and site with the same name and the site was selected when closing the Login dialog, when reopening, the folder was selected instead.

• Translation updated: French.
• TLS/SSL core upgraded to OpenSSL 1.1.1l.
• Using Documents folder when the last used local directory in Explorer interface does not exist anymore. 2011
• Bug fix: TLS session resumption is not working for subsequent FTP transfers with TLS 1.3 when the server requires reuse of the session of the previous transfer. 2018
• Bug fix: Cannot access S3 bucket root when the access policy checks for empty prefix. 2021
• Bug fix: Response from ProFTPD FTP checksum commands is not recognized. 2023
• Bug fix: Failure when submitting prompt with “Never ask me again” selected. 2022
• Bug fix: Panels are drawn incorrectly after toggling Full row select. 2025
• Bug fix: Timeout while uploading files to some FTP servers using TLS 1.3. 2030
• Bug fix: Incomplete listing for S3 servers that indicate truncated listing after the contents and whose pagination is a multiple of 8 (e.g. Backblaze). 2032

• Translation completed: French.
• Restored compatibility with FTP servers that return malformed cdir and pdir entries in directory listing. 2004
• Fix from PuTTY 0.76: Avoid crash in MIT Kerberos for Windows on session restart.
• SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.76. It brings the following change: After 30 or so simultaneous sessions, Pageant stops working. win-pageant-max-connections
• Bug fix: Empty local drive could not be entered. 2000
• Bug fix: TLS settings in default site settings is not restored when opening Login dialog in some cases. 2001
• Bug fix: Memory leak when deleting completed background transfers.
• Bug fix: Hang when running under Task Scheduler or a similar service with session logging enabled. 2005

• Translation updated: Italian.
• Incrementing port numbers for secondary connections of tunneled sessions with fixed forwarding port number. 1996
• Bug fix: Failure when automatically opening a workspace on startup with too many sessions. 1997
• Bug fix: Failure when reading a key file without a trailing newline. 1998
• Bug fix: Failure when SFTP server resolves . path to an empty string. 1999

• When installing an extension from a URL, not saving the extension with BOM.
• Not aborting “Keep remote directory up to date” function when connection is lost while deleting files or looking for differences and the session is reconnected. 1994
• Bug fix: When handling URL in an existing WinSCP instance, session settings from a stored site named after the URL hostname are not used. 1992
• Bug fix: It was possible to move toolbar on progress windows.
• Bug fix: When installing an extension from a file, it is always saved in UTF-8 with BOM, disregarding the original encoding. 1993
• Bug fix: When “Keep remote directory up to date” function was started from command-line, disconnects were not detected.
• Bug fix: When connection was lost and not reconnected, the “Keep remote directory up to date” window was not closed.

• XML parser upgraded to Expat 2.4.1.
• Installer upgraded to Inno Setup 6.2.0.
• Using multipart uploads with S3 protocol on Google Cloud as it is supported there now.
• Bug fix: Broken layout of Properties dialog when opening on a secondary display with high DPI primary display. 1990
• Bug fix: The “Drag & drop shell extension” installation component was not showing its size.
• Bug fix: When saving a local file, the “Saving” status on the Internal editor status bar is never cleared.
• Bug fix: No error message is sometimes shown when SFTP server disconnects. 1991

• Translation updated: Farsi.
• Support for PPK version 3 keys from PuTTY 0.75. 1986 ppk3
• SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.75. It brings the following changes:
  • Pageant now supports loading a key still encrypted, and decrypting it later by prompting for the passphrase on first use. pageant-deferred-decrypt
  • Upgraded default SSH key fingerprint format to OpenSSH-style SHA-256.ssh-fingerprint-formats
  • PuTTYgen now supports alternative provable-prime generation algorithm for RSA and DSA.
  • Replaces Windows Pageant’s IPC with named pipes. pageant-named-pipe
  • Bug fix: PuTTYgen mis-writes OpenSSH private key format for some Ed25519 keys. openssh-ed25519-corrupt-private-key
• Bug fix: Moving a transfer to background just in between two individual file transfers cancels the transfer. 1983
• Bug fix: Files saved in external editors are not uploaded in timezones behind UTC. 1985
• Bug fix: Sort > By Type icon for was still incorrect.

• TLS/SSL core upgraded to OpenSSL 1.1.1k.
• XML parser upgraded to Expat 2.3.0.
• The enumerable returned by Session.EnumerateRemoteFiles implements the interface implicitly to allow access to the interface method (GetEnumerator) from late-bound languages, like PowerShell.
• Disabling multipart uploads with S3 protocol on Google Cloud they are not supported there. 1972
• Allow downloading a file from an FTP server via a symbolic link in scripting or when handling a URL. 1973
• Allowing use of the stream returned by Session.GetFile from a different thread. 1978
• Workaround for specific encoding of special characters in filenames by OneDrive WebDAV interface. 1824
• https:// URL with known S3 API hostname (s3.amazonaws.com, digitaloceanspaces.com, storage.googleapis.com) is interpreted as S3 protocol, instead of WebDAV.
• Automatically resume transfer when TLS re-key fails. 1982
• Translation updated: German.
• Bug fix: Ignoring disconnect messages from the server while closing the connection. 1977
• Bug fix: Preventing another application (or WinSCP instance) stealing the selected tunnel port. 1971
• Bug fix: Hang after receiving multiline response from FTP server. 1963
• Bug fix: Sort > By Type icon for was incorrect.
• Bug fix: Keyboard cues were shown in toolbar buttons drop-down menus even when the menu was dropped down with mouse.
• Bug fix: Failure when connecting to FTPS server that supports client certificates with translation that uses multi byte encoding. 1966
• Bug fix: Remembered password is forgotten after the first failed (re)connect, even if the failure did not involve the password. 1967
• Bug fix: Problems with port forwarding are not detected. 1970
• Bug fix: Potential failure when waiting for a command executed from Console window is aborted.
• Bug fix: When saving a site with a slash in the username, it is misinterpreted as a site folder.
• Bug fix: DST start or end causes edited/opened files to be uploaded. 1974
• Bug fix: Failure when retrieving a directory listing from an FTP server when the data are transmitted in huge amount of tiny chunks. 1976
• Bug fix: Some operations with relative paths (notably creating and deleting a subdirectory) were failing on encrypted session.
• Bug fix: Local > Go to > Explore Directory was not working with focused remote panel.
• Bug fix: A workspace session opened from a stored site could not be used for operation in a new window or duplicated.
• Bug fix: Error when uploading an empty folder in the foreground or any folder in the background to an FTP server with permissions configured.
• Bug fix: Adding new background transfer while queue processing is disabled and some parallelized transfer was already started results in “waiting” items being endlessly added to the queue list.

• Translations completed: Korean and Romanian.
• TLS/SSL core upgraded to OpenSSL 1.1.1j.
• When opening or switching to a session whose local directory does not exist, open the nearest existing parent directory. 1951
• Switch-like raw session settings can be configured using on/off/auto keywords.
• Improving validation of port numbers in scripting and .NET assembly.
• Bug fix: Parsing of multiline VMS FTP listing entries is broken. 1950
• Bug fix: When moving files to an unvisited folder in an encrypted session, the folder contents is cached as before the move.
• Bug fix: Failure when dropping files to a disconnected tab or duplicating to a disconnected session.
• Bug fix: Failure when duplicating a not-yet-connected session.
• Bug fix: Canceled or failed FTP transfer caused connection loss.
• Bug fix: Some errors and information while opening a session in scripting were not logged. 1956
• Bug fix: SFTP uploads are slow. 1957
• Bug fix: Failure when S3 bucket contains a subfolder with an empty name. 1958
• Bug fix: Cannot enter an S3 folder that only contains a subfolder with an empty name. 1959
• Bug fix: Error when moving or copying file with non-ASCII file name using S3 protocol. 1960
• Bug fix: Timezone is not correctly reflected in S3 timestamps.

• Compatibility with Google Cloud Storage when using S3 protocol to access the buckets. 1939
• Bug fix: Failure when closing with no tab. 1947
• Bug fix: Debug information is printed at the end of the scripting session when debug logging level is set even if logging is turned off. 1948

• Improved FTP support for VMS servers (and potentially for other non-Unix-like systems). 49
• Translations completed: Brazilian Portuguese, Catalan, Czech, Dutch, Finnish, German, Hungarian, Italian, Japanese, Norwegian, Polish, Portuguese, Russian, Simplified Chinese, Slovak, Spanish, Swedish, Traditional Chinese, Ukrainian and Turkish.
• TLS/SSL core upgraded to OpenSSL 1.1.1i.
• Preserve file permissions when overwritten files are recycled and transfer resume is disabled. 1929
• Keyboard-interactive authentication challenges can be copied to the clipboard and links contained in the challenges can be opened. 1930
• Added method RemotePath.EscapeOperationMask to .NET assembly.
• Added method ComparisonDifference.Reverse to .NET assembly.
• Implemented method ComparisonDifference.ToString in .NET assembly.
• Write, CanWrite, Length and Position methods and properties of the Stream returned by the Session.GetFile behave as expected for a read-only steam.
• Allowed using SFTP servers that have problems with SSH_FXP_REALPATH requests. 1933
• Bug fix: Target file name with escaped operation mask special symbols was incorrectly interpreted as an actual operation mask on some dialogs (upload, duplicate, etc), resulting in misplaced warnings
• Bug fix: Local path argument of Session.PutFileToDirectory is incorrectly escaped. 1931
• Bug fix: Path argument of Session.PutFile is incorrectly escaped.
• Bug fix: Failure when using from single-file bundle. 1932
• Bug fix: Session.GetFile can fail, if the server responds too quickly.
• Bug fix: Failure when S3 bucket contains a folder with an empty name. 1934
• Bug fix: When the active tab was disconnected, closing window with another active session did not require a confirmation.
• Bug fix: Setting the logging level to -1 (Reduced) does not work in .NET assembly. 1936
• Bug fix: Ellipses from German command names are not stripped from toolbar buttons.
• Bug fix: Hang when the stream returned by Session.GetFile is closed before the download finished.
• Bug fix: Failure when looking for PuTTY key tools and the PATH contain invalid paths. 1942
• Bug fix: Prevent loading session settings that can lead to remote code execution from handled URLs. 1943
• Bug fix: Hang when S3 server returns a truncated listing with folders only. 1946

• A complete list of files that are part of a background transfer can be shown. 1785
• Stream interface in .NET assembly. 1738
• With SFTP protocol files can be streamed to stdout and from stdin in scripting.
• Support SHA-256 fingerprints of TLS/SSL certificates. 1842
• Extension Synchronize with another remote server.
• When connecting to new SSH host, its host key can be automatically accepted in scripting and .NET assembly.
• Optional case-sensitive synchronization. 71
• Enabled TLS 1.3 by default.
• XML parser upgraded to Expat 2.2.10.
• SSH core upgraded to PuTTY 0.74. It brings the following change:
  • Security fix: If an SSH server accepted an offer of a public key and then rejected the signature, WinSCP could access freed memory, if the key had come from an SSH agent. vuln-agent-keylist-used-after-free
• Resume transfer when FTP data connection disconnects. 1878
• Support for curve25519-sha256 KEX. 1865
• Support for authentication using temporary credentials from AWS Security Token Service (STS). 1839
• Support for SNI with FTP. 1895
• Installer upgraded to Inno Setup 6.1.2.
  • Change: Installer needs Windows 7 SP1/2008 R2 SP1.
• Alternative way to provide credentials in scripting/command-line without URL-encoding. 1821
• Compatibility with WebDAV servers that incorrectly encode file URL. 1876
• Optimizing S3 connection buffers for speed. 1732
• Edited/opened files from a disconnected session can now be attached to new session even if its username was entered only during authentication instead of directly on the Login dialog. 1890
• Returning to Login dialog, when ad-hoc connection fails. 1909
• Local ports for active FTP mode can be limited. 958
• Allow explicit navigation to a hidden local folder by enabling showing of hidden files and folder, if not enabled yet. 1905
• Added full Go To submenu to context menu of panel path label
• Automatically restore external editor defaults when changing editor command from Notepad to 3rd party editor. 1872
• Suppress errors when opened/edited files are locked. 1832
• Support clearing GID/UID flag on directories with new versions of GNU coreutils. 1850
• Added /nointeractiveinput to usage screen.
• List encrypt-then-MAC algorithms in /info listing. 1917
• Not using a transfer via temporary file for files that would exceed system length limit with the temporary extension. 1922
• Automatically closing timed out Session. 1923
• Logging IANA encryption algorithm names. 1886
• Displaying, what directory is being read at the end of login to a server, in a tooltip. 1916
• Use dark window title for the main window in the dark mode on Windows 10 2004. 1920
• Clarified that WinSCP may crash in the warning message when trying to load too big file into the internal editor. 1847
• Do not prevent WinSCP from working when jump list cannot be updated. 1857
• Allow forcing use of LIST command to retrieve file information in scripting for FTP servers that has broken support for MDTM/SIZE commands. 1921
• Duplicate and Rename commands work even for disconnected sessions.
• IPv6 literals with scope or literals that are already escaped in square brackets are formatted standardly in session URL (instead of URL-encoding them).
• Allowed longer input on Edit file input box. 1911
• Added help link to Add extension box and making the box wider.
• GSSAPI key exchange authentication can be turned on. 1863
• When trying to open an inaccessible local directory, display an error message, instead of silently doing nothing.
• Cleanup application data dialog labels cache cleanup checkbox label updated to reflect previously updated functionality.
• Disabling tips controls until some tips are actually available.
• Optionally disable moving using drag&drop. 1884
• Main window follows Login dialog to another monitor, when switched using keyboard shortcuts Shift+Win+Left/Right. 1907
• When path to an existing local directory is specified on the Download options dialog without an operation mask, a noop operation mask is implied.
• Workaround for wrong description of Num * keyboard shortcut in menus with German keyboard. 1889
• Files with the same name except for a letter case are sorted deterministically. 1894
• Not offering pasting from clipboard on the file panels if the clipboard contains multi-line text.
• Extending transfer dialog drop-down menu size to 16 entries.
• Bug fix: Local file panel ignored changes in latter case of files and folders. 1885
• Bug fix: Local custom commands that need session but no remote files were not disabled when session was not connected.
• Bug fix: Correct letter case variant of remote directory in directory tree was not always selected. 1891
• Bug fix: With no connected session, shared bookmarks modifications are not preserved.
• Bug fix: Using list header color appropriate for the actual light/dark column background color (list headers are not dark, unless system wide app dark mode is enabled).
• Bug fix: Session.ParseUrl cannot accept fingerprint parameter for sessions over TLS. 1925
• Bug fix: Custom command patterns !S/!E do not include fingerprint of TLS certificate.
• Bug fix: Cannot work with filenames ending with space with FTP protocol. 1900
• Bug fix: Canceling remote path drop-down did not reset it back to the current path.
• Bug fix: Folders in a drive root showed incorrect type name sometimes.
• Bug fix: Customizing custom commands from Synchronization checklist window was not working. 1908
• Bug fix: Whole local drive could have been scanned when trying to browse to non-existing or hidden folders.
• Bug fix: Timed out status bar note was not added to history popup box, while a session is disconnected.
• Bug fix: Duplicate command in remote file context menu operated over selected files instead of the focused file.
• Bug fix: *nix shell special characters were unintentionally escaped in PuTTY/SSH terminal command patterns. 1906

• Back-propagated security fixes from 5.18.1 release:
  • TLS/SSL core upgraded to OpenSSL 1.1.1i.
  • Bug fix: Prevent loading session settings that can lead to remote code execution from handled URLs. 1943

• Translation updated: German.
• Bug fix: Failure when using S3/AWS access ID or region longer than 32 characters. 1914
• Bug fix: Failure when opening some menus while having long text of specific length copied to the Clipboard. 1915
• Bug fix: Failure when directory contains a file with too long name. 1924

• TLS/SSL core upgraded to OpenSSL 1.1.1h.
• Allow using Windows Store apps aliases as terminals (particularly Windows Terminal). 1901
• Limiting error report and message search URLs to 4 KB, as larger URLs fail to open in some browsers.
• SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.74.
• Bug fix: Session.CompareDirectories handles incorrectly files with names containing reserved XML characters. 1897
• Bug fix: Keep local directory up to date extension fails if error occurs before session URL is parsed.
• Bug fix: SFTP uploads started over already disconnected session do not reconnect automatically. 1913

• WebDAV core upgraded to neon 0.31.2.
• Security fix from PuTTY 0.74: If an SSH server accepted an offer of a public key and then rejected the signature, WinSCP could access freed memory, if the key had come from an SSH agent. vuln-agent-keylist-used-after-free
• Displaying progress of synchronization in Keep local directory up to date extension. 1887
• Displaying session name and operation status in console title of Keep local directory up to date extension. 1888
• Translation updated: German.
• Removed workaround for lack of support for max-keys parameter in Backblaze S3 API, as it is supported now. 1871
• Bug fix: Failure while changing path using path label while another command was executing already. 1877
• Bug fix: Failure when system settings change during synchronization. 1879
• Bug fix: Failure when trying to close WinSCP while reading a remote directory. 1880
• Bug fix: Failure after using files from a disconnected session (for example saving an edited file). 1881
• Bug fix: Directory reading cannot be cancelled for SFTP servers that provide optional end-of-list field. 1883
• Bug fix: Going to root folder in the local panel does not update selection in the directory tree.

• Added new af-south-1 and eu-south-1 AWS regions. 1864
• Translation updated: Brazilian Portuguese.
• Not defaulting to Documents folder on a network drive even if it is mapped. 1869
• Workaround for lack of support for max-keys parameter in Backblaze S3 API. 1871
• Installer upgraded to Inno Setup 6.0.5.
  • Change: Installer does not support Windows Vista/2008 anymore.
• Bug fix: Transfer settings are not preserved when starting synchronization in new window.
• Bug fix: Keep remote directory up to date window cannot be restored after it was minimized to tray using Minimize to System Tray command, when the window was opened from command-line or using Start in New Window command. 1868
• Bug fix: Starting synchronization in a new window should be disabled when Selected files only option is selected, as that combination is not implemented. 1870
• Bug fix: Starting a synchronization in a new window does not work if the remote path consist of one level only.
• Bug fix: Failure when canceling an authentication of an ad-hoc session from a workspace opened from command-line. 1875
• Bug fix: GSSAPI key exchange authentication is off by default as it caused failures when old version of MIT Kerberos was installed on the machine. 1874

• Translations completed: Brazilian Portuguese; and updated: German and Russian.
• Bug fix: Failure when starting fresh installation on high DPI displays. 1862

• TLS/SSL core upgraded to OpenSSL 1.1.1g.
• WebDAV core upgraded to neon 0.31.1.
• Local file panel honors preferred drop action of source application. 1848
• Increased maximal length of proxy and tunnel credentials. 1849
• Truncating too long directory names in session tab title.
• Optionally do not distinguish multiple sessions opened to the same site by current path. 1734
• Bug fix: Failure when fallback SSH channel fails to open. 1845
• Bug fix: Failure when creating shortcut for jumplist fails. 1846
• Bug fix: Window position is not restored, if its left or top edge was aligned to monitor edge. 1852
• Bug fix: Wrong layout of Login dialog on monitors with low vertical resolution. 1463
• Bug fix: FTP file uploads are interrupting with TLS 1.3. 1834
• Bug fix: Empty directories are not uploaded to FTP server when transferring in background. 1859
• Bug fix: Percent sign (%) in PuTTY session settings (such as IPv6 scope syntax) is misinterpreted when importing. 1860
• Bug fix: Failure when starting with automatic workspace opening when none of the workspace sites exist. 1861

• TLS/SSL core upgraded to OpenSSL 1.1.1f.
• WebDAV core upgraded to neon 0.31.0.
• Installer upgraded to Inno Setup 6.0.4.
• Translation updated: French.
• Importing site-specific key files from FileZilla. 1841
• Showing session name in Synchronization checklist and Keep remote directory up to date windows, when the operation was executed in a new window/from a command line. 1838
• Session.ScanFingerprint now works even for Amazon S3 protocol.
• Bug fix: Failure after resuming system from sleep. 1829
• Bug fix: Option to disconnect a session was available even while deleting local files, and caused failure when selected while no session was actually opened. 1836
• Bug fix: Failure when primary SSH channel fails to open. 1837
• Bug fix: SHA-1 fingerprint of TLS/SSL certificate was incorrectly presented as MD5 by Session.ScanFingerprint.
• Bug fix: When dragging file via temporary directory it is deleted too early. 1844

• Disabling TLS 1.3 by default until it is better tested. 1835
• Bug fix: Cannot connect to SSH-1 servers. 1833
• Bug fix: TLS session resumption is not working for FTP transfers with TLS 1.3. 1831

• Bug fix: Confirmation to close WinSCP does not have a help page associated (to explain the workspace). 1825
• Bug fix: Failure when loading extension with filename containing some special characters (like a dash). 1826
• Bug fix: SCP fallback is no longer working. 1827
• Bug fix: Path on Address bar of Explorer interface cannot be submitted. 1828
• Bug fix: Cannot use TLS/SSL client certificate. 1830
• Bug fix: TLS/SSL client certificate could be configured for S3 protocol even though it is not supported.

• Optionally using Ctrl+F4 to close session tab. 1823

• New DigiCert EV code signing certificate valid until February 2023 is used for signing binaries.
• Ignoring incorrect timestamps in MDTM response, while autodetecting timezone difference. 1818
• Storage configuration on Preferences dialog handles INI files specified on a command-line better.
• Added an example for using Win32-OpenSSH ssh.exe as an SSH terminal. 1822
• It is possible to configure TLS 1.3 restrictions.
• Bug fix: Using directory exclude mask while searching caused all non excluded folder to be unintentionally included in the search results.
• Bug fix: It is not possible to recursively search for a folder. 1819

• When creating WinSCP shortcut, make it use the same configuration as the creating instance. 941
• Translation updated: French.

• .NET assembly functionality to process individual ComparisonDifference instances. 1802
• Convenience method Session.RemoveFile.
• Translations completed: Spanish and Korean.
• RemotePath.TranslateLocalPathToRemote and RemotePath.TranslateRemotePathToLocal can accept a directory source path equal to the source root path with a missing trailing slash.
• Custom commands keyboard shortcuts work on Synchronization checklist dialog.
• Enable queue processing/Once Done queue options should be disabled/triggered once all queued operations are completed, not only after the queue list is empty. 1815
• Added /bin/sh to the list of shells. 1814
• Ctrl+Left/Right/Back work better on Raw Site Settings dialog.
• Logging deletion of local source file.
• Bug fix: ComparisonDifference.IsDirectory was not set to true for directories.
• Bug fix: Cannot list WebDAV directory when any of the files is locked and the <depth> or <timeout> elements contain whitespaces around its contents. 1813
• Bug fix: Colored session icon does not display on high DPI. 1816
• Bug fix: Failure when starting synchronization when application taskbar button is not fully working. 1817

• Bug fix: Version check did not work with five digit build number.

• Translations completed: Catalan, Czech, Dutch, Finnish, French, German, Hungarian, Icelandic, Italian, Japanese, Norwegian, Polish, Portuguese, Simplified Chinese, Slovak, Swedish, Traditional Chinese, Turkish and Ukrainian.
• New DigiCert code signing certificate used for signing binaries valid until February 2023.
• Not defaulting to Documents folder on a network drive. 1809
• Improvements to cleaning up application data:
  • Cleanup application data dialog shows only data that exist.
  • Uninstaller does not offer to delete application data, when there are not any.
  • The option to cleanup cached host keys cleans all other caches as well.
  • Bug fix: Cleaning up cached SSH host keys did not work.
  • Bug fix: Cleaning up configuration did not remove jumplist.
  • Bug fix: Running WinSCP for a maintenance task unintentionally creates a random seed file.
  • Bug fix: Failure when cleaning up sites from Login dialog.
• Bug fix: Failure when change in subfolder is detected while keeping remote directory up to date. 1807
• Bug fix: Failure when synchronizing directories after they were previously synchronized while being empty. 1808
• Bug fix: Name of the selected directory in tree is dark on dark background in dark mode. 1810

• Improvements to dark theme:
  • Dark theme for column headers. 1776
  • Toggling between light and dark interface theme is faster.
  • Bug fix: Failure when switching between light and dark interface themes. 1805
  • Bug fix: Disconnected remote panel background color does not reflect theme change.
• Looking for WinSCP.exe also in entry .NET assembly folder.
• Support for IBM z/OS Tape files. 1801
• Bug fix: Occasional hang when loading file icons. 1803
• Bug fix: Failure while closing application and suspending computer after operation completion. 1804

• Sorting find results. 902
• SSH core upgraded to PuTTY 0.73. It brings the following changes:
  • Security fix: On Windows, other applications were able to bind to the same TCP port as a WinSCP local port forwarding. vuln-win-exclusiveaddruse
  • Bug fix (possibly security-related): An SSH-1 server sending a disconnection message could cause an access to freed memory. ssh1-disconnect-use-after-free
• XML parser upgraded to Expat 2.2.9.
• Installer upgraded to Inno Setup 6.0.3:
  • Checkboxes displayed by lists now look better on high DPI systems.
• Allow configuring additional PuTTY settings (e.g. terminal settings) to be used when opening a session in PuTTY. 1798
• NuGet package updated to the latest format with an included icon and framework dependencies.
• Allow empty password authentication with FTP servers that prompt for empty passwords. 1796
• Bug fix: Edited path was hidden behind a browsing button on file/directory path selection boxes. 1791
• Bug fix: Start menu and Taskbar icons are too small when installed from Microsoft Store. 1793
• Bug fix: After directory comparison before synchronization finishes, taskbar button still shows a progress bar.
• Bug fix: Failure when authentication with keyboard interactive authentication with specified prompt title. 1794
• Bug fix: Stored password is not used for keyboard interactive authentication prompt with specified prompt title. 1795
• Bug fix: Settings with an empty default value were not listed in Add Raw Site Settings dialog.
• Bug fix: State of Allow agent forwarding checkbox was not updated when toggling Attempt authentication using Pageant.
• Bug fix: When starting private key upload from Advanced Site Settings dialog, changed settings were preserved even if the dialog was later canceled.
• Bug fix: SFTP only options were shown for SCP sites on Advanced Site Settings dialog.
• Bug fix: Master password prompt unintentionally appears when selecting site folder with a site with an encrypted password. 1799
• Bug fix: .NET assembly does not have a digital signature. 1800
• Bug fix: Corrected some help links.

• Improvements to sessions and workspace management, so that WinSCP can now easily restore tabs that were open when it was last closed:
  • Login dialog can be configured not to automatically pop up, when starting WinSCP and when closing the last session. 1771
  • When Login dialog is configured not to pop up automatically on start and workspace was saved in the previous run, the workspace is automatically restored when WinSCP starts.
  • A session can be disconnected, without closing its tab, and later reconnected.
  • Tabs of sessions opened with a workspace or a folder that fails to connect and tabs of all sessions that fail to reconnect are not closed.
  • Option “Keep main window open when the last session is closed” is enabled by default.
  • User is offered to save a workspace, even when only one session is opened.
• SSH core upgraded to PuTTY 0.72. It brings the following changes:
  • Major rewrite of the crypto code to remove cache and timing side channels.
  • Hardware-accelerated AES. 1769 cpu-crypto-accel
  • Support for GSSAPI key exchange. gss-key-exchange
  • Server and protocol information dialog now shows a more detailed information about the cipher in use.
  • Support for key exchange algorithm diffie-hellman-group14-sha256.
• Extension Archive and Download to archive remote files and download the archive. 1773
• Improvements to Synchronization checklist window:
  • Estimating time to finish directory comparison before synchronization based on previous comparisons of the same folders.
  • Allowed opening the local or remote file from synchronization checklist in Windows Explorer or WinSCP, respectively. 1784
  • Hints for synchronization action icons on synchronization checklist window. 1786
• Command-line switch /browse to either force opening the main window when a file URL is specified or to explicitly select a specified file in both file panels.
• Convenience methods Session.PutFileToDirectory, Session.PutFilesToDirectory, Session.GetFileToDirectory and Session.GetFilesToDirectory.
• Selection of network interface for SSH and IPv4 using raw session setting SourceAddress. 416
• TLS/SSL core upgraded to OpenSSL 1.1.1d. It brings TLS 1.3 support among other changes.
• Installer upgraded to Inno Setup 6.0.2:
  • User can choose between installation for all users and the current user only.
  • Change: Silent installation needs additional /ALLUSERS or /CURRENTUSER switches.
  • Automatically creating appropriate type of desktop icon for respective install mode.
  • Modern style of the installer wizard.
  • Change: Installer does not support Windows XP/2003 anymore.
• Raw site settings editor.
• Copy (to clipboard) command in file context menu. 1758
• Automatically reconnecting when FTP data connection cannot be opened, if it previously worked. 1767
• Host key and certificate fingerprint verification improvements:
  • When verifying a host key using an expected fingerprint, it is possible to use an expected fingerprint with a checksum only (with both key type and bit count omitted).
  • When verifying a host key or a certificate using an expected fingerprint, the comparison is case-insensitive (with an exception of SHA-256 checksum).
  • When verifying a host key using an expected fingerprint, a padding (=) in SHA-256 checksum is not required.
  • Change: TLS/SSL certificate fingerprints in generated URL use dashes (-) instead of colons (:), while colons are still accepted.
  • Change: SHA-256 fingerprints in generated URL use dashes (-) and underscores (_) instead of pluses (+) and slashes (/), while pluses and slashes are still accepted.
• Support S3 servers with Path URI style (like MinIO). 1632
• S3 Default region can be configured on Advanced Site Settings dialog.
• Support for non standard ports with S3 protocol. 1780
• Not showing remote custom commands and local custom commands working with remote files in local file context menu.
• Custom command pattern !E preserves session name.
• Added SessionOptions.Name and SessionOptions.ToString (returning the .Name).
• Change: Removed option to create Quick Launch icons (Windows Vista and older only).
• Change: Consider size of linked file when transferring/synchronizing symbolic link. 1747
• Individual configuration storage sections can be set read-only.
• Switch /defaults accepts an optional delay in seconds to start the operation.
• Resolving local environment variables in initial session local path. 150
• Keep trying to save configuration for up to 2 seconds when INI file is locked by another process. 1775
• Change: RemoteFileInfo.FileType now consistently returns L for symlinks as was always documented. RemoteFileInfo.FileType now consistently returns uppercase value as was always documented.
• Configurable S3 root path/bucket in .NET assembly. 1778
• Indicating in an Internal editor that the file is new and preventing actions that does not make sense for non-existing files. 1752
• Persisting custom command toolbar buttons visibility. 1788
• Fallback to default ANSI encoding, when known_hosts file is not in UTF-8. 1789
• /passphrase command-line switch is now documented.
• When uploading file to a symbolic link with enabled remote recycle bin, the symbolic link is not moved to the recycle bin. 1759
• Speed box in Progress window responds to mouse wheel.
• Updates page of Preferences dialog replaced with simpler Statistics page for Store installations.
• Configurable console/terminal font. 1774
• Better error message when writing INI file fails. 1787
• Session.DisableVersionCheck will not be obsoleted. 1777
• When using a scripting console interactively, not warning about opening a session from a command-line or using a stored site.
• Allow turning off asynchronous loading of icons. 1783
• Using only extension/custom command name without any qualifiers in some contexts.
• Improved formatting of some messages.
• Small improvements of layout for longer translations.
• Bug fix: Failure when starting (local) custom command with no session opened.
• Bug fix: Errors while mass-modifying sites were displayed in message box instead of console window.
• Bug fix: When only encrypted session setting (like passwords) were changed during mass-modification, changes were not saved.
• Bug fix: It was not possible to mass-modify stored sites, when a master password was set.
• Bug fix: Directory changes cache is not case sensitive when resolving symbolic links. 1739
• Bug fix: Some cached SSH and TLS/SSL fingerprints were not preserved when exporting/importing the configuration.
• Bug fix: Validation of input boxes prevented cancelling dialogs using Cancel button. 1763
• Bug fix: It was not possible to overwrite remote file, when moving of overwritten files to remote recycle bin was configured, but the file could not be moved. 1766
• Bug fix: Files larger than 0.5 GB are never uploaded in ascii/text mode with SCP protocol as it would fail anyway due to memory issues. 1770
• Bug fix: Lower-than (<) and greater-than (>) symbols are not escaped in an output of RemotePath.EscapeFileMask .NET method and in a script generated by the GUI. 1781
• Bug fix: Error when reopening a remote file whose local temporary copy has been deleted. 1790

• Temporarily using old DigiCert code signing certificate that does not trigger “Windows Defender SmartScreen prevented an unrecognized app from starting” warning. 1812
• Bug fix: Version check did not work with five digit build number (skipping 5.15.8 as a workaround).

• Translation completed: Russian.
• New DigiCert code signing certificate used for signing binaries valid until February 2023.
• Back-propagated fixes and changes from 5.16.1–5.16.2 releases:
  • Toggling between light and dark interface theme is faster.
  • Bug fix: .NET assembly does not have a digital signature. 1800
  • Bug fix: Corrected some help links.
  • Bug fix: Occasional hang when loading file icons. 1803
  • Bug fix: Failure while closing application and suspending computer after operation completion. 1804
  • Bug fix: Failure when switching between light and dark interface themes. 1805

• This is Microsoft Store-only release with the following fix:
  • Bug fix: Start menu and Taskbar icons are too small when installed from Microsoft Store. 1793

• Back-propagated fixes and changes from 5.16–5.16.1 releases:
  • Security fix from PuTTY 0.73: On Windows, other applications were able to bind to the same TCP port as a WinSCP local port forwarding. vuln-win-exclusiveaddruse
  • XML parser upgraded to Expat 2.2.9.
  • Bug fix: Error when reopening a remote file whose local temporary copy has been deleted. 1790
  • Bug fix: Edited path was hidden behind a browsing button on file/directory path selection boxes. 1791
• SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.73.
• Installer translations updated: Czech, Dutch, German, Italian, Polish, Slovak and Turkish.

• TLS/SSL core upgraded to OpenSSL 1.0.2t.
• XML parser upgraded to Expat 2.2.8.
• Official extension Batch rename prints more information about its progress.
• Small improvements of layout for longer translations.
• Translation updated: Italian.
• Bug fix: Cannot switch back to English after changing language on non-US English system. 1779
• Bug fix: Deleting temporary local copy of remote file caused errors and invalid attempts to upload the nonexisting file. 1782

• Back-propagated SSH security fixes from PuTTY 0.72:
  • Integer underflow parsing SSH-1 packet length. vuln-ssh1-buffer-length-underflow
  • Buffer overflow in SSH-1 if server sends two tiny RSA keys. vuln-ssh1-short-rsa-keys
  • Windows Pageant client code does not check response length field. vuln-win-pageant-client-missing-length-check
• SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.72.
• Using recommended sizes of icons when installed from Microsoft Store. 1754
• XML parser upgraded to Expat 2.2.7.
• Translations updated: Hungarian, Simplified Chinese and Spanish.
• File panel incremental search can be disabled using raw configuration setting. 1742
• Retrying deleting fake temporary folder created when pasting remote files to Windows File Explorer. 1765
• Bug fix: With every start on a monitor with different DPI than the primary monitor, dimensions of the window and some of its components change slightly. 1750
• Bug fix: Speed limit does not work with S3 protocol. 1755
• Bug fix: Site folder loses names of its sites. 1756
• Bug fix: Compare Files extension cannot handle paths with spaces. 1760
• Bug fix: Local recycle bin is unintentionally scanned, slowing down browsing. 1761
• Bug fix: .NET assembly debug log file timestamps shows as GMT, while they are actually local times. 1762
• Bug fix: Cannot upload files over 50 GB to S3. 1764
• Bug fix: When using a local custom command from Synchronization checklist window, opened from a command-line, the connection was closed.
• Bug fix: When saving an edited site or default settings, WinSCP prompted for the master password, even when the site does not have any password to protect.
• Bug fix: When opening a connection from a command-line, which does not have a local directory set yet, local panel is opened empty.

• TLS/SSL core upgraded to OpenSSL 1.0.2s.
• SSH private key tools (PuTTYgen and Pageant) upgraded to latest development snapshot of PuTTY (2019-05-13.45be166). It brings the following change:
  • Bug fix: Crash when adding an ECDSA key to Pageant. pageant-ecdsa-assert-fail
  • Bug fix: RSA keys generated by PuTTYgen could be one bit too short. puttygen-keys-one-bit-short
• Translations updated: Dutch and Polish.
• Not scanning unvisited network folders to speed up start up and browsing. 1737
• Starting main window with the last user local folder instead of always starting in Documents folder. 1740
• When renaming an ad-hoc site, using a generated friendly name as a start.
• Bug fix: Some numerical folders are duplicated in remote directory tree. 1736
• Bug fix: Ad hoc site opened from a workspace showed its internal number a name instead of a friendly generated name.
• Bug fix: Failure in .NET assembly when ProgramFiles(x86) environment variable is not set and WinSCP executable cannot be found anywhere. 1741
• Bug fix: Keyboard accelerator for Octal box on Properties dialog does not work. 1743
• Bug fix: Failure when .NET assembly times out waiting for WinSCP to start. 1744
• Bug fix: Failure when shutting down Windows. 1746
• Bug fix: Two consecutive different file mask delimiters are processed incorrectly. 1745
• Bug fix: Failure when undocking toolbar on a system with multiple monitors with different DPI. 1748
• Bug fix: Failure after a session lost while in Console dialog is reconnected. 1749

• Bug fix: .NET assembly does not have a strong name. 1730
• Bug fix: Raw transfer settings are incorrectly processed with synchronize command. 1731
• Bug fix: Compressed files entries are hard to read in dark theme. 1733
• Bug fix: Cannot drag files from WinRAR. 1735

• Translations updated: Brazilian Portuguese, Farsi, French, German and Icelandic.
• SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.71. It brings the following changes:
  • Pageant support for SHA-256/512 RSA signatures, used by e.g. OpenSSH client. pageant-rsa-sha2
  • Support OpenSSH 7.6+ aes256-ctr-encypted private keys. puttygen-openssh-aes-ctr
• Bug fix: Back-propagated SSH security fixes from PuTTY 0.71. 1729 vuln-rng-reuse vuln-rsa-kex-integer-overflow
• Bug fix: Reloading file in internal editor can cause unwanted upload of partially reloaded file. 1728
• Bug fix: Failure when starting any (local) batch file operation with no session opened.
• Bug fix: Command to create/edit a local shortcut was disabled with no session opened.

• Translations completed: Catalan, Czech, Dutch, Farsi, Finnish, French, German, Hungarian, Icelandic, Italian, Japanese, Norwegian, Polish, Portuguese, Romanian, Simplified Chinese, Slovak, Spanish, Swedish, Traditional Chinese, Turkish and Ukrainian.
• TLS/SSL core upgraded to OpenSSL 1.0.2r.
• Allowing localization of extension option values in drop-down lists.
• Bug fix: Renaming site on Login dialog cannot be committed using Enter key when it was started using Manage > Rename command. 1718
• Bug fix: After canceling a confirmation to install a public key to a non-OpenSSH server, a message about a successful key installation was displayed nevertheless.
• Bug fix: Pressing Alt with combo box focused did not show keyboard accelerators.
• Bug fix: Background transfers queue list font color does not reflect dark theme. 1721
• Bug fix: Directory is not reloaded, when focusing newly created file from Find dialog. 1722
• Bug fix: Local directories with path long between 248 and 259 characters could not be created. 1725
• Bug fix: Failure when dropping down bookmark menu with no session opened. 1726
• Bug fix: Failure when starting GUI. 1727

• Prepared for translations.
• Updated NuGet package description and icon.
• Fixed some typos.

• Suspending workaround 1644 for a bug in Windows 10 version 1803 (April 2018 update), fixed in version 1809 (October 2018 update), that caused drag&drop downloads to Windows File Explorer end in a wrong folder.
• Control labels do not show keyboard accelerator cue, until Alt key is pressed.
• Bug fix: Mouse range selection does not start from the file focused by an incremental search. 1714
• Bug fix: Incremental search in Explorer-selection mode does not select the found file. 1713
• Bug fix: The last file transfer before creating a remote directory during synchronization is not reported with .NET assembly. 1715
• Bug fix: Properties dialog shows “1 file/folder”, instead of a name, even when a single entry was selected only.
• Bug fix: When an ancestor directory cannot be read, its child files and subdirectories are incorrectly assumed to be encrypted. 1716
• Bug fix: Failure when starting GUI. 1717

• Compare Files extensions (obsoletes File Compare custom command).
• Dark theme. 1696
• Coloring files in file panels based on a file mask. 1574
• Improved incremental search in file panels. 1711
• Synchronization preview in .NET assembly. 1371
• Allowed dropping remote files to network drives. 1701
• Synchronization can be started in a new window. 327
• Command to un/check all files in a folder on Synchronization checklist window. 1705
• TLS/SSL core upgraded to OpenSSL 1.0.2q.
• /rawtransfersettings command-line switch to configure any transfer settings using a raw format as in an INI file.
• Command-line switch /comregistration for inspecting and clearing broken COM registrations. 1706
• Optionally failing synchronization in scripting when there are no changes. 1707
• Ctrl+PgDn tries to enter even a file. 1704
• Adding “Open Directory/Bookmark” command to bookmark drop-down menu.
• Change: Renamed RemotePath.CombinePaths to RemotePath.Combine.
• Showing a progress while executing a local custom command with a set of files.
• Loading .exe (and similar) file icons asynchronously.
• Allowed excluding certain drive letters from monitoring for dropped files.
• Better error message when drop target cannot be detected and drag&drop shell extension is not available.
• Flashing taskbar button, when synchronization checklist window shows with found changed files, while WinSCP is on background.
• Custom font colors history.
• When switching colored sessions, file panels were temporarily drawn using a color of a previous session.
• Not offering name of selected subfolder as a name of new file and not downloading the folder if it by coincidence matches with name of the new file.
• Bug fix: Failure when dropping down bookmark menu while no bookmark is saved. 1697
• Bug fix: Failure when canceling connection attempt. 1698
• Bug fix: With themes disabled, an empty space is reserved for and working as a close button on a session tab even though the button is not drawn. 1699
• Bug fix: GUI freezes while executing an extension with ShowResultsInMsgBox or CopyResults flags.
• Bug fix: Shift+Ctrl+Alt+? keyboard shortcuts for custom commands and extensions were not working. 1700
• Bug fix: User name edit box on Login dialog in some cases does not include modification commands (like Paste). 1702
• Bug fix: Opening context menu of a file in a local panel locks a parent folder of the file. 1703
• Bug fix: Ampersand (&) from the last custom command was not shown in menu.
• Bug fix: Remembered private key passphrase is not passed to PuTTY. 1708
• Bug fix: Crash on start while loading local file icons. 1709
• Bug fix: Failure when canceling session reconnect. 1684
• Bug fix: Failure when canceling connection attempt started from command-line. 1710
• Bug fix: It was not possible to access a bucket, if the user does not have permissions to list its root folder. 1712

• Support OpenSSH AES-256-CTR-encrypted keys. PuTTYgen updated to the latest development snapshot of PuTTY (2018-10-22.1806b71). 1692
• Allow connecting to Amazon S3 using non-default endpoints. 1695
• With parallel background transfers, it is not possible to disable size calculation, which effectively prevented parallel transfers from working. 1691
• Low logging level implemented also for S3 and partly for WebDAV protocols. 1637
• Optionally consider exit code 1 an error when executing a shell command on a server. 1694
• Middle mouse click closes session without activating its tab.
• Choosing right color for background of calculated checksum on Properties dialog.
• Bug fix: Failure when closing the main window with a colored session. 1693
• Bug fix: Confirmation of copy&paste transfers between panels was incorrectly controlled by drag&drop confirmation preference option.
• Bug fix: Background transfer settings are not preserved. 1690
• Bug fix: Resolving file move from synchronization checklist, invoked from command-line, closes a connection.
• Bug fix: Generated code included redundant PortNumber raw settings settings setter for all sessions not using port 22.

• Files can be optionally encrypted when storing them on SFTP server. 1653
• Local UNC paths can be browsed. 133
• Files can be copied to the clipboard. 316
• Empty directories can be excluded from transfer and synchronization. 207
• Files can be downloaded directly to an external drop location even without a loaded drag&drop shell extension.
• It is always possible to use drag&drop to move remote files to external applications, while copy is always the default operation.
• Improvements to directory synchronization:
  • Synchronization runs on top of Synchronization checklist window for easier overview of the process.
  • Showing overall synchronization progress on progress window and taskbar. 598
  • File/directory rename can be resolved on Synchronization checklist window.
  • Size of directories can be calculated on Synchronization checklist window.
  • Synchronization summary is shown at the end of the operation. 1680
  • Function “Keep remote directory up to date” can be started in a new window.
  • During synchronization transfer speed limit is preserved across set of synchronized directories.
  • Larger default size of Synchronization checklist window on larger screens.
  • Not showing “Operation was successfully completed” when canceling Synchronization Checklist window opened from command-line.
  • Not showing “Operation was successfully completed” message, after command-line synchronization operation, where there were no files to be synchronized.
  • Once Finished option now applies to whole synchronization operation, not only to the current particular synchronization sub-operation.
  • Preventing artifacts on Synchronization checklist window.
  • Bug fix: When synchronization changes preview is turned off, and changes are found, but none of them match synchronization options, no feedback is provided.
• Bookmark drop-down menu. 1127
• Added Generate button to SSH > Authentication page of Advanced Site Settings dialog, that starts PuTTYgen and detects a private key file generated by it. 386
• Command to install public key in available both on main window and on Advanced Site Settings dialog. 386
• Close button on session tab. 1393 Using it, a non-active disconnected session can be closed without a need to reconnect it.
• When a path entered in Open Directory dialog or Address toolbar cannot be opened, retry an entry to allow user to correct it. 1673
• Public key can be displayed in Advanced Site Settings dialog.
• Session tab can be renamed. 1183
• Save as Preset command in transfer settings drop-down menu. 892
• Improved design of About window.
• Build of .NET assembly that targets .NET Standard 2.0 is provided. 1640
• Change: .NET Assembly now targets .NET Framework 4.0.
• Support for long local paths with FTP protocol. 1337
• PowerShell script that runs WinSCP scripting commands can be generated on Generate Code dialog.
• Transfer settings that do not have a dedicated scripting switch or a .NET TransferOptions property can be set using -rawtransfersettings switch or TransferOptions.AddRawSettings method.
• Toolbar buttons can be hidden. 582
• Found files can be edited from the Find dialog. 1634
• Hidden files can be excluded from transfer/synchronization. 209
• Session URL can contain any raw session settings using connection parameter. New custom command pattern !E can generate such URL for use in WinSCP extensions.
• Session name specified by /sessionname command-line switch is preserved in workspace.
• Time constraints can be set to a start of an interval.
• today and yesterday time constraint aliases.
• Configuration can be saved to read-only INI file by holding down Shift key while closing WinSCP or submitting Preferences dialog.
• Change: Do not match URL after stripping protocol against stored site name in scripting/automation. 1647
• Configurable keyboard shortcuts for extensions. 1613
• When opening a session in PuTTY, exporting also cached host keys.
• Low logging level. 1637
• It’s possible to limit number of command line parameters used for open-ended switches like -rawconfig, -rawsettings and -rawtransfersettings using syntax -switch[count].
• Optionally create background queue connection right after session starts (hidden settings). 1681
• Natural order numerical sorting for directory tree. 1685
• XML parser upgraded to Expat 2.2.6.
• Distinguishing multiple sessions opened to the same site by current path. 1635
• Change: Keyboard shortcut for Download command in Explorer interface changed to Ctrl+T (Ctrl+C previously).
• Change: Keyboard shortcut for Open Terminal command changed to Shift+Ctrl+T (Ctrl+T previously).
• Silently ignore errors writing a read-only INI file when automatically saving a workspace when exiting.
• Do not show an error when remembered last used directories do not exist anymore. 1616
• Not failing transfer if file selected for transfer, but excluded by file mask, is deleted during operation. 1677
• Optimized loading time in scripting/.NET assembly mode. 1621
• Installer upgraded to Inno Setup 5.6.1.
• Use remembered private key passphrase in generated script/code. 1688
• Generated code does not include fingerprints of TLS certificates signed by a trusted authority.
• Preventing session tabs flicker with large number of sessions.
• Moving session Color submenu to Session menu.
• Not reloading site list when opening Login dialog/Site menu/etc where there is too many sites. 1658
• Allow authentication with empty passwords in scripting. 1638
• Preventing stall on startup when updating jumplist 1625 or resolving icons of common file types 1649 takes too long.
• Ctrl+A is working in file/directory path selection boxes.
• Parsing file modification time from display string if not provided explicitly in SFTP packet. 1665
• Operation status is shown on taskbar button and tray icon title also for command-line operations.
• Not showing an estimated time left till the end of an operation for the first few seconds.
• Hidden option to generate WebDAV URLs with http:// protocol prefix. 1668
• Removed (non-working) panel loading animation.
• Workaround for problems when uploading files from symlinked location (such as deduplicated drive). 1355
• History of edit boxes can be deleted using Ctrl+Del keyboard shortcut. 1686
• Bug fix: Hangs when clicking directory tree while inline editing file name. 1618
• Bug fix: Ad-hoc sessions opened with workspace duplicated into a new window had a wrong name.
• Bug fix: When editing multiple files, opening ends on the first file that is already opened.
• Bug fix: When minimizing command-line operation, taskbar button was hidden.
• Bug fix: Hint popup on too long transfer settings panel was truncated on separator (|) of exclude masks.
• Bug fix: WinSCP instance without main window (opened from command-line) could incorrectly accept session opened from another instance.
• Bug fix: Generated code included PortNumber property setter for all non-SSH protocols, even when the default port number of a respective protocol was used.
• Bug fix: Prevent SCP server sending files that were not requested. 1675
• Bug fix: Hang when doing an operation on FTP connection that disconnected on a background. 1679
• Bug fix: Failure or delay when .NET assembly timeouts waiting for WinSCP process. 1683
• Bug fix: When dropping files on another session tab, the target path was not set to the working directory of that session.
• Bug fix: Orphaned hidden temporary folders were not being deleted.
• Bug fix: Using /ini=nul in GUI shows an error.
• Bug fix: Sort arrow is not shown on start up.
• Bug fix: When dragging files to other session tabs, drag cursor could change to “Move”, although only “Copy” is possible.
• Bug fix: Remembered passphrase is used as a password in generated script/code. 1687
• Bug fix: Failure when canceling session reconnect. 1684

• Back-propagated fixes and changes from 5.15 release:
  • SSH private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.71.
  • Bug fix: Back-propagated SSH security fixes from PuTTY 0.71. 1729 vuln-rng-reuse vuln-rsa-kex-integer-overflow
  • Bug fix: Reloading file in internal editor can cause unwanted upload of partially reloaded file. 1728

• Back-propagated fixes from 5.14 beta – 5.14.5 RC releases:
  • TLS/SSL core upgraded to OpenSSL 1.0.2r.
  • Bug fix: Prevent SCP server sending files that were not requested. 1675
  • Bug fix: Local directories with path long between 248 and 259 characters could not be created. 1725

• Translation updated: Simplified Chinese.
• Back-propagated some improvements and fixes from 5.14 – 5.14.3 beta releases:
  • Suspending workaround 1644 for a bug in Windows 10 version 1803 (April 2018 update), fixed in version 1809 (October 2018 update), that caused drag&drop downloads to Windows File Explorer end in a wrong folder.
  • Use remembered private key passphrase in generated script/code. 1688
  • Bug fix: Remembered private key passphrase is not passed to PuTTY. 1708
  • Bug fix: Failure when canceling connection attempt started from command-line. 1710
  • Bug fix: The last file transfer before creating a remote directory during synchronization is not reported with .NET assembly. 1715
  • Bug fix: Failure when starting GUI. 1717

• Back-propagated some improvements and fixes from 5.14.2 beta release:
  • Bug fix: Failure when canceling session reconnect. 1684
  • Bug fix: Crash on start while loading local file icons. 1709

• Translations updated: Dutch, Hungarian, Kabyle, Korean, Polish and Spanish.
• Back-propagated some improvements and fixes from 5.14 – 5.14.2 beta releases:
  • TLS/SSL core upgraded to OpenSSL 1.0.2q.
  • XML parser upgraded to Expat 2.2.6.
  • Bug fix: Using /ini=nul in GUI shows an error.
  • Bug fix: Sort arrow is not shown on start up.
  • Bug fix: When dragging files to other session tabs, drag cursor could change to “Move”, although only “Copy” is possible.
  • Bug fix: Remembered passphrase is used as a password in generated script/code. 1687
  • Bug fix: Failure when canceling session reconnect. 1684
  • Bug fix: GUI freezes while executing an extension with ShowResultsInMsgBox or CopyResults flags.
  • Bug fix: Shift+Ctrl+Alt+? keyboard shortcuts for custom commands and extensions were not working. 1700
  • Bug fix: User name edit box on Login dialog in some cases does not include modification commands (like Paste). 1702
  • Bug fix: Opening context menu of a file in a local panel locks a parent folder of the file. 1703

• Passing private key to PuTTY when installed from Microsoft Store. 1654 Passing also other options that PuTTY can accept on its command-line, like “Attempt authentication using Pageant”, “Allow agent forwarding”, “Enable compression”, “SSH protocol version”, “Logical name of remote host” and “Internal protocol version”.
• WinSCP installed from Microsoft Store can be executed from command-line. 1662
• Translation updated: Icelandic.
• With logging level 1 and higher, printing scripting exit debug information on an output too.
• Hidden configuration option to disable running shell operations on a separate thread. 1666
• TLS/SSL core upgraded to OpenSSL 1.0.2p.
• Bug fix: When system theme changes, path labels lose their background color.
• Bug fix: File mask is not considered when calculating total file transfer size when deleting original files. 1656
• Bug fix: When canceling connection, mouse cursor sometimes stay “busy”. 1657
• Bug fix: Relative long paths are not handled correctly. 1659
• Bug fix: Error when closing edited/opened files with “Keep temporary copies of remote files in deterministic paths” option enabled. 1660
• Bug fix: It is not possible to open S3 folder from command-line/URL or in scripting when path ends with slash. 1661
• Bug fix: File panel columns do not have a width constraints. 1663
• Bug fix: Update information window layout is broken in some situations. 1664
• Bug fix: Timezone autodetection failed if timestamp of file cannot be retrieved. 1672
• Bug fix: Wrong error message when attempting to rename an S3 folder. 1674

• Generated session URL for opened FTP/WebDAV session over TLS/SSL with invalid certificate includes its fingerprint. 1646
• Generated session URL has colons in TLS/SSL fingerprint unnecessarily URL-encoded. 1645
• Bug fix: It is not possible to delete symlink pointing to a directory with “Follow symbolic links to directories” session settings being on. 1648
• Bug fix: Scripting command ln does silently nothing when the server does not support creating symlinks, instead of reporting that.
• Bug fix: Error when downloading file to a temporary filename with a long path with SFTP protocol.
• Bug fix: Keywords that link to help page are underlined in generated code on Windows 10 version 1803. 1650
• Bug fix: Start of file drag from remote panel stalls on some systems with floppy drive. 1652
• Bug fix: Path argument in lcd command in generated script has to end with backslash, if it points to a root folder.
• Kabyle translation removed.

• WinSCP is available in Microsoft Store. 1639
• Workaround for a bug in Windows 10 version 1803 (April 2018 Update), causing drag&drop downloads to Windows File Explorer end in a wrong folder (computer restart required). 1644
• Translations completed: Croatian, Farsi and Russian; and updated: Dutch, French, German and Polish.
• Bug fix: ssh:// URL is handled once for every opened instance of WinSCP too much. 1627
• Bug fix: Icons for local files do not show on some systems. 1628
• Bug fix: Failure when binary file is attempted to be opened in an internal editor on system with multibyte legacy encoding. 1629
• Bug fix: Login dialog opens slowly, when there is a lot of stored sites with a color. 1630
• Bug fix: Extensions were not loaded when configuration is empty.
• Bug fix: Starts slowly on some systems. 1633
• Bug fix: Failure when uploading a file larger than 2GB using S3 protocol. 1636
• Bug fix: Failure when .NET assembly starts reading an XML log file in a short moment when it’s empty yet. 1619

• Translations completed: Kabyle, Traditional Chinese and Ukrainian; and updated: Bahasa Indonesia.
• TLS/SSL core upgraded to OpenSSL 1.0.2o.
• Treating a star as an unset permission for compatibility with Win32-OpenSSH.
• Bug fix: /refresh parameter with sftp:// URL was not working for SFTP sessions with enabled fallback to SCP protocol.
• Bug fix: Simple input boxes (like “Edit File” dialog) are broken on multi monitor systems with different DPI. 1614
• Bug fix: HTTP proxy responses for FTP protocol are logged char by char. 1615
• Bug fix: Port number box was visible for S3 protocol, even though its value has no effect.
• Bug fix: Hang when opening a menu with any Paste command, while clipboard contains a large amount of text. 1620
• Bug fix: Slashes in SHA-256 fingerprints are not encoded in generated URLs. 1622
• Bug fix: Failure when closing a session with a local proxy command. 1623
• Bug fix: Failure when closing Find window while finding files. 1624

• Translations completed: Catalan, Czech, Finnish, French, German, Hungarian, Icelandic, Italian, Japanese, Korean, Norwegian, Polish, Portuguese, Romanian, Slovak, Spanish, Swedish and Turkish.
• Better error message when trying to upload a file to virtual S3 root “folder”.
• Displaying server name in network drive label. 1607
• When using session name as a part of a path to a temporary directory, replace a slash separating a session folder from a session name with a dash instead of %2F. 1608
• Configurable path to XML log file for the .NET assembly. 942
• Bug fix: Failure when opening context menu of edit boxes on Login dialog. 1605
• Bug fix: Failure when processing FileTransferProgress event. 1606
• Bug fix: It was not possible to open workspace with special characters from a desktop shortcut. 1610
• Bug fix: Failure when focused panel is changed, while double-clicking a file to edit it. 1611

• Multiple levels of directories can be created, while synchronizing browsing to a non existing directory. 1601
• Setting Content Type of files uploaded to S3. 1602
• Configurable mapping from file extension to Content-Type (using hidden setting). 1604
• Bug fix: Local directory tree cannot be controlled using keyboard. 1599
• Bug fix: Alt+Enter keyboard shortcut executed/opened selected file, instead of opening Properties dialog.
• Bug fix: Session hangs when QueryReceived is set while session is already opened. 1600
• Bug fix: QueryReceivedEventArgs.Message is empty.
• Bug fix: Parallel background connections are never started, when queue processing is disabled.
• Bug fix: Panel column context menus were working incorrectly when panel was horizontally scrolled.
• Bug fix: Failure when processing results of upload during synchronization in .NET assembly when a directory was created with explicitly set permissions as the first operation. 1603

• Improvements and changes to .NET assembly and scripting:
  • Custom error handling instead of default abort can be optionally implemented for batch operations in .NET assembly. 1594
  • Change: .NET assembly instance methods Session.EscapeFileMask, Session.CombinePaths, Session.TranslateLocalPathToRemote, Session.TranslateRemotePathToLocal, Session.AddDirectorySeparator, Session.GetDirectoryName, and Session.GetFileName replaced by static methods of the same name in class RemotePath.
  • Change: Session.ScanFingerprint has a new mandatory algorithm parameter.
  • Bug fix: .NET assembly methods GetFileName and GetDirectoryName did not behave correctly when provided a filename without any path.
  • Bug fix: Backtick (`) and dollar ($) signs are not escaped in generated PowerShell code. 1590
• Displaying both SHA-256 and MD5 fingerprint of SSH host key on Server and protocol information dialog.
• Choosing right color for background of “selectable” labels.
• All read-only edit boxes/selectable labels have user friendly context menu for copying contents.
• Bug fix: Setting hidden raw session setting for “Configurable priority of host key types” overrides host key.
• Bug fix: Failure when error occurs while another error is already being handled.
• Bug fix: When connection is lost while deleting source remote file during “Download and Delete” operation, downloaded file may be deleted once connection is resumed. 1592
• Bug fix: Hidden session settings S3DefaultRegion to create an S3 bucket in a non-default region was not working.
• Bug fix: It was not possible to work with S3 buckets with a dot in their name. 1597
• Bug fix: S3 temporary redirect was not handled (consequently it was not possible to work with newly created S3 buckets)
• Bug fix: HTTP error was displayed instead of a more specific S3 error message in some situations.
• Bug fix: When viewing stored S3 site with a non-default hostname, the default Amazon S3 hostname was shown instead.
• Bug fix: Failure when updating jumplist. 1591

• Amazon S3 protocol support. 572
• Bug fix: Stalled connection attempts can be canceled promptly. 1564
• SHA-256 host key fingerprints are used. 1589
• Improvements and changes to .NET assembly and scripting:
  • Remote file duplication in scripting, .NET assembly and XML log.
  • Support for PackageReference package management in NuGet package. 1581
  • Help for script commands specifies unit for -speed switch.
  • A SecureString can be used provide a private key passphrase in .NET assembly via property SessionOptions.SecurePrivateKeyPassphrase. 1557
  • Added Session.GetDirectoryName, Session.GetFileName and Session.AddDirectorySeparator methods to .NET assembly.
  • Publishing beta releases of NuGet package. 1598
  • Extensions metadata can span multiple lines.
  • Change: XML log tags <modification> and <permisssions> are absent, if their values are not known. Previously they would have value of 1899-12-30T01:00:00.000Z and --------- respectively. Consequently the .NET assembly RemoteFileInfo.LastWriteTime and RemoteFileInfo.FilePermissions have values DateTime.MinValue and null, respectively.
  • File owner and group, if available, are recorded in <stat> tag of XML log and consequently .NET assembly Session.GetFileInfo method is able to retrieve them.
  • .NET assembly timeout for waiting for WinSCP response is always at least as long as session timeout.
  • Scripting command mv and .NET assembly function Session.MoveFile report, when the server does not support file renaming/moving.
  • Masking out passwords in raw settings (proxy and tunnel) when logging command-line. 1578
  • Change: Scripting command mv and .NET assembly function Session.MoveFile tests, if a source file exists, before trying to rename. Consequently, an error message reported has changed significantly, if the source file does not exist.
  • Putting WinSCPnet.dll to net framework subfolder of NuGet package.
• SSH host key can be verified by pasting the expected key or its fingerprint from the clipboard. 1563
• Option to turn off Natural order numerical sorting. 1293
• Wider range of Unicode characters is supported in internal editor. 1580
• XML parser upgraded to Expat 2.2.5.
• Skipping loading of files icons when it takes too long. 1556
• Hidden option to configure priority of host key types. 1562
• Ctrl-number custom keyboard shortcuts work on numeric keypad too. 1568
• Allowing download from MVS server using fully qualified dataset name. 1579
• Optionally displaying authentication banner in a monospaced font. 1588
• Bug fix: Per-session default encoding configuration for internal editor. 1577
• Log more information about loading a custom GSSAPI library. 1586
• Commands to copy hostkey/certificate fingerprint to clipboard has a form of a link, instead of a message button.
• Changed appearance of background confirmation options link.
• Logging a complete SSH host key only on Debug log level.
• Change: Last access time of downloaded files is no longer preserved.
• Bug fix: Command-line is disabled even for a local panel, if no session is connected or the connected session does support executing remote commands.
• Bug fix: SSH hostkey/TLS certificate verification prompt in scripting in interactive mode was showing zero timeout.
• Bug fix: Leaving a folder with a large amount of files takes long. 1565
• Bug fix: Timeout of auxiliary requests for Microsoft Passport authentication was not set correctly.
• Bug fix: Operation symbol column on Synchronization checklist does not scale with font size/DPI. 1569
• Bug fix: Cannot enter subfolders of local drive mapped to WebDAV folder. 1575

• TLS/SSL core upgraded to OpenSSL 1.0.2n.
• Translations added: Korean; and updated: Bahasa Indonesia, Finnish and Spanish.
• Bug fix: Official extension Generate HTTP URL cannot copy multiple URLs to clipboard. 1567
• Bug fix: Parent directory icon broken on 250% scaling and higher. 1570
• Bug fix: Resizing of Synchronization checklist window does not stop when mouse button is released. 1571
• Bug fix: It was not possible to answer prompts with non-ascii answers in winscp.com. 1573
• Bug fix: Failure when starting with window position configuration, saved on lower DPI, that does not fit anymore on lower resolution caused by higher DPI. 1576
• Bug fix: Failure when changing remote working directory using directory tree. 1572
• Bug fix: XML log and .NET assembly API does not use an absolute path for source of SCP download.
• Bug fix: WinSCP .NET assembly hangs when the XML log cannot be parsed. 1582
• Bug fix: WinSCP .NET assembly cannot work with files containing control characters. 1583
• Bug fix: Failure when coping local custom command that works with remote files to clipboard.
• Bug fix: Failure when using Ctrl+Tab keyboard shortcut with no session opened. 1585
• Bug fix: When parsing MLSD listing, file name was incorrectly tried to be interpreted against various rare path syntaxes, leading to wrong name being displayed. 1587

• Translations added: Russian; and updated: Czech, Hungarian, Icelandic, Italian and Spanish.
• Panel font sample on Preferences dialog is wrapped.
• Stopping monitoring a drive when a drive removal is announced, to allow removing the drive (particularly required for VeraCrypt drives). 1560
• Official extension Generate HTTP URL URL-encodes special characters in path.
• Bug fix: Wrong position of an icon on Login button, when Login dialog monitor DPI does not match system DPI. 1555
• Bug fix: Failure when creating local directory or deleting local files, while no session is connected. 1558
• Bug fix: Mouse selection is sometimes incorrectly initiated after inline remote file renaming. 1559

• Bug fix: Connecting through tunnel to IPv6 does not work. 1553
• Bug fix: Failure when using translation on monitor with DPI that does not match system DPI. 1554

• Translation completed: Norwegian.
• Not closing an application when initial Login dialog is closed without opening session and Keep main window open when the last session is closed is on. 1552

Users upgrading from WinSCP 5.9.6 can read more about WinSCP 5.11 – what’s new?

• Translations completed: Catalan, Czech, Dutch, Finnish, French, German, Hungarian, Icelandic, Italian, Japanese, Lithuanian, Polish, Portuguese, Romanian, Simplified Chinese, Slovak, Spanish, Swedish, Traditional Chinese and Turkish.
• XML parser upgraded to Expat 2.2.3.
• Preference option Roll log files after reaching renamed to Rotate log files after reaching.
• Bug fix: Hang when showing overwrite confirmation prompt if GUI font has zero-width tab character. 1550

• SSH core and private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.70. It brings the following change:
  • Fixed yet another instance of Windows DLL hijacking. 1459 vuln-indirect-dll-hijack-3
• XML parser upgraded to Expat 2.2.2.
• Hidden configuration option for SSH bug Replies to requests on closed channels.
• Do not display error message on start when user documents folder cannot be resolved. 1547
• Bug fix: SSH bug Replies to requests on closed channels was always enabled.
• Bug fix: Clicking root folder in path label opens home folder instead of root folder. 1548
• Bug fix: Unchecking Update subdirectories for Keep remote directory up to date function was not fully working. 1549

• Host keys can be imported from OpenSSH known_hosts file. 1542
• Cached host keys are unconditionally imported with PuTTY and FileZilla sites.
• Cached host keys can be imported from PuTTY/FileZilla even when using INI file as configuration storage.
• Better error reporting when winscp.com fails to execute winscp.exe.
• XML parser upgraded to Expat 2.2.1.
• Avoiding a short hang of GUI, when waiting for edited file to be saved.
• On VMS servers, do not use absolute paths with FTP DELE command. 1546
• Bug fix: Site lists stops working when import source is changed on Windows XP.
• Bug fix: Generated code uses TransferOptions.Speed instead of TransferOptions.SpeedLimit. 1543
• Bug fix: Editor font too large on high DPI screens. 1544
• Bug fix: Uploads of saved edited files can rarely stop working. 1545

• Official extension Generate HTTP URL displays a generated URL in a message box.
• Supporting Migrated datasets in IBM z/OS MVS FTP server. 1540
• Bug fix: Copying extension command with ShowResultsInMsgBox flag to clipboard was not working.
• Bug fix: Last download target folder in Explorer interface is not remembered when transferring on background. 1538
• Bug fix: Failure when using parallel background transfers. 1541

• Background transfer operations can use multiple connections. 875
• Provisional implementation of per-monitor DPI awareness. 1521
• Find dialog is not modal when search finishes and its Focus button does not close the window.
• Found files can be downloaded and deleted on the Find dialog. 1473
• Support Microsoft Passport authentication to allow WebDAV access to Microsoft OneDrive. 1465
• Configurable path to INI file configuration storage. 817
• Changes to translations:
  • Translations are installed to Translations subfolder.
  • Unless user customizes language, automatically using the best language match each run.
  • Including all translation (30% at least) in installation, but automatically using only those that are complete (80% at least).
  • Marking the default, incomplete and invalid languages in Preferences dialog.
• Improvements to custom commands/extensions:
  • Extension output can be displayed in a message box.
  • Local custom console command output can be copied to clipboard.
  • Uploading back files modified by local custom command applied to a folder. 1526
  • The official extensions can be translated.
  • Consistency in handling errors executing local custom command.
  • Holding down Ctrl and Shift keys while running a remote custom command copies the command to clipboard instead of executing it.
• Improvements and changes to .NET assembly:
  • Using full path in FileTransferProgressEventArgs.FileName. 1531
  • Allow cancelling file transfer. 1532
  • Added Side property to TransferEventArgs. 1470
  • Masking out passwords and passphrases in .NET assembly output log. 1475 1488
  • Change: Deprecating Session.DisableVersionCheck.
  • Bug fix: Internal InvalidOperationException on each call to Session.ListDirectory. 1515
  • Bug fix: Do not invoke Session.Failed when checking for non-existing file with Session.FileExists. 1513
• SSH core and private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.69. It brings the following change:
  • WinSCP should work with MIT Kerberos again, after DLL hijacking defences broke it.
• TLS/SSL core upgraded to OpenSSL 1.0.2l.
• Session log file rotation. 18
• It is possible to skip file actually being transferred. 251
• Not indefinitely retrying transfer with FTP protocol when opening transfer channel is failing. 1169
• Handling dav:// URL. 1479
• SSH password change. 1987
• Duplication is supported with WebDAV protocol. 1508
• Improved connection time for fast connections.
• Open filter dialog when clicking the current filter in the path display. 1478
• The path display shows temporarily an implicit *.* filter when hovering a mouse over it. 1478
• Importing proxy configuration from FileZilla.
• Do not terminate path with slash in CWD FTP command for better compatibility with VMS systems. 1535
• If there is only a single private key configured in FileZilla, import it with session. 1468
• Added New > File command to the toolbar. 1477
• Cancelling calculation or errors while calculating size of files to upload does not abort the the actual transfer.
• Supporting user/group names in MLSD/MLST responses. 1481
• Allowed downloading file using URL even when listing its source directory is not possible. 1480
• Button to open Edit file mask dialog on Select and Filters dialogs. 1534
• Sending Content-Type header with WebDAV uploads. 1507
• When handling WebDAV file URL, use a display name for target local file. 1486
• Not aborting “Keep remote directory up to date” when Continue on error (or option batch continue) is enabled and reading a local directory fails, because it was deleted. 1506
• Not verifying that final path after CWD FTP command matches requested path to allow better compatibility with atypical FTP servers . 1518
• DLL hijacking protection. 1459
• Poll edited file timestamps instead of using change notifications. 1500
• Using WinSCP site name for PuTTY window title. 1482
• Allow using 64-bit version of PuTTY (and its tools), when available. 1522
• Option to open downloaded file on operation completion confirmation when transferring file from command-line/URL. 1524
• Hidden options for Preference order for GSSAPI libraries and User-supplied GSSAPI library path. 578
• Ctrl+Backspace in path edit boxes deletes the word before cursor. 1469
• Activating panel, when using file selection commands. 1519
• Displaying tunnel host name on Authentication dialog. 1528
• The SFTP server and Shell edit boxes on the Advanced Site settings dialog use path-style word-breaking.
• Not adding -load switch to PuTTY arguments, if it is configured already. 1493
• Drop-down lists on the Open Directory and Location Profile dialogs are up to 16 entries long.
• Progress window appears on top of Editor window when reloading an edited file.
• Not popping up Authentication window when reconnecting while the application is minimized. 1476
• Hidden session settings for “Logical name of remote host”. 1472
• Prevent slow startup when there are some special folders. 1533
• More readable usage statistics display.
• Update dialog can be displayed by clicking update notification even when the Login dialog is opened.
• Scaling Color button image on Advanced Site Settings dialog.
• While downloading, when an SFTP SSH_FXP_FSTAT response does not include timestamps, using known timestamps from directory listing for a local file. 1496
• Improved file transfer logging, including new progress logging.
• Change: Failing on invalid size constraint.
• When opening secondary shell session fails, the main session is not closed.
• Change: When executing script file or script commands provided on command-line, default reconnect time is set to 120 seconds, if not limited yet by configuration.
• Bug fix: The /refresh command-line switch was not described in /?.
• Bug fix: Digits-only file mask constraint was interpreted as time constraint instead of size constraint.
• Bug fix: Sudden disconnect errors during authentication are randomly ignored. 1489
• Bug fix: Queue status was not shown on taskbar button, when WinSCP was minimized by clicking on the taskbar button.
• Bug fix: Pending background transfers were not considered for progress bar on taskbar button.
• Bug fix: Configuring a PuTTY path with unclosed quotes prevents WinSCP from starting. 1499
• Bug fix: Never implemented -continueonerror switch was present in keepuptodate help
• Bug fix: Failure while reloading directory tree after a system colors had changed while the tree was not showing. 1509
• Bug fix: Clean up application data dialog was showing on wrong monitor.
• Bug fix: Resuming file upload in active FTP mode does not work on some servers. 1520
• Bug fix: Failure when INI file cannot be opened. 1523
• Bug fix: Windows logo key is not working in toolbar input boxes. 1527
• Bug fix: Toolbar icons were broken with Windows high contrast themes. 1529
• Bug fix: SFTP transfer stalls when error is received at the same time write buffer needs to be dispatched. 1536
• Bug fix: SFTP upload errors are silently ignored for small files. 1537
• Bug fix: Scripting open command without arguments issued irrelevant warning about use of stored site.

• German translation updated.
• Back-propagated some improvements and fixes from 5.10 – 5.10.2 beta releases:
  • SSH core and private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.69. It brings the following change:
    • WinSCP should work with MIT Kerberos again, after DLL hijacking defences broke it.
  • TLS/SSL core upgraded to OpenSSL 1.0.2l.
  • Allow using 64-bit version of PuTTY (and its tools), when available. 1522
  • XML parser upgraded to Expat 2.2.1.
  • Bug fix: Scripting open command without arguments issued irrelevant warning about use of stored site.
  • Bug fix: Generated code uses TransferOptions.Speed instead of TransferOptions.SpeedLimit. 1543

• SSH core and private key tools (PuTTYgen and Pageant) upgraded to PuTTY 0.68. It brings the following change:
  • Security fix: an integer overflow bug in the agent forwarding code. vuln-agent-fwd-overflow
• Translation completed: Traditional Chinese.
• Translation updated: Icelandic.
• De-duplicating Duplicate Session and Disconnect accelerators in Session menu. 1512
• De-duplicating Quit and Queue accelerators in Commands menu. 1516
• Increased length limit of host name. 1517
• Bug fix: Failure when reloading non-current directory expanded in remote directory tree. 1514
• Bug fix: Failure when moving Download and Delete operation to background. 1462

• Translation completed: Portuguese.
• Allowed setting debug logging level to 2 in .NET assembly. 1487
• TLS/SSL core upgraded to OpenSSL 1.0.2k.
• All id_* files are included in private key files filter.
• Bug fix: Cannot use unencrypted client certificate file (.pfx/.p12 format). 1490
• Bug fix: Installer started by unprivileged user shows warning about an incomplete translation again after elevation to administrator privileges. 1492
• Bug fix: Installation fails when started by a non-privileged user on a system, where elevating to administrator privileges is disabled. 1491
• Bug fix: Colored session icon does not display on high DPI. 1494
• Bug fix: WinSCP .NET assembly fails when finding WinSCP executable in its installation folder. 1495
• Bug fix: Moving Login dialog moves main window disproportionally on some systems. 1497
• Bug fix: Remembered password is not used for reconnects. 1498
• Bug fix: Keep local directory up to date extension failed, when local directory was initially empty and Delete files option was enabled. 1503
• Bug fix: Wrong message when setting TransferOptions.OverwriteMode property to an invalid value. 1504
• Bug fix: Panel loses focus after a transfer initiated using Enter key or double-click. 1505
• Bug fix: Failure when using Generate Code command on Upload dialog opened by /upload command-line parameter. 1510
• Bug fix: Some multibyte ANSI-encoded files are incorrectly loaded into an Internal editor. 1511

• Translation completed: Croatian.
• Support for non-ASCII passphrases to client certificate files (.pfx/.p12 format). 1461
• TLS/SSL core upgraded to OpenSSL 1.0.2j.
• Improvements to custom commands/extensions:
  • New official extensions “Generate HTTP URL” 417 and “Batch Rename”.
  • The official extensions are compatible with PowerShell 2.0.
  • The official extension “Find Duplicates” re-implemented using the Session.EnumerateRemoteFiles and the RemoteFileInfo.FullName.
  • Site-specific extension options.
  • Increased length limit for custom command and console. 1466
  • Allowing tabs in addition to spaces in extension file. 1467
  • Specific error messages about extensions are presented without irrelevant HTTP status code.
  • Bug fix: Tab order on extension options dialog was broken, if the extension mixed options in and out of group box.
• Progress windows can be controlled using keyboard again. 1471
• Scaling combo box drop-down menu.
• Change: Not updating last access time of uploaded files with SFTP protocol to avoid problems with servers that do not support it. 1485
• Bug fix: Found folders were focusing incorrectly.
• Bug fix: Command-line toolbar command can be executed while another command was executing already.
• Bug fix: Wrong layout of Login dialog on monitors with low vertical resolution. 1463
• Bug fix: Session instance could not be reused for multiple ScanFingerprint calls. 1464
• Bug fix: Custom commands submenu with the other custom command type was not disabled when there was no such custom command.
• Bug fix: It was possible to load again the first extension in an extension folder.
• Bug fix: Failure when logging fails for background session or during log in. 1483
• Bug fix: Failure when pressing Calculate button on Properties dialog, while another calculation is already in progress. 1484

• Translations completed: Brazilian Portuguese, Finnish, Kabyle and Ukrainian.
• Moving main window with Login dialog. 1455
• Expanding patterns in default value of extension options. 1456
• Paste command in panels context menu. 422
• When upgrading the drag&drop shell extension, silently postpone replacement until the next system restart, unless the new extension is incompatible. 1458
• XML parser upgraded to Expat 2.2.0.
• Not showing password in full open command syntax suggestion. 1452
• Using !P pattern in PuTTY command implies that password should be remembered.
• Not importing the Disable Nagle’s algorithm (TCP_NODELAY option) from PuTTY as it has a different default due to its interactive nature.
• More detailed error message when fatal error (such as inability to write an XML log file) occurs while .NET assembly is starting winscp.exe.
• Skip loading icons from .exe (and similar) files when it takes too long. 1460
• Bug fix: Long (or multiline) authentication prompts are truncated. 1449
• Bug fix: Failure during WebDAV SSPI authentication. 1450
• Bug fix: Directory listing lacks attributes on MVS systems. 1451
• Bug fix: It was possible to set site name empty.
• Bug fix: Error opening data connection over proxy server when the server supports EPSV command. 1310
• Bug fix: Ad-hoc and Last custom commands were always executed for selected files, even when executed from a context menu of a focused file.
• Bug fix: Custom command patterns were replaced in values of extension options.
• Bug fix: Downloads by drag&drop were randomly defaulted to background queue. 1457

• Translations completed: Catalan, Polish and Swedish.
• Several files can be opened in editor at once using their paths. 1437
• Change: Session.EnumerateRemoteFiles does not throw when reading subdirectory fails.
• Implemented Beep when work finishes also for Keep remote directory up to date. 1440
• Tunnel inherits SSH options from the main session. 1441
• Custom command and PuTTY patterns are case-insensitive.
• Custom sound for Beep when work finishes. 1444
• Make WinSCP default handler command opens Set Program Associations for WinSCP even on Windows 10.
• Informing, when the script file is not in supported encoding.
• Handling directory listing entries with question marks. 1448
• Bug fix: Failure when user’s Documents folder cannot be loaded on start. 1435
• Bug fix: GSSAPI authentication is not working in tunneled session. 1434
• Bug fix: Some scripting commands or command-line switches were not recognized on some locales (like Welsh) when used or defined with a mixed case (like /XmlLog vs. /xmllog). 1436
• Bug fix: When a passive file panel is focused after reload, the panel is scrolled to show the previously focused file, what can cause unintended behavior. 1438
• Bug fix: When the current console font (e.g. raster) does not support Unicode, some console output might be lost. 1439
• Bug fix: Command-line toolbar was not disabled for WebDAV sessions.
• Bug fix: The -pw argument is added to PuTTY command-line, even when !P pattern is used. 1443
• Bug fix: Certificate validation fails on Windows Vista and older. 1442
• Bug fix: Ordering of columns that are invisible by default is not preserved. 1446
• Bug fix: UTF-16 script files cannot be loaded. 1447

• SSH private key tools (PuTTYgen and Pageant) upgraded to the latest development snapshot of PuTTY (2016-07-19, commit 9398d23).
• Bug fix: Failure due to a disconnected session being left behind after opening a secondary shell session fails. 1433
• Bug fix: An URL in extension “option” with format - link caption https://www.example.com/ is ignored.

Users upgrading from WinSCP 5.7.7 can read more about WinSCP 5.9 – what’s new?

• Improvements to custom commands/extensions:
  • Run time options for extensions.
  • Extension can require specific PowerShell and Windows version.
  • Extension option controls can be grouped using @option - group.
  • Command-line switch /refresh to allow extensions to refresh remote panel.
  • Extension option aliases sessionlogfile and pausecheckbox.
  • It’s possible to use an empty parameter in extension options metadata.
  • Not displaying ellipsis in the Custom command options dialog title.
  • Using path word-breaking for file extension options.
• The %TIMESTAMP% syntax allows formatting time strings for a time relative to present time.
• Autodetect FTP server timezone difference before file transfer, if it was not detected yet. 1431
• SSH core and private key tools (PuTTYgen and Pageant) upgraded to the latest development snapshot of PuTTY (2016-06-03, commit 7b9ad09)
• Removing old putty.hlp when upgrading.
• When opening a session in an existing instance of WinSCP, any idle instance can be used, not only the latest one.
• PuTTY is started with its executable directory as working directory to allow relative private key paths in PuTTY’s stored sessions. 1430
• When opening WinSCP session in PuTTY, expanding the relative paths.
• Providing more details when verification of the TLS certificate against Windows certificate store fails.
• Checkbox to remember the new directory settings is disabled when the protocol does not allow any.
• Bug fix: The dialog box to enter new local directory name included useless permissions box.
• Bug fix: Failure when SCP server fatally fails while uploading file. 1428
• Bug fix: Failure when closing application after giving up trying to reconnect a broken connection.

• Translation added: Icelandic.
• Improvements to .NET assembly:
  • Added Session.TranslateLocalPathToRemote to .NET assembly to generate a remote path equivalent of a local path, given root paths.
  • Change: A complete remote error message is stored into a single instance of SessionRemoteException, instead of separating error details into an inner exception.
  • Preventing .NET assembly from timing out during lengthy file transfers.
  • Preventing winscp.com and .NET assembly timing out waiting for winscp.exe when the system is temporarily busy.
  • Bug fix: Session instance could not be used anymore after calling ScanFingerprint.
  • Bug fix: Failure when Session.MoveFile source file is not existing and its name has file mask-like syntax. 1412
  • Bug fix: WinSCP .NET assembly cannot find WinSCP executable in its installation folder nor the default installation folder when used in 64-bit process. 1421
• SSH core and private key tools (PuTTYgen and Pageant) upgraded to the latest development snapshot of PuTTY (2016-04-17, commit b22c0b6). It brings following changes:
  • Promoting ChaCha20 cipher above Blowfish (below AES).
  • Change: Fallback between SSH versions is not supported anymore.
  • Change: By default, warning is issued when using Diffie-Hellman group 1 key exchange algorithm.
• Improvements to custom commands:
  • Extensions are configurable.
  • Local path pattern (!\) for custom commands.
  • All custom command prompts are entered on one dialog box.
  • Separating custom commands that do not operate with files to a separate submenu of Commands menu.
  • Holding down Ctrl and Shift keys while running a local custom command copies the command to clipboard instead of executing it.
  • Displaying full command name in custom command preferences list. The keyboard shortcut now displays in a hint only.
• Installer upgraded to Inno Setup 5.5.9.
  • Further installer protection against potential DLL preloading attacks.
• TLS/SSL core upgraded to OpenSSL 1.0.2h.
• Dynamically increase TCP send buffer on fast connections.
• Removed log window.
• With synchronized browsing on, the Home Directory command opens home directory in both panels. 1427
• The Follow symbolic links to directories session option is disabled with WebDAV protocol as it has no effect.
• When detecting time zone difference of FTP server, ignoring files with timestamp in the future, as they have high probability of being wrongly interpreted.
• Preventing mouse cursor flashing while deleting remote files or changing their properties over SFTP protocol.
• Change: Consider port number for site-specific caches and bookmarks. 1411
• Indenting Allow GSSAPI credential delegation checkbox to make it clear it is an suboption of Attempt GSSAPI authentication
• Disabling Username and Password boxes on a Login dialog when Bypass authentication entirely is enabled.
• Considering items out of the current view when sizing dialogs list columns.
• Ignoring blank lines in ls command output. 1416
• Installing PuTTY help file in modern .chm format.
• Showing details about TLS handshake errors.
• Use seconds in *nix-like LIST FTP listing, if the server provides them. 1422
• The lls command shows timestamps in respect to DST the same way as local file panel (and Windows Explorer).
• Bug fix: Downloads by drag&drop were randomly defaulted to background queue.
• Bug fix: Using precise timestamp of the uploaded file version was not working when a relative path was used in automation.
• Bug fix: Authentication parameters options were not disabled when Bypass authentication entirely is enabled.
• Bug fix: In rare cases a Download and Delete operation might have been incorrectly used instead of Download when dropping files to Windows Explorer with drag&drop shell extension enabled. 1414
• Bug fix: Failure when system-wide settings change while panel is being reloaded. 1415
• Bug fix: Support for FTP servers with Windows-like paths (fixed again after broken in 5.8.2). 1074
• Bug fix: When user profile is stored on UNC path and the first drive is hidden, local panel starts empty. 1417
• Bug fix: Failure when disconnecting the last drive while the previous drive is not ready. 1418
• Bug fix: Command syntax suggestion, when using saved site in batch script, included RTF code.
• Bug fix: The stat command on FTP server may return wrong times, if the ls command was used before.
• Bug fix: Transferring newer files only did not work with FTP protocol.
• Bug fix: Autodetected time zone difference for servers not supporting MLST command was not taken into account for time on overwrite confirmation dialog. 1424
• Bug fix: When dropping files on another session tab, the Duplicate via local temporary copy option could be unchecked (and was initially unchecked), leading to the file being duplicated incorrectly within the current session.
• Bug fix: Failure when dragging a symbolic link to a directory between sessions. 1425
• Bug fix: When parsing timestamps in MDTM command response, second and minutes after zero hour (or minute) were ignored.
• Bug fix: Detect symbolic link loops when finding files (improved to cover more complex symbolic link structures). 1093

• SSH core and private key tools (PuTTYgen and Pageant) upgraded to the latest development snapshot of PuTTY (2016-03-05, commit 8e41e0a)
• TLS/SSL core upgraded to OpenSSL 1.0.2g.
• When FTP server does not provide precise timestamp, but the timestamp otherwise matches timestamp of the last uploaded version of the file, using precise timestamp of the uploaded version instead. 1395
• Improvements to code/script generation:
  • Script or .NET assembly code can be generated for file transfers.
  • Suggesting command-line to use to execute generated script.
  • Using -Property switch to initialize SessionOptions properties in PowerShell.
  • Not using my prefix for VB.NET variables.
  • No redundant declaration of instantiated object variables type in VB.NET.
  • Not highlighting script strings.
  • Larger initial size of Generate URL/Code dialog, when starting on Script/Code page.
  • Bug fix: Session timeout was incorrectly set in seconds, instead of milliseconds.
  • Bug fix: Generate Code dialog could not be closed with Esc key.
• Improvements to the installer:
  • The installer requests UAC elevation when started non-elevated. 646
  • When the UAC elevation is denied by the user, the installer defaults installing to the user profile folder.
  • The installer is not showing Select Setup Language dialog when it supports the current Windows UI language.
  • Individual help link for each installer page.
  • Correcting layout of the Finished page.
  • Not warning on incomplete translation during silent installation.
  • Bug fix: Wrong message shown in an installer when it cannot continue because previous installation/uninstallation was not completed.
• Improvements to custom commands:
  • Custom commands can be distributed in a form of WinSCP extension.
  • Distributing Verify Checksum, Search Text 903 and ZIP and Upload .NET assembly examples as official WinSCP extensions.
  • Including .NET assembly to the deployment to support these extensions.
  • Local custom commands for local files. 1396
  • Change: Remote custom commands cannot be executed with focus on local panel.
  • Removed D/R column from Commands page of Preferences dialog to save space for Name and Command columns.
  • Hint displays Commands page of Preferences dialog with full custom command name, keyboard shortcut and command.
  • Local custom commands that work with list of files do not block the interface.
  • Bug fix: Local custom commands that do not work with files froze the interface.
• Tooltips display for 20 seconds.
• Enhanced tooltips (aka ScreenTips).
• Retrieving seconds-precision timestamps using MDTM command, if the server provides them. 1221
• Improvements to .NET assembly:
  • Method Session.ScanFingerprint to scan server’s hostkey or certificate fingerprint. 1394
  • TransferOptions.ResumeSupport is settable and TransferResumeSupport is constructable.
  • Setting TransferResumeSupport.Threshold automatically sets State to Smart.
• Application update information window has title Check for Updates instead of generic Information.
• Free bytes for user can be displayed for IIS FTP server with FTP Directory Browsing > Directory Listing Options > Available bytes option enabled.
• Preventing interruption of file renaming by automatic operations (such as an automatic remote panel refresh). 1399
• Compatibility with FTP servers whose path does not start with a slash (such as IBM VMS or MVS). 1400
• Do not list remote directory when uploading file using FTP protocol with overwrite confirmations off. 1403
• Support for FTP directory listings with name only. 1401
• Verify TLS certificate against cached fingerprints before Windows certificate store. 1402
• Optionally following symbolic links to directories during file operations. 51
• The Make WinSCP default handler command opens Set Default Programs page in Control Panel.
• Returning an error exit code (1) when user aborts the script. 1404
• Returning an error exit code (1) when watching for directory changes fail (keepuptodate).
• Logging that user aborted the script in XML log. 1406
• Remembering a password for a duration of a session by default. 1409
• Right justifying hidden and filtered counters on Commander interface.
• Not showing 0% percent hint on the Progress dialog while calculating a transfer size.
• Linking background confirmations options from the generic options. 1408
• Transfer settings and path label hint popups use the same font as the underlying label and align with it.
• Bug fix: Error when accessing a local directory junction on Windows XP/2003. 1392
• Bug fix: The /loglevel switch did not apply when used with pre-configured log file
• Bug fix: SSPI/NTLM/Negotiate authentication is endlessly retried with WebDAV protocol. 1397
• Bug fix: User is not informed when SSPI/NTLM/Negotiate authentication fails.
• Bug fix: Remote panel refresh interval could be set to zero.
• Bug fix: SFTP/SCP sessions cannot be connected to over proxy. 1405

• SSH core and private key tools (PuTTYgen and Pageant) upgraded to the latest development snapshot of PuTTY (2015-12-22, commit 51465fa). It brings following changes:
  • Support for ChaCha20-Poly1305 authenticated encryption. chacha20-poly1305
  • Support for Curve25519 key exchange. curve25519
  • Support for ECDSA keys in PuTTY and PuTTYgen. 1390 ecdsa
  • Support for Ed25519 user and host keys. ed25519
  • WinSCP prefers host-key types it already has cached or configured (in scripting). hostkey-prefer-cached
  • Support for OpenSSH encrypt-then-MAC scheme. encrypt-then-mac
  • Support using public-only key files.
  • Support for OpenSSH’s new key format.
• Support for DER encoded binary certificates. 1388
• Correcting DST adjustments of FTP timestamps by IIS FTP server. 1380
• Dual code signing binaries with both SHA-1 and SHA-256.
• Improvements to code/script generation:
  • Syntax highlighting for generated code.
  • Command-line switches, script commands and their switches, and .NET assembly classes, methods and properties in generated code link to online documentation.
  • Warning when a server hostkey is not known when generating a code.
  • Not including the /console switch in a generated command-line.
  • Separate display for an executable path, when generating a command-line.
  • Using # for comments as on the Wiki.
  • Made it obvious that a path to log file in generated code needs to be set to a real writable path. 1391
• Installer upgraded to Inno Setup 5.5.8.
  • A Welcome Screen has been removed.
• Using actual system language name on About dialog if the name is not provided by a (uncomplete) translation.
• Closing application when Login dialog opened after handling URL with “save” extension is canceled.
• Change: Deprecating Session.IniFilePath in favor of Session.AddRawConfiguration.
• Prolonging countdown only after mouse moves substantially over message box with “timeout” button. 1386
• More user-friendly error message when a wrong passphrase is used for a client certificate.
• When a passphrase for a client certificate is not provided, the authentication continues.
• Identifying as WinSCP (including version) in FTP CLNT command
• Sending FTP CLNT command even to FileZilla FTP server.
• Smarter merging of new encryption and KEX algorithms to existing preference lists.
• Change: Not allowing SSH-1 by default.
• Moving SSH-1-only options to less prominent positions on Advanced Site Settings dialog and removing SSH-2-only designations of session options.
• Refreshing download link when automatic update fails.
• Closing update window after displaying error message for automatic update.
• Bug fix: When opening ssh:// URL in PuTTY or handling URL with a save extension, a main window was opened.
• Bug fix: Missing help link for Internal Editor page of Preferences dialog.
• Bug fix: Alt+D and Ctrl+L keyboard shortcuts on Commander interface in Location profiles bookmark mode do not focus the Local directory box, when a local panel has focus.
• Bug fix: Script and .NET assembly code tabs were not hidden on Generate file URL dialog.
• Bug fix: Timeout when uploading to FTP over TLS and proxy when the FTP server responds with 1xy before proxy connection is processed. 1381
• Bug fix: Failure when displaying hint on color menu. 1382
• Bug fix: Failure when transferring files from command-line. 1383
• Bug fix: Failure on exit.
• Bug fix: Wrong background color of some progress windows parts when system themes are disabled. 1384
• Bug fix: Failure when displaying hint on floating toolbar. 1385
• Bug fix: Failure when connecting using FTP with empty password. 1387
• Bug fix: Too long automatic bug reports were rejected.
• Bug fix: Failure when reading a private key from a .pem file fails.
• Bug fix: An open scripting command for FTP session with encrypted client certificate without passphrase but with password is silently ignored.
• Bug fix: Assertions in Pascal code were present in release binaries.
• Bug fix: “Browse for folder” icon in installer overlaps labels on high DPI.
• Bug fix: Installer images did not scale correctly

• Authentication with TLS/SSL client certificates. 921
• Redesigned Progress and Synchronization progress windows.
• WebDAV file locking. 1315
• Opening the initial Login dialog over the main window.
• Automatic updates (for donors only).
• Updates are checked over an encrypted HTTPS connection.
• Showing tips on using the application.
• Improvements and fixes for large font/high DPI environments:
  • Toolbar, menu and dialog images for 125%, 150% and 200% zooms (120, 144, and 192 DPI respectively). 1302
  • Scaling toolbar drop-downs.
  • Scaling menu and toolbar details (submenu arrows, drop-down arrows, drag handles, checkmarks, radio-button marks, color palettes).
  • Scaling status bars on Synchronization checklist and Find windows.
  • Scaling drop-down button arrows.
  • Correctly scaling file icon on Properties dialog.
  • Scaling application icon on About dialog.
  • Scaling images in installer.
  • New application icon sizes.
  • New installer icon sizes.
  • New desktop icon sizes for site, site folder and workspace.
  • New Console, Editor, Log, Find and Synchronization checklist windows icon sizes.
  • Scaling icon overlays.
  • Own scaled icons for message boxes.
  • Using scalable system window resize grip.
  • Preventing system from scaling windows when moving them between displays with a different DPI.
  • Scaling Synchronization checklist action column.
  • Scaling menu lists.
  • Scaling hint window.
  • Scaling Up/Down buttons width on numerical inputs.
• SSH core upgraded to PuTTY 0.66.
• Improved transfer speed:
  • with SFTP and SCP protocols when CPU is limiting factor.
  • with SFTP on high latency connections. 1295
• Improvements to scripting, command-line and .NET assembly:
  • Change: Script file has to be in UTF-8 encoding.
  • Command-line interface for converting and editing private keys. 1331
  • Script or .NET assembly code template can be generated in GUI. 1010
  • Allowing manual verification (with timeout) of SSH hostkey/TLS certificate in batch mode in scripting.
  • Added Session.EnumerateRemoteFiles method that can enumerate remote files and directories recursively. 1356
  • Switch -latest for get and put commands to transfer the latest file only.
  • Added a FullName property to the RemoteFileInfo class.
  • Resume and Append (TransferOptions.OverwriteMode) in .NET assembly. 1358
  • The open command in scripting can open FileZilla stored site.
  • Showing full open command syntax suggestion, when using saved site in batch script.
  • Change: The RemoteFileInfo.Name now contains a name only, even for a RemoteFileInfo instance returned by the Session.GetFileInfo.
  • Added properties IsThisDirectory and IsParentDirectory to RemoteFileInfo class.
  • Added Session.CombinePaths utility method as remote path equivalent of Path.Combine.
  • Added Session.TranslateRemotePathToLocal to generate a local path equivalent of a remote path, given root paths.
  • Supporting impersonated IIS environment with .NET assembly. 1334
  • Protocol prefix ftpes:// for FTP over explicit TLS/SSL.
  • Change: Deprecating Session.DefaultConfiguration in favor of Session.AddRawConfiguration.
  • Change: SessionOptions.SshPrivateKeyPassphrase renamed to SessionOptions.PrivateKeyPassphrase.
  • Not re-reading XML log when end of the file is reached to optimize performance. 1287
  • Parameter /loglevel documented in usage.
  • Removed deprecated .NET assembly options FtpSecure.ExplicitTls and FtpSecure.ExplicitSsl.
  • Warning when useless command-line parameters are specified in scripting.
  • Not offering host key verification in scripting if configuration is not persistent.
  • Suggesting use of -hostkey switch in host key verification prompt in scripting.
  • Session can be named using /sessionname= command-line switch. 1373
  • Resetting 10 seconds input timeout every time a key is pressed in scripting batch mode. 1347
• Optionally not closing the application after the last session closes. 857
• Optionally preserve timestamps of directories with SFTP protocol. 94
• Change: Interface theme is not configurable anymore. Only single theme is supported.
• Selected private key files in OpenSSH or ssh.com format can be automatically converted to PuTTY format. 22
• Allowing selection to start in the first column of file panel.
• Change: Change of language on run-time is not supported anymore.
• Session name (!N) and port number (!#) patterns for custom commands and terminal client path. 1346 1020
• Configurable internal editor font color and default background color. 1326
• Change: Using UTF-8 for strings (such as password) with SSH protocol. 1014
• Using REST command to resume upload with FTP protocol. 552
• Incremental site search can be restricted to the beginning of site name only or expanded to other site fields. 1348
• Files can be dropped on queue list. 1281
• Including all at least 80% translations into installer. Informing user when incomplete language is selected when installing.
• Displaying Owner file property with WebDAV protocol.
• Save All function in Internal editor. 1327
• Masking out passwords when logging command-line. 1344
• TLS/SSL core upgraded to OpenSSL 1.0.2e.
• Installer upgraded to Inno Setup 5.5.6.
• Enabled IPv6 with FTP by default. 1310
• Support for long local paths when deleting local file. 1352
• Animation on Find dialog and Authentication progress window.
• Displaying mod_dav executable property.
• Reloading site list when opening Login dialog to open additional session. 1322
• Handling ssh:// URLs and opening them in PuTTY. 1305
• Optionally trimming VMS version numbers from filenames during transfer. 1312
• Caching fingerprints of last verified host keys so they can be used in Generate URL function on Login dialog already.
• Download/Upload and Delete command moved to Download/Upload submenu 1279 and Edit With menu moved to Edit submenu. Edit With submenu is newly available on Edit toolbar button.
• Added Download/Upload in Background commands to respective menus. 1280
• Keyboard shortcuts Ctrl+L and Alt+D to focus Address toolbar (Explorer interface) or open bookmarks (Commander interface). 1303 Change: Shortcut of command Clear Selection changed to Shift+Ctrl+L.
• Commands to select/unselect all files with the same extension. 1286
• Inserting -load argument of PuTTY before custom user arguments. 1351
• New image for Find command and dialog.
• New images in an installer.
• About dialog lists all current and past translators.
• Warning when transferring multiple files to same name. 1282
• Hint user about possible reasons of SFTP code 4 error. 1285
• Platform SDK is no longer required to build 64-bit drag&drop shell extension.
• Increasing initial/minimal SFTP transfer packet size.
• Improving layout of installer Completing page of for long translations.
• Display parent directory in file panel even if the server does not include it in directory listing. 1298
• Showing only folder, not files, on Progress window, when calculating transfer size.
• Avoid flickering busy mouse cursor while calculating transfer size or collecting changes for synchronization.
• Showing localized language name on description of Typical installation.
• Added icon for Cancel All queue command.
• Correcting labels and hints for color commands in an internal editor.
• Session color can be set to black.
• Not showing percentage progress for indeterminate Directory size calculation.
• Preferences window opens with focused navigation tree.
• When Cancel is pressed on Progress window before moving transfer to background finishes, transfer is canceled.
• Disabling Proceed to Background once Cancel is pressed on Progress window.
• Added icon for queue Speed command.
• Desktop icons created by an installer show application description.
• Not showing details about retrieving time zone information on Authentication progress window.
• Using delete icon on site/site folder/workspace delete confirmation prompts.
• Showing error message when neon library initialization fails.
• Prompt for username even with GSSAPI authentication enabled. 1349
• Providing error details when deleting a local file fails.
• Using printenv instead of echo to obtain a value of the LANG environment variable. 1354
• Logging clear Authorization header when password logging is enabled.
• Explaining that certificate cannot be verified against hostname if IP address is used to connect to the server. 1359
• Translation specific GUI elements orientation is not followed by default.
• Updated to JCL library 2.7.
• Using Save dialog instead of Open for selecting log file and random seed file paths.
• Icon on New version message.
• Minimize buttons on Console and Synchronization checklist windows enabled.
• Informing the user when a connection fails because an FTP connection was attempted to an SFTP server.
• Increase length limit of site note to 4000. 1372
• Wrapping too long entries in authentication log to avoid horizontal scrollbar.
• Disambiguated commands in Once Done/Empty menus. 1375
• Encoding all non-ASCII characters in URLs to allow posting bug report and searching for message using web browsers that do not default to UTF-8 encoding for URLs (like Internet Explorer).
• Wider menu spacing.
• Bug fix: Speed limit history is not relocalized when language is changed. 490
• Bug fix: Not showing symbolic links to directories as a difference on synchronization checklist as they are not synchronized anyway.
• Bug fix: When restoring an application from minimization, progress windows did not get activated.
• Bug fix: Preventing active window title flickering before opening Preferences dialog.
• Bug fix: Failure when opening WebDAVS session, if SSPI initialization failed (such as when running under Wine).
• Bug fix: When window is closing, its icon is hidden momentarily.
• Bug fix: WebDAV redirect loop was not detected on the first redirect.
• Bug fix: Error when SFTP server responds to upload (write) requests out of order. 1365
• Bug fix: Duplicated ad-hoc session from workspace is wrongly named.
• Bug fix: Cannot work with filenames starting or ending with space with FTP protocol. 26
• Bug fix: Failure or broken synchronized browsing when changing directory while another command was executing already. 1369
• Bug fix: Showing a command of a custom command in status bar. 1370
• Bug fix: Commander panel ratio lost after swapping panels.
• Bug fix: Minimize buttons on Login and Find windows did not minimize the application.
• Bug fix: Failure when closing window while some command was executing.
• Bug fix: When Authentication window is resized smaller, prompts get truncated.
• Bug fix: URL is generated incorrectly for a file with a space in a path. 1374
• Bug fix: Failure when a local drive is removed. 1376
• Bug fix: For a stored site with special characters, it was not possible to open/duplicate a session in a new instance, desktop shortcut had wrong name and desktop shortcuts/jump list entries were not working.
• Bug fix: Failure when the current local directory is deleted while session is disconnected and synchronized browsing is enabled. 1378
• Bug fix: Failure when using Close all windows taskbar function with opened and active internal editor. 1377

• TLS/SSL core upgraded to OpenSSL 1.0.1s.
• Upgraded private key tools (PuTTYgen and Pageant) to 0.67.
• Dual code signing binaries with both SHA-1 and SHA-256.
• Bug fix: Failure when Progress window closes (transfer finishes) while Once done drop-down menu is opened. 1379
• Bug fix: Too long automatic bug reports were rejected.
• Bug fix: File masks with time constraints do not work with remote WebDAV files. 1389
• Bug fix: Installation fails when there is no user Start menu. 1398

• Translation completed: Spanish.
• Upgraded private key tools (PuTTYgen and Pageant) to 0.65.
• Workaround for ProFTPD using cdir type in MLST response when retrieving listing for a current working directory. 1350
• Workaround for FTP servers that incorrectly use RFC 2228-style response to MLST command. 1360
• Perform TLS/SSL handshake on transfer connection immediately when connected to Idea FTP server (home.pl). 1357
• Recognize WebDAV folder by trailing slash in its path, if the server does not provide DAV:collection tag. 1362
• Limiting Session.Output size not to waste memory with large sessions. 1367
• Bug fix: Failure when spinning a mouse wheel over a Find/Replace dialogs of Internal editor. 1353
• Bug fix: Failure when dropping files from application that fails to provide CF_HDROP. 1361
• Bug fix: Failure when Windows session is closing while no session is connected. 1363
• Bug fix: Cannot download root folder from an FTP server that does not support MLSD or SIZE and MDTM commands. 1364
• Bug fix: Queue setting on Copy dialog is lost when different transfer setting preset is selected.
• Bug fix: File timestamps are incorrectly adjusted for autodetected positive time zone difference. 1366

• Translation completed: Catalan.
• TLS/SSL core upgraded to OpenSSL 1.0.1p.
• Supporting the RFC 4419 revision to Diffie-Hellman group exchange. 1345 rfc4419
• Workaround for Cerberus SFTP server incorrectly indicating end of directory listing. 1338
• SHA-256 hash of binaries provided in release notes.
• Aligning Save button with Edit button on Login dialog.
• Bug fix: Failure or timeout when Execute button on Console window was clicked while another command was executing already. 1339
• Bug fix: Switches do not work with aliases to scripting commands. 1340
• Bug fix: Failure when trying to manipulate files in nonexisting directory in “batch continue” scripting mode. 1314
• Bug fix: It was not possible to configure Time zone offset for SCP protocol. 1343
• Bug fix: When time zone difference is autodetected with legacy FTP server, timestamp precision is not taken into account when comparing timestamps (e.g. for synchronization). 1342

• Translations completed: French and Ukrainian.
• TLS/SSL core upgraded to OpenSSL 1.0.1o.
• Not using directory include masks recursively when finding files. 1329
• Recognizing UTF-8 encoded localized German month names in FTP LIST command results. 1328
• Bug fix: Relative path of find results is shown incorrectly when finding from root folder. 1330
• Bug fix: Failure when switching sessions with session log window opened. 1333
• Bug fix: Session and log file information on Log window is not updated when switching session.
• Bug fix: Reference to parent WebDAV directory shows incorrectly when a name of the current folder includes special characters. 1335
• Bug fix: History of some inputs is not saved. 1336
• Bug fix: Incorrect behavior when retrying connection after listing of initial remote directory fails.
• Bug fix: When panel drive/path comboxes box do not cover whole toolbar height, the change Drive/Directory command do not work.

• Using FTP command SIZE in binary mode. 1292
• Optionally determining local file icon by extension only. 1325
• Ensuring that sessions to be opened in a new window do not get actually opened back in the existing window.
• Bug fix: SFTP transfers fail occasionally. 1321
• Bug fix: Controls occasionally do not align correctly after restoring maximized window from minimization. 1309
• Bug fix: Embedded session is not opened. 1311
• Bug fix: SCP session breaks when an output includes a null character. 1313
• Bug fix: Error retrieving file attributes with FTP protocol when the path is given with trailing slash. 1314
• Bug fix: Sort arrow was shown on unsortable Find dialog.
• Bug fix: File mask with size constraint over 4 GB does not work. 1318
• Bug fix: When dragging files from local panel to local tree, status bar is not updated. 1319
• Bug fix: Local directory tree does not show newly created folder. 1320
• Bug fix: Local directory tree stops reflecting changes after creating new folder.
• Bug fix: Failure when HTTPS WebDAV URL redirects to HTTP. 1323
• Bug fix: Certificate validation fails, when HTTP WebDAV URL redirects to HTTPS.
• Bug fix: Some redirected WebDAVS connection error messages show original host name instead of the actual host name.
• Bug fix: WebDAVS certificate failure override for redirected session is stored for original host name.
• Bug fix: During file transfers on FTP servers that do not support MLSD command, file details are not provided on overwrite confirmation prompt and transfer progress is not shown correctly. 1324
• Bug fix: Edit commands on all Internal editors reflect state of the currently focused editor, instead of their editor.

• Reporting relative addresses in stack trace.
• Bug fix: SFTP/SCP transfers occasionally time out. 1306
• Bug fix: Fail gracefully when internal command generated by WinSCP .NET assembly is too long. 1297
• Bug fix: Failure when “downloading and deleting” an empty remote directory with .NET assembly. 1299
• Bug fix: When overwriting configuration export, new configuration is appended, instead of replacing the previous export. 1300
• Bug fix: When listing WebDAV directory using relative path, the listing includes a reference to the directory itself. 1301
• Bug fix: Failure when pressing help icon while no control has focus. 1304
• Bug fix: Failure when closing log window during activity.
• Bug fix: Incorrect encoding of SSH_FXP_REALPATH. 1308

• Translations added: Croatian, Finnish, Korean and Polish.
• Upgraded private key tools (PuTTYgen and Pageant) to 0.64.
• TLS/SSL core upgraded to OpenSSL 1.0.1m.
• Not requiring confirmation when canceling an operation.
• Import of Base64-encoded passwords from FileZilla.
• Progress window uses Skip button instead of Cancel when calculating transfer size. 1296
• Workaround for ProFTPD mod_sftp bug in SSH_FXP_REALPATH handling with SFTP version 6. 1289
• Not asking for master password repeatedly when opening Generate URL dialog. Not asking at all unless user chooses to include password into URL.
• More space for information about translators.
• Bug fix: Back-propagated SSH security fixes from PuTTY 0.64.1 private-key-not-wiped-2 diffie-hellman-range-check
• Bug fix: Failure when working with stored sites when a temporary hidden site for interprocess communication is not properly removed.
• Bug fix: Overwrite confirmation prompt displays name of source file instead of target file, when file name changes, with SFTP, SCP and WebDAV protocols. 1290
• Bug fix: Transfer was not resumed after moving the transfer to the background when source and target file name differs with FTP protocol.
• Bug fix: Failure when trying to open another externally initiated session while externally initiated session is opening.
• Bug fix: It is not possible to configure certificate accepting with WebDAV protocol in .NET assembly. 1284
• Bug fix: User and group name is not decoded properly from UTF-8 encoding with SFTP version 3 and older. 1288
• Bug fix: When calculating size of files to transfer is canceled, not using the incomplete results to estimate transfer progress.
• Bug fix: When local custom command is applied to a remote folder, it is unconditionally uploaded back after the command finishes. 1294
• Bug fix: Calculation of transfer size could not be moved to background.

• Translations added: Czech, Dutch, German, Italian, Japanese, Lithuanian, Norwegian, Romanian, Russian, Simplified Chinese, Slovak, Swedish and Turkish.
• Requesting FTP directory listing fields using OPTS MLST, if the server does not provide all needed fields by default. 1267
• Support for MD5 FTP command.
• Executable winscp.exe is included in .NET assembly package.
• Logging level and password logging can be set on command-line using /loglevel switch.
• Logging parsed command-line and script command parameters on Debug 1 level.
• Size of connection receiving buffer increased. 1273
• TLS/SSL core upgraded to OpenSSL 1.0.1l.
• Reducing amount of detailed information shown on Authentication Progress window for FTP sessions.
• Adjusting message box size for icons scaled on Windows 8.1 and newer.
• Not using drag images. 1274
• Logging processes and performance counters in .NET assembly debug log, only when Session.DebugLogLevel is 1.
• Not logging value of -passphrase switch of open command. 1277
• Bug fix: After several unsuccessful reconnects a resumed FTP file download starts from an initial remote folder, instead of correct source folder. 1268
• Bug fix: When sorting local files modified at the same time by modification time, sort direction is not considered when falling back to sorting by filename. 1269
• Bug fix: Command could be invoked in the middle of creating directory or navigating. 1272
• Bug fix: It was possible to drop on a file with drop handler in local panel with enabled drag&drop shell extension, although it cannot work with drop handlers.
• Bug fix: Failure when dropping on a file with drop handler in local panel with disabled drag&drop shell extension.
• Bug fix: Failure when running in a restricted environment. 1276
• Bug fix: Confirmation button on Read to Install and Finished installing installer screens was incorrectly labeled Next.
• Bug fix: Order of sessions in workspace with more than 10 sessions is not preserved. 1278

Users upgrading from WinSCP 5.5.6 can read more about WinSCP 5.7 – what’s new?

• Local custom commands can optionally be executed with remote file paths. 510
• TLS/SSL core upgraded to OpenSSL 1.0.1k. Fixing several security defects.
• Change: Session.CalculateFileChecksum method returns a byte array instead of a string to match .NET framework cryptography functions.
• Never doing transfer via temporary file when overwriting a file known to be owned by another user. 1260
• Never automatically refresh a file panel while menu is opened or file is being dragged. 1262
• Loading files ownership before showing Properties when connected to Bitvise SFTP server.
• Meaningful error message when a cipher or a key-exchange algorithm is not verified.
• Using term “Sleep” instead of “Suspend” as used by Windows Vista and newer.
• Bug fix: Location profile folders are duplicated. 1259
• Bug fix: Command could be invoked while keeping session up to date. 1263
• Bug fix: Wrong syntax of SHA-1 cipher name in checksum command help.
• Bug fix: Default configuration was recreated after user chose to cleanup configuration during uninstallation.
• Bug fix: Failure in scripting one some rare prompts. 1264
• Bug fix: Failure when file panel autorefresh is triggered while directory is being read. 1265
• Bug fix: Could not connect to FTP server over a proxy with Force IP address for passive mode connections set to On. 1266

• Automatic reconnect during listing of remote directory. 25
• Remembering the last working directories in a workspace. 1165
• Improvements to calculating remote file checksum:
  • Checksum support for FTP using HASH/XSHA1/XSHA256/XSHA512/XMD5/XCRC commands. 1242
  • File checksum can be calculated in scripting (checksum command and XML log entry) and .NET assembly (Session.CalculateFileChecksum method). 1246
  • Using IANA checksum algorithm names.
  • Calculate checksum button on Properties dialog becomes the default button when Algorithm box has focus.
• Supporting AVBL and XQUOTA commands to retrieve information about space available of FTP server.
• Home path can be resolved in .NET assembly using Session.HomePath. 1248
• Site tree on Login dialog responds to mouse wheel even when not focused. 846
• Custom command pattern !S that expands to session URL.
• SessionOptions.ParseUrl method in .NET assembly.
• Cancel all command for Background transfer queue list. 602
• Supporting IIS WebDAV Translate header to allow downloading source files and files with unknown MIME type. 1255
• Supporting FTP HOST command (RFC 7151). 1166
• Keep remote directory up to date dialog can be minimized to tray, even when minimizing to taskbar is used for the application. 139
• Prolonging countdown instead of suspending it when moving mouse over message box with “timeout” button. 1107
• File ownership is available in .NET assembly and XML log. 1245
• Improved automatic sizing of columns in various lists.
• Items with unknown value on Space available tab of Server and protocol information dialog are shown dimmed.
• Change: Considering directories to have zero size, when matching file masks or sorting by size, even when the server reports size for the directory, to achieve consistent behavior.
• Further compatibility improvements with FTP servers:
  • Workaround for malformed FEAT response of older versions of IIS FTP Server and WS_FTP server.
  • Bug fix: Cannot upload file to directory when FTP server returns 4xx/5xx response to directory listing request after allowing (typically empty) listing transfer (old versions of IIS FTP server). 1249
• Replaced FtpSecure.ExplicitTls .NET assembly option with FtpSecure.Explicit and deprecated FtpSecure.ExplicitSsl.
• Using Yes/No, instead of OK/Cancel on sites import confirmation during installation not to make an impression that rejecting the import cancels the installation.
• Logging when a symlink to a directory is skipped while downloading.
• Using standard formatting of IPv6 literals in session URL (instead of URL-encoding them).
• Displaying hint when F5 keyboard shortcut is used for the first time on Commander interface. 1254
• Bug fix: Parameters /help and /batchsettings were not working with winscp.com.
• Bug fix: Command could be invoked using keyboard shortcut in the middle of reloading directory. 1256
• Bug fix: Reason not given when FTP upload fails because local file attributes cannot be retrieved. 1250
• Bug fix: FTP upload fails when volume information for local drive cannot be retrieved. 1251
• Bug fix: Size of directories was reported as -1 for some FTP servers.
• Bug fix: Invalid stored FTP password was tried indefinitely in a loop. 1252
• Bug fix: Ad-hoc session duplicated to a new window had no name.
• Bug fix: Failure when dropping files to an external application via a temporary directory with an automatic refresh of a remote directory enabled. 1253
• Bug fix: Pasting permissions when Octal box has focus does not update the box itself. 1257
• Bug fix: Mouse cursor is hidden when hovering over progress window during download via temporary directory. 1258

• Improved GUI responsiveness (with SFTP, SCP and FTP protocols). 1237
• Sites can be mass-modified using /batchsettings command-line parameter. 1236
• Use default transfer mode for edited files, except when using Notepad. 1239
• Added method Session.AddRawConfiguration to configure any global configuration option. 876
• Optionally logging even sensitive information (such as passwords).
• Consistently logging transferred bytes for every transferred file.
• Improving protection from undesired modifications of local files when handling URLs from browser while relieving restriction on combining URLs on command line with some switches, such as /log, /xmllog and /defaults. 916
• The failonnomatch option applies also to ls and lls command. 1172
• Replaced -explicittls command-line parameter and switch of open command with -explicit and deprecated -explicitssl.
• Change: lls by default only displays a notification that no matching file is found, instead of failing.
• Differentiating unknown private key format and non-existing/non-readable private key file errors.
• Bug fix: Session cannot be opened when Session.AddRawSettings is used. 1234
• Bug fix: Failure when connecting to WebDAV server not supporting persistent connections. 1235
• Bug fix: Keepalives were turned off when overriding site settings with raw settings.
• Bug fix: Parameter /rawconfig was not documented in usage.
• Bug fix: The Use default system editor button is misplaced on (ad-hoc) Editor dialog.
• Bug fix: Synchronization checklist window could be resized too small not to fit Custom button.
• Bug fix: The last file upload before creating a remote directory is not reported with .NET assembly. 1238
• Bug fix: Progress bar not appearing on taskbar when main window is not visible. 1240
• Bug fix: Overwrite confirmation was required when changing case of site name.
• Bug fix: Failure when copying multiple files checksum results to clipboard. 1243
• Bug fix: Large sizes are displayed incorrectly. 1244

• Computer can be suspended when operation completes. Thanks to s.vaningelgem. 694
• Uploading back files modified by local custom command. 169
• UTF-8 support for SCP. 325
• Checkbox to exclude all directories as a shortcut and hint to * mask on Edit file mask dialog.
• Improved Synchronization checklist window:
  • Synchronization direction can be reversed for individual files. 225
  • Showing total size of files selected for synchronization. 23
  • Custom commands are available in context menu. 566
  • Labeling custom commands drop-down menu Commands only to fit the label to the button.
  • Bug fix: Icon was misplaced when columns order was changed.
• TLS/SSL core upgraded to OpenSSL 1.0.1j. Fixing several security defects.
• Rounding file sizes up. 1204
• Global configuration options can be set on command-line. 876
• Command to copy find results to clipboard. 1117
• Optimized startup time. Sponsored by Alan Irwin. 1220
• Improved compatibility with antiquated FTP servers, like IIS: 1221
  • Using CWD/SIZE/MDTM to retrieve information about file when MLST is not supported. 1209
  • Non-standard use of MDTM to modify remote file timestamp.
  • Auto-detecting time zone difference when MLST is not supported.
• Natural order numerical sorting of file names and sites. 425
• Support for ProFTPD FTP extensions SITE COPY/CPFR/CPTO to duplicate a remote file, and SITE SYMLINK to create a symbolic link.
• Configurable file panel font size. 596
• Moved mask hint below directory mask boxes on Edit file mask dialog to make it obvious it applies to those masks too.
• Edit With menu (previously Edit (alternative) added to file panel context menu. 1226
• Added New (> File/Directory) menu to local panel context menu. 1227
• Added “Exclude directories” transfer settings preset.
• When FTP MLSD listing does not include Unix.mode fact, presenting at least a Perm fact, if available. 1208
• Defaulting Session.ReconnectTime to 120 seconds to match the new actual default (see 1173). Setting the property to TimeSpan.MaxValue removes any limit.
• Improved detection if user shall be offered external editor auto configuration.
• Merging TLS and SSL encryption options for FTP into one, trying AUTH TLS first, falling back to AUTH SSL.
• Timestamp variable in scripting. 1223
• Auto-detecting when SFTP server does not use UTF-8 encoding with SFTP-3 and older. 1212
• Removed Ext sub-caption from Name columns on file panels (since Windows Vista, it is no longer possible to distinguish sorting by name and extension in column header).
• Configurable WebDAV root path in .NET assembly. 1213
• Change: A .NET assembly method Session.ExecuteCommand does not throw an exception on error. Instead a CommandExecutionResult now descends from a OperationResultBase (use its Check method to reproduce the previous behavior).
• An ExitCode property added to CommandExecutionResult in .NET assembly and an exitcode tag added to XML logging. 1225
• A SecureString can be used provide password in .NET assembly via property SessionOptions.SecurePassword. 1230
• Allow accessing RemoteFileInfo length via IDispatch on 32-bit systems. 1231
• Masking out password in .NET assembly debug log.
• Not considering directory name “extension” when sorting file panel by file type. 1211
• Not popping up a message box, when fatal startup error occurs in scripting with /nointeractiveinput switch (including runs by .NET assembly). If XML logging is enabled, the fatal error is recorded in the log (and promoted to .NET assembly).
• Improving GUI responsiveness when finishing uploads with SFTP protocol.
• Button to use system editor on Editor Preferences dialog.
• Optionally not honoring system NoDrives policy. 1233
• Trying to use cp -T when duplicating remote files. 1217
• Optionally keeping temporary mirrors of remote files in deterministic paths. 410 593
• WebDAV core upgraded to neon 0.30.1.
• License in setup can be accepted simply by pressing Accept button.
• Supporting Unicode characters in private key file path. 1196
• Disabling permissions controls on Create directory dialog if protocol does not allow changing permissions.
• Disabling Terminal window with WebDAV protocol.
• Failing scripting commands call and chmod with WebDAV protocol.
• Improving workaround for Gallery2 WebDAV server that incorrectly fail PROPFIND requests for non existing files with 401 (authentication failure) code.
• Showing error details when logging to a file fails. 1198
• Showing error details when opening/creating a local file with FTP protocol fails.
• Display progress window earlier when transfer start is taking long with SFTP protocol. 1202
• SSL 3.0 disabled by default, to protect from SSL vulnerabilities, such as CVE-2014-3566 (POODLE).
• Changed default checksum algorithm to “sha1”.
• Added Session.ReconnectTimeInMilliseconds as an alternative to Session.ReconnectTime that can be used from COM hosts not supporting 64-bit integers (such as VBA).
• Added alternative private key file filter that selects other key file formats in addition to .ppk.
• Enabling Import Sites command even when no site is found and showing reason later. 1219
• Terminating the last line of console output, if it was progress line.
• Preventing “Pick an app” being offered as an external editor when the last editor was uninstalled.
• Displaying notification when source file mask in script matches no file.
• More tolerance to invalid modification time format with WebDAV protocol. 1232
• Bug fix: Failure when error occurs while working with local files. 1218
• Bug fix: Keyboard accelerators to mask boxes on Edit file mask dialog were not working.
• Bug fix: Not possible to select/enter file name with Unicode characters in filename input boxes. 1195
• Bug fix: Wrong “Timeout detected” message when FTP control connection is closed while transferring a file. 1197
• Bug fix: Cannot retrieve file from root folder of FTP server. 1199
• Bug fix: Mouse cursor of file list/directory tree splitter is not adjusted when Show directory tree left of file list preference option is enabled. 1200
• Bug fix: Sort column header caption was truncated too much on Windows Vista and later.
• Bug fix: Hint for making tree sizes equal is not generic enough to cover “Tree on left” option. 1206
• Bug fix: OpenSSL was built without optimizations.
• Bug fix: When opening a session from command-line in scripting failure is randomly reported. 1210
• Bug fix: Part of interface description is obscured in installer when themes are turned off.
• Bug fix: On the first authentication failure, message “Access without password denied”, even when password was actually used. 1214
• Bug fix: When any default settings are saved, logged source of ad-hoc sites is wrongly identified as modified site. 1216
• Bug fix: Cannot retrieve file from current folder of FTP server in scripting. 1222
• Bug fix: When failonnomatch is enabled, script does not fail when multiple source masks are used, and the second and later mask matches no file.
• Bug fix: SSL 2.0 use could be configured, despite not actually supporting the protocol.
• Bug fix: Hidden columns, including otherwise not-displayable internal column Ext, are shown when Ctrl-+ shortcut is used. 1228
• Bug fix: Cannot rename directory on WebDAV servers that insist on source path ending with slash. 1229
• Bug fix: Session class properties could not be set over IDispatch without exact types (particularly boolean properties could not be set with integer value).

• SFTP version 6 supported: 96
  • Hardlinks can be created.
  • Optimized directory reading and file downloading.
• Allowed stored sites, including their names and initial directories, to preserve Unicode characters. 1189
• Workaround for Vandyke VShell incorrect announcement of checksum calculation support. 1190
• Workaround for Bitvise WinSSHD lack of SFTP extensions announcement. 1191
• Workaround for incorrect SFTP link argument in ProFTPD mod_sftp.
• Support for proprietary OpenSSH extension hardlink@openssh.com for creating hardlinks. 1192
• Open command can open directories.
• WinSCP can register to handle WinSCP-specific WebDAV URL addresses (winscp-http:// and winscp-https://).
• Improved stack trace reporting for internal errors.
• Not showing suggestion to delete file in error when overwriting file on non-interactive displays.
• Workaround for FTP servers that do not enclose path in response to PWD command in quotes. 1193
• Bug fix: Failure when opening SCP session. 1187
• Bug fix: Missing help link for Note page of Advanced Site Settings dialog.
• Bug fix: Failure when processing results of upload in .NET assembly when a directory was created with explicitly set permissions as the first operation. 1188
• Bug fix: Wrong formatting of some error messages on log view of Keep remote directory up to date dialog with Continue on error option enabled.
• Bug fix: Modified edited/opened remote files are incorrectly uploaded using an active session, instead of their original session. 1194

• WebDAV support, both for GUI and automation (scripting and .NET assembly). 160
• Ongoing foreground transfer can be moved to background transfer queue. 1170
• Improved working with session URL:
  • When clipboard contains session URL, Paste command on a main window opens the session specified by the URL. When save extension is used, Save session as site dialog opens instead. 663
  • Added Paste Session URL command on Login dialog with Ctrl+V keyboard shortcut.
  • When session URL is typed into Host name box on Login dialog, it is parsed when the box loses keyboard focus.
  • New dialog for session URL generation. It also obsoletes previous File > File Names > Copy URL to Clipboard command.
• Note field for site. 353
• Improved display of files sizes in panels:
  • Displaying file sizes in panels always in KB’s by default. 1124
  • Applying file panel size format to Transferred indicator on queue list. 1124
  • Reverted to JEDEC size units (KB, MB, GB) instead of IEC units (KiB, MiB, GiB). 1123
• Improved informing about updates:
  • Updates information dialog shows change list.
  • Pending updates information is optionally shown on startup.
  • Updates information balloon encourages to click it to display change list.
  • Toolbar button always checks for updates, instead of showing cached data, when available.
  • Distinguishing new version information on notification balloon.
• Improvements to scripting, command-line and .NET assembly:
  • Remote file can be opened for editing in a standalone internal editor using /edit command-line parameter. 14
  • Change: When executing script file or script commands provided on command-line, default batch mode is abort and overwrite confirmations are turned off.
  • Change: Enabling batch mode in scripting automatically limits reconnect time to 120 seconds, if it is not limited yet. 1173
  • Change: When host key does not match fingerprint specified on command line or in script, user is not prompted to verify the host key and connection is abandoned with meaningful error message. 1186
  • Session.Close method in .NET assembly.
  • Speed limit in .NET assembly. 1019
  • Passphrase can be provided on command line/in scripting and .NET assembly. 816
  • Added switch -neweronly to put and get scripting commands to enable New and updated files only option. 666
  • Optionally failing command when file mask matches no files. 1172
  • Updated in-application command-line help page with missing parameters and to match online help page.
  • Bug fix: Session.SynchronizeDirectories could not be called via IDispatch. 1136
  • Detect and report that session is closed unexpectedly instead of reporting XML log reading error in .NET assembly. 1137
  • Warning when starting configured transfer settings or synchronization options in script are not factory defaults.
  • For negative (system) WinSCP exit codes, the .NET assembly presents the code also in hexadecimal format as is common for system error codes.
• Support for long local paths. 821
• Option not to abort Keep remote directory up to date on errors. 720
• Support for copy-file SFTP extension to duplicate remote files.
• Customizable background color of Internal editor. 480
• IDE upgraded to Embarcadero C++Builder XE6.
• ECDH ciphers supported with TLS.
• Optionally opening new sessions in separate window by default. 1000
• Command to auto-detect proxy for session settings. 1147
• Hidden files are hidden by default.
• Installer upgraded to Inno Setup 5.5.5.
• When internal exception occurs, stack trace is included into error message (and error report subsequently).
• Replaced Symbolic link option when creating/editing list with Hard link option to avoid confusion when the option is disabled when hard links are not supported.
• Not sizing message box buttons to width of the widest button.
• With FTP protocol, transfer settings do not mention removing EOF mark, as this is not supported.
• All top level windows (particularly when main window is not shown) have title icon, taskbar button and “WinSCP” suffix in title.
• Separated hidden and filtered files indicator to separate status bar panels that can be clicked to show hidden files or modify filter respectively.
• Site-specific transfer settings preset can be added from Login dialog.
• Using continuous “Synchronizing” in Synchronize progress window title.
• Automatically replacing forbidden slash in name of site imported from FileZilla. 1111
• Updated hint for Paste command to indicate it can also paste path and session URL.
• Command Server/Protocol Information moved to Session menu and session tab context menu.
• Warning when trying to edit large files in an internal editor. 1120
• After site import, selecting the first imported site in site tree on Login dialog.
• Close buttons on progress windows cancel operation.
• When collecting synchronization list for directory fails, allow skipping an error and continuing. 1132
• Close session tab on middle mouse click. 1133
• Using Yes/No buttons on “Cancel …” prompts instead of ambiguous OK/Cancel buttons.
• Translating common Linux-PAM keyboard-interactive “Password:” prompt. 1135
• Showing queue status information balloons also when application in minimized.
• Information-only notification balloons distinguish main information.
• Session option Chokes on WinSCP’s SSH-2 ‘winadj’ requests made configurable. 1139
• Improved drive list updating:
  • Preventing stale network drives from slowing or completely halting main window opening.
  • Bug fix: CD/DVD label was not shown on Windows Vista and newer.
  • Bug fix: CD/DVD label was not updated when media was changed.
• Showing background transfer queue list toolbar by default.
• Widening default Explorer interface window to fit all background transfer queue list columns.
• Removed useless trailing accelerator appendixes from toolbar button labels (typical for East Asian languages).
• Indicating when reading directory with SFTP protocol takes long because of resolving symbolic links. 1149
• Setup explains that application restart is needed to replace Drag&drop shell extension. 1150
• Using “<none>” instead of “<root>” on Save session as site dialog to indicate that site is not stored in folder.
• Moved Delete local files to recycle bin checkbox in Preferences to Panels > Local page.
• Presenting Directory size calculation progress as indeterminate on progress bar of Progress window.
• When saving current session as site, duplicating current session and opening current session in PuTTY, considering even username and password entered during authentication.
• Showing status for valid FTP over TLS certificates on Server and Protocol information dialog.
• Showing at least untranslated certificate error description from OpenSSL library for rare FTP over TLS certificate errors.
• Caching FTP certificates per site.
• Requiring FTP certificate revalidation when rejection reason changes.
• Showing notification balloon when error is suspended by Continue on error option.
• Not saving tunnel password if password saving is not explicitly confirmed.
• Offering saving a site when leaving site editor. 1174
• Offering saving site when closing Login dialog while editing. 1175
• Improved verification of FTP TLS/SSL certificates against system Trusted Root Certification Authorities. 1063
• Use MLSD command for directory listing affects also use of MLST command. 1181
• Consistently using Target remote path label on Duplicate and Move dialogs to indicate that the box includes also target file name, not only target directory.
• Using an actual file name on Duplicate and Move dialogs instead of *.* when transferring a single file only. 1182
• Widened Duplicate and Move dialogs.
• Keyboard shortcut Ctrl+Alt+F for Filter command. 929
• Beep when work finishes applies also to emptying background transfer queue. 697
• Drop-down arrow added to Encoding drop-down menu on Internal editor toolbar.
• Workaround for ProFTPD mod_sftp bug in SFTP space-available packet. 1184
• Using Reverses Order of Symlink Command Arguments workaround for ProFTPD mod_sftp. 1185
• Bug fix: If an INI file name is exactly winscp.ini, an INI file path on Preferences dialog is shown incorrectly.
• Bug fix: Tunnel password saving confirmation was repeatedly required when saving edited site, when there was no main session password.
• Bug fix: Not printing “Reading remote directory” while opening session, when directory is not actually read (in scripting particularly).
• Bug fix: Not including @ in logged masked URL when there is no username/password in the URL.
• Bug fix: Potential failure when resolving folder attributes for local folder tree display.
• Bug fix: Error was silently ignored when synchronizing local file timestamp failed.
• Bug fix: Failure when starting in a restricted environment (such as Microsoft Azure WebSite/WebJob). 1215

• Back-propagated some improvements and fixes from 5.6.2 beta release:
  • TLS/SSL core upgraded to OpenSSL 1.0.1j. Fixing several security defects.
  • Bug fix: When opening a session from command-line in scripting failure is randomly reported. 1210
  • Bug fix: Cannot retrieve file from current folder of FTP server in scripting. 1222
  • SSL 3.0 disabled by default, to protect from SSL vulnerabilities, such as CVE-2014-3566 (POODLE).

• Back-propagated some improvements and fixes from 5.6 – 5.6.2 beta releases:
  • TLS/SSL core upgraded to OpenSSL 1.0.1i. Fixing several moderate severity security defects.
  • Workaround for ProFTPD mod_sftp bug in SFTP space-available packet. 1184
  • Using Reverses Order of Symlink Command Arguments workaround for ProFTPD mod_sftp. 1185
  • Workaround for Vandyke VShell incorrect announcement of checksum calculation support. 1190
  • Improved detection if user shall be offered external editor auto configuration.
  • Showing error details when logging to a file fails. 1198
  • Bug fix: If an INI file name is exactly winscp.ini, an INI file path on Preferences dialog is shown incorrectly.
  • Bug fix: Failure when processing results of upload in .NET assembly when a directory was created with explicitly set permissions as the first operation. 1188
  • Bug fix: Keyboard accelerators to mask boxes on Edit file mask dialog were not working.
  • Bug fix: Not possible to select/enter file name with Unicode characters in filename input boxes. 1195
  • Bug fix: Wrong “Timeout detected” message when FTP control connection is closed while transferring a file. 1197
  • Bug fix: Cannot retrieve file from root folder of FTP server. 1199
  • Bug fix: Mouse cursor of file list/directory tree splitter is not adjusted when Show directory tree left of file list preference option is enabled. 1200

• TLS/SSL core upgraded to OpenSSL 1.0.1h. It fixes CVE-2014-0224 vulnerability among other.
• Added SessionOptions.TimeoutInMilliseconds as an alternative to SessionOptions.Timeout that can be used from COM hosts not supporting 64-bit integers (such as VBA). 1156
• Support for size and time constraints in wildcard parameter of ls command. 1157
• Using Documents and Desktop subfolders of home directory, if exist, as “Document” and “Desktop” folders under Wine.
• Incremental site search is case sensitive when search text includes any capital letter. 1163
• Support OS.unix=symlink designation of symbolic links in MLSD listing. 1167
• Bug fix: Show inaccessible directories option was incorrectly hiding folders from root. 1155
• Bug fix: Sorting by type is not consistent between local and remote panel. 1158
• Bug fix: Passphrase prompt is missing an option to remember it for the duration of a session. 1159
• Bug fix: During command-line operation, hidden main window is incorrectly shown when restoring application from tray. 1160
• Bug fix: Mouse range selection does not start from focused file after passive panel directory reload. 1161
• Bug fix: SynchronizationCriteria.None and SynchronizationCriteria.Either are not working. 1162
• Bug fix: Invalid proxy autodetection when system Internet Option Use the same proxy for all protocols is turned off. 1171
• Bug fix: Error when using source path ending with backslash with put command.
• Bug fix: Some certificate errors did not show any description.
• Bug fix: When remembering session password is enabled, stored password is used twice, even for two distinct consecutive keyboard-interactive prompts. 1176
• Bug fix: FTP proxy session setting is not logged. 1177
• Bug fix: Failure when current local directory is deleted while no session is opened. 1178
• Bug fix: Connection attempt could not be canceled. 1179
• Bug fix: Tree of current directory on network drive is not refreshed. 1180
• Bug fix: Number of filtered local directories were not shown in status bar.
• Bug fix: Wrong reason is given when checking for application updates fail.

• TLS/SSL core upgraded to OpenSSL 1.0.1g. It fixes CVE-2014-0160 vulnerability (Heartbleed bug) among other. 1151
• Auto-recognition of RSA padding bug for ProFTPD. 1091
• On Windows XP, Save As button replaced with Save when editing site.
• Improvements for running under Wine:
  • Using Wine home (Z:\home\%USERNAME%\) as documents folder.
  • Hiding stub animation on Progress window on Wine.
  • Workaround for list view bug in Wine. Wine Bug 35945
• Alternate delete on Shift-Click on Delete command in file context menu. 1154
• Bug fix: Directory reading progress is not shown on taskbar button. 1148
• Bug fix: Hint was popping up on file panel path label even when full path was visible whenever filter was active.
• Bug fix: Site colors were lost on Login dialog after language change.
• Bug fix: New site data were not reset after saving.
• Bug fix: Server hostname is not verified against certificate common name (or subject alternative name). 1152
• Bug fix: Help page was not defined for Panels > Local page of Preferences dialog.

• Cloning site without hostname when Enter key is pressed. 1115
• Preventing “Message too long to send to external console” error. 1121
• When listing local files during operation fails, including path into error message. 1131
• NuGet package for .NET assembly. 1145
• Bug fix: Prompt to import sites was not skipped during silent install. 1112
• Bug fix: Transfer settings speed limit does not apply. 1114
• Bug fix: Edited file is reloaded from active session, not from original session. 603
• Bug fix: Caption of New Site node on Login dialog is not translated when language is changed.
• Bug fix: Error on every even opening/editing of remote file while having New and updated files only option set as default. 1118
• Bug fix: Incorrect Login dialog placement when application was closed on non-primary monitor above or to the left of primary monitor. 1119
• Bug fix: In countries that changed time zone, file times before the change were set wrong for downloaded files. 1122
• Bug fix: Incorrect handling of remote files ending with dot with FTP protocol. 1128
• Bug fix: Speed limit of waiting background transfer shows incorrect value and cannot be changed. 1129
• Bug fix: Selecting private key file with space in path yields error message when submitting Advanced Site Settings dialog. 1130
• Bug fix: .NET assembly Session.FileTransferProgress is not included in COM event sink. 1134
• Bug fix: When main window was restored from notification area while message box was displayed, main window could receive focus.
• Bug fix: Notification balloons showing transfer configuration/error were showing ** markup.
• Bug fix: When minimized, message boxes were popping up on foreground.
• Bug fix: Main menu accelerators are not working. 1143
• Bug fix: Scaled-down version of 32×32 icon was used in taskbar notification area instead of 16×16 icon. 1144
• Bug fix: Failure when ending Windows session when main window is minimized.
• Bug fix: Occasional failure when run from Session 0. 1146
• Bug fix: Timeout while trying to resume upload with FTP protocol. Thanks to Michael Lukashov.
• Bug fix: With FTP protocol Set permissions transfer setting was incorrectly enabled for synchronization in Both mode.

• TLS/SSL core upgraded to OpenSSL 1.0.1f.
• Showing delayed Progress window before any message box is displayed
• Usability improvements to new Login dialog:
  • Consistently using Save caption for save button, even for new sites.
  • Using de-facto standard accelerator A for Save As command (also removes duplicity with Save command).
  • Explicit keyboard shortcut Alt+A for Save As command. 1006
  • When saving cloned site, offer folder and name (with unique suffix) of original site. 1105
  • Cloning to a new site when double-clicking site without host name specified. 1100
• Selecting tab to the right after closing tab. 1102
• When externally opening additional session in existing instance of WinSCP, bringing its window to front. 1098
• Using same accelerator for Upload and Download commands
• Default transfer setting preset can be duplicated.
• Temporarily suspending countdown when moving mouse over message box with “timeout” button. 1107
• Showing name of folder being calculated on Progress window before the calculation starts, not only after it has finished.
• Calculation of size of files to download can be cancelled without cancelling the actual transfer.
• Widening default Progress column of background transfer queue list to fit “Connecting…” and “Calculating…” states.
• Bug fix: Progress window is not shown for custom command launching long-lasting external process. 1101
• Bug fix: Swapped local and remote Root directory command buttons. 1097
• Bug fix: Drag&Drop menu on local panel loses focus when a change is detected in local drive. 1103
• Bug fix: Duplicate accelerator between Edit and Download and Delete commands 1104 and Download and Delete.
• Bug fix: Repeated attempt to immediately start “Keeping remote directory up to date” when prompt to perform prior full synchronization is canceled with /keepuptodate /defaults.
• Bug fix: Preferred main window size is lost after command-line operation.
• Bug fix: Invalid decoding of session URL with sequence of encoded characters that includes + or % encoded character on second or later place in the sequence. 1108
• Bug fix: Background transfer queue progress was shown on main window title, when a dialog box was opened on top of it.
• Bug fix: Some hint labels did not fit their caption, particularly with long translations.
• Bug fix: Compare directory criterions do not save. 1110

• Distinguishing main question/information of even more messages.
• Detecting symbolic link loops when finding files. 1093
• Remembering Synchronized browsing state with site only when Remember last used directory is enabled. 963
• New installer icon.
• Visualizing instant operations (such as copying data to clipboard or creating a desktop shortcut) with hourglass mouse cursor.
• Showing full path to an INI file on Preferences dialog.
• Not allowing to switch from /ini=nul configuration storage to avoid data loss.
• Improved display of lists on Server and protocol information dialog.
• Bug fix: During reconnect user was prompted with password even when password was remembered already.
• Bug fix: Option to remember password for session was not working for authentication of background transfers and separate shell sessions.
• Bug fix: Removing BOM on text mode FTP uploads was unconditional. 1096

Users upgrading from WinSCP 5.1.8 can read more at WinSCP 5.5 – what’s new?.

• Support for proprietary SFTP extension statvfs@openssh.com to check disk space usage.
• Not requiring Windows nor Windows Explorer restart when new version uses the same or older version of Drag&Drop shell extension than existing one.
• It’s possible to Login/Open a site in PuTTY in a new window without closing Login dialog. 1086
• Using theme instruction font for message texts.
• Listing new/empty site folders on Save session as site dialog. 1089
• Increasing number of items shown in drop-down lists of some combo boxes.
• Consistently logging modification time and size of every transferred file.
• System error message is shown when changing local working directory fails in scripting. 1087
• Added host name to some connection related error messages.
• Canceling site editing when the site is dragged.
• Allowing Enter and Esc keys on site list of folder/workspace view on Login dialog.
• Improved error messages related to drag&drop shell extension.
• Bug fix: Failure when closing Windows session.
• Bug fix: Environment variables were not expanded in site hostname and username in rare cases.
• Bug fix: It was not possible to skip error listing local directory during operation. 1090
• Bug fix: Some messages containing & were shown incomplete.
• Bug fix: FTPS upload over proxy truncates files. 1092

• Improved registration for URL protocols:
  • WinSCP registers itself with Default Programs control panel for protocol URLs sftp://, scp://, ftp:// and ftps:// on Windows Vista and newer. 50
  • WinSCP handles application specific protocol URLs winscp-sftp://, winscp-scp://, winscp-ftp:// and winscp-ftps://.
  • It is possible to remove protocol registration from Preferences.
  • It is possible to open Default Programs control panel for WinSCP from Preferences.
  • When registering machine-wide, current-user-specific registration that would shadow it is removed.
• New icons for Move to and Duplicate commands and dialogs.
• Keyboard shortcut to open site in PuTTY on Login dialog. 1079
• When saving session opened from SFTP/SCP URL with host key fingerprint, the host key is saved to cache.
• Improved distinguishing main question of master-password related message boxes.
• Removed icon from Quit command in menus.
• Not adding UTF-8 BOM to files edited in an Internal editor. 1081
• For FTP sessions over implicit TLS/SSL, Copy URL to Clipboard command uses ftps:// protocol.
• Support FTP servers that require TLS/SSL handshake on transfer connection before responding 1yz to STOR/APPE. 1084
• Bug fix: Failure when connecting through SSH tunnel. 1076
• Bug fix: Failure on start when any site has proxy or tunnel password protected with master password. 1077
• Bug fix: Failure when disconnecting a session.
• Bug fix: Failure during some operations in FTP over TLS/SSL session. 1078
• Bug fix: When saving site from SFTP/SCP URL, the saved site was not pre-selected on the Login dialog, unless the URL contained host key fingerprint.
• Bug fix: Failure when selecting SSH private key. 1080
• Bug fix: Time-based SSH key re-exchange does not work. 1082
• Bug fix: Passwords are lost when any raw session settings is specified in scripting or command-line. 1083

• Distinguishing main question of a message box. 46
• Session can be opened in PuTTY from Login dialog. 190
• Improved working with session colors:
  • Better standard color set (16 less saturated colors).
  • Remembering recently used custom colors.
  • Drop-down color selector on Advanced site settings dialog.
  • Custom colors can be modified on standard Color dialog.
  • Option Default (color) renamed to No Color.
  • Bug fix: Color of a directory tree border was not updated in some cases.
• Change: Using UTF-8 for strings (such as file names) with SFTP protocol by default even for version 3 and lower. 1072
• Offering to upload edited/opened file using another session to the same site, if original session was closed. 1042
• Support for FTP servers with Windows-like paths. 1074
• Option to create a site desktop shortcut on Save Session as Site dialog.
• Verifying TLS/SSL certificates against system Trusted Root Certification Authorities. 1063
• Command to clone site settings to a new site. 1069
• Automatically saving opened workspace. 1029
• Not showing Progress window for operations shorter than 200ms.
• Change: Removing BOM/EOF marks on text mode uploads is configurable and disabled by default. 842
• Showing total progress for non-recursive transfers even when Calculate total size transfer settings is turned off. 1040
• Support for Diffie-Hellman group exchange with SHA-256. 1067
• SSH core upgraded to PuTTY 0.63 and further to the latest development snapshot (2013-10-09, r10049). It brings following changes:
  • SSH_MSG_UNIMPLEMENTED in response to SSH_MSG_KEXINIT is ignored. kexinit-unimplemented
  • Support for HMAC-SHA-256 as an SSH-2 MAC algorithm (hmac-sha2-256).
  • Bug fix: If the host key isn’t saved, rekeys cause another warning. hostkey-rekey
  • Many other small bug fixes.
• Installer upgraded to Inno Setup 5.5.4.
• New Site icon on Login dialog and Session tabs.
• New Open Directory/Location profiles dialog icons.
• Command to delete all completed queue items. 1056
• Improvements to session URL syntax:
  • Support for SSH host key fingerprint specification in session URL using connection parameter fingerprint defined by draft-ietf-secsh-scp-sftp-ssh-uri. 93
  • URL session parameter save to initiate site saving.
  • Change: Symbol ; has special meaning in session URL (due to the above changes) and has to be URL-encoded when used as a literal.
  • Change: UTF-8 encoded characters in session URL are supported. 1062
• Detecting Drag&drop shell extension on 64-bit systems. 20
• Logging warning when system option Automatically adjust clock for Daylight Saving Time is disabled.
• Bringing an application into foreground, when opening session from command-line and/or from jumplist in existing WinSCP instance.
• More command and dialog icons.
• Showing window and application name on Internal editor window caption.
• Improved layout of message boxes.
• Showing tree lines on site tree on Login dialog.
• Tolerating invalid local file timestamps. 1064
• Pattern !U in Custom command and PuTTY path works even with password entered only during authentication.
• Do not include information about inability to test, if server IP address is routable, into error messages.
• Warning that editing is in progress when double-clicking edited site on Login dialog.
• Drop-down menu is never narrower than its button.
• Not allowing operations on focused-only file, when focus is not visible (application does not have focus). 1050
• Bug fix: Failure to run WinSCP or open session with .NET assembly after frequent scheduled use. 996
• Bug fix: Up to one second delay for transfer of every file with FTP over TLS/SSL. 1058
• Bug fix: Rare incorrect conversion of line endings. 1059
• Bug fix: Timestamps of local files are not shifted when DST starts/finishes on Windows 2008 R2. 1060
• Bug fix: Failure when validating/executing custom command ending with ! pattern.
• Bug fix: File name was not shown on Progress window when deleting local files.
• Bug fix: Stray folders on initially inactive page of Location profiles dialog. 1094
• Bug fix: Failure when excessive session timeout or keepalive interval is configured. 1065
• Bug fix: Incorrect Login dialog placement when application was closed on non-primary monitor. 1066
• Bug fix: When saving new site with the same generated name as an existing saved site, an overwrite configuration was not requested.
• Bug fix: Error when downloading empty file/directory using FTPS via proxy. 1068
• Bug fix: Wrong icon for Enable Queue Processing command.
• Bug fix: Suspend All and Resume all queue commands were not working unless any queue item had focus.
• Bug fix: It was not possible to drag a site to a root folder on Login dialog.
• Bug fix: Wrong check for presence of GSSAPI/SSPI on Advanced Site Settings dialog.
• Bug fix: When remote directory was not opened using directory tree, a node of the opened directory was not expanded.
• Bug fix: Local custom commands working with both local and remote files were disabled when file in passive panel was focused only (not selected). 1071
• Bug fix: Size of externally removed local selected files is detracted twice from total file size of selected files shown on status bar. 1073
• Bug fix: When some of master-password protected passwords became undecryptable, Sites and Workspaces menus could not be opened.

• Improved and fixes for large font/high DPI environments:
  • Windows and panel size configuration (including default configuration) scales with DPI.
  • Using native “Segoe UI” dialog font in Windows Vista and later.
  • Changing Internal editor and Console window font to “Lucida Console” (Windows 7 and older) or “Consolas” (Windows 8 and newer).
  • Using icon font for file panels/lists, directory trees, path labels, status bars, message boxes and other controls throughout the application.
  • Saving preferred editor font in points, rather than pixels.
  • File panels respond to changes of system icon font.
  • Using native scaling even for scales above 120%/125 DPI.
  • Using Windows native scalable mouse cursors for splitters.
  • Bug fix: Path labels on Commander interface were using different font than the rest of the window.
  • Bug fix: Status bars on some windows did not resize for large fonts.
  • Bug fix: Some images were not centered.
  • Bug fix: Many dialogs were incorrectly resized for large fonts.
• Redesigning message boxes after Windows task dialogs.
• Reusing TLS/SSL session ID is configurable.
• Upgraded private key tools (PuTTYgen and Pageant) to 0.63. 1039
• Not allowing operations on focused-only file, when focus is not visible (panel does not have focus). 1050
• Aligning file information on Overwrite confirmation dialog. 1049
• Improved placement and effects of drop-down menus.
• Showing Proxy settings box on Advanced Site Settings dialog for SFTP/SCP protocols only.
• Empty queue notification can be clicked to restore/activate application, respective session and transfer queue list
• Showing file name in error message when deleting of auxiliary local files fails.
• Configuration is saved after submitting Preferences dialog (this among other warns user when configuration storage is not writable). 667
• Opening update information, when clicking update notification balloon. 1047
• Widening default Changed columns width to accommodate AM/PM suffixes.
• Hiding Group column by default also in Explorer interface.
• Not asking for exit confirmation when Windows session is closing.
• Reporting connection errors on FTP transfer failure.
• Do not include confusing FTP server’s intermediate and success responses into error messages.
• Ctrl+Space shortcut for toggling selection of focused file works in Commander-style selection mode.
• Message box width is limited.
• Widened some forms and controls to make space for translation into languages with longer words, such as German.
• Reduced chance of collision in .NET assembly session instance name in multi-threaded applications. 1055
• Allowing button selection using Left/Right keys on message boxes with drop-down menus. 1054
• Bug fix: Back-propagated SSH security and memory-leak fixes from PuTTY 0.63. 1039 vuln-modmul vuln-bignum-division-by-zero private-key-not-wiped
• Bug fix: Failure when opening the first session with Automatically open new session in PuTTY enabled. 1037
• Bug fix: Login dialog got corrupted when changing language on systems with Windows XP style font scaling enabled. Worked-around by disabling runtime language change on such systems. 1038
• Bug fix: Dialog boxes were incorrectly considered as submitted when Windows session was closing, causing failures or validation errors, preventing the Windows session from actually closing.
• Bug fix: On failure to overwrite local file (e.g. due to permissions), error “The system cannot find the file specified” was shown instead of the actual cause.
• Bug fix: Console input/output was not using UTF-8 encoding on Windows 8.
• Bug fix: Connection gets aborted when TLS/SSL certificate uses ASN.1 GeneralizedTime format. 1044
• Bug fix: Connection gets aborted without any feedback when TLS/SSL certificate cannot be decoded.
• Bug fix: Failure when send buffer of FTP connection is temporarily full.
• Bug fix: External changes to local directory are sometimes not shown on the local panel.
• Bug fix: WinSCP child process was not terminated when process using WinSCP .NET assembly crashed. 1045
• Bug fix: Edit toolbar buttons were not disabled when only directories were selected.
• Bug fix: When changing configuration storage failed (such as when an INI file could not be removed), storage state on Preferences dialog is not rolled back and some of the other changes to preferences were lost.
• Bug fix: For various errors when cleaning up application configuration, a resource number was shown instead of an actual error message.
• Bug fix: Failure while (or after) creating directory during synchronized browsing. 1046
• Bug fix: Context menu was popping up after new session was opened when New Session tab was right-clicked.
• Bug fix: Notification about empty transfer queue was not shown.
• Bug fix: Wrong detection of Windows Server 2008 R2 for purposes of timestamp conversion in respect to DST.
• Bug fix: Directory listing was included in transfer error messages with FTP protocol.
• Bug fix: Directory masks in autoselection rule of transfer settings preset were not working.
• Bug fix: “Never show again” checkbox on information only messages boxes was wrongly labeled “Never ask again”.
• Bug fix: Failure when manipulating location profiles folders. 1052
• Bug fix: Allow SCP fallback session option was not preserved. 1053
• Bug fix: Hostname and Username masks in autoselection rule of transfer settings preset were not working.

• Convenience and robustness improvements for working with master password: 1023
  • Avoiding repetitive master password prompts, when editing site.
  • Detect and warn when trying to set/clear master password while another instance of WinSCP is running.
  • Saving configuration, including master password, immediately after setting/clearing one.
  • Not prompting for master password for read-only site view.
  • Hiding an actual password length from read-only site view.
  • When setting/changing/clearing master password, collecting errors while recrypting passwords individually, not to abort whole process on a single error.
  • Gracefully handling stray encrypted passwords, when master password is actually not enabled or different.
  • Feedback and repeated prompt on incorrectly entered master password in scripting mode.
• Synchronization preview in scripting. 885
• Change: In .NET assembly, SessionOptions class properties SslHostCertificateFingerprint and GiveUpSecurityAndAcceptAnySslHostCertificate renamed to TlsHostCertificateFingerprint and GiveUpSecurityAndAcceptAnyTlsHostCertificate, respectively.
• Showing number of active and pending transfers on queue label. 1031
• Configurable minimal and maximal supported TLS/SSL version.
• Information about TLS/SSL version and cipher used in available on Server and protocol information dialog and main window status bar.
• Ctrl+W shortcut for closing tab (session). 1035
• Bug fix: Local directory box was missing on Advanced Site Settings dialog.
• Bug fix: Redundant reading of directory contents before file download when MLSD is in use. 1021
• Bug fix: Incorrect encryption of passwords protected with master password, potentially leading to loss of stored passwords. 1022
• Bug fix: When adding password to existing site, new password can possibly be unprotected with master password.
• Bug fix: Failure when starting with default session settings having a password set protected with master password.
• Bug fix: Not allowing search path to exceed system limit of 2048 characters. 1025
• Bug fix: Pending queued transfers were omitted from queue status display on taskbar button. 1030
• Bug fix: No error is displayed and session is not immediately closed when detecting variable containing command return code fails with SCP protocol. 1032
• Bug fix: Failure when using context menu of disconnected session tab. 1033
• Bug fix: Failure when right-clicking empty area on site tree. 1036

• Simplified Login dialog:
  • Both site tree and basic session controls are visible at the same time.
  • Login dialog is resizable. 378
  • Modal editing of sites.
  • Advanced session controls moved to a separate dialog Advanced Site Settings dialog.
  • Context menu for site tree.
  • Site name and path are specified separately when saving site.
  • Separate entry for New Site in site tree.
  • Global settings such as Interface and Logging removed from Login dialog.
  • Language selection moved from Languages button of Login dialog to Languages page of Preferences dialog.
  • Display of sessions in workspace.
  • SSH Private key file box moved to SSH tab of Advanced Site Settings dialog.
• Performance improvement. 1141
• Custom command pattern !`command` that expands to output of local command.
• Subset of custom command patterns can be used in PuTTY path, including !/, !@, !U, !P, !?prompt?! and !`command`. This among other allows opening PuTTY in the same directory as current WinSCP working directory 326; or using different SSH client, such as KiTTY 966.
• Buttons that open drop-down menu are marked with an arrow.
• New icons for Console, Find and Synchronization Checklist windows.
• Session settings can be exported also to KiTTY, when opening session in PuTTY/KiTTY.
• Configurable registry key for exporting sessions to PuTTY(-like) clients. 1006
• Suppressing critical error popups. 1007
• New shell icons for site, site folder and workspace.
• Relevant help is available for more error messages.
• Renamed Login and Preferences dialogs’ “tabs” to “pages”.
• Help border button is available on message boxes.
• Prompt answers Yes to All/No to All moved closer to the primary Yes/No answers.
• Internal error message boxes feature Report button to directly report the error on support forum.
• Allowing filtering subdirectories. 1018
• Event Session.FileTransferProgress is always raised when file transfer completes.
• Bug fix: Remote panel state is lost after closing Console window. 1004
• Bug fix: Failure when reading file into internal editor. 1005
• Bug fix: Fragments in Help links were not working.
• Bug fix: Failure when disposing Session of .NET assembly. 1008
• Bug fix: Failure when pressing Shift key in console prompt with winscp.com. 1009
• Bug fix: Constant CPU usage when queue is empty. 1013
• Bug fix: Missing labels for some answers in scripting (such as Yes to All/No to All on overwrite confirmation prompt).
• Bug fix: Option Support for listing if hidden files is not working. 1015
• Bug fix: Cannot open context menu on another list or tree entry or different view location, while another context menu of the same view is already opened.
• Bug fix: Back-propagated SSH security fix from PuTTY 0.63. 1017 vuln-signature-stringlen
• Bug fix: Mismatched warnings about accepting any SSH host key and TLS/SSL certificate respectively.
• Bug fix: Timeout prompt sometime never dismisses, even when host finally replies, with SFTP/SCP protocol.

• Not showing disconnect error message before reconnecting inactive session to upload edited file.
• Renamed WinSCP .NET assembly to winscpnet.dll to avoid conflicts with winscp.exe. 945
• Command Clear caches clears also cache of separate shell session.
• Change: Not trying to kill WinSCP process from .NET assembly Session finalizer.
• Calculating hot track color of path label to be in contrast with background. 992
• Simplifying overwrite confirmation prompt: 993
  • Grouping advanced commands to drop-down menu under button with related common command.
  • Added thousands separators to sizes.
• Offering to remember password for duration of session on password prompt (when settings Remember password for duration of session is turned off). 610
• File sizes on Synchronization Checklist and Find dialogs are optionally shown using short format. Use Show files sizes in short format checkbox in the Panels page on the Preferences dialog to control this feature.
• Changing default tabulator size to 8.
• Swapped order of Use MLSD command for directory listing and Support for listing of hidden files FTP session options. Also disabling the latter unless the first is set to Off.
• Not allowing Time zone offset session setting with FTP protocol, while MLSD listing command is used.
• Not opening session from jumplist in existing instance, if it is showing error.
• Logging parsed directory listing on Normal logging level (previously on Debug 1 level).
• Moved option to remember session password from Background to Security page of Preferences dialog.
• Cached SSH host keys are imported by default.
• Bug fix: It was not possible to pass sequence of consecutive delimiters when skipping to the next “word” in path input boxes.
• Bug fix: Opened/Closed folder icons on Location profile dialog were swapped.
• Bug fix: Build script was not working on 64-bit.
• Bug fix: Build script was calling non-existing target clean.
• Bug fix: Taskbar button does not flash, when message pops up, while WinSCP is on background. 988
• Bug fix: Custom command pattern !/ had incorrect value when executed on existing separate shell session just after directory change. 989
• Bug fix: Wrong background of path labels with disabled themes. 990
• Bug fix: Cannot import FileZilla sites in folders. 994
• Bug fix: FileZilla site logon type is not imported. 995
• Bug fix: Installer was asking for name of program menu folder, although no folder is created anymore.
• Bug fix: Failure when reconnecting session with automatic remote panel refresh enabled. 997
• Bug fix: Failure when using mouse wheel with mouse cursor outside of WinSCP window. 998
• Bug fix: Failure when canceling FTP password prompt.
• Bug fix: When Change stored password to this one option is checked on password prompt, password is not updated for current session.
• Bug fix: Mouse range selection does not start from focused file after directory reload. 999
• Bug fix: IP address range 172.16–172.31 was not detected as unroutable for FTP passive mode. 1001
• Bug fix: Opening session in PuTTY does not work. 1002

• New toolbar icons and 16×16 icon. 290
• Workspace can be saved. 776
• Using term Site instead of Stored session.
• Sites import from Filezilla. 61
• When upgrading, setup offers to restart Windows Explorer (or other applications), when drag&drop shell extension needs to be updated. 686
• While installing, setup offers sites import from PuTTY or Filezilla.
• Command to Import/restore configuration from INI file.
• On first edit, offers configuration of user’s custom text editor as default editor.
• Simplified Transfer options dialog:
  • The dialog is shown only on the first transfer, when using drag&drop, unless user explicitly opts to show it the next time.
  • Moved the New and updated files only option to Transfer settings.
  • Moved the Do not show this dialog box again checkbox below buttons.
  • Hiding Transfer each file individually when not applicable.
  • Icon to distinguish Copy/Move operation.
  • Do not show this dialog box again implies saving transfer settings
• Improved working with transfer settings and presets:
  • Not showing default Text mode file mask in Transfer settings box.
  • Showing even default Binary Transfer type in Transfer settings box.
  • Removed “Exclude temporaries” transfer settings preset.
  • Added “Newer and updates files only” transfer settings preset.
  • Reorganized Transfer settings drop-down menu, including new Presets header.
  • Hiding unusable presets from Transfer settings drop-down menu.
  • Merged configuration of default transfer settings and transfer settings presets.
• Improved user interface:
  • Using “Download” and “Upload” commands to distinguish copying to local and remote directories respectively.
  • Using “Download and Delete” and “Upload and Delete” commands instead of “Move” to distinguish moving files to local and remote directories respectively.
  • Optionally keeping completed transfers in queue list for configurable period of time. 584
  • Replaced file operation toolbar, bottom hot key bar and upload/download toolbar with specialized local and remote file toolbars to allow manipulating local/remote files using mouse, without need to change panel focus (Commander interface only).
  • Improved incremental search for sites on Login dialog: 984
    • Text is searched anywhere in the site name, not only at the beginning.
    • Next/previous matching sites can be searched for.
    • Search text is shown below site list.
  • Displaying queue status on taskbar button. 151
  • Replaced Selection toolbar with specialized local and remote Selection toolbars (Commander interface only).
  • Added label to the most important toolbar buttons. They can be optionally hidden including already existing labels like Command-line label (Commander interface), Address label (Explorer interface) and New session tab label.
  • Moved Commands toolbar of Commander interface first.
  • Find files command moved from Commands toolbar to Remote Navigation toolbar and is now available regardless of focused panel.
  • Renamed Add to Bookmarks command to Add Path to Bookmarks.
  • Removed Close toolbar button from Editor and Log windows.
  • Session menu and toolbar reorganized.
  • Increased height of path labels (Commander interface only).
  • Single-file queue transfers occupy only single line in background transfer queue list.
  • Increased height of background transfer queue list row.
  • User interface icons are shown also in Setup.
  • Turned off automatic stretching of Transfer settings toolbar.
  • Column Attr is hidden by default on local panel.
  • Default (installation) width of the Commander interface is larger, if the screen resolution allows it.
  • Added Download and Download and Delete buttons on Commands toolbar of Explorer interface.
  • Moved Panels node on Preferences dialog to the top-level to reduce nesting.
  • Horizontal line above file background transfer queue list splitter to highlight its presence.
  • Disabling whole Once Empty submenu, when queue is empty.
  • Using own context menu for local files (similar to existing context menu for remote files) by default. 163
  • First column in Editor list in preferences is editor name.
  • Icons are no longer dimmed with Office XP theme.
  • Tab with disconnected session is greyed.
  • Removed SSH Protocol version from Site tooltip.
  • When file cannot be loaded using selected encoding in Internal editor, error is shown. On error loading default encoding, attempts to load using another encoding. 971
  • On main window views without focus respond to mouse wheel. 846
• Whole site folder can be opened at once. 424
• Change: Session from command-line and/or from jump list is opened by default using existing WinSCP instance. 769
• Transfer resume support can be controlled in scripting (-resumesupport switch of file transfer commands) and .NET assembly (TransferOptions.ResumeSupport property). 834
• Transfer progress feedback using Session.FileTransferProgress event. 818
• For special cases, it is possible to accept any SSH host key or any TLS/SSL certificate (with warning) using -hostkey=* in scripting and SessionOptions.GiveUpSecurityAndAcceptAnySshHostKey or SessionOptions.GiveUpSecurityAndAcceptAnyTlsHostCertificate in .NET assembly. 815
• Site Manager command. 855
• Writing INI file to user’s profile, if program path is not writable. 817
• Any mouse or keyboard input cancels or resets reconnect countdown.
• Increased default reconnect interval for idle sessions to 9 seconds.
• Additional F5 shortcut to reload file in internal editor. 986
• Reconnect interval for idle sessions can be configured independently.
• Only shortcut to WinSCP itself is created in Start menu. 616
• In Commander interface, the keyboard shortcuts F3 and F5 can optionally have the same meaning as in Windows Explorer (Find File and Refresh).
• Changing session port number on Login dialog to well know port, updates protocol automatically.
• Reporting an error when reading of local directory fails during operation. 952
• Retrospectively logging previous script records when session is starting.
• When SFTP connection is rejected, knock FTP port. If open suggest using FTP protocol.
• Desktop shortcut to open site folder can be created.
• Change: Dropped support for Windows 2000. Minimal supported version is Windows XP.
• Using GiB scale for large file sizes. 913
• Option to reconnect disconnected non-active session, when saving file opened from that session. 917
• Use of MLSD FTP command is configurable. 927
• Printing transfer progress for small files in bytes in scripting. 964
• Before opening session using command-line parameter in scripting, warning is printed, that this is deprecated function.
• Allowing host key import for SSH protocols only.
• Export to INI file moved from Preferences to Login dialog.
• Added larger values to initial offer of speed limits. 987
• New !P pattern to include process ID into session log path.
• Logging file timestamps when transferring using SFTP protocol.
• Workaround for FTP servers that do not acknowledge file transfer. 976
• Installer upgraded to Inno Setup 5.5.3.
• Bug fix: Scripting command synchronize sometimes did not announce that there is nothing to synchronize.
• Bug fix: First Authenticate log entry was trimmed temporarily.
• Bug fix: Separators on toolbars were showing “E” hint.
• Bug fix: Incorrect file icon overlay positioning.
• Bug fix: Not drawing own shortcut overlay over shortcut icons.
• Bug fix: Records on Authentication window were temporarily truncated.
• Bug fix: Selection on file panel was not visually updated when panel received/lost focus.
• Bug fix: Panel path label was not deactivated when focus moved from directory tree to file transfer queue.
• Bug fix: Download command was not highlighted as default in remote directory context menu when Operation to perform on double-click was set to Copy.
• Bug fix: Text mode transfers should not be resumed FTP protocol. 965
• Bug fix: No error is shown in Internal editor, when file cannot be loaded using selected encoding. 971
• Bug fix: Failure when disposing Session of .NET assembly in process running with restricted privileges.
• Bug fix: open command record in logs with masked-out password did not contain the command name.
• Bug fix: Pointless attempt to update source file timestamp, when uploading with FTP protocol.
• Bug fix: Preserve timestamp checkbox was not available for uploads with FTP protocol.
• Bug fix: Failure when server does not acknowledge file upload with FTP protocol. 982
• Bug fix: Failure when creating local directory. 983
• Bug fix: When user cancels connection, authentication window is not closed.

• Back-propagated some improvements and fixes from 5.2.4 beta – 5.2.7 RC releases:
  • Logging warning when system option Automatically adjust clock for Daylight Saving Time is disabled.
  • Reduced chance of collision in .NET assembly session instance name in multi-threaded applications. 1055
  • Bug fix: Console input/output was not using UTF-8 encoding on Windows 8.
  • Bug fix: Connection gets aborted when TLS/SSL certificate uses ASN.1 GeneralizedTime format. 1044
  • Bug fix: Connection gets aborted without any feedback when TLS/SSL certificate cannot be decoded.
  • Bug fix: Failure when send buffer of FTP connection is temporarily full.
  • Bug fix: External changes to local directory are sometimes not shown on the local panel.
  • Bug fix: WinSCP child process was not terminated when process using WinSCP .NET assembly crashed. 1045
  • Bug fix: For various errors when cleaning up application configuration, a resource number was shown instead of an actual error message.
  • Bug fix: Directory listing was included in transfer error messages with FTP protocol.
  • Bug fix: Failure while (or after) creating directory during synchronized browsing. 1046
  • Bug fix: Directory masks in autoselection rule of transfer settings preset were not working.
  • Bug fix: Failure when manipulating location profiles folders. 1052
  • Bug fix: Up to one second delay for transfer of every file with FTP over TLS/SSL. 1058
  • Bug fix: Rare incorrect conversion of line endings. 1059
  • Bug fix: Timestamps of local files are not shifted when DST starts/finishes on Windows 2008 R2. 1060
  • Bug fix: File name was not shown on Progress window when deleting local files.
  • Bug fix: Error when downloading empty file/directory using FTPS via proxy. 1068
  • Bug fix: Suspend All and Resume all queue commands were not working unless any queue item had focus.
  • Bug fix: Color of a directory tree border was not updated in some cases.
  • Bug fix: Size of externally removed local selected files is detracted twice from total file size of selected files shown on status bar. 1073
  • Bug fix: Failure when disconnecting a session.
  • Bug fix: FTPS upload over proxy truncates files. 1092

• Back-propagated some improvements and fixes from 5.2.3 beta and 5.2.4 beta releases:
  • Upgraded private key tools (PuTTYgen and Pageant) to 0.63. 1039
  • Bug fix: Back-propagated SSH security and memory-leak fixes from PuTTY 0.63. 1039 vuln-modmul vuln-bignum-division-by-zero private-key-not-wiped
  • Bug fix: Not allowing search path to exceed system limit of 2048 characters. 1025
  • Bug fix: No error is displayed and session is not immediately closed when detecting variable containing command return code fails with SCP protocol. 1032
  • Bug fix: On failure to overwrite local file (e.g. due to permissions), error “The system cannot find the file specified” was shown instead of the actual cause.

• Back-propagated some improvements and fixes from 5.2.2 beta and 5.2.3 beta releases:
  • Help border button is available on message boxes.
  • Suppressing critical error popups when creating jumplist. 1007
  • Saving configuration, including master password, immediately after setting/clearing one. 1023
  • Bug fix: Fragments in Help links were not working.
  • Bug fix: Failure when pressing Shift key in console prompt with winscp.com. 1009
  • Bug fix: Cannot open context menu on another list or tree entry or different view location, while another context menu of the same view is already opened.
  • Bug fix: Back-propagated SSH security fix from PuTTY 0.63. 1017 vuln-signature-stringlen
  • Bug fix: Timeout prompt sometime never dismisses, even when host finally replies, with SFTP/SCP protocol.
  • Bug fix: Redundant reading of directory contents before file download when MLSD is in use. 1021
  • Bug fix: Failure when starting with default session settings having a password set protected with master password.

• Back-propagated some improvements and fixes from 5.2 beta and 5.2.1 beta releases:
  • New !P pattern to include process ID into session log path.
  • Logging file timestamps when transferring using SFTP protocol.
  • Workaround for FTP servers that do not acknowledge file transfer. 976
  • Logging parsed directory listing on Normal logging level (previously on Debug 1 level).
  • Bug fix: Failure when disposing Session of .NET assembly in process running with restricted privileges.
  • Bug fix: open command record in logs with masked-out password did not contain the command name.
  • Bug fix: Pointless attempt to update source file timestamp, when uploading with FTP protocol.
  • Bug fix: Preserve timestamp checkbox was not available for uploads with FTP protocol.
  • Bug fix: Failure when server does not acknowledge file upload with FTP protocol. 982
  • Bug fix: Failure when creating local directory. 983
  • Bug fix: When user cancels connection, authentication window is not closed.
  • Bug fix: Build script was not working on 64-bit.
  • Bug fix: Build script was calling non-existing target clean.
  • Bug fix: Taskbar button does not flash, when message pops up, while WinSCP is on background. 988
  • Bug fix: Custom command pattern !/ had incorrect value when executed on existing separate shell session just after directory change. 989
  • Bug fix: Failure when reconnecting session with automatic remote panel refresh enabled. 997
  • Bug fix: Failure when canceling FTP password prompt.
  • Bug fix: When Change stored password to this one option is checked on password prompt, password is not updated for current session.
  • Bug fix: Mouse range selection does not start from focused file after directory reload. 999
  • Bug fix: IP address range 172.16–172.31 was not detected as unroutable for FTP passive mode. 1001
  • Bug fix: Remote panel state is lost after closing Console window. 1004
  • Bug fix: Failure when reading file into internal editor. 1005

• TLS/SSL core upgraded to OpenSSL 1.0.1e.
• Not requiring the .NET assembly to exist in file. 970
• Not considering 3xx error code an error for post-login FTP commands. 972
• Bug fix: Failure after system-wide change. 962
• Bug fix: Issuer and Subject were swapped on Certificate verification prompt. 967
• Bug fix: Traversed subfolders are incorrectly included in find results. 968
• Bug fix: Wrong color indicator on session tab when session was not switched by clicking on the tab. 974
• Bug fix: Failure when auto remote directory refresh was triggered during operation initiated by drag&drop. 975
• Bug fix: Wrong time zone offset was applied with FTP protocol. 977
• Bug fix: It was not possible to preserve time zone offset of 24 hours and greater in stored session.
• Bug fix: Wrong timestamp conversion with FTP protocol. 978
• Bug fix: Error in .NET assembly when temporary path contains exclamation mark. 980
• Bug fix: Indefinite chain of errors when XML logging fails.

• Masking out password in open command in logs. 957
• Location of XML log file can be configured in .NET assembly. 942
• Bug fix: Several flaws in file mask validation on Edit mask dialog.
• Bug fix: Selecting and filtering files using exclude mask only was not working. 951
• Bug fix: Failure to open session in scripting from command line was not reported in exit code. 953
• Bug fix: Session settings TunnelHostKey was not working. 948
• Bug fix: Path word-breaking was not working on most dialogs. 954
• Bug fix: Timeout while waiting for user to enter password with FTP protocol. 955
• Bug fix: Newly created local directory is not opened with synchronized browsing. 956
• Bug fix: Cannot change local folder anymore after system-wide change, when local tree is hidden. 959
• Bug fix: Failure in Session.Open on x64 systems. 960
• Bug fix: Failure when starting as user without desktop. 961

• Not poping up progress window when application is minimized. 943
• Ensuring uniqueness of the XML logging path in .NET assembly. 944
• Bug fix: Never create Quick Launch icon on Windows 7 and newer also from Preferences dialog.
• Bug fix: Failure when reconnecting main session while transferring files in the background. 939
• Bug fix: Hangs when stopping watching for changes in local folder. 915
• Bug fix: Failure when reporting usage statistics.
• Bug fix: Failure when closing application, while checking for application updates.
• Bug fix: Session and directory information was not shown on tray icon tooltip. 949

• New VeriSign publisher certificate used for signing binaries.
• Including time zone information in a session log file.
• Installer creates desktop icon for all users by default.
• On Windows 8, installer creates only main icon on the Start screen.
• Added commands to execute PuTTYgen and Pageant to Tools menu on Login dialog.
• Allowing multiple fingerprints in SessionOptions.SshHostKeyFingerprint and SessionOptions.HostSslCertificateFingerprint. 932
• Logging FTP raw directory listing on Normal logging level.
• Raw session setting TunnelHostKey to verify tunnel session hostkey. 938
• Bug fix: Failure when saving file opened from closed session. 918
• Bug fix: Invalid executable signature. 924
• Bug fix: Never create Quick Launch icon on Windows 7 and newer.
• Bug fix: Notifications of completed operation (such as balloon notifications), when application is minimized, were not working.
• Bug fix: Hangs when showing Log windows while logging in. 925
• Bug fix: Retrieving file stats using non-absolute path may fail with FTP protocol. 930
• Bug fix: Error retrieving file stats using full path with FTP protocol. 926
• Bug fix: Treat timestamps in FTP MLSD/MLST results as UTC. 923
• Bug fix: Failure when FTP server returns “parent” directory is MLSD directory listing. 922
• Bug fix: Background transfer queues were not re-arranged with the sessions, when changing session tab order. 928
• Bug fix: Incorrect file was renamed when changing remote directory using directory tree while renaming file. 933
• Bug fix: Incorrect file list/directory tree splitter color (with themes turned off).
• Bug fix: Command on Console windows is not saved to history, when executed using Enter key. 934
• Bug fix: Could not use .NET assembly from path with special characters (like #). 935
• Bug fix: On re-installation, drag&drop shell extension was sometime not activated.
• Bug fix: Failure when canceling password prompt with FTP protocol. 936
• Bug fix: Empty directory listing was loaded twice with MLSD with FTP command. 937

• Bug fix: Local file/folder got recycled when dropped on folder on the same panel. 911

• When saving current session over the original stored session, save password by default unless it changed and do not prompt for overwrite.
• Values of .NET assembly properties Session.SshHostKey and Session.SslCertificate are validated for correct syntax.
• Change: Not keeping name of an original stored session for edited ad-hoc sessions.
• Change: In .NET assembly SessionOptions class property SshHostKey renamed to SshHostKeyFingerprint, SshPrivateKey to SshPrivateKeyPath and SslCertificate to SslHostCertificateFingerprint.
• Values of .NET assembly SessionOptions class properties Timeout and PortNumber are validated.
• If FTP connection requires password, prompt immediately, without reconnecting. 653
• Session log includes all script console output, including local errors. 910
• Method Session.EscapeFileMask added. 901
• Bug fix: Ad-hoc sessions were added to the jump list. 894
• Bug fix: Icon on properties dialog was rendered with session color on background.
• Bug fix: Failure after system wide change. 899
• Bug fix: Tray icon was not restored after explorer/taskbar restart. 898
• Bug fix: Session.ListDirectory did not report fatal errors. 900
• Bug fix: External IP address of the server is not used when provided IP address is automatically detected as unroutable. 904
• Bug fix: Error connecting over SOCKS proxy with FTP protocol. 907
• Bug fix: Failure when exiting with default configuration. 908
• Bug fix: Error when listing file with MLST FTP command failed. 905
• Bug fix: Error retrieving file stats, if FTP server returns full file path in MLST response. 906

• TLS/SSL core upgraded to OpenSSL 1.0.1c.
• Drag&drop to re-order session tabs. 862
• Local files can be dragged to session tabs for upload. 865
• Remote files can be dragged to session tabs for duplication. 884
• Color icon on session tab. 863
• FTP passive mode IP address is substituted with connection address automatically when passive mode address is unroutable. 883
• Contents of opened internal editors is automatically backed up, when application is abruptly closed. 886
• Session color menu is available on session tab context menu.
• Filter command added to address toobars and context menu of file panels. 732
• Lock toolbars command added to context menu of file panel toolbars. 754
• Added Session.CreateDirectory and Session.RenameFile methods to .NET assembly. 822 833
• Added Session.Abort method to .NET assembly. 890
• Change: Scripting command rm and .NET assembly Session.RemoveFiles method can remove directories as well. 887
• Postponing upload of modified edited remote file to allow the editor finish saving of the file. 870
• When transfer settings preset selected for transfer or synchronization is changed, the transfer settings are updated to the new preset configuration.
• Support for directory listing with timestamp format yyyy-mm-dd hh:mm with SCP protocol. 853
• With scripting exit code is recorded in the session log file.
• Properties of Session class that cannot be changed after session starts, throw an exception when set.
• It is possible to set limit to try reconnecting broken sessions using Session.ReconnectTime. 860
• Change: Remote files are never recycled, unless explicitly enabled. 867
• UTF-8 byte-order-mark is stripped on FTP upload. 888
• Keyboard shortcut Ctrl+Alt+F4 for internal editor in Commander interface. 827
• Keyboard shortcut Alt+Up for opening parent directory. 605
• Taking tabs into account when calculating column position in an Internal editor. 789
• Double buffered drawing of session tabs to prevent flicker.
• Windows 8 compatibility and certification:
  • Not saving random seed file, when run for maintenance task, e.g. during installation/uninstallation, to comply with Windows 8 certification.
  • Other compatibility improvements.
• Using name of focused file as initial name for a new file. 873
• When generation of temporary file for .NET assembly fails, meaningful exception is thrown and status of temporary folder is logged to help troubleshooting.
• Falling back to Virtual folder when looking for an INI file to maintain compatibility with WinSCP 4.x on Windows Vista and newer. 874
• Parsed directory listing is logged.
• AES is preferred encryption cipher again. 880
• Directory listings lacking inode column are supported. 881
• Dialogs are placed in the center of their parent window.
• Improved debug logging of .NET assembly.
• Logging collection of files for synchronization.
• Beta versions always check for beta versions updates.
• Bug fix: Restore selection command shortcut changed to Shift+Ctrl+R (it used to have the same shortcut as Automatically refresh directory after operation).
• Bug fix: “Operation aborted” messages were not suppressed.
• Bug fix: Failure when reconnect failed (generalizing fix). 829
• Bug fix: Missing icons in jumplist. 854
• Bug fix: Session.FileExists was failing with “Recursive calls not allowed”. 852
• Bug fix: Some UTF-8 encoded files were incorrectly loaded into an Internal Editor. 859
• Bug fix: Failure when changing active session while background transfer queue list was being updated. 864
• Bug fix: Main window was not restoring from system tray sometimes. 745
• Bug fix: Failure was not reported, when opening of secondary shell session to execute remote command failed. 871
• Bug fix: Hidden files were not dimmed, when Name column was not the first one (including the hidden columns). 872
• Bug fix: Instruction-only authentication prompts were failed, when predefined password was used in prior prompt already. 877
• Bug fix: Error when connecting to FTPS servers not supporting TLS/SSL session resuming. 879
• Bug fix: Occasional hang when dialog was opened from an internal editor window. 882
• Bug fix: Bugs and other three-state session options were logged incorrectly.
• Bug fix: Switch /xmllog was not working in GUI sessions.
• Bug fix: Could not connect to SSH server without storing hostkey fingerprint. 889
• Bug fix: Support for MLSD FTP command was not detected. 891
• Bug fix: File permissions were not retrieved from MLSD FTP directory listing.
• Bug fix: Searching messages without associated help page on documentation site was not working.
• Bug fix: Warning about overriding script options include and exclude by -filemask switch was sometimes shown incorrectly.

• Using MLSD/MLST to list directory with FTP protocol, when supported. Thanks to Michael Lukashov. 568
• UTF-8 support in an internal editor. 78
• Optionally refreshing file panel in regular intervals. 53
• If password is not specified on Login dialog with FTP protocol, connection is first tried without password. 653
• WinSCP can now optionally collect and send to WinSCP team non-personal usage statistics.
• TLS/SSL core upgraded to OpenSSL 1.0.1b.
• IDE upgraded to Embarcadero C++Builder XE2.
• Change: Dropped support for Windows 95/98/ME. Minimal supported version is Windows 2000.
• Warning is printed on console, when user combines -filemask switch with obsoleted exclude or include options.
• Embedded GPL license text did not contain instructions for how to use GPL on your own programs. 800
• .NET assembly description and consequently type library name modified to start with “WinSCP” for easier look up.
• Remembering the last selected stored session on the Login dialog. 760
• When waiting for external console redirected to a pipe times out, it is suggested to check, if the pipe is being read from.
• Transfer settings panel moved from Preferences dialog into separate dialog.
• Layout of Transfer settings dialog improved.
• Split button is used for Transfer Settings button on Transfer, Synchronize and Keep remote directory up to date dialogs (Windows Vista and newer only).
• Set defaults command of Login dialog placed more intuitively on drop-down menu of Save button (On Windows Vista and newer only).
• .NET assembly Session class public methods are explicitly locked against concurrent and recursive access.
• Silently ignoring errors, when implicitly preserving permissions of overwritten file after resumable file upload. 773
• File mask on Find file window can be edited in Edit mask dialog.
• Files in directory excluded from file search are excluded from search too. 730
• Change: Blowfish is preferred encryption cipher. 1
• Fixed mistakes in MFC building readme file in source code package.
• 256px icon embedded directly in the executable file.
• Not considering 3xx error code an error for custom remote commands. 832
• Double buffered drawing of file panels to prevent flicker. 823
• Alpha-blended marquee selection on file panels.
• Hidden columns are reordered to the front, not to interfere with resizing of visible columns.
• Full row select is by default turned ‘off’ to allow easier selection of files by mouse.
• Optional full row select in Explorer interface. 792
• Increased minimal height of directory tree item.
• On Login dialog, Save button is disabled on Logging tab and Preferences tab and Login button is disabled on Preferences tab, to avoid confusion.
• Bug fix: When downloading file with SFTP protocol, overwrite confirmation dialog showed cached timestamp of source remote file instead of actual one. 810
• Bug fix: Shut down once operation completes was blocked by confirmation prompt. 811
• Bug fix: Redirected output of console interface lacked CR. 812
• Bug fix: Window flickered when application was activated.
• Bug fix: Main menu did not open when application was not activated. 813
• Bug fix: When selecting files by mask, all directories were implicitly selected. 808
• Bug fix: When finding files, all directories were implicitly found. 840
• Bug fix: winscp.com did not restore console codepage on exit. 814
• Bug fix: Failure on TLS/SSL session resuming. Thanks to Michael Lukashov. 668
• Bug fix: Failure on second failed call to Session.Open of .NET assembly.
• Bug fix: Information about dragged files was generated incorrectly. 828
• Bug fix: Failure when reconnect failed. 829
• Bug fix: Exclusion-only file mask on Edit mask dialog was formatted incorrectly.
• Bug fix: Unicode console output was displayed incorrectly on Windows XP and earlier.
• Bug fix: Failure when generating valid local file name from name containing more than one invalid character. 836
• Bug fix: Path label disappears when clicked. 837
• Bug fix: Authentication prompts with no actual prompt were always failed in scripting. 820
• Bug fix: Default session settings were not preserved, when set based on loaded stored session. 839
• Bug fix: When mask wrapped in Edit file mask dialog, it was split into multiple masks.
• Bug fix: The .NET assembly could not find winscp.exe, when run from network path. 841
• Bug fix: Incorrect timestamp time zone in XML log and .NET assembly. 843
• Bug fix: Rare incorrect conversion of line endings. 845
• Bug fix: Keepalives cause timeouts with FTP protocol. 847
• Bug fix: Occasional failure while authentication prompt is idle. 848
• Bug fix: Selected note in directory tree was drawn incorrectly, when not focused in Explorer interface.
• Bug fix: Temporary file with XML log was not removed with .NET assembly. 849

• Prototype of .NET assembly built around WinSCP scripting interface. 147
• SSL core upgraded to OpenSSL 1.0.0g.
• SFTP status packets with missing language tag are accepted. 770
• Disabling session option Optimize connection buffer size disables unlimited SSH window to overcome bugs in some older version of OpenSSH. 635
• When Optimize connection buffer size is enabled, also FTP socket internal buffer size is increased. Thanks to tteras. 787
• Added workaround for Chokes on SSH-2 ignore messages SSH server bug. 577
• SSH core upgraded to PuTTY 0.62. It brings following changes:
  • Security fix: WinSCP no longer retains passwords in memory by mistake. password-not-wiped
  • Bug fix: Spurious “Access denied” printed in the authentication window after GSSAPI failure. gssapi-access-denied
  • Bug fix: 0.61-style Pageant did not work with 0.60-style WinSCP. pageant-backwards-compatibility
• Several changes to enhance and simplify file masks:
  • Convenient dialog for setting file masks. 98
  • Change: File mask that does not end with slash matches only files, not directories anymore.
  • Change: Include directory masks are recursive.
  • Include directories checkbox on Select mask dialog was replaced with Apply to directories checkbox that suspends the above change.
  • Change: Include file mask that does not contain any directory mask matches any directory.
  • Change: Include/Exclude mask in transfer settings replaced with File mask, what is equivalent of Include mask (as supported already previously, it can contain exclude mask after |).
  • Change: Script options exclude and include deprecated in favor of -filemask=<mask> switch of get, put, synchronize and keepuptodate commands.
  • Change: Special characters ;,|<> in file masks can be used as literals by doubling them.
  • File masks can select files also by their modification timestamp. 672
• Change: Escaping new lines in attribute values in XML log (particularly useful for attribute value of output and erroroutput).
• Change: Script option transfer deprecated in favor of -transfer switch of get, put, synchronize and keepuptodate commands.
• Added scripting command stat to retrieve attributes of remote file, along with associated stat XML log element.
• Added /xmlgroups command-line parameter that causes XML log file generated while scripting, to group elements corresponding to the same script command under group element.
• Added /nointeractiveinput command-line parameter that makes scripting fail all prompts, except for prompts for commands.
• It is enough to click (as opposite to previous double-click) Transfer settings box on Transfer, Synchronize and Keep remote directory up to date dialogs to open Transfer settings dialog.
• Change: Session option Remember last used directory is enabled by default.
• Error when looking up user groups are by default suppressed.
• Timeout prompt suggests turning off Optimize connection buffer size as workaround for some problems.
• “Host key not verified” error messages includes host key fingerprint.
• Host keys (both actual and configured) are recorded in session log.
• Directories in file panel are never sorted by an extension.
• Embedded GPL license text did not contain instructions for how to use GPL on your own programs. 800
• When checking for updates, version of winscp.com and .NET assembly is also reported.
• When downloading file with SFTP protocol, first open source remote file before deleting original contents of target local file. 803
• Bug fix: Failure when connection is lost while retrieving file attributes with FTP protocol. 771
• Bug fix: Failure on reconnects. 772
• Bug fix: State of Synchronize on start of Keep remote directory up to date dialog was not preserved. 774
• Bug fix: Operation progress was not shown on taskbar button. 777
• Bug fix: Could not edit files over 64 KiB in an internal editor. 763
• Bug fix: With FTP, particularly in scripting, files could be uploaded to wrong directory. 780
• Bug fix: Could not select files by dragging selection marquee. 778
• Bug fix: “Chokes on SSH-2 ignore messages” SSH bug was always on. 767
• Bug fix: File list flickered on every focus move on Windows XP with Explorer-style selection disabled. 783
• Bug fix: Could not search for +/-/* in filename in file panel by typing. 784
• Bug fix: Failure when cancelling authentication prompt of background transfer. 785
• Bug fix: Password was not remembered for background transfers and/or PuTTY sessions. 786
• Bug fix: Progress window was incorrectly placed when reloading remote file opened in an Internal editor.
• Bug fix: File was uploaded after closing an internal editor even when not changed, but reloaded. 790
• Bug fix: Mask hint for transfer settings preset rules included file size mask.
• Bug fix: With FTP protocol touch element was not generated in XML log file.
• Bug fix: Could not handle less common formats of passive connection data response from FTP server. 793
• Bug fix: Failure exit code always reported when reading script from standard input. 794
• Bug fix: Cannot create desktop shortcut for session with special characters in name. 795
• Bug fix: Progress bar tooltip was not hidden once the progress window disappears. 796
• Bug fix: Failure on fatal script error.
• Bug fix: SFTP file handle is written incorrectly when reading properties of remote file being overwritten. 798
• Bug fix: Undisplayable information were logged/displayed incorrectly
• Bug fix: Output/input from winscp.com is converted to/from ANSI encoding.
• Bug fix: Fallback to registry storage, when implicit INI file storage was not writable, was not working. 801
• Bug fix: Incorrect Base64 encoding in HTTP Basic authentication with FTP protocol. 804
• Bug fix: Could not drop files on file panel (unless started and kept in report view). 806

• Connection attempt can be cancelled. 757
• After cancelling authentication prompt, error message is no longer displayed.
• Bug fix: Failure while logging off the Windows.
• Bug fix: Fixed parsing owner/group with modified ID on Properties dialog.
• Bug fix: Missing animations on Progress window on Windows Vista/7.
• Bug fix: When switching between session and shared bookmarks, path was not updated on the Open directory dialog.
• Bug fix: Internal “Operation aborted” errors were not suppressed for background transfers.
• Bug fix: Path label was not resized with larger shell font size.
• Bug fix: Pageant authentication was not working on x64. 764
• Bug fix: Failure on startup when master password is set. 765
• Bug fix: Upload of non existing file in script using put command did not trigger error.

• Icon is assigned to all top-level windows, in particular to initial Login dialog, so that there’s always WinSCP icon in the Alt+Tab view.
• Bug fix: Synchronization check list view was corrupted.
• Bug fix: Failure when changing view style in Explorer interface. 753
• Bug fix: It was not possible to drag more than one file. 756
• Bug fix: Default permissions for new remote directory did not include Execute right. 762

• Recently used sessions are added to taskbar jump list on Windows 7. 527
• Queue processing can be disabled. 29
• Tab selector for sessions. 77
• Change: Synchronized browsing state is stored with stored session, not in preferences. 10
• Stored session folder opened/closed state is remembered. 220
• Change: In mouse-only Explorer-style selection mode, single-file implicit mouse-selection is not preserved, when focus/selection is subsequently changed using keyboard.
• Change: All fatal errors (those that cause exit code of WinSCP to be 1) in scripting are recorded in new subtag failure of root tag session in XML log. This includes connection errors, replacing previous recording in result tag.
• Change: Value both of synchronize command switch criteria renamed to either to avoid confusion (both is still recognized for backward compatibility). 195
• Increased socket internal buffer size for SSH with option to disable it. It improves transfer speed. Thanks to ultramage. 690
• File sizes in file panel are optionally shown using short format (KiB, MiB, etc). 421
• All binaries are signed with Martin Prikryl publisher certificate. 505
• Automatic reconnect, when server stopped responding. 405
• When script is aborted by the user, error exit code is used.
• Explicit control for specifying anonymous FTP login on Login dialog. 569
• FTP account can be specified on Login dialog. 203
• MFC building readme file in source code package has wrong content.
• When saving opened session, password saving is enabled, when master password is in use.
• Connect timeout is configurable.
• Information window about updates show times of the last and the next check for updates.
• Increased height of Login dialog to fit more stored sessions. 378
• Description of rawsettings script added to command-line help screen and open command help.
• Change: Silently ignoring, when local file mask in put command matches no file. 746
• Added mget alias for get script command and mput alias for put command.
• Added echo script command. 551
• URL of Getting started webpage opened from installer includes previously installed version, so that hints specific to upgrades from the version can be displayed.
• Installer starts WinSCP minimized, when it also opens Getting started webpage.
• Session option Allow GSSAPI credential delegation is now configurable on the Login dialog. 583
• When renaming a folder within file panel, whole filename (including an extension) is always selected. 737
• In-application license text updated to GPLv3. 751
• Bug fix: Default session log file path was missing slash before filename.
• Bug fix: Duplicate reconnect prompt when connection is lost, while transferring file in subdirectory.
• Bug fix: Error was signaled from script when connection stalled even when it was reconnected. 731
• Bug fix: Help > Contents command was not working.
• Bug fix: Failure to locate GetUserNameEx. 734
• Bug fix: Records of files transferred within subdirectory were written at once, not continuously, in XML logging. 739
• Bug fix: Switch -rawsettings of open command was not working. 740
• Bug fix: In mouse-only Explorer-style selection mode, selection was not cleared after clicking outside of selection, after focus/selection was previously changed using keyboard.
• Bug fix: Mouse cursor stayed “busy” forever after drag&drop operation. 744
• Bug fix: Main window was not restoring from system tray sometimes. 745
• Bug fix: Session name was not preserved when duplicating session into a new window.
• Bug fix: Failure when using an INI file. 747
• Bug fix: Installer was not removing translations of previous versions on Windows 7.

• Any session configuration option can be set on command line and/or scripting in raw format using /rawsettings switch. 520
• Change: Binary transfer mode is default. 670
• Change: Connection error is recorded in XML log in new subtag result of root tag session. 545
• Change: With FTP protocol, passive mode is used by default. 165
• Environment variables are resolved in session hostname and username. 392
• Installer without OpenCandy does not include OpenCandy license anymore.
• Option to enable active mode with FTP protocol in scripting. 669
• Both session (text) and XML log can be produced at the same time. 481
• Bug fix: Failure when cancelling login dialog. 728
• Bug fix: Failure to locate GetTimeZoneInformationForYear. 729
• Bug fix: Check for application updates was not working.
• Bug fix: Duplicate shortcut key in local Open directory window. 710

• SSL core upgraded to OpenSSL 1.0.0e.
• Support for different DST boundaries in the past. 656
• Starting renaming the next file after confirming rename with Tab key. 701
• External IP address for FTP active mode is configurable. 538
• Logging local account into session log. 709
• Setup informs at the end about reason restart is required (when it is) and that it does not prevent WinSCP from functioning, apart from the drag&drop shell extension. 686
• Setup optionally opens Getting started webpage.
• Prevented file virtualization. 719
• F10 key closes an internal editor. 711
• Error when opening FTP active mode connection, has explicit help link.
• Bug fix: Cannot drag&drop files from local file panel. 721
• Bug fix: Directory listing was shown as part of the file transfer error message with FTP protocol.
• Bug fix: Missing application icon. 722
• Bug fix: Internal editor window was not restored when minimized when editing the already file again. 723
• Bug fix: Missing build.bat from the source code package. 724
• Bug fix: Windows button on taskbar was not hidden when minimizing to tray. 725
• Bug fix: Auto arranging of WinSCP window by Windows (and other applications) did not work. 186
• Bug fix: Improved compatibility with MSVDM.
• Bug fix: Opening session in PuTTY was not working. 726
• Bug fix: Failure to store passwords encrypted with master password. 727
• Bug fix: Link to a parent directory was not read in an empty remote root folder. 706

• Unicode support. 586
• Explorer-style file selection with mouse is enabled by default in Commander interface. 718
• Bug fix: Buttons on Login dialog sometimes got hidden. 691
• Bug fix: ? at the end of file mask did not enforce presence of character. 630
• Bug fix: Failure when session is closed unexpectedly in scripting. 716
• Bug fix: Cannot switch to Internal text editor when searching. 679
• Bug fix: Wrong window layout with large fonts. 831
• Bug fix: Minimized snapped window was not restored to its snapped position. 844

• Bug fix: Icon on properties dialog was rendered with session color on background.
• Bug fix: Tray icon was not restored after explorer/taskbar restart. 898
• Bug fix: External IP address of the server is not used when provided IP address is automatically detected as unroutable. 904
• Bug fix: Error connecting over SOCKS proxy with FTP protocol. 907
• Bug fix: Local file/folder got recycled when dropped on folder on the same panel. 911
• Bug fix: Failure when saving file opened from closed session. 918
• Bug fix: Command on Console windows is not saved to history, when executed using Enter key. 934
• Bug fix: Incorrect file was renamed when changing remote directory using directory tree while renaming file. 933
• Bug fix: Failure to open session in scripting from command line was not reported in exit code. 953
• Bug fix: Issuer and Subject were swapped on Certificate verification prompt. 967

• Back-propagated some improvements and fixes from 5.0.8 beta release:
  • FTP passive mode IP address is substituted with connection address automatically when passive mode address is unroutable. 883
  • Postponing upload of modified edited remote file to allow the editor finish saving of the file. 870
  • Parsed directory listing is logged.
  • Bug fix: Instruction-only authentication prompts were failed, when predefined password was used in prior prompt already. 877
  • Bug fix: Error when connecting to FTPS servers not supporting SSL session resuming. 879
  • Bug fix: Bugs and other three-state session options were logged incorrectly.

• Back-propagated some improvements and fixes from 5.0.7 and 5.0.8 beta releases:
  • SSL core upgraded to OpenSSL 1.0.1c.
  • Embedded GPL license text did not contain instructions for how to use GPL on your own programs. 800
  • Full row select is by default turned ‘off’ to allow easier selection of files by mouse.
  • Support for directory listing with timestamp format yyyy-mm-dd hh:mm with SCP protocol. 853
  • With scripting exit code is recorded in the session log file.
  • Bug fix: Fallback to registry storage, when implicit INI file storage was not writable, was not working. 801
  • Bug fix: Incorrect Base64 encoding in HTTP Basic authentication with FTP protocol. 804
  • Bug fix: Could not select files by dragging selection marquee. 778
  • Bug fix: Shut down once operation completes was blocked by confirmation prompt. 811
  • Bug fix: Failure on SSL session resuming. Thanks to Michael Lukashov. 668
  • Bug fix: Command lls showed incorrect size for files over 2 GiB. 819
  • Bug fix: Failure when generating valid local file name from name containing more than one invalid character. 836
  • Bug fix: Authentication prompts with no actual prompt were always failed in scripting. 820
  • Bug fix: Default session settings were not preserved, when set based on loaded stored session. 839
  • Bug fix: Keepalives cause timeouts with FTP protocol. 847
  • Bug fix: Incorrect timestamp time zone in XML log and .NET assembly. 843
  • Bug fix: Failure when changing active session while background transfer queue list was being updated. 864

• Back-propagated some improvements and fixes from 5.0.6 beta release:
  • SSL core upgraded to OpenSSL 1.0.0g.
  • Bug fix: State of Synchronize on start of Keep remote directory up to date dialog was not preserved. 774
  • Bug fix: Progress window was incorrectly placed when reloading remote file opened in an Internal editor.
  • Bug fix: File was uploaded after closing an internal editor even when not changed, but reloaded. 790
  • Bug fix: With FTP protocol touch element was not generated in XML log file.
  • Bug fix: Could not handle less common formats of passive connection data response from FTP server. 793
  • Bug fix: Failure exit code always reported when reading script from standard input. 794
  • Bug fix: File list flickered on every focus move on Windows XP with Explorer-style selection disabled. 783
  • Bug fix: Progress bar tooltip was not hidden once the progress window disappears. 796

• Bug fix: “Chokes on SSH-2 ignore messages” SSH bug was always on. 767
• Back-propagated some improvements and fixes from 5.0.3 – 5.0.6 beta releases:
  • All binaries are signed with Martin Prikryl publisher certificate. 505
  • When script is aborted by the user, error exit code is used.
  • Connect timeout is configurable.
  • When renaming a folder within file panel, whole filename (including an extension) is always selected. 737
  • In-application license text updated to GPLv3. 751
  • Change: In mouse-only Explorer-style selection mode, single-file implicit mouse-selection is not preserved, when focus/selection is subsequently changed using keyboard.
  • SSH core upgraded to PuTTY 0.62. It brings following changes:
    • Security fix: WinSCP no longer retains passwords in memory by mistake. password-not-wiped
    • Bug fix: Spurious “Access denied” printed in the authentication window after GSSAPI failure. gssapi-access-denied
    • Bug fix: 0.61-style Pageant did not work with 0.60-style WinSCP. pageant-backwards-compatibility
  • Bug fix: Fixed parsing owner/group with modified ID on Properties dialog.
  • Bug fix: When switching between session and shared bookmarks, path was not updated on the Open directory dialog.
  • Bug fix: Internal “Operation aborted” errors were not suppressed for background transfers.
  • Bug fix: Path label was not resized with larger shell font size.
  • Bug fix: Default permissions for new remote directory did not include Execute right. 762
  • Bug fix: Duplicate reconnect prompt when connection is lost, while transferring file in subdirectory.
  • Bug fix: Error was signaled from script when connection stalled even when it was reconnected. 731
  • Bug fix: Failure to locate GetUserNameEx. 734
  • Bug fix: Records of files transferred within subdirectory were written at once, not continuously, in XML logging. 739
  • Bug fix: In mouse-only Explorer-style selection mode, selection was not cleared after clicking outside of selection, after focus/selection was previously changed using keyboard.
  • Bug fix: Session name was not preserved when duplicating session into a new window.
  • Bug fix: Installer was not removing translations of previous versions on Windows 7.
• OpenCandy advertising module reintroduced to the installer. There’s also ad-free alternative installer available.

• Bug fix: Translations were not included in setup. 713
• Bug fix: Versions of 3^rd party components were not updated in translations. 715
• Back-propagated some improvements and fixes from 5.0 – 5.0.2 beta releases:
  • SSL core upgraded to OpenSSL 1.0.0e.
  • Explorer-style file selection with mouse is enabled by default in Commander interface. 718
  • Starting renaming the next file after confirming rename with Tab key. 701
  • Logging local account into session log. 709
  • F10 key closes an internal editor. 711
  • Installer without OpenCandy does not include OpenCandy license anymore.
  • Bug fix: Directory listing was shown as part of the file transfer error message with FTP protocol.
  • Bug fix: Internal editor window was not restored when minimized when editing the already file again. 723
  • Bug fix: Link to a parent directory was not read in an empty remote root folder. 706
  • Bug fix: Failure when session is closed unexpectedly in scripting. 716
  • Bug fix: Duplicate shortcut key in local Open directory window. 710

• SSH core upgraded to PuTTY 0.61. It brings following changes:
  • When WinSCP fails to get a response from Pageant, it logs the fact.
  • Bug fix: Workaround for some servers blithely responding to winadj@putty.projects.tartarus.org with SSH_MSG_CHANNEL_SUCCESS despite probably having no idea what it means. winadj-success
  • Bug fix: Pageant authentication was not working. 703
• The command list -a is stopped being used when returned listing is empty. 693
• Using HTTP/1.1 when checking for application updates.
• Bug fix: Unwanted auto-completion in comboboxes when resizing the window.
• Bug fix: Arguments (passwords in particular) passed to PuTTY were not escaped correctly. 692
• Bug fix: Special permissions were not preserved correctly in configuration. 695
• Bug fix: Another invalid time zone shifting of file timestamps with FTP protocol. 696
• Bug fix: Failure when connection closes with FTP protocol. 698
• Bug fix: WinSCP was hanging when FTP directory listing connection was closed without response to LIST command. 699
• Bug fix: Slow startup when there are disconnected network drives. 702
• Bug fix: Notification balloon was displayed after finishing of every queue task. 705
• Bug fix: No fallback to IPv4 with SSH. 707

• Rolled back increase of socket internal buffer size for SSH. 677
• SSH core upgraded to the latest development snapshot of PuTTY (2011-03-04, revision 9120). It brings following changes:
  • Support for “zlib@openssh.com” compression. 146
  • Small performance improvements.
• On Windows 7 progress of operation is shown on the taskbar button. 437
• URLs with IPv6 address are supported. 681
• Removed length limit for FTP Post login commands. 673
• Colon in stored session name and IPv6 addresses is escaped when used for generated name of session log file.
• State of Advanced options checkbox is always remembered. 650
• Source of the configuration is stored into session log. 683
• Navigating back/forward with synchronized browsing enabled affects both panels. 625
• When renaming a file during transfer, only filename (without an extension) is optionally selected. 664
• File renaming is not started, when only focusing application. 651
• Session colors are used on stored session list. 687
• Setup will default to use the same language as the last time.
• Setup will not try to replace the drag&drop shell extension unless newer version is included. This prevents setup from requiring restart in many cases. 686
• Bug fix: Incorrect conversion of timestamps between local and remote systems with respect to DST on Windows 2008 R2. 671
• Bug fix: Failure on transfer error with SCP protocol. 674
• Bug fix: Invalid time zone shifting of file timestamps with FTP protocol. 675
• Bug fix: Pageant authentication was not working on x64. 662
• Bug fix: Failure when reconnection fails with FTP protocol. 680
• Bug fix: Failure when reconnecting with FTP protocol. 676
• Bug fix: chmod command was not skipped with SCP protocol, when changing file properties but not changing permissions. 645
• Bug fix: Error when uploading file with specific size with FTP protocol. 684

• SSL core upgraded to OpenSSL 1.0.0d.
• Enabled TLS extensions in OpenSSL, what resolves problems with some FTP servers. 658
• Change: Compare directories command uses Shift+F2 shortcut instead of Ctrl+C. 641
• OpenCandy advertising module was suspended from the installer.
• Added support for dragging files from WinRAR. 399.
• Default ascii file mask extended with *.js. 642
• SSH core upgraded to the latest development snapshot of PuTTY (2011-02-21, revision 9101).
• Bug fix: Check for application updates was not working.
• Bug fix: Error response to SFTP initialization request was sometimes parsed incorrectly.
• Bug fix: It was not possible to skip errors during some operations. 654
• Bug fix: Home directory was incorrect after reconnect with FTP protocol. 659
• Bug fix: It was sometimes not possible to initiate file renaming. 657

• SSL core upgraded to OpenSSL 1.0.0c.
• File renaming is not started, when only focusing file panel. 570
• Bug fix: Failure when logging in ad-hoc session. 632
• Bug fix: Failure when directory is reloaded while renaming file. 633
• Bug fix: Values with special characters were not exported correctly to PuTTY. 634
• Bug fix: Invalid DST handling in the Southern hemisphere. 638
• Bug fix: Synchronized browsing was not preserved, when restarting application. 639

• Increased socket internal buffer size for SSH. It should improve transfer speed. Thanks to ultramage. 615
• Environment variables are resolved in path to external editor. 563
• Include/exclude masks can be used when moving files between local and remote directories. 536
• Add to Bookmarks and Refresh commands added to context menus of panel path labels. 624
• Change: With FTP protocol, passive mode is used by default. 165
• Change: Links to website and help are no longer created in start menu folder. 616
• Autocomplete disabled for most of the combo boxes. 619
• SSH core upgraded to the latest development snapshot of PuTTY (2010-09-27, revision 9010). It brings following changes:
  • Improved port forwarding robustness.
  • When disconnected because there are no supported authentication methods left to try, the error message contains the list of methods sent by the server.
  • Standard GSS libraries are now loaded from standard locations rather than using the default DLL search path.
  • Other small bugs fixed.
• SSL core upgraded to OpenSSL 1.0.0a. This effectively disables SSL 2.0
• Bug fix: Error when refreshing panel content. 617
• Bug fix: Error when more background transfers finish at the same moment. 622
• Bug fix: Script does not abort after receiving no answer for prompt, when running in batch mode. 623
• Bug fix: Main window appeared in background, when prompt for master password appeared during authentication. 629
• Bug fix: Script running in batch mode did not automatically reconnect broken sessions. 517
• Bug fix: Error when uploading empty file over FTPS. 489

• Never try to rename file to the very same name. 604
• Bug fix: Failure when executing custom command and not capturing its output. 587
• Bug fix: GSSAPI/Kerberos was not working. 590
• Bug fix: Local file timestamp was interpreted incorrectly for synchronization on Windows 7. 591
• Bug fix: Failure on close scripting command. 599
• Bug fix: Path history was mixed among sessions. 607
• Bug fix: Session closed after operation completed was automatically reconnected. 608
• Bug fix: Check for application updates was hanging. 611
• Bug fix: Missing content on OpenCandy screen. 600

• File size masks are allowed in script commands. 555
• Change: Conversion of timestamps between local and remote systems with respect to DST follows changes introduced in Windows 7. 564 This breaks synchronization when you used previous WinSCP versions.
• Installation package includes development versions of PuTTYgen and Pageant applications. It brings following changes:
  • PuTTYgen supports importing of new-style OpenSSH private keys (encrypted by AES rather than 3DES).
• SSH core upgraded to the latest development snapshot of PuTTY (2010-05-19, revision 8952). Improving GSSAPI support.
• Script commands and output are included into session log. 547
• Bug fix: IPv6 support was broken. 556
• Bug fix: Protocol ftps was ignored in session URL when port number was also specified. 558
• Bug fix: Suggested session path was duplicated when saving new session. 562
• Bug fix: SFTP packet counter overflow. 565
• Bug fix: Sorting by owner/group was broken. 571
• Bug fix: Failure when opening session protected with master password from command-line in console. 573
• Bug fix: Saving password in default session settings did not force prompt for master password, allowing the password being stored unencrypted.
• Bug fix: Missing OpenCandy DLL on Windows startup. 579
• Bug fix: Hangs when changing directory using directory tree after toggling showing of hidden files. 580
• Bug fix: !.! was suggested as name of executable when browsing for previously undefined executable.
• Bug fix: Failure when running multiple instances of console interface tool in parallel. 581

• Increased maximal size of accepted SFTP packet. 548
• Bug fix: Failure when closing connection after another failed connection. 547
• Bug fix: Root path was not remembered as last working path on a drive. 549
• Bug fix: Hang-up after closing connection. 550

• ZIP archive with both executables is released instead of just compressed EXE. 523
• Automatically named session is renamed when hostname and/or username is modified. 532
• When reading of file to be edited fails, empty internal editor is no longer shown.
• Forcing width of message box not to exceed screen width.
• Environment variables in path to private key file are resolved before passing it to PuTTY to open the session. 524
• WinSCP name is included in balloon notifications. 533
• Time zone offset can be set up to +/-25 hours. 534
• Setup does not query OpenCandy for ads when running silent install.
• Small visual changes for Windows 7.
• Being tolerant to FTP servers enclosing path in 257 response to single quotes. 541
• SSH core upgraded to the latest development snapshot of PuTTY (2010-01-17, revision 8846). Fixing memory leak.
• SSL core upgraded to OpenSSL 0.9.8l.
• Bug fix: Bookmarks with equal sign in their name were not preserved when using INI file. 522
• Bug fix: Synchronize browsing failed, when entering local directory, while current remote path was root. 525
• Bug fix: Having higher logging level set decreased performance even when logging itself was disabled. 526
• Bug fix: Error when running ad hoc custom command. 529
• Bug fix: Tray icon was sometimes not removed when application closed.
• Bug fix: Navigation tree on Preferences dialog was corrupted sometimes. 539
• Bug fix: Memory leak while authenticating with private key.
• Bug fix: System date/time format was not followed on Windows 7. 537
• Bug fix: On some systems winscp.com did not find winscp.exe when executed from search path. 542
• Bug fix: Failure when connection was closed while Console window was opened. 544

• Environment variable WINSCP_PATH pointing to path, where WinSCP executable file is located, is set on startup, so it can be used to configure portable paths relative to the WinSCP executable file. 311
• It is not possible to cancel master password prompt anymore, when saving session with passwords.
• Slash added to names of directories in search results to distinguish them from files.
• Keyboard shortcut for finding files changed to F3 in Explorer interface.
• Path is recorded in history after changing directory in console window. 518
• Replacing characters not allowed in local file names is taken into account with synchronized browsing. 512
• Merged error message and directory creation confirmation box into one, when synchronized browsing cannot find corresponding opposite directory. 347
• Synchronized browsing can handle change to different directory branch. 101
• Placed Use same options next time on synchronization dialog above transfer settings box to make it clear that transfer settings are not saved. 519
• SSH core upgraded to the latest development snapshot of PuTTY (2009-11-22, revision 8755). It does not bring any notable change.
• Bug fix: When master password changing was canceled, message informing about successful change appeared anyway.
• Bug fix: No help was associated with Security tab of Preferences dialog.
• Bug fix: Passwords in default session settings were not re-encrypted when master password was changed.
• Bug fix: Empty session password were in rare situation encrypted using master password, what caused seemingly useless prompts for master passwords.
• Bug fix: WinSCP did not offer to unset read-only flag when overwriting local files anymore.
• Bug fix: Error when downloading remote files from root directory into temporary local directory. 502
• Bug fix: Failure when retrying connect attempt after host is not resolved. 503
• Bug fix: Incorrect calculation of DST start/end date. 504
• Bug fix: Session data on Login dialog were overwritten when locale is changed. 508
• Bug fix: Error when moving local directory to remote side. 509
• Bug fix: Help for put scripting command incorrectly claimed that -append switch is valid for FTP protocol only.
• Bug fix: Ampersands (&) in names of transfer settings presets and custom commands were handled inconsistently. 506
• Bug fix: Excluding file from transfer did not prevent access to the file. 514
• Bug fix: Error when daylight saving is not properly configured in Windows. 519
• Bug fix: Shell icon for stored session in folder could not be created. 515

• File search. 92
• Stored session passwords can be encrypted by AES cipher using master password. 273
• Path relative to startup directory can be used in initial session local directory. 492
• Up to 255 characters long SFTP server commands are allowed. 495
• Value off of reconnecttime script option is case-insensitive. 491
• SFTP status code is not logged as status/error code anymore. 484
• While downloading trailing dot in filenames is replaced with %2E, as Windows trim them. 452
• WinSCP can load plain text tunnel password from configuration (new attribute TunnelPasswordPlain). If possible, it automatically converts the password to encrypted form. 497
• SSH core upgraded to the latest development snapshot of PuTTY (2008-09-27, revision 8665). It brings following changes:
  • Bug fix: Minor memory leaks.
• Bug fix: Uploads of large files with FTP were restarting. 157
• Bug fix: Error when opening separate shell session. 477
• Bug fix: Backslash in remote path broke path label. 482
• Bug fix: Using passive mode was suggested when connection fails even when used already. 485
• Bug fix: Operation hanged for a while when transfer of file was skipped with FTP protocol. 486
• Bug fix: Operation hanged occasionally when both control and transfer connection were closed at the same time with FTP protocol. 487
• Bug fix: Quote escaping did not work with console interface tool. 494
• Bug fix: Ctrl+C in console windows occasionally interrupted more than one prompt.
• Bug fix: Failed connection in script closed last active session simultaneously.
• Bug fix: It was not possible to copy remote files using drag&drop within remote panel with FTP protocol.
• Bug fix: Problem minimizing progress windows while performing operation executed from command-line. 475
• Bug fix: WinSCP hanged on some systems, when remote file with name reserved on Windows appeared in directory listing. 152
• Bug fix: Backslash was inserted to remote path when running custom command from synchronization checklist dialog. 498