32-bit
innouser scopesourceforge.net · known platform- File name
- download
- SHA-256
- 4488c493bafca6af4e7ae54ed39cb71479e65dc192c4d1a471647bf9cb9d6db0
- Product code
- winscp3_is1
WinSCP
by Martin Prikryl · GPL-3.0-or-later
95/100how this is calculated
Free SFTP, SCP, S3 and FTP client for Windows
Record
- Latest version
- 6.5.6
- Release date
- 25 Mar 2026
- Official page
- https://winscp.net/
- Package identifier
- WinSCP.WinSCP
Official downloads
These URLs are the ones Martin Prikryl declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
32-bit
wixmachine scopesourceforge.net · known platform- File name
- download
- SHA-256
- d3ef315e0013479dcbcedf8dd06aec33dfeda9004972e94128144329957b602f
- Product code
- {6B3B4018-4030-48D4-8924-F71537247E0D}
Verify the file you downloaded
Run this against the file on disk. If the output does not match the hash below, the file is not what Martin Prikryl published. Delete it.
Windows · PowerShell
Get-FileHash "download" -Algorithm SHA256macOS · Linux
shasum -a 256 "download"Expected output
4488c493bafca6af4e7ae54ed39cb71479e65dc192c4d1a471647bf9cb9d6db0
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
Install WinSCP silently
This installer is an MSI package, so it takes the standard Windows Installer switches. That is a property of MSI itself rather than something the publisher declared.
32-bit · machine scope · MSI convention
msiexec /i "download" /qn /norestartRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
Silent install commands for every program we index · silent uninstall
Uninstall WinSCP cleanly
Every guide on this tells you to hunt for the product code with Get-WmiObject or in the registry. You do not need to: it is published in the installer manifest, and it is printed below.
Product code · 32-bit
{6B3B4018-4030-48D4-8924-F71537247E0D}
Uninstall, with the usual prompts
msiexec /x {6B3B4018-4030-48D4-8924-F71537247E0D}Silent, for deployment
msiexec /x {6B3B4018-4030-48D4-8924-F71537247E0D} /qn /norestartThe product code changes with every version
The codes above belong to WinSCP 6.5.6, the version in our index. If you have an older release installed, its code is different and this command will report that the product is not installed. In that case run Get-Package -Name "WinSCP*" in PowerShell to read the code of what you actually have.
This removes the program as the publisher packaged it. Settings and files created after installation, typically under AppData, are deliberately left behind by the uninstaller and have to be deleted by hand if you want them gone.
Reinstalling and hitting error 1638? That is this same product code, and the command above is the fix.
Product codes for every program we index, with the msiexec switches and how to read the code off your own machine.
How we scored this 95 out of 100
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 5 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | GPL-3.0-or-laterA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Is WinSCP safe to download?
The installer comes from a recognised distribution platform rather than Martin Prikryl's own domain. That is normal for this kind of software and not a red flag by itself.
Every one of the 2 installers on this page comes with the SHA-256 Martin Prikryl declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 95/100 score is calculated · why the source matters more than the reputation
Install WinSCP with winget
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id WinSCP.WinSCP --exactUpgrade later
winget upgrade --id WinSCP.WinSCPWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
Old versions of WinSCP20 with hashes
The version history of WinSCP, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
6.5.5
released 19 Nov 20258C223402D933DF4430F2C6E3CAD17ED1DB17710ABFD13D62ACC707EA480A092F
F78158DD54413F8C8ED2700ADB615EB2B25E460BA53CFC64D659BD7CA461B267
6.5.4
released 16 Oct 202595F7935B63115B7EB4631A3BE5E56F78D2AD7ECA8525E8B6BE8761D4BE3FE130
0AEE15ED76ACD8EDA47F673EBCF76B4974AA199CCD0459E3943A1D8148F04AB5
6.5.3
released 16 Jul 202566DE37A79900C3EEBC8225058CAE5E2DB3DF939308BA6B2D518B39C98E4F41DA
F265C82DA6A78D9DD457C75E45685B66BFA51297669289DF9B8FFACA5385BD29
6.5.2
released 18 Jun 20259BBA02378A0E71FC5DBB20C50B1528987D8B67BD243F097E954206ED514A955A
5AE285050583DEC14B9013F2521E131830F04FB93A0E5F2D70A667C94E00E2A2
6.5.1
released 05 May 2025A54ECA431FDFBBF489805D995C1EBEAF7FF5A4E5AD825CC529F1B0F7525815AB
598B64A76F293A0FA6865A4A54C12721D4F076C06F202E7F6CE4E9AA6CD6272C
6.5
released 31 Mar 2025E6B178D204700FE70C3D5F94DEB1E35D708AB88B225694D0F2D061F9E66805E5
2A21679521E52E3FA964F3B89D9D7C56D78E1B78031282D6F662EC99995DE18A
6.3.7
1AE56E8F857F8A35A4CD2578EAEB5E04DC334251E91CFBFA28185512E57FDC68
56C9046EF791C9141B161D976D4A4BFADC16DDFF1F93BB216F0B2BAB3DADD8DA
6.3.6
63E86D50BD3E28B2F19D86114F589FF12C85CEBBA208E05ECE896BCF4DCE2AA2
75CECB175508A5F07D880351D9FE2A2FC2CD425DBF8A92EE792487ED1BC3AE72
6.3.5
49E17CE8B1DF637A71DFAC483E9FEF72F6747E4235CCE3871A1BB3F3A1371127
60B7F6A9E3C2BB5EAB3BB7D6074A4C4E6C1080D459E272CE8E44213501A142FC
6.3.4
D83E32F949F717E51E1A88A33F8EA23CBC0A4320BFF51F53E0859BCCA628CCF0
7D06D188D43F88C96A11FD87461EE069B6008F64C566384E807E0755AEF2D6BF
6.3.3
928DD0B8818B49106C344C937AAD68D7893DEF75A5BF65D79AEB2CD566F239F7
DEC50408F88D4059E5E5FF938CCDF867EB742E73D2DB5E379F5C433C42629502
6.3.2
7C3CA5E997EB50C531C429CA24BC35DF48C2AD6BBBAAFB60B271927109D3D48A
CBB23EEF0B5E8CFF1633EF3FDD8E3CDFE3FD2A872B06D00796ED8D9DDBC1D908
6.3.1
6E28B27C263A3099C44341E2CB0D320332D2C1A7585C8F7907EA989FF01490D3
163A240D9620B295423F38C9E990DE7AD348212DA045D62E3557D60C161EE778
6.3
76F8A2D4A21BB7F71C03B087D7490730EC52565FCD25150ED215059886B8FC8B
96915492A0244659E29BD23ADBF2187B64402906C0325B617ED7C572C04C0B95
6.1.2
36CC31F0AB65B745F25C7E785DF9E72D1C8919D35A1D7BD4CE8050C8C068B13C
31759860A6B0C179D841857FE1344A990A576313379C309EB2E07941C4E8CB93
6.1.1
81244062A2DE4ADC52AE10393B7A3A33985A7E5BEA376B839AB0477D6C7FD5E1
D123078F80987186891C8F987AA3EE0236D825329C319EC644699256B4F02F7F
6.1
42B24E011D028D5C784409BF455F293F26315F16501C570C0C57C884BF2C9437
5DAE5E79A5894350BF4C38A8005A641A2DD020FCD126C915AE16BC1C3BA40BD4
5.21.8
released 11 Apr 2023ABF0BB2C73DEA0B66DE3F2FA34C03987980C3DB4406F07C5F3B8C25DC6F5511F
5.21.7
released 23 Jan 20236F8BA50C67083504A4DBC064F0D7E172EE9205DB65557A12FD3193749FB8651B
5.21.6
A2F5C2322450AEADE933460BE336557B6054A5283FFDF2C7D2F7D77383F26B7E
Earlier releases16 more
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
- 5.21.5download
- 5.21.2download
- 5.21.1download
- 5.21download
- 5.19.6download
- 5.19.5download
- 5.19.4download
- 5.19.3download
- 5.19.2download
- 5.19.1download
- 5.19download
- 5.17.10download
- 5.17.7download
- 5.17.5download
- 5.17.4download
- 5.17.3download
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every version on record37
Every WinSCP version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
- 6.5.6
- 6.5.5
- 6.5.4
- 6.5.3
- 6.5.2
- 6.5.1
- 6.5
- 6.3.7
- 6.3.6
- 6.3.5
- 6.3.4
- 6.3.3
- 6.3.2
- 6.3.1
- 6.3
- 6.1.2
- 6.1.1
- 6.1
- 5.21.8
- 5.21.7
- 5.21.6
- 5.21.5
- 5.21.2
- 5.21.1
- 5.21
- 5.19.6
- 5.19.5
- 5.19.4
- 5.19.3
- 5.19.2
- 5.19.1
- 5.19
- 5.17.10
- 5.17.7
- 5.17.5
- 5.17.4
- 5.17.3
Similar programs we index
Matched on the categories Martin Prikryl and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
- RcloneRclone ("rsync for cloud storage") is a command-line program to sync files and directories to and from different cloud storage providers.
- SmartFTP ClientSmartFTP is a fast and reliable FTP, FTPS, SFTP, HTTP, Amazon S3, WebDAV, Google Drive, Google Cloud Storage, Microsoft OneDrive, Backblaze B2, Telnet, Terminal client with lots of features and a modern user interface.
- MobaXtermEnhanced terminal for Windows with X11 server, tabbed SSH client, network tools and much more
More programs we index
Not related to WinSCP — just other entries, each with its own official URL and published hash.
- WinZipWinZip Compression Utility
- WireGuardFast, Modern, Secure VPN Tunnel
- WiresharkThe world's most popular network protocol analyzer.
- Windows Subsystem for LinuxA feature of Windows that allows you to run a Linux environment on your Windows machine, without the need for a separate virtual machine or dual booting.