Microsoft Account Lock Halts WireGuard VPN Developer’s Software Updates
WireGuard, the widely-used open-source VPN software critical for numerous security solutions, faces significant disruptions due to a lockout from its Microsoft developer account. Created by Jason Donenfeld, this VPN technology is foundational for various services, including Mullvad, Proton, and Tailscale.
Impacts of Microsoft Account Lockout
The abrupt termination of Donenfeld’s Microsoft account has hindered the ability to sign and distribute essential updates for Windows users. This lockout follows a troubling pattern, as another developer, Mounir Idrassi of VeraCrypt, experienced similar issues with his account. Both developers were not informed by Microsoft before their accounts were suspended, which has raised concerns about developer communication and security policies.
Consequences of the Lockout
The repercussions of this situation can be severe. Donenfeld noted that without the ability to publish updates, users could be vulnerable to security threats, particularly if a critical vulnerability were to arise. He expressed his readiness to deploy essential updates after modernizing WireGuard’s Windows code, but was met with an “access restricted” message when attempting to log in to his developer account.
Microsoft’s Verification Process
Microsoft’s Windows Hardware Program requires developers to undergo a verification process, which includes submitting government-issued identification. This stringent process aims to ensure that only vetted developers can publish sensitive code to Windows users. Unfortunately, Donenfeld reported that although he completed the required verification, his account remained suspended without prior notice.
- Verification Requirement: Mandatory account verification initiated for all partners not verified since April 2024.
- Access Status: Accounts of unverified developers have been suspended from sending updates.
Response and Industry Reactions
In light of these issues, Donenfeld reached out to Microsoft’s executive support team, which acknowledged receiving his appeal but indicated a wait time of up to 60 days for review. As of late Wednesday, he reported initial communication with Microsoft, which could indicate a potential resolution.
Windscribe, another VPN provider, has reported similar account access issues. They have been locked out of their Partner Center account, which has left them unable to sign drivers for over a month, highlighting broader concerns within the developer community regarding Microsoft’s support and communication practices.
Conclusion
The recent account lockout affecting WireGuard and other developers raises critical questions about Microsoft’s approach to account management for software developers. As the situation develops, the responses from Microsoft and the effectiveness of their support systems will be closely scrutinized by those within the industry.
