latest release
MobaXterm Home Edition
Current stable build: v26.5, released 2026-09-11. Independent catalogs list the 26.5 package around 43.52 MB. Confirm that size on the file you receive. Buttons below stay empty (#) until the owner pastes package URLs.
installer
Windows Installer v26.5
Setup package with Start menu shortcuts. Settings usually land under Documents\MobaXterm.
portable
Windows Portable v26.5
Zip with a single exe. No installer, no admin rights. Keep the folder private if you save passwords.
Previous stable: v26.4 (2026-06-11). By downloading you accept Mobatek terms. Company use needs Professional.
System requirements
- Windows 10 or Windows 11 (desktop). Catalogs also mention 8 and 7 on older builds. This site documents 10 and 11 only.
- No extra .NET or Java runtime for the core exe.
- No administrator account for Portable.
- Network path to the hosts you are allowed to reach. The client does not bypass firewall policy.
- Disk: leave room for the ~44 MB package plus a working folder if you unpack plugins or MobApt packages.
The program is one Windows executable. The Portable build keeps that exe in a folder you choose.
Home vs Professional
| Item | Home | Professional |
|---|---|---|
| Price | Free, personal | $69 / 49€ per user |
| Sessions | 12 | Unlimited |
| Tunnels / macros | 2 / 4 | Unlimited |
| Daemon run time | 360 seconds | Unlimited |
| Customizer | No | Logo, welcome, profile, security switches |
| Updates | Home channel | 12 months included, lifetime right to use the licensed build |
Professional is the edition Mobatek licenses for company desktops and the Customizer.
Version history
-
26.5 · 2026-09-11
- Junction and symlink detection for the slash folder
- WebAuthn redirect in RDP (Windows Hello on the local PC)
- Updated Xorg, PuTTY-based terminal, OpenSSL and OpenSSH
- VNC: Ctrl+wheel, shortcut combos, Tight/Hextile/RRE/TRLE, Tight/SASL/UltraVNC/MsLogon2 auth, size follow, clipboard fixes
- SFTP: drag remote files into a local subfolder
- Customizer: disable local terminals (CygUtils and WSL) and the debug log
- Startup no longer searches leftover translation files; CygUtils checked before unpack; tighter install-folder ACLs; no winsta.dll probe at start
-
26.4 · 2026-06-11
Smart card SSH (CryptoAPI), smart card UI, SSH-browser placement, faster startup, OpenSSH/OpenSSL/X server updates. Fixes CVE-2026-11879 and CVE-2026-11967 (unused DLL loads, including winspool.drv). Default SSH compression set to no.
-
26.3 · 2026-04-10
Paste-confirmation dialog: Enter accepts, MultiExec no longer freezes it, popup console included. Log-folder fields save correctly.
-
26.2 · 2026-04-03
Paste warning for homographs, pipe-to-shell, profile redirects, unpack-to-root and odd spaces. Smaller exe. CVE-2026-6421 (msimg32.dll) removed.
-
26.1 · 2026-03-06 / 26.0 · 2026-02-06
Session-tree dots, custom icons, faster Xorg.
livesessionandcreatesession, Quick connect live sessions, RDM and CSV import, DirectDraw X11 option. CVE-2026-25866 (custom editor path) fixed in 26.1. -
25.4 and earlier
Windows SSH agent, Windows Hello for identity, Popup Console tweaks, and the rest of the 25.x terminal work. Use v26.5 rather than staying on a 25.x build if you can.
Integrity, signatures and antivirus
This site does not invent a SHA-256 for v26.5. A Softonic listing published SHA-256 44c21c00f264fdc9e6b997bc7d4b63a4bcebd4b953af1410f4adead545d0a4e5 for a 26.4 zip. That value is not the 26.5 digest. When download hrefs are filled, hash the file you got with Get-FileHash in PowerShell or certutil -hashfile file SHA256 and compare it to the digest the package owner publishes.
Windows SmartScreen and some AV engines flag packed portable exes. Softonic reported a VirusTotal "Clean" result on a 26.4 zip. Treat a new alert as a reason to re-check the source, not as a reason to ignore the scanner. Antivirus walkthrough.
Plugins and third-party component sources exist as a separate pack from Mobatek. The main MobaXterm binary is proprietary. See trust and security.