Microsoft locks WireGuard developer out of account, blocking Windows updates
WireGuard update halted by Microsoft account lockout
Microsoft has locked the developer account of WireGuard creator Jason Donenfeld, preventing him from shipping software updates to Windows users and renewing concerns about how platform controls can disrupt open-source projects.
Donenfeld told TechCrunch that he was unable to access the developer portion of his Microsoft account after seeing an “access restricted” message, even after completing Microsoft’s identity verification process. As a result, he cannot sign drivers or push updates for WireGuard on Windows, a step required for the software to run properly on that platform.
WireGuard is a widely used open-source VPN project that underpins a range of security tools and commercial services, including products from Mullvad, Proton and Tailscale. Donenfeld said he had spent the past few weeks modernizing WireGuard’s Windows code and was ready to submit an update for Microsoft’s checks when he was locked out.
The issue is not just an inconvenience. Donenfeld said that if a critical vulnerability needed to be fixed immediately, users would be left exposed while the account problem remained unresolved.
The incident echoes a similar problem faced by VeraCrypt, another prominent open-source security project, whose developer was also locked out of a Microsoft account without warning. In that case, the access issue threatened the project’s ability to meet a certificate authority deadline that could affect some users’ ability to boot their systems.
For WireGuard, the timing raises broader questions about the fragility of developer access and the risks of relying on centralized account systems to distribute security updates. When a single account lockout can stall patch delivery for software used around the world, the consequences can extend well beyond one developer’s inbox.
Sources:
Read more tech news on the Doppler VPN Blog.