\n<\/p>\n
The developer of the popular file encryption software VeraCrypt says Microsoft has blocked access to the account he used for sending updates to Windows users, and warned that anyone who encrypts their PCs with his software may soon face issues accessing their computers.<\/p>\n
VeraCrypt developer Mounir Idrassi said in an online post<\/a> on March 30 that Microsoft \u201cterminated the account I have used for years to sign Windows drivers and the bootloader,\u201d and said he received no explanation or ability to appeal the decision.<\/p>\n The Japan-based Idrassi said he attempted to contact Microsoft, but was unable to reach a human. Because Microsoft requires developer accounts like his to re-verify the security of their software, Idrassi said that many devices running VeraCrypt will soon be unable to boot if the issue is not resolved.<\/p>\n A spokesperson for Microsoft did not immediately comment when reached by TechCrunch.<\/p>\n VeraCrypt is a widely used, open source encryption software that allows users to scramble files on their computers with encryption protected with a password, or encrypting their computer\u2019s entire operating system and the user\u2019s data from pre-bootup attacks. The latest version of VeraCrypt\u2019s software for Windows users, published in May 2025<\/a>, shows the software\u2019s installer file at almost a million downloads since its release.<\/p>\n The situation highlights how tech companies still hold considerable power over the apps that are distributed on their platforms, and the risks that users face when relying on a third-party to maintain an account, which can be revoked under rules that can change at any time.\u00a0<\/p>\n In Idrassi\u2019s case, he said he is able to push new updates to Linux and macOS users unhindered, but the majority of his users that run Windows cannot currently receive updates.\u00a0<\/p>\n \u201cFor affected users, there is nothing special to do for now as VeraCrypt will continue to work, and there are no security issues identified currently,\u201d he told TechCrunch on Wednesday.<\/p>\n Idrassi warned that users who have enabled system encryption, which scrambles the entire operating system from loading unless the user has the passwords, may experience boot-up issues with their computers starting in a few months, around late June<\/a>.<\/p>\n He said that Microsoft will soon revoke the certificate authority used to digitally sign his VeraCrypt software, a process that developers go through to prevent hackers from tampering with their software.<\/p>\n \u201cUsers who have enabled system encryption with VeraCrypt may face boot issues after July 2026 because Microsoft will revoke the [certificate authority] that was used to sign the VeraCrypt bootloader,\u201d Idrassi said. \u201cA new Microsoft CA must be used for bootloaders to continue working.\u201d<\/p>\n Without access to the Microsoft account used for sending software updates, \u201cI will not be able to apply the required new signature to VeraCrypt, making it impossible to boot.\u201d<\/p>\n \u201cIf the issue is not resolved by then, it would essentially mean a death sentence for VeraCrypt,\u201d Idrassi told TechCrunch.<\/p>\n This is the latest example of companies automatically terminating online accounts. Earlier this year, developer Paris Buttfield-Addison was locked out of their Apple account<\/a> after redeeming what they believe to be a fraudulent gift card sold to them by a large retailer.\u00a0<\/p>\n Buttfield-Addison was able to get their account reinstated after news of their account ban went viral.<\/p>\n<\/div>\n