VeraCrypt and WireGuard Developer Accounts Banned by Microsoft, Updates Halted

Microsoft has reportedly terminated the developer account behind VeraCrypt, a widely used encryption tool, with no prior warning or explanation. The move immediately disrupts the project’s ability to deliver updates to Windows users.

According to reports, the account played a critical role in signing bootloaders and drivers, both required for distributing secure updates on Windows systems.

Account terminated without warning

The developer says the suspension happened abruptly, with no advance notice or communication from Microsoft. Attempts to resolve the issue have so far resulted only in automated responses, with no clear reasoning provided.

Without access to code signing, the developer cannot push updates that Windows will accept as trusted.

VeraCrypt updates are blocked on Windows

The impact is significant. While VeraCrypt can still update on other platforms, Windows updates remain effectively blocked.

Most users rely on Windows, which turns this into a major disruption. The project cannot deliver new features, bug fixes, or security patches through official channels, raising concerns about long-term stability and protection.

A similar situation is affecting WireGuard

The issue does not appear isolated. The developer of WireGuard is reportedly facing the same problem.

Their Microsoft account was also suspended without warning, and they are now going through a 60-day appeals process. During this period, their ability to maintain Windows updates remains restricted.

Security concerns growing

These actions raise broader concerns about how critical security tools depend on platform-controlled infrastructure such as code signing.

If developers cannot access signing systems, urgent patches may get delayed and vulnerabilities may remain unaddressed. This situation could expose users to increased security risks over time.

No clear resolution yet

Microsoft has not provided a public explanation for either case. Both VeraCrypt and WireGuard remain unable to deliver updates on Windows, and any resolution depends on Microsoft clarifying or reversing the decision.

In other news, it has been reported that GitHub has been injecting promotional content into pull requests. At the same time, threat actors are targeting developers through fake Visual Studio Code alerts, while a recent breach involving Axios npm highlights ongoing risks tied to social engineering campaigns.

Via Neowin