WireGuard VPN developer can’t ship software updates after Microsoft locks account

What happened

It has been reported that Jason Donenfeld, creator of the open-source WireGuard VPN, has been locked out of a key part of his Microsoft developer account and can’t sign drivers or ship updates for WireGuard on Windows. Donenfeld told TechCrunch he was ready to submit a modernized Windows build for Microsoft’s checks when he hit an “access restricted” error. He says he completed third‑party ID verification (the verifier marked him “verified”), but access remained suspended.

Why it matters

This isn’t just a bureaucracy headache. Signed drivers are gatekeepers: Windows won’t accept them without vendor validation, so an account suspension effectively stops updates from reaching users. Donenfeld warned — “If there were a critical vulnerability to fix right now … users would be totally exposed.” It has been reported that this is the second such high-profile case after VeraCrypt’s developer said a similar lockout could block a time‑sensitive update tied to a certificate authority expiry.

Developer attempts and timeline

Donenfeld says he received no prior notification — “zero, nothing, zilch” — despite searching inboxes and spam folders. A Microsoft page for the Windows Hardware Program, which it has been reported required partners to upload government ID, says the mandatory verification program has “now concluded” and that unverified accounts were “suspended.” Donenfeld was referred to Microsoft’s executive support team; it has been reported that his appeal was acknowledged but could take up to 60 days to review. Sixty days? That’s an eternity in security‑land.

Bigger picture

WireGuard’s code is foundational for services like Proton, Mullvad and Tailscale, so this is more than an individual developer’s pain. It raises a blunt question: when platform controls meant to protect users also stop needed updates, who holds the keys? For now, it has been reported that affected developers are stuck in an appeals process while users wait — and the broader debate over platform gatekeeping and supply‑chain resilience just got a fresh, real‑world test.

Sources: techcrunch