Developer of VeraCrypt encryption software says Windows users may face boot-up issues after Microsoft locked his account

The developer of the popular file encryption software VeraCrypt says Microsoft has blocked access to the account he used for sending updates to Windows users, and warned that anyone who encrypts their PCs with his software may soon face issues accessing their computers. VeraCrypt developer Mounir Idrassi said in an online post on March 30 that Microsoft “terminated the account I have used for years to sign Windows drivers and the bootloader,” and said he received no explanation or ability to appeal the decision. The Japan-based Idrassi said he attempted to contact Microsoft, but was unable to reach a human. Because Microsoft requires developer accounts like his to re-verify the security of their software, Idrassi said that many devices running VeraCrypt will soon be unable to boot if the issue is not resolved. A spokesperson for Microsoft did not immediately comment when reached by TechCrunch. VeraCrypt is a widely used, open source encryption software that allows users to scramble files on their computers with encryption protected with a password, or encrypting their computer’s entire operating system and the user’s data from pre-bootup attacks. The latest version of VeraCrypt’s software for Windows users, published in May 2025, shows the software’s installer file at almost a million downloads since its release. The situation highlights how tech companies still hold considerable power over the apps that are distributed on their platforms, and the risks that users face when relying on a third-party to maintain an account, which can be revoked under rules that can change at any time. In Idrassi’s case, he said he is able to push new updates to Linux and macOS users unhindered, but the majority of his users that run Windows cannot currently receive updates. “For affected users, there is nothing special to do for now as VeraCrypt will continue to work, and there are no security issues identified currently,” he told TechCrunch on Wednesday. Idrassi warned that users who have enabled system encryption, which scrambles the entire operating system from loading unless the user has the passwords, may experience boot-up issues with their computers starting in a few months, around late June. He said that Microsoft will soon revoke the certificate authority used to digitally sign his VeraCrypt software, a process that developers go through to prevent hackers from tampering with their software. “Users who have enabled system encryption with VeraCrypt may face boot issues after July 2026 because Microsoft will revoke the [certificate authority] that was used to sign the VeraCrypt bootloader,” Idrassi said. “A new Microsoft CA must be used for bootloaders to continue working.” Without access to the Microsoft account used for sending software updates, “I will not be able to apply the required new signature to VeraCrypt, making it impossible to boot.” “If the issue is not resolved by then, it would essentially mean a death sentence for VeraCrypt,” Idrassi told TechCrunch. This is the latest example of companies automatically terminating online accounts. Earlier this year, developer Paris Buttfield-Addison was locked out of their Apple account after redeeming what they believe to be a fraudulent gift card sold to them by a large retailer. Buttfield-Addison was able to get their account reinstated after news of their account ban went viral. Topics cybersecurity, data security, encryption, Microsoft, Security, veracrypt, Windows Zack Whittaker Security Editor Zack Whittaker is the security editor at TechCrunch. He also authors the weekly cybersecurity newsletter, this week in security. He can be reached via encrypted message at zackwhittaker.1337 on Signal. You can also contact him by email, or to verify outreach, at zack.whittaker@techcrunch.com.

View Bio April 30 San Francisco, CA StrictlyVC kicks off the year in SF. Get in the room for unfiltered fireside chats with industry leaders, insider VC insights, and high-value connections that actually move the needle. Tickets are limited. REGISTER NOW Most Popular Google quietly launched an AI dictation app that works offline Ivan Mehta Apple’s foldable iPhone is on track to launch in September, report says Aisha Malik AI startup Rocket offers vibe McKinsey-style reports at a fraction of the cost Jagmeet Singh North Korea’s hijack of one of the web’s most used open source projects was likely weeks in the making Zack Whittaker In Japan, the robot isn’t coming for your job; it’s filling the one nobody wants Kate Park Embattled startup Delve has ‘parted ways’ with Y Combinator Anthony Ha Anthropic says Claude Code subscribers will need to pay extra for OpenClaw usage Anthony Ha