VeraCrypt Release Notes

Downloads

Jump directly to installers, packages, source archives, checksums and signatures

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.24 and 1.26.29 (9 June 2026)

All OSes:

Add Argon2id as an alternative memory-hard KDF for non-system volumes.

Use "KDF" terminology in the user interface and documentation instead of "PKCS-5 PRF".

Update logo icons with simplified icons without extra label text.

Harden XML and TLV parsers against malformed input.

Security: Fix GHSA-94c6-mgmv-mqc5: non-default WOLFCRYPT=1 builds now use wolfCrypt PBKDF2 instead of HKDF and honor VeraCrypt's PBKDF2 iteration count.

Reported by vastblast.

CVE-2026-53762

Fix CPU feature detection and crypto implementation edge cases, including AVX2/leaf 7 detection, BLAKE2s/Argon2 no-SSE2 x86 fallback paths, Camellia SSSE3 dispatch, Twofish x64 multiblock tail handling, and Whirlpool alignment.

Update documentation, including Argon2id/KDF information and split Windows/Unix command line usage pages.

Update translations.

Windows:

Fix rare BSOD issue affecting the VeraCrypt driver.

Fix hibernation crash on fresh Windows 11 25H2 installations.

Security: Fix GHSA-jjcr-75w7-58jp: hidden volume quick format no longer uses the file-container allocation shortcut that wrote plaintext zero sectors at 128 MiB intervals, preserving plausible deniability.

Reported by vastblast.

Regression introduced in 1.26.6.

CVE-2026-54073

Harden Windows driver input validation and crash dump filter handling. (GH PR #1590)

Improve driver I/O handling, including safer request completion, ordered volume flush barriers, and better VERIFY/TRIM validation.

Fix PBKDF XSTATE cleanup and add Win64 unwind metadata for AES assembly.

Speed up mounting when KDF autodetection is selected.

Allow selecting which KDF algorithms are included in the benchmark dialog.

Allow canceling long mount operations from the wait dialog and with the new /cancelmount CLI switch, including auto-mount scans.

Add support for new Microsoft UEFI CA 2023 signed EFI bootloaders while preserving Microsoft UEFI CA 2011 support.

Improve EFI system encryption repair and upgrade handling, including stuck decryption finalization, Post-OOBE repair, loader restoration verification, and clearer missing-loader reporting.

Fix EFI DcsProp rewrite handling.

Fix ghost drive letter after command line unmount. (GH #337, GH #1426)

Fix favorite volume mount race.

Validate PIM when changing only the KDF.

Fix elevated COM format drive validation and device path normalization. (GH #1670)

Fix ReFS formatting during volume creation.

Fix MSI traveler disk creation with WHQL-signed drivers, ARM64 MSI build, Start Menu folder upgrades, and discovery of newer SDK MSI tools.

Add CLI switch /protectScreen to allow disabling screen protection in portable mode.

Add argument to CLI switch /protectMemory to allow disabling memory protection in portable mode.

Add setting and CLI switch /enableIME to allow enabling Input Method Editor (IME) in Secure Desktop.

Use tab control for VeraCrypt preferences to reduce clutter and size of the dialog.

Provide VeraCrypt C/C++ SDK for creating volumes.

Update LZMA SDK to version 26.01.

Linux:

Update Ubuntu 25.04 dependency to require libwxgtk3.2-1t64.

Add support for building against FUSE3.

Add in-kernel NTFS driver selection for NTFS mounts, including --filesystem=kernel-ntfs and -m kernelntfs.

--filesystem=ntfs3 now pins the kernel ntfs3 driver and bypasses mount helpers such as mount.ntfs3.

Fix AppImage portability and language loading, bundle a matching FUSE library, and allow AppImage file name to start with "veracrypt" in any case.

Suppress redundant "already running" dialog and store the GUI instance lock under XDG paths.

Add emergency cleanup for stale unmounts.

Parallelize header KDF autodetection.

Honor nokernelcrypto during external formatting.

On WSL, open mounted volumes using Windows Explorer.

Add support for reproducible Linux builds, including SOURCE_DATE_EPOCH handling, DEB/RPM packages, and Arch package builds.

Add OpenWrt package build and QEMU test scripts.

Fix CMake 4 compatibility, CentOS 6 GCC 4.4 builds, and wxWidgets-related build issues.

Linux and macOS:

Fix initial width of columns in main UI.

Enable Quick Format for normal file containers. The container is sized with ftruncate(), so the host filesystem may keep regions unwritten or sparse until data is written to them.

Fix hidden volume size estimation for exFAT outer volumes.

Fix hidden volume FAT size limit handling.

Fix erroneous 2 TiB limit for hidden file containers in GUI wizard.

Show volume creation finalization stages.

Collect mouse entropy from nested controls in the volume creation wizard.

Fix remaining wxWidgets sizer flags.

macOS:

Use SMB backend for FUSE-T auxiliary mounts and improve FUSE-T SMB metadata handling and mount stability.

Recover mounted volume mount points.

Validate format wizard device targets and block partitioned whole-disk alias bypasses.

Run APFS formatter elevated when needed and prepare APFS formatter device aliases.

Force fresh exFAT layout when formatting volumes.

Fix Command-A in password fields.

Link against wxWidgets 3.2.10 and allow overriding the deployment target.

BSD:

FreeBSD: link static wxWidgets builds with iconv.

OpenBSD: fix device-hosted volume sizing, honor doas user for mount ownership and FUSE access, and fix CLI build and PCSC exit handling.

Merged Pull Requests

Use “unmount” instead of “dismount” in scripts and in text shown to the user by @samhocevar in #1548

All platforms: Update logo icons by @Jertzukka in #1546

Documentation: Remove XHTML spec and fix errors by @Jertzukka in #1547

Linux/FreeBSD/macOS: Column widths correct initially and on update by @Jertzukka in #1552

Linux: Update Ubuntu 25.04 Plucky dependencies by @Jertzukka in #1556

Update Polish translation by @Matthaiks in #1564

Update Corsican translation on 2025-06 by @Patriccollu in #1566

Update Language.zh-cn.xml by @nkh0472 in #1565

Fix IDC_MOUNTALL in German translation by @helmutbuhler in #1568

Fix code compilation. by @uni-kod in #1583

Update Corsican translation on 2025-08 by @Patriccollu in #1591

Update Polish translation by @Matthaiks in #1592

Update Swedish translation by @NickWick13 in #1594

Update Language.zh-cn.xml by @nkh0472 in #1597

Update Language.de.xml by @Mr-Update in #1598

Fix problems inside crash dump filter path by @Chuccle in #1590

Update Polish translation by @Matthaiks in #1606

Update Language.zh-cn.xml by @nkh0472 in #1607

Update Language.de.xml by @Mr-Update in #1608

Update Corsican translation on 2025-09 by @Patriccollu in #1609

Fix links to documentation in README.md by @codytubbs in #1617

Fix: Incorrect tooltip on mouseover due to bad translation key (fix #1635) by @babastienne in #1637

Fix ghost drive letter after CLI dismount (Silent mode) by @amail80 in #1658

Fix erroneous 2 TiB limit for hidden file containers in GUI wizard by @Computeiful in #1672

Update Language.ro.xml by @TigerxWood in #1636

Fix hibernation crash on fresh Windows 11 25H2 (BSOD Event 41) by @audriusbuika in #1671

Windows: Fix elevated COM format drive validation and device path normalization by @audriusbuika in #1670

Added line break between AM Crypto and IDRIX by @sandakersmann in #1679

Update Polish translation by @Matthaiks in #1685

Fix undefined behavior in StartElevated stderr read loop (#1550) by @curious-rabbit in #1687

Update Swedish translation by @NickWick13 in #1688

Update Dutch translations by @RockyTDR in #1691

Update Language.de.xml by @Mr-Update in #1692

Update Polish translation by @Matthaiks in #1696

Update Norwegian Bokmål translation by @sandakersmann in #1697

Some minor fixes to Norwegian Bokmål translation by @sandakersmann in #1699

Update Language.zh-cn.xml by @nkh0472 in #1694

Linux: allow mounting NTFS volumes with ntfs3 by @mammothcoding in #1695

Update Language.nb.xml by @sandakersmann in #1701

Update Polish translation by @Matthaiks in #1702

New update to Language.nb.xml by @sandakersmann in #1703

Increment version to 1.26.28 in Language.nl.xml by @sandakersmann in #1705

Fix whitespace issues in translation files by @sandakersmann in #1707

Update Corsican translation on 2026-05 by @Patriccollu in #1708

Update Polish translation by @Matthaiks in #1709

New translations to Language.nb.xml by @sandakersmann in #1710

Update Russian translation for ntfs3 preference by @mammothcoding in #1704

Translate English entries to Chinese in XML by @nkh0472 in #1711

Update Norwegian Bokmål translation by @sandakersmann in #1712

Update Polish translation by @Matthaiks in #1713

Update Language.de.xml by @Mr-Update in #1715

Update Norwegian Bokmål translation by @sandakersmann in #1716

Update Language.nl.xml by @RockyTDR in #1718

Update Corsican translation on 2026-05 (2nd) by @Patriccollu in #1720

Fix Off-By-One Stack Buffer Overflows in XML Parser by @S4N-T0S in #1717

Update Norwegian Bokmål translation by @sandakersmann in #1722

Update Language.ro_1.26.28.xml by @TigerxWood in #1721

Update Polish translation by @Matthaiks in #1725

Update Norwegian Bokmål translation by @sandakersmann in #1724

Update Language.de.xml by @Mr-Update in #1727

Update Corsican translation on 2026-05 (3rd) by @Patriccollu in #1728

Update Language.nl.xml by @RockyTDR in #1730

Update Language.zh-cn.xml by @nkh0472 in #1732

Ensure reproducible builds on Linux by @curious-rabbit in #1731

Update FUSE package version for Debian and Ubuntu by @thurask in #1736

Update Polish translation by @Matthaiks in #1737

Update to Norwegian Bokmål translation by @sandakersmann in #1738

Update Language.nl.xml by @RockyTDR in #1741

Linux: add Arch package build support by @idrassi in #1740

Update Language.de.xml by @Mr-Update in #1742

Update Norwegian Bokmål translation by @sandakersmann in #1746

Update Corsican translation on 2026-05 (4th) by @Patriccollu in #1747

Update Language.zh-cn.xml by @nkh0472 in #1748

Update Language.pl.xml by @Ganeron11 in #1750

New Contributors

@samhocevar made their first contribution in #1548

@helmutbuhler made their first contribution in #1568

@uni-kod made their first contribution in #1583

@Chuccle made their first contribution in #1590

@codytubbs made their first contribution in #1617

@babastienne made their first contribution in #1637

@amail80 made their first contribution in #1658

@Computeiful made their first contribution in #1672

@audriusbuika made their first contribution in #1671

@curious-rabbit made their first contribution in #1687

@mammothcoding made their first contribution in #1695

@S4N-T0S made their first contribution in #1717

@thurask made their first contribution in #1736

@Ganeron11 made their first contribution in #1750

Full Changelog: VeraCrypt_1.26.24...VeraCrypt_1.26.29

Downloads

Detached GPG signatures are provided as sig links next to each download.

Windows

Installer: VeraCrypt.Setup.1.26.29.exe (sig)

MSI installer (x64): VeraCrypt_Setup_x64_1.26.29.msi (sig)

MSI installer (ARM64): VeraCrypt_Setup_arm64_1.26.29.msi (sig)

Portable version: VeraCrypt.Portable.1.26.29.exe (sig)

Debugging symbols: VeraCrypt_1.26.29_Windows_Symbols.zip (sig)

macOS

Standard package: VeraCrypt_1.26.29.dmg (sig)

FUSE-T package: VeraCrypt_FUSE-T_1.26.29.dmg (sig)

Linux

AppImage x64: VeraCrypt-1.26.29-x86_64.AppImage (sig)

AppImage ARM64: VeraCrypt-1.26.29-aarch64.AppImage (sig)

Legacy GTK2 AppImage: VeraCrypt-1.26.29-gtk2-legacy-i686.AppImage (sig); VeraCrypt-1.26.29-gtk2-legacy-x86_64.AppImage (sig)

Generic installer: veracrypt-1.26.29-setup.tar.bz2 (sig)

Legacy installer for 32-bit CPU with no SSE2: veracrypt-1.26.29-x86-legacy-setup.tar.bz2 (sig)

Linux Debian/Ubuntu packages

Debian 13: GUI veracrypt-1.26.29-Debian-13-amd64.deb (sig), veracrypt-1.26.29-Debian-13-arm64.deb (sig); Console veracrypt-console-1.26.29-Debian-13-amd64.deb (sig), veracrypt-console-1.26.29-Debian-13-arm64.deb (sig)

Debian 12: GUI veracrypt-1.26.29-Debian-12-amd64.deb (sig), veracrypt-1.26.29-Debian-12-i386.deb (sig); Console veracrypt-console-1.26.29-Debian-12-amd64.deb (sig), veracrypt-console-1.26.29-Debian-12-i386.deb (sig)

Debian 11: GUI veracrypt-1.26.29-Debian-11-amd64.deb (sig), veracrypt-1.26.29-Debian-11-i386.deb (sig); Console veracrypt-console-1.26.29-Debian-11-amd64.deb (sig), veracrypt-console-1.26.29-Debian-11-i386.deb (sig)

Ubuntu 26.04: GUI veracrypt-1.26.29-Ubuntu-26.04-amd64.deb (sig), veracrypt-1.26.29-Ubuntu-26.04-arm64.deb (sig); Console veracrypt-console-1.26.29-Ubuntu-26.04-amd64.deb (sig), veracrypt-console-1.26.29-Ubuntu-26.04-arm64.deb (sig)

Ubuntu 25.10: GUI veracrypt-1.26.29-Ubuntu-25.10-amd64.deb (sig); Console veracrypt-console-1.26.29-Ubuntu-25.10-amd64.deb (sig)

Ubuntu 24.04: GUI veracrypt-1.26.29-Ubuntu-24.04-amd64.deb (sig), veracrypt-1.26.29-Ubuntu-24.04-arm64.deb (sig); Console veracrypt-console-1.26.29-Ubuntu-24.04-amd64.deb (sig), veracrypt-console-1.26.29-Ubuntu-24.04-arm64.deb (sig)

Ubuntu 22.04: GUI veracrypt-1.26.29-Ubuntu-22.04-amd64.deb (sig); Console veracrypt-console-1.26.29-Ubuntu-22.04-amd64.deb (sig)

Linux RPM packages

Fedora 44: GUI veracrypt-1.26.29-Fedora-44-x86_64.rpm (sig); Console veracrypt-console-1.26.29-Fedora-44-x86_64.rpm (sig)

Fedora 43: GUI veracrypt-1.26.29-Fedora-43-x86_64.rpm (sig); Console veracrypt-console-1.26.29-Fedora-43-x86_64.rpm (sig)

openSUSE 15: GUI veracrypt-1.26.29-openSUSE-15-x86_64.rpm (sig); Console veracrypt-console-1.26.29-openSUSE-15-x86_64.rpm (sig)

CentOS 8: GUI veracrypt-1.26.29-CentOS-8-x86_64.rpm (sig); Console veracrypt-console-1.26.29-CentOS-8-x86_64.rpm (sig)

CentOS 7: GUI veracrypt-1.26.29-CentOS-7-x86_64.rpm (sig), veracrypt-1.26.29-CentOS-7-i686.rpm (sig); Console veracrypt-console-1.26.29-CentOS-7-x86_64.rpm (sig), veracrypt-console-1.26.29-CentOS-7-i686.rpm (sig)

CentOS 6: GUI veracrypt-1.26.29-CentOS-6-x86_64.rpm (sig), veracrypt-1.26.29-CentOS-6-i686.rpm (sig); Console veracrypt-console-1.26.29-CentOS-6-x86_64.rpm (sig), veracrypt-console-1.26.29-CentOS-6-i686.rpm (sig)

Source code

VeraCrypt_1.26.29_Source.tar.bz2 (sig)

VeraCrypt_1.26.29_Source.zip (sig)

VeraCrypt-DCS-EFI-LGPL_1.26.29_Source.zip (sig)

Documentation and verification

Full list of changes: README.TXT (sig)

Checksums: veracrypt-1.26.29-sha256sum.txt (sig); veracrypt-1.26.29-sha512sum.txt (sig)

User Guide CHM: VeraCrypt.User.Guide.chm (sig); VeraCrypt.User.Guide.ru.chm (sig); VeraCrypt.User.Guide.zh-cn.chm (sig)

Bundle containing all release files: VeraCrypt_1.26.29_Bundle.7z (sig); VeraCrypt_1.26.29_Bundle.7z.checksums (sig)

Original source

What's Changed

Use “unmount” instead of “dismount” in scripts and in text shown to the user by @samhocevar in #1548

All platforms: Update logo icons by @Jertzukka in #1546

Documentation: Remove XHTML spec and fix errors by @Jertzukka in #1547

Linux/FreeBSD/macOS: Column widths correct initially and on update by @Jertzukka in #1552

Linux: Update Ubuntu 25.04 Plucky dependencies by @Jertzukka in #1556

Update Polish translation by @Matthaiks in #1564

Update Corsican translation on 2025-06 by @Patriccollu in #1566

Update Language.zh-cn.xml by @nkh0472 in #1565

Fix IDC_MOUNTALL in German translation by @helmutbuhler in #1568

Fix code compilation. by @uni-kod in #1583

Update Corsican translation on 2025-08 by @Patriccollu in #1591

Update Polish translation by @Matthaiks in #1592

Update Swedish translation by @NickWick13 in #1594

Update Language.zh-cn.xml by @nkh0472 in #1597

Update Language.de.xml by @Mr-Update in #1598

Fix problems inside crash dump filter path by @Chuccle in #1590

Update Polish translation by @Matthaiks in #1606

Update Language.zh-cn.xml by @nkh0472 in #1607

Update Language.de.xml by @Mr-Update in #1608

Update Corsican translation on 2025-09 by @Patriccollu in #1609

Fix links to documentation in README.md by @codytubbs in #1617

Fix: Incorrect tooltip on mouseover due to bad translation key (fix #1635) by @babastienne in #1637

Fix ghost drive letter after CLI dismount (Silent mode) by @amail80 in #1658

Fix erroneous 2 TiB limit for hidden file containers in GUI wizard by @Computeiful in #1672

Update Language.ro.xml by @TigerxWood in #1636

Fix hibernation crash on fresh Windows 11 25H2 (BSOD Event 41) by @audriusbuika in #1671

Windows: Fix elevated COM format drive validation and device path normalization by @audriusbuika in #1670

Added line break between AM Crypto and IDRIX by @sandakersmann in #1679

Update Polish translation by @Matthaiks in #1685

Fix undefined behavior in StartElevated stderr read loop (#1550) by @curious-rabbit in #1687

Update Swedish translation by @NickWick13 in #1688

Update Dutch translations by @RockyTDR in #1691

Update Language.de.xml by @Mr-Update in #1692

Update Polish translation by @Matthaiks in #1696

Update Norwegian Bokmål translation by @sandakersmann in #1697

Some minor fixes to Norwegian Bokmål translation by @sandakersmann in #1699

Update Language.zh-cn.xml by @nkh0472 in #1694

Linux: allow mounting NTFS volumes with ntfs3 by @mammothcoding in #1695

Update Language.nb.xml by @sandakersmann in #1701

Update Polish translation by @Matthaiks in #1702

New update to Language.nb.xml by @sandakersmann in #1703

Increment version to 1.26.28 in Language.nl.xml by @sandakersmann in #1705

Fix whitespace issues in translation files by @sandakersmann in #1707

Update Corsican translation on 2026-05 by @Patriccollu in #1708

Update Polish translation by @Matthaiks in #1709

New translations to Language.nb.xml by @sandakersmann in #1710

Update Russian translation for ntfs3 preference by @mammothcoding in #1704

Translate English entries to Chinese in XML by @nkh0472 in #1711

Update Norwegian Bokmål translation by @sandakersmann in #1712

Update Polish translation by @Matthaiks in #1713

Update Language.de.xml by @Mr-Update in #1715

Update Norwegian Bokmål translation by @sandakersmann in #1716

Update Language.nl.xml by @RockyTDR in #1718

Update Corsican translation on 2026-05 (2nd) by @Patriccollu in #1720

Fix Off-By-One Stack Buffer Overflows in XML Parser by @S4N-T0S in #1717

Update Norwegian Bokmål translation by @sandakersmann in #1722

Update Language.ro_1.26.28.xml by @TigerxWood in #1721

Update Polish translation by @Matthaiks in #1725

Update Norwegian Bokmål translation by @sandakersmann in #1724

Update Language.de.xml by @Mr-Update in #1727

Update Corsican translation on 2026-05 (3rd) by @Patriccollu in #1728

Update Language.nl.xml by @RockyTDR in #1730

Update Language.zh-cn.xml by @nkh0472 in #1732

New Contributors

@samhocevar made their first contribution in #1548

@helmutbuhler made their first contribution in #1568

@uni-kod made their first contribution in #1583

@Chuccle made their first contribution in #1590

@codytubbs made their first contribution in #1617

@babastienne made their first contribution in #1637

@amail80 made their first contribution in #1658

@Computeiful made their first contribution in #1672

@audriusbuika made their first contribution in #1671

@curious-rabbit made their first contribution in #1687

@mammothcoding made their first contribution in #1695

@S4N-T0S made their first contribution in #1717

Full Changelog: VeraCrypt_1.26.24...VeraCrypt_1.26.28_Beta3

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.20 and 1.26.24 (30 May 2025):

All OSes:

Fix Whirlpool implementation for big-endian platforms. (GH #1529)

Rename "Dismount All" to "Unmount All" in UI, with ALT+u as the new accelerator key (previously ALT+s).

Add contributed Chinese and Russian CHM documentation.

Update translations.

Windows:

Implement screen protection against screenshots and screen recording, enabled by default.

This feature can be disabled during installation or via Performance/Driver Configuration settings.

Add checkboxes in the MSI installer for controlling memory protection and screen protection features.

Introduce command-line options DISABLEMEMORYPROTECTION and DISABLESCREENPROTECTION for MSI installer configuration.

Both options accept values 0 (enabled) or 1 (disabled).

Example:

msiexec /i VeraCrypt_Setup_x64_1.26.24.msi DISABLESCREENPROTECTION=1 /qn REBOOT=ReallySuppress MSIRESTARTMANAGERCONTROL=Disable ACCEPTLICENSE=YES

Fix race conditions when multiple instances of veracrypt.exe are launched simultaneously.

Update bundled libzip to version 1.11.3.

Linux:

Add support for AppImage packaging and usage.

Fix absolute path usage for true command when checking sudo session status.

Fix failure to use Hungarian language translations.

Improve generic installer scripts. (GH #1514)

Add support for /run/media/veracrypt as default mount prefix when /media is not available. (GH #1524)

Remove pcsclite dependency from .deb/.rpm packages—now detected/loaded dynamically at runtime.

macOS:

Fix absolute path usage for true command when checking sudo session status.

Create symlink for VeraCrypt in /usr/local/bin to allow CLI usage.

Fix failure to use Hungarian language translations.

Merged Github Pull Requests

Update Language.de.xml by @bugtracker2019 in #1489

CI: Enable XML Validation Workflow by @Jertzukka in #1497

Fix SetupDLL and ExpandVolume Error by @Feryquence in #1495

Update Language.nl.xml by @RockyTDR in #1502

Linux/FreeBSD: Improvements on installation scripts by @Jertzukka in #1514

Refactor: Use symbolic constants for volume header magic numbers by @bernardladenthin in #1525

Add alignment constants for derived key and KEY_INFO buffers to ensure SIMD compatibility. by @bernardladenthin in #1526

User Guide with HTML by @fzxx in #1523

Update Tradition Chinese (Hong Kong) by @harryytm in #1486

Fix the whirlpool for big-endian platform by @pingwcy in #1529

Fix a mistake by @fzxx in #1530

modify unix default mounting point prefix (use /run/media/veracrypt t… by @stevenleeS0ht in #1524

Update Polish translation by @Matthaiks in #1533

Update Corsican translation on 2025-05 (1t4s) by @Patriccollu in #1535

typo Readme.txt by @zaphodapriest in #1538

Update Corsican translation on 2025-05 (2) by @Patriccollu in #1543

New Contributors

@bugtracker2019 made their first contribution in #1489

@Feryquence made their first contribution in #1495

@bernardladenthin made their first contribution in #1525

@pingwcy made their first contribution in #1529

@stevenleeS0ht made their first contribution in #1524

@zaphodapriest made their first contribution in #1538

Full Changelog: VeraCrypt_1.26.20...VeraCrypt_1.26.24

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.18 and 1.26.20 (3 February 2025)

All OSes:

• Implement SHA-256 acceleration on ARM64 platforms using CPU instructions.
• Update translations.
• Replace "Dismount" with "Unmount" across the UI and documentation to align with IT standards (GH #1478)

Windows:

• Fix regression in driver that always allowed defragmentation and caused other side effects.
• Revert to the previous method of gathering system entropy due to stability issues reported by users.

Linux:

• Fix a regression in Linux Mint affecting administrator password authentication. (GH #1473)

macOS:

• Fix regression that blocked dismounting of volumes. (GH #1467)
• Resolve a wxWidgets 3.2.6 assertion error related to the undefined switch use-dummy-sudo-password. (GH #1470)

Merged Github Pull Requests

• Update Language.pl.xml by @p0k33m0n in #1471
• Enable AESNI only on x86 by @Xeonacid in #1479
• refactor: use the term unmount instead of dismount by @tessus in #1478
• Update Chinese (Hong Kong) translation by @harryytm in #1408

New Contributors

• @p0k33m0n made their first contribution in #1471
• @Xeonacid made their first contribution in #1479
• @tessus made their first contribution in #1478

Full Changelog: VeraCrypt_1.26.18...VeraCrypt_1.26.20

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.15 and 1.26.18 (20 January 2025)

All OSes

Added support for SHA-256 x86 intrinsic to enhance the performance of PBKDF2-HMAC-SHA256.

Added support for AES hardware on ARM64 platforms (e.g. Windows ARM64, macOS on Apple Silicon Mx).

Updated translations

Windows

Dropped support for Windows 32-bit.

Set Windows 10 October 2018 Update (version 1809) as the minimum supported version.

Reduce driver deadlock occurences under low-memory scenarios caused by re-entrant IRP completions.

Fixed failed EFI detection on some PCs where the BootOrder variable is not defined (proposed by @kriegste, GH #360).

Fixed "Access Denied" error when updating VeraCrypt using EXE setup following a Windows upgrade.

Fixed various issues affecting the EFI system encryption configuration editor.

Fixed regression in Traveler Disk creation (GH #886)

Replaced the deprecated CryptGenRandom with BCryptGenRandom for generating secure random bytes.

Use modern API to gather system entropy for random generation instead of obsolete ones.

Update LZMA SDK to version 24.09

Update libzip to version 1.11.2

Linux

CVE-2024-54187: Added absolute paths when executing system binaries to prevent path hijacking (collaboration with SivertPL @__tfr)

CVE-2025-23021: Prevent mounting volumes on system directories and PATH (reported by SivertPL @__tfr)

Fixed an assertion issue with the wxWidgets library included in Ubuntu.

Improved directory-opening logic by prioritizing xdg-open and adding fallback mechanisms.

Ensure that volume exists before starting the mount operation.

Fix "Password too long" error message not expanded to include max length (GH #1456)

Simplify sudo session detection logic.

macOS

CVE-2024-54187: Added absolute paths when executing system binaries to prevent path hijacking (collaboration with SivertPL @__tfr)

CVE-2025-23021: Prevent mounting volumes on system directories and PATH (reported by SivertPL @__tfr)

Disabled screen capture by default. Added the --allow-screencapture CLI switch to enable it if needed.

Ensure that volume exists before starting the mount operation.

Implement sudo session detection logic

Contributors

Update Language.sv.xml by @NickWick13 in #1416

Add Option to Enable/Disable Screen Capture by @denizt in #1418

Update Language.ro.xml by @TigerxWood in #1434

Full Changelog: VeraCrypt_1.26.15...VeraCrypt_1.26.18

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.7 and 1.26.14 (25 August 2024)

All OSes

Update translations and documentation.

Implement language selection settings in non-Windows versions.

Make codebase compatible with wxWidgets 3.3 in non-Windows versions.

Implement detection of volumes affected by XTS master key vulnerability and warn user about it.

Update mount failure error messages to mention removal of TrueCrypt support and old algorithms.

Windows

Better fix for Secure Desktop issues under Windows 11 22H2.

IME is now disabled in Secure Desktop because it is known to cause issues.

VeraCrypt Expander: Fix expansion of volumes on disks with a sector size different from 512 (by skl0n6).

Fix writing wrong EFI System Encryption Advanced Options to registry.

Don't close Setup when exiting VeraCrypt process through system tray Exit menu.

Fix failure to format some disks (e.g., VHDX) caused by virtual partition offset not 4K aligned.

Fallback to absolute positioning when accessing disks if relative positioning fails.

Update zlib to version 1.3.1.

Linux

Focus PIM field when selected (GH #1239).

Fix generic installation script on Konsole in Wayland (GH #1244).

Added the ability to build using wolfCrypt as the cryptographic backend. Disabled by default. (Contributed by wolfSSL, GH PR #1227).

Allows GUI to launch in a Wayland-only environment (GH #1264).

CLI: Don't initially re-ask PIM if it was already specified (GH #1288).

CLI: Fix incorrect max hidden volume size for file containers (GH #1338).

Enhance ASLR security of generic installer binaries by adding linked flag for old GCC version (reported by @morton-f on Sourceforge).

macOS

Fix corrupted disk icon in main UI (GH #1218).

Fix near zero width PIM input box and simplify wxTextValidator logic (GH #1274).

Use correct Disk Utility location when "check filesystem" is ran (GH #1273).

Add support for FUSE-T as an alternative to MacFUSE (GH #1055).

FreeBSD

Fix privilege escalation prompts not showing up (GH #1349).

Support automatic detection and mounting of ext2/3/4, exFAT, NTFS filesystems (GH #1350).

Use correct Disk Utility location when "check filesystem" is ran (GH #1273).

New Contributors

@Mattoje made their first contribution in #1226

@udev2045 made their first contribution in #1230

@MayanTigger made their first contribution in #1241

@lealem47 made their first contribution in #1227

@kayazeren made their first contribution in #1254

@JonatanWick made their first contribution in #1270

@pji2918 made their first contribution in #1291

@RoboSchmied made their first contribution in #1324

@nerun made their first contribution in #1306

@Ozero4 made their first contribution in #1372

@SebastienGeeraert made their first contribution in #1373

@chatgptdev made their first contribution in #1386

@lollolong made their first contribution in #1389

Full Changelog: VeraCrypt_1.26.7...VeraCrypt_1.26.14

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.14 and 1.26.15 (2 September 2024)

Windows

Fix MSI install/uninstall issues:

• Fixed error 1603 returned by MSI silent install when REBOOT=ReallySuppress is specified and a reboot is required.
• Fixed missing documentation and language files from the MSI package.
• Fixed MSI not installing new documentation and language files when upgrading from an EXE-based installation.
• Fixed installation folder not being removed after MSI uninstall in some cases.
• Fix regression during UEFI system decryption that caused the bootloader to persist.

Full Changelog: VeraCrypt_1.26.14...VeraCrypt_1.26.15

Original source

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.25.9 and 1.26.7 (1 October 2023)

All OSes:

Security: Ensure that XTS primary key is different from the secondary key when creating volumes

Issue unlikely to happen thanks to random generator properties but this check must be added to prevent attacks

Reference: CCSS,NSA comment at page 3: https://csrc.nist.gov/csrc/media/Projects/crypto-publication-review-project/documents/initial-comments/sp800-38e-initial-public-comments-2021.pdf

Remove TrueCrypt Mode support. Version 1.25.9 can be used to mount or convert TrueCrypt volumes.

Complete removal of RIPEMD160 and GOST89 algorithms. Legacy volumes using any of them cannot be mounted by VeraCrypt anymore.

Add support for BLAKE2s as new PRF algorithm for both system encryption and standard volumes.

Introducing support for EMV banking smart cards as keyfiles for non-system volumes.

No need for a separate PKCS#11 module configuration.

Card PIN isn't required.

Generates secure keyfile content from unique, encoded data present on the banking card.

Supports all EMV standard-compliant banking cards.

Can be enabled in settings (go to Settings->Security Tokens).

Developed by a team of students from the Institut national des sciences appliquées de Rennes.

More details about the team and the project are available at https://projets-info.insa-rennes.fr/projets/2022/VeraCrypt/index_en.html.

When overwriting an existing file container during volume creation, add its current size to the available free space

Add Corsican language support. Update several translations.

Update documentation

Windows:

Officially, the minimum supported version is now Windows 10. VeraCrypt may still run on Windows 7 and Windows 8/8.1, but no active tests are done on these platforms.

EFI Bootloader:

Fix bug in PasswordTimeout value handling that caused it to be limited to 255 seconds.

Rescue Disk: enhance "Boot Original Windows Loader" by using embedded backup of original Windows loader if it is missing from disk

Addition of Blake2s and removal of RIPEMD160 & GOST89

Enable memory protection by default. Add option under Performance/Driver Configuration to disable it if needed.

Memory protection blocks non-admin processes from reading VeraCrypt memory

It may block Screen Readers (Accessibility support) from reading VeraCrypt UI, in which case it can be disabled

It can be disabled by setting registry value "VeraCryptEnableMemoryProtection" to 0 under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veracrypt

Add process mitigation policy to prevent VeraCrypt from being injected by other processes

Minor enhancements to RAM Encryption implementation

Fix Secure Desktop issues under Windows 11 22H2

Implement support for mounting partially encrypted system partitions.

Fix false positive detection of new device insertion when Clear Encryption Keys option is enable (System Encryption case only)

Better implementation of Fast Create when creating file containers that uses UAC to request required privilege if not already held

Allow choosing Fast Create in Format Wizard UI when creating file containers

Fix formatting issues during volume creation on some machines.

Fix stall issue caused by Quick Format of large file containers

Add dropdown menu to Mount button to allow mounting without using the cache.

Possible workaround for logarithmic slowdown for Encrypt-In-Place on large volumes.

Make Expander first check file existence before proceeding further

Allow selecting size unit (KB/MB/GB) for generated keyfiles

Display full list of supported cluster sizes for NTFS, ReFS and exFAT filesystems when creating volumes

Support drag-n-drop of files and keyfiles in Expander.

Implement translation of Expander UI

Replace legacy file/dir selection APIs with modern IFileDialog interface for better Windows 11 compatibility

Enhancements to dependency dlls safe loading, including delay loading.

Remove recommendation of keyfiles files extensions and update documentation to mention risks of third-party file extensions.

Add support for more language in the setup installer

Update LZMA library to version 23.01

Update libzip to version 1.10.1 and zlib to version 1.3.

Linux:

Fix bug in Random generator on Linux when used with Blake2s that was triggering a self test failure.

Modify Random Generator on Linux to exactly match official documentation and the Windows implementation.

Fix compatibility issues with Ubuntu 23.04.

Fix assert messages displayed when using wxWidgets 3.1.6 and newer.

Fix issues launching fsck on Linux.

Fix privilege escalation prompts being ignored.

Fix wrong size for hidden volume when selecting the option to use all free space.

Fix failure to create hidden volume on a disk using CLI caused by wrong maximum size detection.

Fix various issues when running in Text mode:

• Don't allow selecting exFAT/BTRFS filesytem if they are not present or not compatible with the created volume.

Fix wrong dismount message displayed when mounting a volume.

Hide PIM during entry and re-ask PIM when user entered a wrong value.

Fix printing error when checking free space during volume creation in path doesn't exist.

Use wxWidgets 3.2.2.1 for static builds (e.g. console only version)

Fix compatibility of generic installers with old Linux distros

Update help message to indicate that when cascading algorithms they must be separated by dash

Better compatibility with building under Alpine Linux and musl libc

macOS:

Fix issue of VeraCrypt window becoming unusable in use cases involving multiple monitors and change in resolution.

Original source

Binaries for FreeBSD, Linux, macOS and Windows are available at Launchpad and Sourceforge.

Changes between 1.25.7 and 1.25.9 (19 February 2022)

All OSes:

• Update translations (Chinese, Dutch, French, German, Turkish).

Windows:

• Make MSI installer compatible with system encryption (Issue #869).
• Set minimum support for MSI installation to Windows 7.
• Fix failure to create Traveler Disk when VeraCrypt is installed using MSI (Issue #886).
• Don't cache the outer volume password when mounting with hidden volume protection if wrong hidden volume password was specified.
• Reduce the size of EXE installers by almost 50% by using LZMA compression instead of DEFLATE.
• Fix double-clicking mounted drive in VeraCrypt UI not working in some special Windows configurations (Issue #873).
• Add registry key to fix BSOD during shutdown/reboot on some machines when using system encryption (Issue #871).
• Under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veracrypt", create a REG_DWORD value named "VeraCryptEraseKeysShutdown".
• Setting this registry value to 0 disables erasing system encryption keys which is the cause of BSOD during shutdown on some machines.

Linux:

• Fix hidden volume settings not correctly displayed when enabling hidden volume protection in mount options window.
• Fix generic Linux installer overwriting /usr/sbin if it is a symlink (Issue #888).
• Fix crash when building with _GLIBCXX_ASSERTIONS defined (Issue #896).
• Enable building from source without AES-NI support (Issue #892).

MacOSX:

• Fix hidden volume settings not correctly displayed when enabling hidden volume protection in mount options window.

Original source