The creator of the popular encryption software VeraCrypt reports that Microsoft has prevented access to the account used for distributing updates to Windows users. He cautioned that users encrypting their PCs with the software may soon encounter access issues.
VeraCrypt developer Mounir Idrassi revealed in an online statement on March 30 that Microsoft terminated the account used for signing Windows drivers and the bootloader, without any explanation or opportunity for appeal.
Based in Japan, Idrassi tried to reach Microsoft but failed to contact a representative. Microsoft mandates that developer accounts verify their software’s security, and without a resolution, many devices with VeraCrypt won’t be able to boot.
Microsoft has not commented on the situation. VeraCrypt is an open-source encryption tool that secures files or entire systems with passwords, protecting against pre-bootup attacks. The latest Windows version, released in May 2025, has almost a million downloads.
This incident underscores the power tech companies wield over app distribution on platforms and the risks users face when relying on third-party-managed accounts.
Idrassi can still update Linux and macOS users, but most Windows users are currently unable to receive updates.
“For now, affected users don’t need to take any special action as VeraCrypt remains functional, with no current security issues,” Idrassi stated on Wednesday.
He warned that users with system encryption might encounter boot issues by late June.
Microsoft plans to revoke the certificate authority that signs his software, essential to prevent tampering.
Without the Microsoft account access for software updates, “I can’t apply the new required signature, making boot-up impossible.”
“If unresolved, it could spell the end for VeraCrypt,” Idrassi told TechCrunch.
This incident follows other automatic account terminations this year, such as when developer Paris Buttfield-Addison was locked out of their Apple account due to a fraudulent gift card. After viral news coverage, Buttfield-Addison regained account access.