Microsoft recently suspended several prominent open-source developer accounts, including VeraCrypt and WireGuard, due to a mandatory identity verification process that left many users without critical software security updates.

Key Points

• Microsoft suspended developer accounts for VeraCrypt, WireGuard, and Windscribe, preventing them from signing drivers and shipping essential software updates.
• The suspensions resulted from a new mandatory identity verification requirement for the Windows Hardware Program, which took effect on October 16, 2025.
• Affected developers reported difficulty reaching human support, receiving only automated responses while attempting to resolve the account access issues.
• Microsoft EVP Pavan Davuluri and VP Scott Hanselman intervened following public backlash, promising to reinstate the suspended accounts.
• Microsoft clarified that the enforcement was not intentional but rather a result of partners failing to complete identity verification using government-issued IDs.

Why it Matters

This incident highlights the friction between automated corporate security protocols and the operational needs of the open-source community. It underscores the importance of clear communication channels between major platform holders and independent developers to prevent critical software supply chain disruptions.