THIS WEEK ONLY: Save up to $500 on your Disrupt pass. Offer ends April 10, 11:59 p.m. PT. Register here.

In this photo illustration the blue screen of death errors on computer screens are viewed due to a global communications outage.
Image Credits:Harun Ozalp/Anadolu
Security

Developer of VeraCrypt encryption software says Windows users may face boot-up issues after Microsoft locked his account

The developer of the popular file encryption software VeraCrypt says Microsoft has blocked access to the account he used for sending updates to Windows users, and warned that anyone who encrypts their PCs with his software may soon face issues accessing their computers.

VeraCrypt developer Mounir Idrassi said in an online post on March 30 that Microsoft “terminated the account I have used for years to sign Windows drivers and the bootloader,” and said he received no explanation or ability to appeal the decision.

The Japan-based Idrassi said he attempted to contact Microsoft, but was unable to reach a human. Because Microsoft requires developer accounts like his to re-verify the security of their software, Idrassi said that many devices running VeraCrypt will soon be unable to boot if the issue is not resolved.

A spokesperson for Microsoft did not immediately comment when reached by TechCrunch.

VeraCrypt is a widely used, open source encryption software that allows users to scramble files on their computers with encryption protected with a password, or encrypting their computer’s entire operating system and the user’s data from pre-bootup attacks. The latest version of VeraCrypt’s software for Windows users, published in May 2025, shows the software’s installer file at almost a million downloads since its release.

The situation highlights how tech companies still hold considerable power over the apps that are distributed on their platforms, and the risks that users face when relying on a third-party to maintain an account, which can be revoked under rules that can change at any time. 

In Idrassi’s case, he said he is able to push new updates to Linux and macOS users unhindered, but the majority of his users that run Windows cannot currently receive updates. 

“For affected users, there is nothing special to do for now as VeraCrypt will continue to work, and there are no security issues identified currently,” he told TechCrunch on Wednesday.

Idrassi warned that users who have enabled system encryption, which scrambles the entire operating system from loading unless the user has the passwords, may experience boot-up issues with their computers starting in a few months, around late June.

He said that Microsoft will soon revoke the certificate authority used to digitally sign his VeraCrypt software, a process that developers go through to prevent hackers from tampering with their software.

“Users who have enabled system encryption with VeraCrypt may face boot issues after July 2026 because Microsoft will revoke the [certificate authority] that was used to sign the VeraCrypt bootloader,” Idrassi said. “A new Microsoft CA must be used for bootloaders to continue working.”

Without access to the Microsoft account used for sending software updates, “I will not be able to apply the required new signature to VeraCrypt, making it impossible to boot.”

“If the issue is not resolved by then, it would essentially mean a death sentence for VeraCrypt,” Idrassi told TechCrunch.

This is the latest example of companies automatically terminating online accounts. Earlier this year, developer Paris Buttfield-Addison was locked out of their Apple account after redeeming what they believe to be a fraudulent gift card sold to them by a large retailer. 

Buttfield-Addison was able to get their account reinstated after news of their account ban went viral.

Topics

, , , , , ,
Keep reading
an illustration of an underground tunnel gong bending around a corner to the left using mostly green, yellow and black, with the light of the tunnel exit in the near distance
Image Credits:Bryce Durbin / TechCrunch
Security

WireGuard VPN developer can’t ship software updates after Microsoft locks account

WireGuard, the major software project and VPN that underpins popular security software including Mullvad and others, has found itself locked out of a key part of its Microsoft developer’s account and unable to ship software updates to Windows users.

Jason Donenfeld, the creator of the open source WireGuard VPN software, told TechCrunch that he has been locked out of his Microsoft developer account, and as a result cannot sign drivers or ship updates for WireGuard for Windows users, which are critical for its software to run. Donenfeld said in a post on X on Wednesday that the account termination stopped a WireGuard update from shipping.

It’s the second such incident of a high-profile and widely used open source project being shut out from its customers due to a seemingly abrupt account termination from Microsoft, with popular encryption software VeraCrypt facing a similar circumstance. Both developers said Microsoft locked them out of their accounts without first alerting them. 

In the case of VeraCrypt, which is used by hundreds of thousands of users to encrypt files and operating systems, its developer Mounir Idrassi told TechCrunch that being locked out of his account means he is unable to update the software in time for a crucial certificate authority expiry, which he said may prevent some users from booting up.

Donenfeld, the WireGuard developer, told TechCrunch in an email: “If there were a critical vulnerability to fix right now — there isn’t! I just mean hypothetically — then users would be totally exposed.”

WireGuard is an open source VPN software used around the world to connect devices over the internet. WireGuard’s code is highly popular for its simplicity and security, as it serves as the foundation of many VPN implementations and commercial services that rely on its code, like Proton and Tailscale.

Donenfeld told TechCrunch in an email that he has spent the past few weeks modernizing WireGuard’s Windows code and was ready to send a copy update to Microsoft for checks before it can ship out to users, but was met with an “access restricted” error when logging into the developer portion of his Microsoft account.

Despite going through the process to verify his driver’s license or passport with Microsoft (the third party Microsoft uses for verification said he was “verified”), Donenfeld said his access was still suspended.

Donenfeld told TechCrunch that he found a page on Microsoft’s website saying that the company had been carrying out “mandatory account verification for all partners in the Windows Hardware Program who have not completed account verification since April 2024,” but that the verification program had since closed.

Microsoft’s Windows Hardware Program allows developers like Donenfeld and VeraCrypt’s Idrassi to “deploy hardware and device drivers for Windows PCs and other devices.” The ability to develop and release drivers for Windows users is restricted to known and vetted developers, as drivers can grant vast access to an operating system and its data and are known to be abused by hackers for that reason.

That account verification process meant that developers were required to upload their government-issued ID before they were allowed to publish potentially highly sensitive code to the broader Windows user base.

“Microsoft never sent me any notification at all about this. I’ve looked in every inbox in every spam folder in every mail log, and zero, nothing, zilch,” Donenfeld said.

The Windows Hardware Program’s verification program has “now concluded” and developers who have not uploaded their documents had their accounts “suspended,” the page reads, meaning that these accounts can no longer send updates.

Donenfeld said that he was referred to Microsoft’s executive support team, which handles customer service and account requests for high-profile individuals, which confirmed his appeal had been received but that they had to wait as long as 60 days for review.

By late Wednesday, there was a glimmer of hope in Donenfeld’s case. He told TechCrunch that he was finally in contact with Microsoft and that hopefully the issue would be resolved soon.

Microsoft did not immediately comment when reached by TechCrunch.

Donenfeld and Idrassi are not alone, with the account lockout issues affecting others as well.

Windscribe, a maker of VPN and other consumer privacy tools, said in a post on X that it had also been locked out of its Partner Center account. The company said it had a verified account for over eight years in order to sign its drivers.

“We’ve been trying to resolve this for over a month, and getting nowhere. Support is non-existent,” Windscribe said in its post. “Anyone know a human with a brain that still works at Microsoft and can help?”

Topics

, , , , ,
Loading the next article
Some areas of this page may shift around if you resize the browser window. Be sure to check heading and document order.
word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word

mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1

Support Us by Disabling Your Adblocker

Our content is made possible by the support of our advertisers. Please consider disabling your adblocker to help us continue delivering quality content you love.
| Contact support