VeraCrypt developer locked out of Microsoft account

Mounir Idrassi, the developer of the open-source file encryption software VeraCrypt, has been locked out of his Microsoft account. The lockout has blocked access to the account used for sending updates to Windows users. According to Idrassi, Microsoft terminated the account he has used for years to sign Windows drivers and the bootloader—the software that loads the operating system—without providing an explanation or any ability to appeal the decision. The Japan-based developer posted about the account termination on March 30, noting that he has been unable to reach a human at Microsoft to resolve the issue.

The lockout poses a significant disruption for the software’s user base. The latest version of VeraCrypt for Windows, published in May 2025, has recorded almost a million downloads of its installer file. On Wednesday, Idrassi spoke to TechCrunch and clarified that there are no security issues identified currently for VeraCrypt. “For affected users, there is nothing special to do for now as VeraCrypt will continue to work, and there are no security issues identified currently,” said Idrassi, the VeraCrypt developer. However, he warned that users who have enabled system encryption—the encryption of the entire operating system—may face boot issues starting in late June or after July 2026. This is because Microsoft will revoke the certificate authority, the entity that verifies software signatures, which was used to sign the VeraCrypt bootloader.

Without access to his developer account, Idrassi will be unable to apply the required new signatures to the software. While he can still push updates to Linux and macOS users unhindered, the Windows platform restriction threatens the software’s viability. Idrassi warned that if the issue is not resolved by July 2026, it would essentially mean a death sentence for VeraCrypt. The situation highlights the risks of platform dependency, mirroring other recent account lockouts such as when developer Paris Buttfield-Addison was locked out of their Apple account after redeeming what they believed to be a fraudulent gift card.

Why it matters

This incident illustrates the fragility of independent software distribution when developers rely on platform-controlled accounts, leaving users vulnerable to administrative decisions that can render essential security tools unusable.