Skip to content

Releases: veracrypt/VeraCrypt

Release list

VeraCrypt 1.26.29

VeraCrypt 1.26.29 Latest
Latest

Choose a tag to compare

View all tags
@idrassi idrassi released this 12 Jun 00:21
VeraCrypt_1.26.29
This tag was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: D6AC14B0469F1B57
Verified
Learn about vigilant mode.
d26216c
This commit was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: D6AC14B0469F1B57
Verified
Learn about vigilant mode.

Downloads: Jump directly to installers, packages, source archives, checksums and signatures

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.24 and 1.26.29 (9 June 2026):

  • All OSes:

    • Add Argon2id as an alternative memory-hard KDF for non-system volumes.
    • Use "KDF" terminology in the user interface and documentation instead of "PKCS-5 PRF".
    • Update logo icons with simplified icons without extra label text.
    • Harden XML and TLV parsers against malformed input.
    • Security: Fix GHSA-94c6-mgmv-mqc5: non-default WOLFCRYPT=1 builds now use wolfCrypt PBKDF2 instead of HKDF and honor VeraCrypt's PBKDF2 iteration count.
    • Fix CPU feature detection and crypto implementation edge cases, including AVX2/leaf 7 detection, BLAKE2s/Argon2 no-SSE2 x86 fallback paths, Camellia SSSE3 dispatch, Twofish x64 multiblock tail handling, and Whirlpool alignment.
    • Update documentation, including Argon2id/KDF information and split Windows/Unix command line usage pages.
    • Update translations.

  • Windows:

    • Fix rare BSOD issue affecting the VeraCrypt driver.
    • Fix hibernation crash on fresh Windows 11 25H2 installations.
    • Security: Fix GHSA-jjcr-75w7-58jp: hidden volume quick format no longer uses the file-container allocation shortcut that wrote plaintext zero sectors at 128 MiB intervals, preserving plausible deniability.
      • Reported by vastblast.
      • Regression introduced in 1.26.6.
      • CVE-2026-54073
    • Harden Windows driver input validation and crash dump filter handling. (GH PR #1590)
    • Improve driver I/O handling, including safer request completion, ordered volume flush barriers, and better VERIFY/TRIM validation.
    • Fix PBKDF XSTATE cleanup and add Win64 unwind metadata for AES assembly.
    • Speed up mounting when KDF autodetection is selected.
    • Allow selecting which KDF algorithms are included in the benchmark dialog.
    • Allow canceling long mount operations from the wait dialog and with the new /cancelmount CLI switch, including auto-mount scans.
    • Add support for new Microsoft UEFI CA 2023 signed EFI bootloaders while preserving Microsoft UEFI CA 2011 support.
    • Improve EFI system encryption repair and upgrade handling, including stuck decryption finalization, Post-OOBE repair, loader restoration verification, and clearer missing-loader reporting.
    • Fix EFI DcsProp rewrite handling.
    • Fix ghost drive letter after command line unmount. (GH #337, GH #1426)
    • Fix favorite volume mount race.
    • Validate PIM when changing only the KDF.
    • Fix elevated COM format drive validation and device path normalization. (GH #1670)
    • Fix ReFS formatting during volume creation.
    • Fix MSI traveler disk creation with WHQL-signed drivers, ARM64 MSI build, Start Menu folder upgrades, and discovery of newer SDK MSI tools.
    • Add CLI switch /protectScreen to allow disabling screen protection in portable mode.
    • Add argument to CLI switch /protectMemory to allow disabling memory protection in portable mode.
    • Add setting and CLI switch /enableIME to allow enabling Input Method Editor (IME) in Secure Desktop.
    • Use tab control for VeraCrypt preferences to reduce clutter and size of the dialog.
    • Provide VeraCrypt C/C++ SDK for creating volumes.
    • Update LZMA SDK to version 26.01.

  • Linux:

    • Update Ubuntu 25.04 dependency to require libwxgtk3.2-1t64.
    • Add support for building against FUSE3.
    • Add in-kernel NTFS driver selection for NTFS mounts, including --filesystem=kernel-ntfs and -m kernelntfs.
      • --filesystem=ntfs3 now pins the kernel ntfs3 driver and bypasses mount helpers such as mount.ntfs3.
    • Fix AppImage portability and language loading, bundle a matching FUSE library, and allow AppImage file name to start with "veracrypt" in any case.
    • Suppress redundant "already running" dialog and store the GUI instance lock under XDG paths.
    • Add emergency cleanup for stale unmounts.
    • Parallelize header KDF autodetection.
    • Honor nokernelcrypto during external formatting.
    • On WSL, open mounted volumes using Windows Explorer.
    • Add support for reproducible Linux builds, including SOURCE_DATE_EPOCH handling, DEB/RPM packages, and Arch package builds.
    • Add OpenWrt package build and QEMU test scripts.
    • Fix CMake 4 compatibility, CentOS 6 GCC 4.4 builds, and wxWidgets-related build issues.

  • Linux and macOS:

    • Fix initial width of columns in main UI.
    • Enable Quick Format for normal file containers. The container is sized with ftruncate(), so the host filesystem may keep regions unwritten or sparse until data is written to them.
    • Fix hidden volume size estimation for exFAT outer volumes.
    • Fix hidden volume FAT size limit handling.
    • Fix erroneous 2 TiB limit for hidden file containers in GUI wizard.
    • Show volume creation finalization stages.
    • Collect mouse entropy from nested controls in the volume creation wizard.
    • Fix remaining wxWidgets sizer flags.

  • macOS:

    • Use SMB backend for FUSE-T auxiliary mounts and improve FUSE-T SMB metadata handling and mount stability.
    • Recover mounted volume mount points.
    • Validate format wizard device targets and block partitioned whole-disk alias bypasses.
    • Run APFS formatter elevated when needed and prepare APFS formatter device aliases.
    • Force fresh exFAT layout when formatting volumes.
    • Fix Command-A in password fields.
    • Link against wxWidgets 3.2.10 and allow overriding the deployment target.

  • BSD:

    • FreeBSD: link static wxWidgets builds with iconv.
    • OpenBSD: fix device-hosted volume sizing, honor doas user for mount ownership and FUSE access, and fix CLI build and PCSC exit handling.

Merged Pull Requests

Read more

Contributors

samhocevar, Matthaiks, and 22 other contributors
Assets 130

VeraCrypt 1.26.28 Beta4

VeraCrypt 1.26.28 Beta4 Pre-release
Pre-release

Choose a tag to compare

View all tags
@idrassi idrassi released this 27 May 06:30
VeraCrypt_1.26.28_Beta4
This tag was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: D6AC14B0469F1B57
Verified
Learn about vigilant mode.
f9089b0
This commit was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: D6AC14B0469F1B57
Verified
Learn about vigilant mode.

What's Changed

New Contributors

Full Changelog: VeraCrypt_1.26.24...VeraCrypt_1.26.28_Beta4

Contributors

samhocevar, Matthaiks, and 21 other contributors
Loading

VeraCrypt 1.26.28 Beta3

VeraCrypt 1.26.28 Beta3 Pre-release
Pre-release

Choose a tag to compare

View all tags
@idrassi idrassi released this 15 May 14:01
VeraCrypt_1.26.28_Beta3
This tag was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: D6AC14B0469F1B57
Verified
Learn about vigilant mode.
cd10143
This commit was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: C2FF2438CD26E3B7
Verified
Learn about vigilant mode.

What's Changed

New Contributors

Full Changelog: VeraCrypt_1.26.24...VeraCrypt_1.26.28_Beta3

Contributors

samhocevar, Matthaiks, and 19 other contributors
Loading

VeraCrypt 1.26.28 Beta2

VeraCrypt 1.26.28 Beta2 Pre-release
Pre-release

Choose a tag to compare

View all tags
@idrassi idrassi released this 13 May 06:41
VeraCrypt_1.26.28_Beta2
This tag was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: D6AC14B0469F1B57
Verified
Learn about vigilant mode.
960f599
This commit was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: D6AC14B0469F1B57
Verified
Learn about vigilant mode.

What's Changed

New Contributors

Full Changelog: VeraCrypt_1.26.24...VeraCrypt_1.26.28_Beta2

Contributors

samhocevar, Matthaiks, and 19 other contributors
Loading

VeraCrypt 1.26.28 Beta

VeraCrypt 1.26.28 Beta Pre-release
Pre-release

Choose a tag to compare

View all tags
@idrassi idrassi released this 12 May 14:32
VeraCrypt_1.26.28_Beta
This tag was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: D6AC14B0469F1B57
Verified
Learn about vigilant mode.
46744db
This commit was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: C2FF2438CD26E3B7
Verified
Learn about vigilant mode.

What's Changed

New Contributors

Full Changelog: VeraCrypt_1.26.24...VeraCrypt_1.26.28_Beta

Contributors

samhocevar, Matthaiks, and 19 other contributors
Loading

VeraCrypt version 1.26.24

VeraCrypt version 1.26.24

Choose a tag to compare

View all tags
@idrassi idrassi released this 31 May 14:03
VeraCrypt_1.26.24
This tag was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: D6AC14B0469F1B57
Verified
Learn about vigilant mode.
0f509db
This commit was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: D6AC14B0469F1B57
Verified
Learn about vigilant mode.

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.20 and 1.26.24 (30 May 2025):

  • All OSes:

    • Fix Whirlpool implementation for big-endian platforms. (GH #1529)
    • Rename "Dismount All" to "Unmount All" in UI, with ALT+u as the new accelerator key (previously ALT+s).
    • Add contributed Chinese and Russian CHM documentation.
    • Update translations.

  • Windows:

    • Implement screen protection against screenshots and screen recording, enabled by default.
      • This feature can be disabled during installation or via Performance/Driver Configuration settings.
    • Add checkboxes in the MSI installer for controlling memory protection and screen protection features.
      • Introduce command-line options DISABLEMEMORYPROTECTION and DISABLESCREENPROTECTION for MSI installer configuration.
      • Both options accept values 0 (enabled) or 1 (disabled).
      • Example: 
        msiexec /i VeraCrypt_Setup_x64_1.26.24.msi DISABLESCREENPROTECTION=1 /qn REBOOT=ReallySuppress MSIRESTARTMANAGERCONTROL=Disable ACCEPTLICENSE=YES
    • Fix race conditions when multiple instances of veracrypt.exe are launched simultaneously.
    • Update bundled libzip to version 1.11.3.

  • Linux:

    • Add support for AppImage packaging and usage.
    • Fix absolute path usage for true command when checking sudo session status.
    • Fix failure to use Hungarian language translations.
    • Improve generic installer scripts. (GH #1514)
    • Add support for /run/media/veracrypt as default mount prefix when /media is not available. (GH #1524)
    • Remove pcsclite dependency from .deb/.rpm packages—now detected/loaded dynamically at runtime.

  • macOS:

    • Fix absolute path usage for true command when checking sudo session status.
    • Create symlink for VeraCrypt in /usr/local/bin to allow CLI usage.
    • Fix failure to use Hungarian language translations.

Merged Github Pull Requests

New Contributors

Full Changelog: VeraCrypt_1.26.20...VeraCrypt_1.26.24

Contributors

bernardladenthin, Matthaiks, and 10 other contributors
Loading

VeraCrypt version 1.26.20

VeraCrypt version 1.26.20

Choose a tag to compare

View all tags
@idrassi idrassi released this 05 Feb 12:36
VeraCrypt_1.26.20
This tag was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: FC1B00364B3FE937
Verified
Learn about vigilant mode.
c3d7c9e
This commit was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: FC1B00364B3FE937
Verified
Learn about vigilant mode.

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.18 and 1.26.20 (3 February 2025):

  • All OSes:
    • Implement SHA-256 acceleration on ARM64 platforms using CPU instructions.
    • Update translations.
    • Replace "Dismount" with "Unmount" across the UI and documentation to align with IT standards (GH #1478)
  • Windows:
    • Fix regression in driver that always allowed defragmentation and caused other side effects.
    • Revert to the previous method of gathering system entropy due to stability issues reported by users.
  • Linux:
    • Fix a regression in Linux Mint affecting administrator password authentication. (GH #1473)
  • macOS:
    • Fix regression that blocked dismounting of volumes. (GH #1467)
    • Resolve a wxWidgets 3.2.6 assertion error related to the undefined switch use-dummy-sudo-password. (GH #1470)

Merged Github Pull Requests

New Contributors

Full Changelog: VeraCrypt_1.26.18...VeraCrypt_1.26.20

Contributors

tessus, harryytm, and 2 other contributors
Loading

VeraCrypt version 1.26.19

VeraCrypt version 1.26.19

Choose a tag to compare

View all tags
@idrassi idrassi released this 23 Jan 00:23
VeraCrypt_1.26.19
This tag was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: FC1B00364B3FE937
Verified
Learn about vigilant mode.
16aa1a7
This commit was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: FC1B00364B3FE937
Verified
Learn about vigilant mode.

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.18 and 1.26.19 (22 January 2025):

  • macOS:
    • Fix regression that blocked dismounting of volumes. (GH #1467, GH #1469)

Full Changelog: VeraCrypt_1.26.18...VeraCrypt_1.26.19

Loading

VeraCrypt version 1.26.18

VeraCrypt version 1.26.18

Choose a tag to compare

View all tags
@idrassi idrassi released this 22 Jan 18:19
VeraCrypt_1.26.18
This tag was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: FC1B00364B3FE937
Verified
Learn about vigilant mode.
05ea7c1
This commit was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: FC1B00364B3FE937
Verified
Learn about vigilant mode.

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.15 and 1.26.18 (20 January 2025):
  • All OSes:
    • Added support for SHA-256 x86 intrinsic to enhance the performance of PBKDF2-HMAC-SHA256.
    • Added support for AES hardware on ARM64 platforms (e.g. Windows ARM64, macOS on Apple Silicon Mx).
    • Updated translations
  • Windows:
    • Dropped support for Windows 32-bit.
    • Set Windows 10 October 2018 Update (version 1809) as the minimum supported version.
    • Reduce driver deadlock occurences under low-memory scenarios caused by re-entrant IRP completions.
    • Fixed failed EFI detection on some PCs where the BootOrder variable is not defined (proposed by @kriegste, GH #360).
    • Fixed "Access Denied" error when updating VeraCrypt using EXE setup following a Windows upgrade.
    • Fixed various issues affecting the EFI system encryption configuration editor.
    • Fixed regression in Traveler Disk creation (GH #886)
    • Replaced the deprecated CryptGenRandom with BCryptGenRandom for generating secure random bytes.
    • Use modern API to gather system entropy for random generation instead of obsolete ones.
    • Update LZMA SDK to version 24.09
    • Update libzip to version 1.11.2
  • Linux:
    • CVE-2024-54187: Added absolute paths when executing system binaries to prevent path hijacking (collaboration with SivertPL @__tfr)
    • CVE-2025-23021: Prevent mounting volumes on system directories and PATH (reported by SivertPL @__tfr)
    • Fixed an assertion issue with the wxWidgets library included in Ubuntu.
    • Improved directory-opening logic by prioritizing xdg-open and adding fallback mechanisms.
    • Ensure that volume exists before starting the mount operation.
    • Fix "Password too long" error message not expanded to include max length (GH #1456)
    • Simplify sudo session detection logic.
  • macOS:
    • CVE-2024-54187: Added absolute paths when executing system binaries to prevent path hijacking (collaboration with SivertPL @__tfr)
    • CVE-2025-23021: Prevent mounting volumes on system directories and PATH (reported by SivertPL @__tfr)
    • Disabled screen capture by default. Added the --allow-screencapture CLI switch to enable it if needed.
    • Ensure that volume exists before starting the mount operation.
    • Implement sudo session detection logic

Contributors

Full Changelog: VeraCrypt_1.26.15...VeraCrypt_1.26.18

Contributors

denizt, TigerxWood, and 2 other contributors
Loading

VeraCrypt version 1.26.15 (Windows Hotfix)

VeraCrypt version 1.26.15 (Windows Hotfix)

Choose a tag to compare

View all tags
@idrassi idrassi released this 03 Sep 19:07
VeraCrypt_1.26.15
This tag was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: FC1B00364B3FE937
Verified
Learn about vigilant mode.
b2e55df
This commit was signed with the committer’s verified signature.
idrassi Mounir IDRASSI
GPG key ID: FC1B00364B3FE937
Verified
Learn about vigilant mode.

Binaries for supported operating systems are also available at Sourceforge.

Changes between 1.26.14 and 1.26.15 (2 September 2024):
  • Windows:
    • Fix MSI install/uninstall issues:
      • Fixed error 1603 returned by MSI silent install when REBOOT=ReallySuppress is specified and a reboot is required.
      • Fixed missing documentation and language files from the MSI package.
      • Fixed MSI not installing new documentation and language files when upgrading from an EXE-based installation.
      • Fixed installation folder not being removed after MSI uninstall in some cases.
    • Fix regression during UEFI system decryption that caused the bootloader to persist.

Full Changelog: VeraCrypt_1.26.14...VeraCrypt_1.26.15

Loading