WireGuard Faces Developer Account Lockout from Microsoft
WireGuard, the prominent VPN software that serves as the backbone for various security applications like Mullvad, is currently unable to deliver critical updates to its Windows users due to access issues with its Microsoft developer account. Jason Donenfeld, the creator of the open-source WireGuard VPN, shared with TechCrunch that he is locked out of his Microsoft account, preventing him from signing drivers and deploying necessary software updates.
Incident Echoes Previous Lockouts of Open Source Projects
This marks the second instance of a widely-used open-source project encountering customer access difficulties stemming from an unannounced Microsoft account termination. Similar issues were reported by the developers of the encryption software VeraCrypt, who were also locked out of their accounts without any prior notification. This situation raises concerns about the implications for both developers and their user bases.
VeraCrypt’s Developer Disrupted by Account Suspension
In VeraCrypt’s case, which serves hundreds of thousands by securing files and operating systems, developer Mounir Idrassi revealed that being unable to access his account hinders timely updates. This delay could coincide with a critical certificate authority expiration, potentially leaving numerous users unable to boot their systems.
Potential Vulnerabilities from Development Delays
Donenfeld expressed concerns about the implications of being locked out, emphasizing the risks if a critical vulnerability were to arise. He explained that even in a hypothetical scenario where an urgent fix would be necessary, users would remain exposed without timely updates.
Challenges in Accessing Microsoft’s Development Resources
WireGuard is recognized globally for its simplicity and robust security, making it foundational for many commercial VPN services, including Proton and Tailscale. Donenfeld stated that he had spent several weeks modernizing WireGuard’s code for Windows and was ready to submit the update for Microsoft’s review when he encountered an “access restricted” error upon logging into his account.
Verification Process and Lack of Communication from Microsoft
Despite undergoing the account verification process, which entailed submitting a government-issued ID, Donenfeld found his access still suspended. He discovered that Microsoft had been conducting mandatory account verifications for all partners in its Windows Hardware Program since April 2024. Unfortunately, the window for this verification concluded before he could update his account.
Seeking Resolution Amid Account Suspensions
Microsoft’s Windows Hardware Program facilitates the deployment of hardware and device drivers for Windows PCs, a privilege granted to vetted developers due to the significant access drivers have to operating systems. Donenfeld faced difficulties in receiving any communication from Microsoft concerning his account status, stating unequivocally that he received no notifications despite checking all possible channels.
Increased Frustrations from Other Affected Developers
Donenfeld’s plight is part of a larger trend, as other developers have encountered similar lockout issues. Windscribe, a developer of VPN and privacy tools, reported being unable to access its Partner Center account despite maintaining a verified status for over eight years. Windscribe has expressed frustration over the lack of support in resolving the matter, highlighting the challenges developers face amidst these sudden account restrictions.
As of late Wednesday, there was some optimism for Donenfeld as he regained contact with Microsoft, hopeful that the situation would soon be addressed. Microsoft has yet to comment on the issue as the affected developers continue to seek solutions.