Install and verify

Download from an official channel

Download the latest HypoMux_Setup_*.exe from GitHub Releases or Tencent CNB Release. Both distribute the same official installer.

After downloading, verify the digital signature as described below, then run the installer and follow the setup wizard. If Windows reports an unexpected publisher, the filename is unusual, or the source is not listed above, cancel the installation and download it again.

Verify the publisher

Official releases are built by GitHub Actions and signed through SignPath. Before running the installer, confirm that Windows reports a valid signature from SignPath Foundation. A matching filename alone does not establish trust.

Right-click the installer, select Properties → Digital Signatures, then view the signature details. The signature should be valid and list SignPath Foundation.

Permissions after installation

The desktop app runs as a standard user. Operations that need elevated privileges—such as TUN, WFP, routes, DNS, and network recovery—are performed by a separate Go Core / Windows service.

WARNING

Do not download HypoMux from third-party software sites. The built-in updater verifies installer size, SHA-256, and Windows Authenticode signatures. Check the signature yourself for manual downloads; do not disable security checks to install a file that fails verification.

Upgrading

About: current version and update checkReal 2.7.0 Chinese interface. The left card shows the version and manual update check; opening this page does not start the network service.

1. Check your current version on About and select Check for updates, or use the Download page to reach an official release channel.
2. Read the Changelog. Before upgrading, export a rule backup from Routing Rules.
3. Stop aggregation normally, then follow the update prompts to download and install. For manual upgrades, use an official installer with a verified signature.
4. Reopen HypoMux, confirm the version on About, check your adapter selection and rules, and repeat the connection check in Quick start.

A rule backup is not a full application-settings backup. Do not delete the configuration directory as a preparatory upgrade step. If updating fails, keep the notification details and consult Error codes. If the installer reports a file in use, or the old version is still reported afterwards, follow An upgrade or in-place install fails.

Stable and preview channels

Settings defaults to Stable. Preview (Beta / RC) checks both stable and prerelease versions in version order, progressing from beta to rc to stable.

Switching back to Stable does not downgrade; wait for the same base version or a newer stable release. The website's default download targets stable releases. Verify preview release labels and notes, and update desktop and Core together with the official installer.

After installation

Continue to Quick start to prepare your networks and run a first session. For startup failures, follow Troubleshooting instead of repeatedly reinstalling without diagnosing the cause.