How to Install Nmap on Windows

Learn how to download and install Nmap on Windows, choose Zenmap or command-line tools, verify the installation, and understand Windows scanning limitations.

Nmap is a network discovery and port-scanning tool. It can identify hosts, examine reachable ports, and help investigate network services. The Windows release provides the same core tool as other platforms, but its behavior, interface support, and performance can differ from the Linux version.

This guide assumes that you can download files, open the Windows Start menu, and use Command Prompt or PowerShell. You should also understand basic terms such as IP address, network adapter, and localhost. Only scan systems and networks for which you have explicit permission.

Windows support and compatibility

The Windows release is supported on Windows 7 and later. Before starting, confirm your Windows version and make sure you are allowed to install software on the computer. Installation may require an administrator account or an approval prompt from Windows.

Download the Windows package from the official Nmap download page. The appropriate file is the latest Windows self-installer executable. A Windows self-installer is an executable package that places Nmap on the computer and configures the selected components.

Although Nmap is cross-platform, the Windows build has platform-specific operational limitations. In particular, interface support for raw-packet scans and the performance of some scan types are not identical to Linux.

Windows Nmap installation and compatibility summary

Supported Windows versions — Windows 7 and later.

Installer type — The latest Windows self-installer executable from the official Nmap project download page.

Default GUI component — Zenmap is selected by default in the installer described here.

Raw-packet scan interface support — Raw-packet scans are limited to Ethernet interfaces. Many Wi-Fi adapters appear as compatible Ethernet-style interfaces and can work for this purpose.

Local-host scanning limitation — In this Windows context, scanning the same computer through loopback, such as 127.0.0.1, or through its own registered IP address is not supported as expected.

Potential performance difference from Linux — Some scans, including TCP connect scans, can be slower on Windows than on Linux.

Before downloading Nmap

Confirm that the computer runs Windows 7 or a later supported release.
Make sure you have permission to install applications. Administrative permission may also be needed for packet-capture functionality.
Plan to download the Windows self-installer rather than a package intended for Linux or another operating system.
Use Nmap only against an authorized system or lab network. A scan can generate traffic and may trigger monitoring or security controls.

Download the Windows self-installer

Open the official Nmap project site and navigate to its download page. You can start from the Nmap overview if needed.
Find the latest Windows self-installer executable.
Download the file and verify that it came from the official Nmap project site before opening it. Avoid installers copied from untrusted mirrors or unofficial software collections.

Run the Nmap installer

Open the downloaded executable from File Explorer or your browser's download list.
If Windows displays a security or administrator approval prompt, confirm the action only if you trust the download and are authorized to install it.
Review the license agreement. Select the option to accept the terms if you agree, then continue.
Proceed through the installation wizard and review each page before selecting the next step.

Select installation components

The installer presents optional components. Your choice depends on whether you prefer a terminal, a graphical interface, or both.

Nmap command-line tools — The core terminal-based programs. Install these if you plan to use Command Prompt or PowerShell, automation, scripts, or saved command examples.

Zenmap graphical interface — Nmap's graphical user interface. Install it if you want to enter scan settings and review results through a desktop application.

Default selection — In the installer described here, Zenmap is selected by default. Keeping the default choices is suitable for most first-time users who want both command-line and GUI access.

A command-line-focused installation can omit the graphical component if you do not need Zenmap. Conversely, users who want the GUI should ensure that Zenmap remains selected. The command-line tools are still useful for verification, repeatable commands, and learning Nmap syntax.

For more background, see what Zenmap is.

Choose a destination and complete setup

Review the destination folder. Keep the default location unless your system requires a different folder.
Start the installation when the wizard displays the final confirmation.
Wait while the files and selected components are installed. A normal installation usually completes quickly.
Finish and close the wizard after it reports that setup is complete.

If Windows asks for permission during setup, provide administrator approval only when appropriate. If you do not have that permission, contact the system administrator rather than attempting to bypass the control.

Windows-specific scanning limitations

Raw-packet scans and interfaces

A raw-packet scan creates and sends lower-level network packets directly instead of relying entirely on the operating system's ordinary connection functions. On Windows, raw-packet scans are limited to Ethernet interfaces.

Many Wi-Fi adapters are presented to software as compatible Ethernet-style interfaces, so wireless use may work. However, not every adapter or interface is supported in the same way. If Nmap cannot use a particular adapter for a raw-packet scan, select a supported Ethernet-compatible interface or use a scan method appropriate to the available interface.

Scanning the Windows computer itself

A loopback address lets a computer refer to itself. The common IPv4 loopback address is 127.0.0.1. A registered IP address is an address assigned to one of the computer's network interfaces.

In this Windows support context, scanning the same machine through 127.0.0.1 or through one of its own assigned addresses is not supported as expected. Do not use a failed or unusual local-host result as evidence that Nmap is incorrectly installed.

For practice, use a separate authorized host, a deliberately configured lab machine, or another approved system. The target should be one you are permitted to examine.

Performance compared with Linux

A TCP connect scan uses the operating system's normal TCP connection mechanism. Some scan types, particularly TCP connect scans, can be slower on Windows than on Linux. Allow additional time and interpret timing in light of the operating system, network path, firewall behavior, and selected scan method.

These limitations affect expectations, not the basic installation. Nmap can still be useful on Windows for authorized discovery and service investigation, but results and scan duration may differ from a Linux-based run.

Verify the installation from Command Prompt or PowerShell

Open a new Command Prompt or PowerShell window after setup finishes. Opening a new terminal ensures that it sees any changes made during installation. Run a harmless version check:

nmap --version

A successful result displays Nmap version information and confirms that the executable can be launched from the command line. You can also display the available options without scanning a host:

nmap --help

If either command displays help or version output, the command-line component is working. These checks do not perform a network scan.

Verify Zenmap

If Zenmap was installed, open the Windows Start menu and search for Zenmap. Launching it should open the graphical Nmap interface. If it is not listed, the GUI component may not have been selected during setup.

For GUI-related learning, see an example Zenmap scan. Always apply the same authorization rules when choosing a target.

Troubleshoot common installation problems

The installer will not run or installation is blocked

The download may have failed or produced an incomplete file.
Your account may lack permission to install software.
Windows security controls may require explicit approval.

Re-download the correct Windows executable from the official Nmap site, confirm that it is the Windows self-installer, and run it with appropriate authorization. If an organization manages the computer, ask its administrator for assistance.

The nmap command is not recognized

The terminal may have been opened before installation finished.
Nmap may not have been installed as expected.
The executable's installation location may not be available through the system path.

Open a new Command Prompt or PowerShell session first. If the problem continues, check the installation directory and selected components, then repair or reinstall Nmap if necessary.

Zenmap is missing from the Start menu

The GUI component may not have been selected, leaving only the command-line tools installed. Modify or rerun the installer and select Zenmap if you need a graphical interface.

A scan of 127.0.0.1 or the computer's own address behaves unexpectedly

This behavior can result from the Windows port's limitation on scanning the same machine through loopback or its own registered address. Use an authorized separate host for testing instead of relying on a local self-scan.

A raw-packet scan cannot use an adapter

The adapter may not be an Ethernet-compatible interface for this purpose, or it may fall outside the Windows raw-scan support constraints. Try a supported Ethernet interface or compatible Wi-Fi adapter, or choose a scan method that matches the available interface.

Scans are slower than expected

Certain scan types, especially TCP connect scans, may perform more slowly on Windows than on Linux. Allow more time, review the selected scan type, and remember that platform performance can differ.

Installation checklist

Windows 7 or later is in use.
The Windows self-installer came from the official Nmap download page.
The license was reviewed and accepted.
The command-line tools were selected if terminal use is required.
Zenmap was retained if a graphical interface is wanted.
The destination folder was reviewed and installation completed.
nmap --version or nmap --help works in a new terminal.
Testing will use only a separate, authorized host or network.

After installation, you can continue with starting Nmap and learn how to interpret results without scanning systems outside your authorization.