The developer of VeraCrypt, a widely used file encryption software, has issued a warning that Windows users may encounter boot-up issues following the termination of his Microsoft account. Mounir Idrassi announced on March 30 that Microsoft has locked the account he relied on for sending updates and signing drivers for Windows, raising concerns for users who encrypt their computers with VeraCrypt.
Idrassi, who is based in Japan, expressed his frustration in an online post, stating that he received no explanation for the termination of his account and has been unable to contact Microsoft for assistance. This situation is particularly alarming because Microsoft requires developers to re-verify the security of their software. Without access to his account, many Windows devices running VeraCrypt could soon be unable to boot.
VeraCrypt allows users to encrypt files and even entire operating systems, protecting data from unauthorized access. The software has gained popularity, with its latest version released in May 2025 achieving nearly a million downloads. However, Idrassi noted that while he can still provide updates to users on Linux and macOS, the majority of his Windows users are currently unable to receive updates due to the account lockout.
For now, Idrassi reassured affected users that VeraCrypt will continue to function without immediate security concerns. However, he cautioned that individuals who have enabled system encryption might experience boot issues starting in late June 2026. This is because Microsoft is expected to revoke the certificate authority that is crucial for digitally signing the VeraCrypt bootloader.
Idrassi explained that without the necessary new signature from Microsoft, users who have encrypted their systems could find themselves unable to boot their computers. He emphasized, "A new Microsoft CA must be used for bootloaders to continue working." The potential for widespread access issues has raised serious concerns, with Idrassi stating, "If the issue is not resolved by then, it would essentially mean a death sentence for VeraCrypt."
This incident underscores the significant power that tech companies hold over third-party applications available on their platforms. Developers can find themselves in precarious situations when accounts are revoked under changing policies, leaving users vulnerable.
Idrassi's experience is not isolated; earlier this year, another developer, Paris Buttfield-Addison, faced a similar situation when locked out of their Apple account after redeeming a potentially fraudulent gift card. Buttfield-Addison eventually regained access after media attention brought the issue to light.
As the situation with VeraCrypt evolves, users are left in suspense about the future of their encrypted systems. The upcoming months may prove critical for both Idrassi and the countless users who depend on VeraCrypt for their data security.
Source: TechCrunch News