Released: Jun 22, 2026

Updates in 2.20.0

Features

• Improved handling of broken SSH INIT ML-KEM packets.

Fixes

• Fixed possible deadlock while SSH session is being renegotiated.
• Fixed handling of SFTP SSH_FXP_RENAME_OVERWRITE.
• Fixed wrong length detection in SSH_FXP_WRITE packet parser.

Released: May 25, 2026

Updates in 2.19.0

Features

• Added support for Argon2 password hashing. Argon2 is a memory-hard algorithm significantly more resistant to brute-force attacks than SHA-2, at the cost of higher memory and CPU usage per login. Enable it by setting users.passwordHashAlgorithm: { type: argon2id } in config.yaml. Argon2 parameters such as memory cost and parallelism can be configured explicitly.
• Extended users.passwordHashAlgorithm in config.yaml to accept an object form ({ type: argon2id }, { type: SHA512, saltLength...

Released: Mar 19, 2026

Updates in 2.18.4

Fixes

• Fixed incorrect Windows privilege check for terminal shell running as a different user. The service now correctly requires the 'Replace a process level token' (SeAssignPrimaryTokenPrivilege) and 'Adjust memory quotas for a process' (SeIncreaseQuotaPrivilege) privileges, rather than the overly broad 'Act as part of the operating system' (SeTcbPrivilege) privilege.
• Fixed diffie-hellman-group17-sha512 and diffie-hellman-group18-sha512 being advertised but not usable as kex algorithms.
• Web...

Released: Feb 20, 2026

Updates in 2.18.3

Fixes

• Fixed LiteDB database locking error.
• Web Admin - log viewer now only shows the last 50kB and adds an option to view or download the entire log file.

Released: Feb 10, 2026

Updates in 2.18.2

Fixes

• Fixed behavior of 'ftp.bindings[].externalAddress' and 'ftp.bindings[].dataPortRange' in FTPS implicit mode.

Released: Feb 9, 2026

Updates in 2.18.1

Fixes

• Fixed a compatibility issue with some SSH clients by changing the SSH message order for SSH shell channels.

Released: Jan 8, 2026

Updates in 2.18.0

Features

• Major overhaul of SSH/SFTP core - improved performance, thread and memory usage in some scenarios.
• Added support for 'mlkem768x25519-sha256', 'mlkem768nistp256-sha256' and 'mlkem1024nistp384-sha384' hybrid post-quantum key exchange ciphers.
• Added support for 'diffie-hellman-group17-sha512' and 'diffie-hellman-group18-sha512' key exchange ciphers.
• Added support for copy-data SFTP extension.
• Improved performance of elliptic curve algorithms on modern platforms.
• Installer - when upgrading...

Released: Aug 14, 2025

Updates in 2.17.3

Features

• User authentication method is now logged with information log level (changed from debug).
• Added a log error message when the service is started under the SYSTEM user, defaultShellType is set to terminal and allowSystemAccount is not enabled.
• Installer: Silent uninstallation (/SILENT) will now not prompt for any confirmation and will delete all configuration files.
• Web Admin:
  • User's virtual path can now be specified without the leading slash.
  • Log viewer is now accessible even when the...

Released: May 5, 2025

Updates in 2.17.2

Fixes

• Web Admin - Fixed error when saving user with SSH public key.

Released: Apr 24, 2025

Updates in 2.17.1

Fixes

• Fixed startup error when sshTunneling is present and disabled (default) in the configuration file.