Jason Donenfeld, founder of the open-source VPN project WireGuard, recently announced that he has lost access to his Microsoft developer account. This lockout prevents him from signing drivers or pushing updates for the Windows version of WireGuard—a widely used VPN technology that serves as the backbone for major commercial services like Proton and Tailscale.
Donenfeld revealed on X (formerly Twitter) that the suspension has stalled a major update. He told TechCrunch that while the software is currently functional, users could be left vulnerable if a critical security flaw emerges that cannot be patched in time.
Bureaucratic Hurdles in the Verification Process
The suspension stems from a mandatory identity verification process Microsoft implemented for its "Windows Hardware Dev Center." According to Microsoft, all partners were required to complete this verification, and the window for doing so has recently closed. Accounts that failed to complete the process were automatically suspended, stripping them of the ability to publish drivers.
Donenfeld claims he received no prior warning from Microsoft. "I’ve checked every inbox, spam folder, and mail log, and there is absolutely nothing," he said. Even after submitting government-issued identification and receiving a status of "verified," his account remains restricted.
Microsoft’s hardware program is intended to enhance security by vetting developers, thereby preventing malicious actors from using drivers to gain high-level access to the operating system. However, this one-size-fits-all approach has hit open-source projects particularly hard.
Beyond WireGuard, Mounir Idrassi, the developer of the encryption software VeraCrypt, is facing a similar predicament. Idrassi noted that the inability to access his account means he cannot update his software before certificates expire, which could potentially prevent some users from booting their computers.
Windscribe, a VPN provider, has also reported similar issues. The company stated on social media that they have been trying to reach Microsoft’s support team for over a month without receiving a substantive response. In their post, they frustratedly asked, "Is there anyone left working at Microsoft?"
Donenfeld has since been referred to Microsoft’s executive support team, which handles high-priority account issues. He was informed that while his appeal has been received, the review process could take up to 60 days. As of Wednesday evening, Donenfeld confirmed he is in contact with Microsoft and is hopeful for a prompt resolution.