VeraCrypt 1.23

[harlan4096]

VeraCrypt 1.25.9:

1.25.9 (February 19[sup]th[/sup], 2022):

• All OSes:
  • Update translations (Chinese, Dutch, French, German, Turkish).
    
• Windows:
  • Make MSI installer compatible with system encryption.
    
  • Set minimum support for MSI installation to Windows 7.
    
  • Fix failure to create Traveler Disk when VeraCrypt is installed using MSI.
    
  • Don't cache the outer volume password when mounting with hidden volume protection if wrong hidden volume password was specified.
    
  • Reduce the size of EXE installers by almost 50% by using LZMA compression instead of DEFLATE.
    
  • Fix double-clicking mounted drive in VeraCrypt UI not working in some special Windows configurations.
    
  • Add registry key to fix BSOD during shutdown/reboot on some machines when using system encryption.
    • Under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veracrypt", create a REG_DWORD value named "VeraCryptEraseKeysShutdown".
      
    • Setting this registry value to 0 disables erasing system encryption keys which is the cause of BSOD during shutdown on some machines.
      
• Linux:
  • Fix hidden volume settings not correctly displayed when enabling hidden volume protection in mount options window.
    
  • Fix generic Linux installer overwriting /usr/sbin if it is a symlink.
    
  • Fix crash when building with _GLIBCXX_ASSERTIONS defined.
    
  • Enable building from source without AES-NI support.
    
• MacOSX:
  • Fix hidden volume settings not correctly displayed when enabling hidden volume protection in mount options window.
    

Homepage
Changelog
Download | Windows Installer
Download | Windows Portable 
Download | Others 

[harlan4096]

VeraCrypt 1.26.7:

Homepage
Changelog
Download | Windows Installer
Download | Windows Portable
Download | Others

[harlan4096]

VeraCrypt 1.26.15

1.26.15 (September 2nd, 2024):

• Windows:
  • Fix MSI install/uninstall issues:
    • Fixed error 1603 returned by MSI silent install when REBOOT=ReallySuppress is specified and a reboot is required.
      
    • Fixed missing documentation and language files from the MSI package.
      
    • Fixed MSI not installing new documentation and language files when upgrading from an EXE-based installation.
      
    • Fixed installation folder not being removed after MSI uninstall in some cases.
      
  • Fix regression during UEFI system decryption that caused the bootloader to persist.
    

Source: VeraCrypt - Release Notes

VeraCrypt - Free Open source disk encryption with strong security for the Paranoid  

[harlan4096]

VeraCrypt 1.26.18

1.26.18 (January 20th, 2025):

• All OSes:
  • Added support for SHA-256 x86 intrinsic to enhance the performance of PBKDF2-HMAC-SHA256.
    
  • Added support for AES hardware on ARM64 platforms (e.g. Windows ARM64, macOS on Apple Silicon Mx).
    
  • Updated translations
    
• Windows:
  • Dropped support for Windows 32-bit.
    
  • Set Windows 10 October 2018 Update (version 1809) as the minimum supported version.
    
  • Reduce driver deadlock occurences under low-memory scenarios caused by re-entrant IRP completions.
    
  • Fixed failed EFI detection on some PCs where the BootOrder variable is not defined (proposed by @kriegste, GH #360).
    
  • Fixed "Access Denied" error when updating VeraCrypt using EXE setup following a Windows upgrade.
    
  • Fixed various issues affecting the EFI system encryption configuration editor.
    
  • Fixed regression in Traveler Disk creation (GH #886)
    
  • Replaced the deprecated CryptGenRandom with BCryptGenRandom for generating secure random bytes.
    
  • Use modern API to gather system entropy for random generation instead of obsolete ones.
    
  • Update LZMA SDK to version 24.09
    
  • Update libzip to version 1.11.2
    
• Linux:
  • CVE-2024-54187: Added absolute paths when executing system binaries to prevent path hijacking (collaboration with SivertPL @__tfr)
    
  • CVE-2025-23021: Prevent mounting volumes on system directories and PATH (reported by SivertPL @__tfr)
    
  • Fixed an assertion issue with the wxWidgets library included in Ubuntu.
    
  • Improved directory-opening logic by prioritizing xdg-open and adding fallback mechanisms.
    
  • Ensure that volume exists before starting the mount operation.
    
  • Fix "Password too long" error message not expanded to include max length (GH #1456)
    
  • Simplify sudo session detection logic.
    
• macOS:
  • CVE-2024-54187: Added absolute paths when executing system binaries to prevent path hijacking (collaboration with SivertPL @__tfr)
    
  • CVE-2025-23021: Prevent mounting volumes on system directories and PATH (reported by SivertPL @__tfr)
    
  • Disabled screen capture by default. Added the --allow-screencapture CLI switch to enable it if needed.
    
  • Ensure that volume exists before starting the mount operation.
    
  • Implement sudo session detection logic
    

VeraCrypt - Free Open source disk encryption with strong security for the Paranoid

[harlan4096]

VeraCrypt 1.26.20:
 
Homepage
Changelog
Download | Windows Installer
Download | Windows Portable
Download | Others

[harlan4096]

VeraCrypt 1.26.24

Changes between 1.26.20 and 1.26.24 (30 May 2025):

• All OSes:
  • Fix Whirlpool implementation for big-endian platforms. (GH #1529)
    
  • Rename "Dismount All" to "Unmount All" in UI. Use ALT+u as new accelerator key instead of ALT+s.
    
  • Add contributed Chinese and Russian CHM documentation.
    
  • Update translations.
    
• Windows:
  • Implemented screen protection against screenshots and screen recording, enabled by default.
    • This feature can be disabled during installation or via the Performance/Driver Configuration settings.
      
  • Added checkboxes to the MSI installer to control memory protection and screen protection features.
    • Introduced command-line options DISABLEMEMORYPROTECTION and DISABLESCREENPROTECTION for the MSI installer to manage these features.
      • Both options accept values 0 (enabled) or 1 (disabled).
        
      • Example usage: msiexec /i VeraCrypt_Setup_x64_1.26.22.msi DISABLESCREENPROTECTION=1 /qn REBOOT=ReallySuppress MSIRESTARTMANAGERCONTROL=Disable ACCEPTLICENSE=YES
        
  • Fix race conditions when multiple instances of veracrypt.exe are started simultaneously.
    
  • Update libzip to version 1.11.3.
    
• Linux:
  • Add support for AppImage packaging and usage.
    
  • Fix absolute path of true command not being used when checking if sudo session is active.
    
  • Fix failure to use Hungarian language translations.
    
  • Improve generic installer scripts. (GH #1514)
    
  • Add support for /run/media/veracrypt as default mount prefix when /media is not available. (GH #1524)
    
  • Remove pcsclite dependency from .deb/.rpm packages since it is detected/loaded dynamically at runtime.
    
• macOS:
  • Fix absolute path of true command not being used when checking if sudo session is active.
    
  • Create simlink of VeraCrypt in /usr/local/bin to allow using it from command line.
    
  • Fix failure to use Hungarian language translations.
    

VeraCrypt / Forums / General Discussion: 1.26.24 Released 2025/5/30   

VeraCrypt - Free Open source disk encryption with strong security for the Paranoid

   
    
    

[/quote]

[harlan4096]

VeraCrypt 1.26.29

Changes between 1.26.24 and 1.26.29 (9 June 2026):

* All OSes:

* Add Argon2id as an alternative memory-hard KDF for non-system volumes.
* Use "KDF" terminology in the user interface and documentation instead of "PKCS-5 PRF".
* Update logo icons with simplified icons without extra label text.
* Harden XML and TLV parsers against malformed input.
* Security: Fix GHSA-94c6-mgmv-mqc5: non-default WOLFCRYPT=1 builds now use wolfCrypt PBKDF2 instead of HKDF and honor VeraCrypt's PBKDF2 iteration count.
- Reported by VastBlast - Overview
* Fix CPU feature detection and crypto implementation edge cases, including AVX2/leaf 7 detection, BLAKE2s/Argon2 no-SSE2 x86 fallback paths, Camellia SSSE3 dispatch, Twofish x64 multiblock tail handling and Whirlpool alignment.
* Update documentation, including Argon2id/KDF information and split Windows/Unix command line usage pages.
* Update translations.

* Windows:

* Fix rare BSOD (Blue Screen of Death) issue affecting the VeraCrypt driver.
* Fix hibernation crash on fresh Windows 11 25H2 installations.
* Security: Fix GHSA-jjcr-75w7-58jp: hidden volume quick format no longer uses the file-container allocation shortcut that wrote plaintext zero sectors at 128 MiB intervals, preserving plausible deniability.
- Reported by VastBlast - Overview
- Regression introduced in 1.26.6
* Harden Windows driver input validation and crash dump filter handling (GH PR #1590).
* Improve driver I/O handling, including safer request completion, ordered volume flush barriers, and better VERIFY/TRIM validation.
* Fix PBKDF XSTATE cleanup and add Win64 unwind metadata for AES assembly.
* Speed up mounting when KDF autodetection is selected.
* Allow selecting which KDF algorithms are included in the benchmark dialog.
* Allow canceling long mount operations from the wait dialog and with the new /cancelmount CLI switch, including auto-mount scans.
* Add support for new Microsoft UEFI CA 2023 signed EFI bootloaders while preserving Microsoft UEFI CA 2011 support.
* Improve EFI system encryption repair and upgrade handling, including stuck decryption finalization, Post-OOBE repair, loader restoration verification, and clearer missing-loader reporting.
* Fix EFI DcsProp rewrite handling.
* Fix ghost drive letter after command line unmount (GH #337, GH #1426).
* Fix favorite volume mount race.
* Validate PIM when changing only the KDF.
* Fix elevated COM format drive validation and device path normalization (GH #1670).
* Fix ReFS formatting during volume creation.
* Fix MSI traveler disk creation with WHQL-signed drivers, ARM64 MSI build, Start Menu folder upgrades, and discovery of newer SDK MSI tools.
* Add CLI switch /protectScreen to allow disabling screen protection in portable mode (cf documentation).
* Add argument to CLI switch /protectMemory to allow disabling memory protection in portable mode (cf documentation).
* Add setting and CLI switch /enableIME to allow enabling Input Method Editor (IME) in Secure Desktop.
* Use tab control for VeraCrypt preferences to reduce clutter and size of the dialog.
* Provide VeraCrypt C/C++ SDK for creating volumes (GitHub - veracrypt/VeraCrypt-SDK: C/C++ SDK for programmatically creating VeraCrypt encrypted file containers and formatting partitions with thread-safe DLL interface).
* Update LZMA SDK to version 26.01.

* Linux:

* Update Ubuntu 25.04 dependency to require libwxgtk3.2-1t64 package.
* Add support for building against FUSE3.
* Add in-kernel NTFS driver selection for NTFS mounts, including --filesystem=kernel-ntfs and -m kernelntfs.
- --filesystem=ntfs3 now pins the kernel ntfs3 driver and bypasses mount helpers such as mount.ntfs3.
* Fix AppImage portability and language loading, bundle a matching FUSE library, and allow AppImage file name to start with "veracrypt" in any case.
* Suppress redundant "already running" dialog and store the GUI instance lock under XDG paths.
* Add emergency cleanup for stale unmounts.
* Parallelize header KDF autodetection.
* Honor nokernelcrypto during external formatting.
* On WSL, open mounted volumes using Windows Explorer.
* Add support for reproducible Linux builds, including SOURCE_DATE_EPOCH handling, DEB/RPM packages, and Arch package builds.
* Add OpenWrt package build and QEMU test scripts.
* Fix CMake 4 compatibility, CentOS 6 GCC 4.4 builds, and wxWidgets-related build issues.

* Linux and macOS:

* Fix initial width of columns in main UI.
* Enable Quick Format for normal file containers. The container is sized with ftruncate(), so the host filesystem may keep regions unwritten or sparse until data is written to them.
* Fix hidden volume size estimation for exFAT outer volumes.
* Fix hidden volume FAT size limit handling.
* Fix erroneous 2 TiB limit for hidden file containers in GUI wizard.
* Show volume creation finalization stages.
* Collect mouse entropy from nested controls in the volume creation wizard.
* Fix remaining wxWidgets sizer flags.

* macOS:

* Use SMB backend for FUSE-T auxiliary mounts and improve FUSE-T SMB metadata handling and mount stability.
* Recover mounted volume mount points.
* Validate format wizard device targets and block partitioned whole-disk alias bypasses.
* Run APFS formatter elevated when needed and prepare APFS formatter device aliases.
* Force fresh exFAT layout when formatting volumes.
* Fix Command-A in password fields.
* Link against wxWidgets 3.2.10 and allow overriding the deployment target.

* BSD:

* FreeBSD: link static wxWidgets builds with iconv.
* OpenBSD: fix device-hosted volume sizing, honor doas user for mount ownership and FUSE access, and fix CLI build and PCSC exit handling.

VeraCrypt - Browse /VeraCrypt 1.26.29/Windows at SourceForge.net