TinyWall is a free software to harden and control the advanced firewall built into modern Windows systems. Includes the features that sets it apart from both commercial and freeware firewalls.
TinyWall gives Windows Firewall a sane and secure configuration and presents you with a simple interface where you can easily define what has network access and what not, while preventing other programs from modifing or overwriting your firewall settings.
What this application does:
- Does not annoy you with popups at all, yet it is still extremely easy to add exceptions to your firewall rules.
- Actively blocks hundreds of trojans, viruses and worms.
- Does not require you to know about ports, protocols and application details.
- Prevents malicious programs from modifying the settings of Windows Firewall.
- Does not install drivers or other kernel components, is free and lightweight.
- Multiple and easy ways to whitelist programs
- Automatic learning mode
- Firewall tampering protection
- Password lockdown of settings
- Quick modes, like Normal protection, Allow outgoing, Block all, Allow all and Learning mode
- Support for temporary/ timed firewall rules
- Port and domain blocklists
- Hosts file protection
- Option to always allow communication within LAN
- Option to restrict an application to the LAN
- Recognition of safe software and impostors
- Full IPv6 support
- List established and blocked connections
- View open ports on your machine
- 100% free and clean software. No fees, no ads, no paid upgrades.
The no-popup approach
Most firewalls are based on the same interaction principles. Basically, whenever an application is trying to access the internet, display a popup asking the user what to do. This is not only annoying for the user, but also less than secure. On an average computer, a lot of applications are trying to access the internet. Displaying a popup for each app makes it very probable that unneeded applications will gain access to the network, as it increases the likelyhood of the user granting unnecessary rights to many applications. This phenomenon could be characterized as “security fatigue”, and at its extreme, the user does not verify any more what he gives internet access, but just blindly allows all programs that ask for it.
TinyWall takes a different approach. It does not display popups that “urge users to allow”. In fact, it will not notify you of any blocked action at all. Instead of showing popups, TinyWall makes it easy to whitelist or unblock applications by different means. For example, you can just initiate whitelisting by a hotkey, then click on a window that you want to allow. Or, you can select an application from the list of running processes. Of course, the traditional way of selecting an executable also works. This approach avoids popups, but still keeps the firewall very easy to use. Most importantly, with the no-popup approach, the user will only notice that a program has been denied internet access when he can’t use it any more. Consequently, users will only unblock applications that they actually need and none more, which is optimal from a security standpoint.
- Add option to block internet during display power-save
- Heuristically determine and show PIDs of blocked processes if possible
- Support for showing and whitelisting services in Processes and Connections windows
- Launch GUI with elevated privileges on boot if possible
- Use exact capitalization of paths from autolearn and blocked processes
- Reduce dependency on WMI and avoid polling by WMI
- Avoid creation of redundant “-” entries during autolearn
- Fix WFP audit logging is not disabled when autolearn mode ends
- Fix “active connections” and “open ports” lists would not recognize UWP processes as such
- Fix rule is ineffective if loaded while its target path is not mounted
- Fix rule is ineffective for paths with certain international characters
- Fix Bulgarian translation not loading
- Fix non-form Korean messages are gibberish due to wrong encoding
- Updated Italian translation
- New Hebrew localization
- GUI layout fixes for various localizations
- Updated application database
- Deprecation notes: Windows 7, 8, 8.1, and certain older versions of Windows 10 will soon not be supported in a future TinyWall release.
Changes in TinyWall 3.0.10:
- Fix invalid WFP rules created for “System” on some machines (3.0.9 regression)
Changes in TinyWall 3.0.9:
- Automatically ask for passphrase when needed, and remove now redundant “Unlock” menu item
- Fix child process monitoring not working (3.0.7 regression)
- Fix memory leak in traffic rate monitor
- Fix service becomes temporarily unresponsive when network parameters change
- Fix missing signature could be incorrectly detected as an invalid signature
- Reduce dependency on WMI
- Add runtime profiling feature
- Updated Brazilian Portuguese and Polish localizations
- New Bulgarian localization
Changes in TinyWall 3.0.8:
- Add workaround for “grey icon on Win7” issue
Note: On affected systems icon will appear with considerable delay after boot. This is expected and does not affect start of firewall protection.
- Fix WMI leak when mountpoints change
- Fix GUI crash if mountpoints change after changing the GUI language
- Fix service crash if pipe command results in uncaught exception
- Fix windows are potentially invisible if virtual desktop size changes
- Fix text placement in pt-BR localization
- Make dependency on eventlog service optional
- Updated Italian localization
- Updated application database
Changes in TinyWall 3.0.7:
- Add support for WSL
- Add support for WSL 2
- Add support for whitelisting from network shares and network drives
- Fix autolearn doesn’t detect short-lived processes
- Fix autolearn handling of non-win32 file paths
- Fix service crash if multiple exceptions with the same path apply to child processes
- Don’t log expected exceptions during system shutdown
- Don’t show System process as a missing app, and add icon for it
- Updated Italian localization
Changes in TinyWall 3.0.6:
- Fix GUI crash if an “All applications” rule is present
Changes in TinyWall 3.0.5:
- Restore compatibility with 32-bit (x86) Windows systems
- Remember user-set column widths in lists
- Keep application list selection and scroll-position after modifications
- Reduced system load of traffic rate monitor
- New and performance-optimized firewall rule application
- Fix not all changes are detected when a network adapter is reconfigured
- Fix rules for Windows services may get ignored due to wrong SID translation
- Fix incomplete deserialization of DHCP profile
- Fix tooltip rule edit not saving correctly
- Fix two rules merged incorrectly if one of them was Unrestricted
- Fix “Ask for exception details” not always taken into account
- Fix UI text contents in Connections window (column headers, and 2 -> 5 mins)
- Fix WMI leak while monitoring sub-processes
- Increase traffic rate update interval to 2 seconds
- Only enable sub-process monitoring if necessary for active rules
- Optimized sub-process monitoring when enabled
- Rework inter-process pipe communication
- Update old WhatsNew and FAQ in installer
- Updated Brazilian Portuguese and Russian localizations
- Introduce logging in installer routines
- Collect all logs to “logs” folder
Changes in TinyWall 3.0.4:
- Make language changes take effect without a GUI restart
- Handle WMI errors gracefully in service
- Wait longer for service availability after loading desktop
- Avoid harmless exception being logged during system shutdown
- Prevent opening the Manage window when other windows are active
- Fix wrongly positioned GUI elements in Dutch and Russian localizations
- Fix potential race condition of UI timer during exit
- Fix traffic rate text ignores selected GUI language
- Updated Russian and Spanish localizations
Changes in TinyWall 3.0.3:
- Fix potential GUI crash during whitelisting in error case
- Fix potential GUI crash due to race while GUI is closing
- Fix tray icon sometimes wrongly showing Unknown state after a fresh boot
Changes in TinyWall 3.0.2:
- Test for UWP support instead of OS-version checking
- Install hosts and database updates atomically
- Keep Windows Firewall settings as desired when enabled & changed externally
- Fix user GUI settings not migrated (effective starting with v3.0.3)
- Fix possible GUI crash when user selects Elevate
Changes in TinyWall 3.0.1:
- Fix whitelist ineffective on some executables with overtight permissions
- Fix whitelisted file cannot connect if its rule was loaded while the file was missing
What’s New in TinyWall 3.0:
Upgrade note: Your firewall rules will be kept, but GUI settings will be lost after upgrading from an earlier version.
TinyWall 3.0 is a major upgrade that focuses on a complete overhaul of the firewall engine and its capabilities. This allows multiple new features to be added in the current release, resolves previous known issue, and paves the way for future enhacements. The GUI is left mostly intact on the surface, but has also seen multiple fine-tunings and improvements. Some of the major improvements in version 3.0 include:
- Independence from Windows (Defender) Firewall. TinyWall 3.0 is now a standalone firewall that can be run without or side-by-side with Windows’ own built-in firewall.
- Enhanced security through boot-time filtering. Firewall rules are in effect even before TinyWall is loaded on boot, right from the start of the networking stack.
- Support for and automatic handling of UWP applications.
- Added raw- and promiscous-socket filtering, undermining apps that try to monitor or create raw network traffic.
- Full support for Windows File Sharing. The workaround that used to exist for earlier Tinywall versions is no longer necessary.
- Resolved issue where running apps are disconnected when firewall protection feature is triggered.
- Support for automatically allowing child-processes of whitelisted executables. For instance, this simplifies whitelisting most online installers, among many other cases.
- No need for the Connections window to be open anymore to register and list a blocked connection. A blocked connection will be listed even if the window is opened in hindsight.
- Over a dozen user interface improvements, ranging from bugfixes to new hotkeys, better performance, unified batch operations, more useful defaults etc.
- Revised installer with an updated look, option to specify installation path, increased security, and faster installation times.
- … and many more improvements listed in the full changelog.
Some features have been removed in this update:
- Windows Vista is no longer supproted.
- 32-bit versions of Windows are no longer supported.
- Whitelisting executables that are located on network shares is not supported.
Changes in TinyWall 2.1.15:
- Only offer upgrade to v3.0 if running on a 64-bit system.
What’s New in TinyWall 2.1:
Upgrade note: Your firewall rules will reset when upgrading to this version the first time. To keep your settings, please export them before and import them after the upgrade.
- Removed automatic network zone switching.
- Enhanced support for and Metro applications
- Support for whitelisting on network drives
- Multi-user/multi-session support.
- Lots of new translations.
- Better authenticode verification support.
- Improved startup performance.
- Ability to disable global shortcuts, as well as numerous other usability enhancements.
Homepage – https://tinywall.pados.hu/
The download includes a native interface for 14 spoken languages.
Supported Operating Systems: Windows 7, 8, 8.1, 10 (32-bit, 64-bit).