VeraCrypt Release Notes

What's Changed

Use “unmount” instead of “dismount” in scripts and in text shown to the user by @samhocevar in #1548

All platforms: Update logo icons by @Jertzukka in #1546

Documentation: Remove XHTML spec and fix errors by @Jertzukka in #1547

Linux/FreeBSD/macOS: Column widths correct initially and on update by @Jertzukka in #1552

Linux: Update Ubuntu 25.04 Plucky dependencies by @Jertzukka in #1556

Update Polish translation by @Matthaiks in #1564

Update Corsican translation on 2025-06 by @Patriccollu in #1566

Update Language.zh-cn.xml by @nkh0472 in #1565

Fix IDC_MOUNTALL in German translation by @helmutbuhler in #1568

Fix code compilation. by @uni-kod in #1583

Update Corsican translation on 2025-08 by @Patriccollu in #1591

Update Polish translation by @Matthaiks in #1592

Update Swedish translation by @NickWick13 in #1594

Update Language.zh-cn.xml by @nkh0472 in #1597

Update Language.de.xml by @Mr-Update in #1598

Fix problems inside crash dump filter path by @Chuccle in #1590

Update Polish translation by @Matthaiks in #1606

Update Language.zh-cn.xml by @nkh0472 in #1607

Update Language.de.xml by @Mr-Update in #1608

Update Corsican translation on 2025-09 by @Patriccollu in #1609

Fix links to documentation in README.md by @codytubbs in #1617

Fix: Incorrect tooltip on mouseover due to bad translation key (fix #1635) by @babastienne in #1637

Fix ghost drive letter after CLI dismount (Silent mode) by @amail80 in #1658

Fix erroneous 2 TiB limit for hidden file containers in GUI wizard by @Computeiful in #1672

Update Language.ro.xml by @TigerxWood in #1636

Fix hibernation crash on fresh Windows 11 25H2 (BSOD Event 41) by @audriusbuika in #1671

Windows: Fix elevated COM format drive validation and device path normalization by @audriusbuika in #1670

Added line break between AM Crypto and IDRIX by @sandakersmann in #1679

Update Polish translation by @Matthaiks in #1685

Fix undefined behavior in StartElevated stderr read loop (#1550) by @curious-rabbit in #1687

Update Swedish translation by @NickWick13 in #1688

Update Dutch translations by @RockyTDR in #1691

Update Language.de.xml by @Mr-Update in #1692

Update Polish translation by @Matthaiks in #1696

Update Norwegian Bokmål translation by @sandakersmann in #1697

Some minor fixes to Norwegian Bokmål translation by @sandakersmann in #1699

Update Language.zh-cn.xml by @nkh0472 in #1694

Linux: allow mounting NTFS volumes with ntfs3 by @mammothcoding in #1695

Update Language.nb.xml by @sandakersmann in #1701

Update Polish translation by @Matthaiks in #1702

New update to Language.nb.xml by @sandakersmann in #1703

Increment version to 1.26.28 in Language.nl.xml by @sandakersmann in #1705

Fix whitespace issues in translation files by @sandakersmann in #1707

Update Corsican translation on 2026-05 by @Patriccollu in #1708

Update Polish translation by @Matthaiks in #1709

New translations to Language.nb.xml by @sandakersmann in #1710

Update Russian translation for ntfs3 preference by @mammothcoding in #1704

Translate English entries to Chinese in XML by @nkh0472 in #1711

Update Norwegian Bokmål translation by @sandakersmann in #1712

Update Polish translation by @Matthaiks in #1713

Update Language.de.xml by @Mr-Update in #1715

Update Norwegian Bokmål translation by @sandakersmann in #1716

Update Language.nl.xml by @RockyTDR in #1718

Update Corsican translation on 2026-05 (2nd) by @Patriccollu in #1720

Fix Off-By-One Stack Buffer Overflows in XML Parser by @S4N-T0S in #1717

Update Norwegian Bokmål translation by @sandakersmann in #1722

Update Language.ro_1.26.28.xml by @TigerxWood in #1721

Update Polish translation by @Matthaiks in #1725

Update Norwegian Bokmål translation by @sandakersmann in #1724

Update Language.de.xml by @Mr-Update in #1727

Update Corsican translation on 2026-05 (3rd) by @Patriccollu in #1728

Update Language.nl.xml by @RockyTDR in #1730

Update Language.zh-cn.xml by @nkh0472 in #1732

New Contributors

@samhocevar made their first contribution in #1548

@helmutbuhler made their first contribution in #1568

@uni-kod made their first contribution in #1583

@Chuccle made their first contribution in #1590

@codytubbs made their first contribution in #1617

@babastienne made their first contribution in #1637

@amail80 made their first contribution in #1658

@Computeiful made their first contribution in #1672

@audriusbuika made their first contribution in #1671

@curious-rabbit made their first contribution in #1687

@mammothcoding made their first contribution in #1695

@S4N-T0S made their first contribution in #1717

Full Changelog: VeraCrypt_1.26.24...VeraCrypt_1.26.28_Beta3

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.20 and 1.26.24 (30 May 2025):

All OSes:

Fix Whirlpool implementation for big-endian platforms. (GH #1529)

Rename "Dismount All" to "Unmount All" in UI, with ALT+u as the new accelerator key (previously ALT+s).

Add contributed Chinese and Russian CHM documentation.

Update translations.

Windows:

Implement screen protection against screenshots and screen recording, enabled by default.

This feature can be disabled during installation or via Performance/Driver Configuration settings.

Add checkboxes in the MSI installer for controlling memory protection and screen protection features.

Introduce command-line options DISABLEMEMORYPROTECTION and DISABLESCREENPROTECTION for MSI installer configuration.

Both options accept values 0 (enabled) or 1 (disabled).

Example:

msiexec /i VeraCrypt_Setup_x64_1.26.24.msi DISABLESCREENPROTECTION=1 /qn REBOOT=ReallySuppress MSIRESTARTMANAGERCONTROL=Disable ACCEPTLICENSE=YES

Fix race conditions when multiple instances of veracrypt.exe are launched simultaneously.

Update bundled libzip to version 1.11.3.

Linux:

Add support for AppImage packaging and usage.

Fix absolute path usage for true command when checking sudo session status.

Fix failure to use Hungarian language translations.

Improve generic installer scripts. (GH #1514)

Add support for /run/media/veracrypt as default mount prefix when /media is not available. (GH #1524)

Remove pcsclite dependency from .deb/.rpm packages—now detected/loaded dynamically at runtime.

macOS:

Fix absolute path usage for true command when checking sudo session status.

Create symlink for VeraCrypt in /usr/local/bin to allow CLI usage.

Fix failure to use Hungarian language translations.

Merged Github Pull Requests

Update Language.de.xml by @bugtracker2019 in #1489

CI: Enable XML Validation Workflow by @Jertzukka in #1497

Fix SetupDLL and ExpandVolume Error by @Feryquence in #1495

Update Language.nl.xml by @RockyTDR in #1502

Linux/FreeBSD: Improvements on installation scripts by @Jertzukka in #1514

Refactor: Use symbolic constants for volume header magic numbers by @bernardladenthin in #1525

Add alignment constants for derived key and KEY_INFO buffers to ensure SIMD compatibility. by @bernardladenthin in #1526

User Guide with HTML by @fzxx in #1523

Update Tradition Chinese (Hong Kong) by @harryytm in #1486

Fix the whirlpool for big-endian platform by @pingwcy in #1529

Fix a mistake by @fzxx in #1530

modify unix default mounting point prefix (use /run/media/veracrypt t… by @stevenleeS0ht in #1524

Update Polish translation by @Matthaiks in #1533

Update Corsican translation on 2025-05 (1t4s) by @Patriccollu in #1535

typo Readme.txt by @zaphodapriest in #1538

Update Corsican translation on 2025-05 (2) by @Patriccollu in #1543

New Contributors

@bugtracker2019 made their first contribution in #1489

@Feryquence made their first contribution in #1495

@bernardladenthin made their first contribution in #1525

@pingwcy made their first contribution in #1529

@stevenleeS0ht made their first contribution in #1524

@zaphodapriest made their first contribution in #1538

Full Changelog: VeraCrypt_1.26.20...VeraCrypt_1.26.24

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.18 and 1.26.20 (3 February 2025)

All OSes:

• Implement SHA-256 acceleration on ARM64 platforms using CPU instructions.
• Update translations.
• Replace "Dismount" with "Unmount" across the UI and documentation to align with IT standards (GH #1478)

Windows:

• Fix regression in driver that always allowed defragmentation and caused other side effects.
• Revert to the previous method of gathering system entropy due to stability issues reported by users.

Linux:

• Fix a regression in Linux Mint affecting administrator password authentication. (GH #1473)

macOS:

• Fix regression that blocked dismounting of volumes. (GH #1467)
• Resolve a wxWidgets 3.2.6 assertion error related to the undefined switch use-dummy-sudo-password. (GH #1470)

Merged Github Pull Requests

• Update Language.pl.xml by @p0k33m0n in #1471
• Enable AESNI only on x86 by @Xeonacid in #1479
• refactor: use the term unmount instead of dismount by @tessus in #1478
• Update Chinese (Hong Kong) translation by @harryytm in #1408

New Contributors

• @p0k33m0n made their first contribution in #1471
• @Xeonacid made their first contribution in #1479
• @tessus made their first contribution in #1478

Full Changelog: VeraCrypt_1.26.18...VeraCrypt_1.26.20

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.15 and 1.26.18 (20 January 2025)

All OSes

Added support for SHA-256 x86 intrinsic to enhance the performance of PBKDF2-HMAC-SHA256.

Added support for AES hardware on ARM64 platforms (e.g. Windows ARM64, macOS on Apple Silicon Mx).

Updated translations

Windows

Dropped support for Windows 32-bit.

Set Windows 10 October 2018 Update (version 1809) as the minimum supported version.

Reduce driver deadlock occurences under low-memory scenarios caused by re-entrant IRP completions.

Fixed failed EFI detection on some PCs where the BootOrder variable is not defined (proposed by @kriegste, GH #360).

Fixed "Access Denied" error when updating VeraCrypt using EXE setup following a Windows upgrade.

Fixed various issues affecting the EFI system encryption configuration editor.

Fixed regression in Traveler Disk creation (GH #886)

Replaced the deprecated CryptGenRandom with BCryptGenRandom for generating secure random bytes.

Use modern API to gather system entropy for random generation instead of obsolete ones.

Update LZMA SDK to version 24.09

Update libzip to version 1.11.2

Linux

CVE-2024-54187: Added absolute paths when executing system binaries to prevent path hijacking (collaboration with SivertPL @__tfr)

CVE-2025-23021: Prevent mounting volumes on system directories and PATH (reported by SivertPL @__tfr)

Fixed an assertion issue with the wxWidgets library included in Ubuntu.

Improved directory-opening logic by prioritizing xdg-open and adding fallback mechanisms.

Ensure that volume exists before starting the mount operation.

Fix "Password too long" error message not expanded to include max length (GH #1456)

Simplify sudo session detection logic.

macOS

CVE-2024-54187: Added absolute paths when executing system binaries to prevent path hijacking (collaboration with SivertPL @__tfr)

CVE-2025-23021: Prevent mounting volumes on system directories and PATH (reported by SivertPL @__tfr)

Disabled screen capture by default. Added the --allow-screencapture CLI switch to enable it if needed.

Ensure that volume exists before starting the mount operation.

Implement sudo session detection logic

Contributors

Update Language.sv.xml by @NickWick13 in #1416

Add Option to Enable/Disable Screen Capture by @denizt in #1418

Update Language.ro.xml by @TigerxWood in #1434

Full Changelog: VeraCrypt_1.26.15...VeraCrypt_1.26.18

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.7 and 1.26.14 (25 August 2024)

All OSes

Update translations and documentation.

Implement language selection settings in non-Windows versions.

Make codebase compatible with wxWidgets 3.3 in non-Windows versions.

Implement detection of volumes affected by XTS master key vulnerability and warn user about it.

Update mount failure error messages to mention removal of TrueCrypt support and old algorithms.

Windows

Better fix for Secure Desktop issues under Windows 11 22H2.

IME is now disabled in Secure Desktop because it is known to cause issues.

VeraCrypt Expander: Fix expansion of volumes on disks with a sector size different from 512 (by skl0n6).

Fix writing wrong EFI System Encryption Advanced Options to registry.

Don't close Setup when exiting VeraCrypt process through system tray Exit menu.

Fix failure to format some disks (e.g., VHDX) caused by virtual partition offset not 4K aligned.

Fallback to absolute positioning when accessing disks if relative positioning fails.

Update zlib to version 1.3.1.

Linux

Focus PIM field when selected (GH #1239).

Fix generic installation script on Konsole in Wayland (GH #1244).

Added the ability to build using wolfCrypt as the cryptographic backend. Disabled by default. (Contributed by wolfSSL, GH PR #1227).

Allows GUI to launch in a Wayland-only environment (GH #1264).

CLI: Don't initially re-ask PIM if it was already specified (GH #1288).

CLI: Fix incorrect max hidden volume size for file containers (GH #1338).

Enhance ASLR security of generic installer binaries by adding linked flag for old GCC version (reported by @morton-f on Sourceforge).

macOS

Fix corrupted disk icon in main UI (GH #1218).

Fix near zero width PIM input box and simplify wxTextValidator logic (GH #1274).

Use correct Disk Utility location when "check filesystem" is ran (GH #1273).

Add support for FUSE-T as an alternative to MacFUSE (GH #1055).

FreeBSD

Fix privilege escalation prompts not showing up (GH #1349).

Support automatic detection and mounting of ext2/3/4, exFAT, NTFS filesystems (GH #1350).

Use correct Disk Utility location when "check filesystem" is ran (GH #1273).

New Contributors

@Mattoje made their first contribution in #1226

@udev2045 made their first contribution in #1230

@MayanTigger made their first contribution in #1241

@lealem47 made their first contribution in #1227

@kayazeren made their first contribution in #1254

@JonatanWick made their first contribution in #1270

@pji2918 made their first contribution in #1291

@RoboSchmied made their first contribution in #1324

@nerun made their first contribution in #1306

@Ozero4 made their first contribution in #1372

@SebastienGeeraert made their first contribution in #1373

@chatgptdev made their first contribution in #1386

@lollolong made their first contribution in #1389

Full Changelog: VeraCrypt_1.26.7...VeraCrypt_1.26.14

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.14 and 1.26.15 (2 September 2024)

Windows

Fix MSI install/uninstall issues:

• Fixed error 1603 returned by MSI silent install when REBOOT=ReallySuppress is specified and a reboot is required.
• Fixed missing documentation and language files from the MSI package.
• Fixed MSI not installing new documentation and language files when upgrading from an EXE-based installation.
• Fixed installation folder not being removed after MSI uninstall in some cases.
• Fix regression during UEFI system decryption that caused the bootloader to persist.

Full Changelog: VeraCrypt_1.26.14...VeraCrypt_1.26.15

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.25.9 and 1.26.7 (1 October 2023)

All OSes:

Security: Ensure that XTS primary key is different from the secondary key when creating volumes

Issue unlikely to happen thanks to random generator properties but this check must be added to prevent attacks

Reference: CCSS,NSA comment at page 3: https://csrc.nist.gov/csrc/media/Projects/crypto-publication-review-project/documents/initial-comments/sp800-38e-initial-public-comments-2021.pdf

Remove TrueCrypt Mode support. Version 1.25.9 can be used to mount or convert TrueCrypt volumes.

Complete removal of RIPEMD160 and GOST89 algorithms. Legacy volumes using any of them cannot be mounted by VeraCrypt anymore.

Add support for BLAKE2s as new PRF algorithm for both system encryption and standard volumes.

Introducing support for EMV banking smart cards as keyfiles for non-system volumes.

No need for a separate PKCS#11 module configuration.

Card PIN isn't required.

Generates secure keyfile content from unique, encoded data present on the banking card.

Supports all EMV standard-compliant banking cards.

Can be enabled in settings (go to Settings->Security Tokens).

Developed by a team of students from the Institut national des sciences appliquées de Rennes.

More details about the team and the project are available at https://projets-info.insa-rennes.fr/projets/2022/VeraCrypt/index_en.html.

When overwriting an existing file container during volume creation, add its current size to the available free space

Add Corsican language support. Update several translations.

Update documentation

Windows:

Officially, the minimum supported version is now Windows 10. VeraCrypt may still run on Windows 7 and Windows 8/8.1, but no active tests are done on these platforms.

EFI Bootloader:

Fix bug in PasswordTimeout value handling that caused it to be limited to 255 seconds.

Rescue Disk: enhance "Boot Original Windows Loader" by using embedded backup of original Windows loader if it is missing from disk

Addition of Blake2s and removal of RIPEMD160 & GOST89

Enable memory protection by default. Add option under Performance/Driver Configuration to disable it if needed.

Memory protection blocks non-admin processes from reading VeraCrypt memory

It may block Screen Readers (Accessibility support) from reading VeraCrypt UI, in which case it can be disabled

It can be disabled by setting registry value "VeraCryptEnableMemoryProtection" to 0 under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veracrypt

Add process mitigation policy to prevent VeraCrypt from being injected by other processes

Minor enhancements to RAM Encryption implementation

Fix Secure Desktop issues under Windows 11 22H2

Implement support for mounting partially encrypted system partitions.

Fix false positive detection of new device insertion when Clear Encryption Keys option is enable (System Encryption case only)

Better implementation of Fast Create when creating file containers that uses UAC to request required privilege if not already held

Allow choosing Fast Create in Format Wizard UI when creating file containers

Fix formatting issues during volume creation on some machines.

Fix stall issue caused by Quick Format of large file containers

Add dropdown menu to Mount button to allow mounting without using the cache.

Possible workaround for logarithmic slowdown for Encrypt-In-Place on large volumes.

Make Expander first check file existence before proceeding further

Allow selecting size unit (KB/MB/GB) for generated keyfiles

Display full list of supported cluster sizes for NTFS, ReFS and exFAT filesystems when creating volumes

Support drag-n-drop of files and keyfiles in Expander.

Implement translation of Expander UI

Replace legacy file/dir selection APIs with modern IFileDialog interface for better Windows 11 compatibility

Enhancements to dependency dlls safe loading, including delay loading.

Remove recommendation of keyfiles files extensions and update documentation to mention risks of third-party file extensions.

Add support for more language in the setup installer

Update LZMA library to version 23.01

Update libzip to version 1.10.1 and zlib to version 1.3.

Linux:

Fix bug in Random generator on Linux when used with Blake2s that was triggering a self test failure.

Modify Random Generator on Linux to exactly match official documentation and the Windows implementation.

Fix compatibility issues with Ubuntu 23.04.

Fix assert messages displayed when using wxWidgets 3.1.6 and newer.

Fix issues launching fsck on Linux.

Fix privilege escalation prompts being ignored.

Fix wrong size for hidden volume when selecting the option to use all free space.

Fix failure to create hidden volume on a disk using CLI caused by wrong maximum size detection.

Fix various issues when running in Text mode:

• Don't allow selecting exFAT/BTRFS filesytem if they are not present or not compatible with the created volume.

Fix wrong dismount message displayed when mounting a volume.

Hide PIM during entry and re-ask PIM when user entered a wrong value.

Fix printing error when checking free space during volume creation in path doesn't exist.

Use wxWidgets 3.2.2.1 for static builds (e.g. console only version)

Fix compatibility of generic installers with old Linux distros

Update help message to indicate that when cascading algorithms they must be separated by dash

Better compatibility with building under Alpine Linux and musl libc

macOS:

Fix issue of VeraCrypt window becoming unusable in use cases involving multiple monitors and change in resolution.

Original source

Binaries for FreeBSD, Linux, macOS and Windows are available at Launchpad and Sourceforge.

Changes between 1.25.7 and 1.25.9 (19 February 2022)

All OSes:

• Update translations (Chinese, Dutch, French, German, Turkish).

Windows:

• Make MSI installer compatible with system encryption (Issue #869).
• Set minimum support for MSI installation to Windows 7.
• Fix failure to create Traveler Disk when VeraCrypt is installed using MSI (Issue #886).
• Don't cache the outer volume password when mounting with hidden volume protection if wrong hidden volume password was specified.
• Reduce the size of EXE installers by almost 50% by using LZMA compression instead of DEFLATE.
• Fix double-clicking mounted drive in VeraCrypt UI not working in some special Windows configurations (Issue #873).
• Add registry key to fix BSOD during shutdown/reboot on some machines when using system encryption (Issue #871).
• Under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veracrypt", create a REG_DWORD value named "VeraCryptEraseKeysShutdown".
• Setting this registry value to 0 disables erasing system encryption keys which is the cause of BSOD during shutdown on some machines.

Linux:

• Fix hidden volume settings not correctly displayed when enabling hidden volume protection in mount options window.
• Fix generic Linux installer overwriting /usr/sbin if it is a symlink (Issue #888).
• Fix crash when building with _GLIBCXX_ASSERTIONS defined (Issue #896).
• Enable building from source without AES-NI support (Issue #892).

MacOSX:

• Fix hidden volume settings not correctly displayed when enabling hidden volume protection in mount options window.

Original source