# VeraCrypt changelog
> On-the-fly disk encryption, the successor to TrueCrypt.
- Vendor: IDRIX
- Category: Productivity
- Platforms: Desktop
- Official site: https://www.veracrypt.fr
- Tracked by: What's New (https://whatsnew.fyi/product/veracrypt)
- Harvested from: GitHub (veracrypt/VeraCrypt)
- Entries below: 25 (newest first)
What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.
## Releases
### 1.26.29 — VeraCrypt 1.26.29
- Date: 2026-06-12
- Version: 1.26.29
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.29
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.29
- Labels: Platforms: Desktop
- **added** — Add Argon2id as an alternative memory-hard KDF for non-system volumes
- **changed** — Use KDF terminology in the user interface and documentation instead of PKCS-5 PRF
- **changed** — Update logo icons with simplified icons without extra label text
- **fixed** — Harden XML and TLV parsers against malformed input
- **security** — Fix non-default WOLFCRYPT=1 builds to use wolfCrypt PBKDF2 instead of HKDF and honor VeraCrypt's PBKDF2 iteration count (CVE-2026-53762)
- **fixed** — Fix CPU feature detection and crypto implementation edge cases including AVX2/leaf 7 detection, BLAKE2s/Argon2 no-SSE2 x86 fallback paths, Camellia SSSE3 dispatch, Twofish x64 multiblock tail handling, and Whirlpool alignment
- **fixed** — Fix rare BSOD issue affecting the VeraCrypt driver
- **fixed** — Fix hibernation crash on fresh Windows 11 25H2 installations
- **security** — Fix hidden volume quick format to no longer use file-container allocation shortcut that wrote plaintext zero sectors at 128 MiB intervals, preserving plausible deniability (CVE-2026-54073)
- **fixed** — Harden Windows driver input validation and crash dump filter handling
- **changed** — Improve driver I/O handling including safer request completion, ordered volume flush barriers, and better VERIFY/TRIM validation
- **fixed** — Fix PBKDF XSTATE cleanup and add Win64 unwind metadata for AES assembly
- **changed** — Speed up mounting when KDF autodetection is selected
- **added** — Allow selecting which KDF algorithms are included in the benchmark dialog
- **added** — Allow canceling long mount operations from the wait dialog and with the new /cancelmount CLI switch
- **added** — Add support for new Microsoft UEFI CA 2023 signed EFI bootloaders while preserving Microsoft UEFI CA 2011 support
- **changed** — Improve EFI system encryption repair and upgrade handling including stuck decryption finalization, Post-OOBE repair, loader restoration verification, and clearer missing-loader reporting
- **fixed** — Fix EFI DcsProp rewrite handling
- **fixed** — Fix ghost drive letter after command line unmount
- **fixed** — Fix favorite volume mount race
**Downloads:** [Jump directly to installers, packages, source archives, checksums and signatures](#user-content-downloads)
Binaries for supported operating systems are also available at [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.26.29/).
###### Changes between 1.26.24 and 1.26.29 (9 June 2026):
* **All OSes:**
* Add Argon2id as an alternative memory-hard KDF for non-system volumes.
* Use "KDF" terminology in the user interface and documentation instead of "PKCS-5 PRF".
* Update logo icons with simplified icons without extra label text.
* Harden XML and TLV parsers against malformed input.
* Security: Fix [GHSA-94c6-mgmv-mqc5](https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-94c6-mgmv-mqc5): non-default `WOLFCRYPT=1` builds now use wolfCrypt PBKDF2 instead of HKDF and honor VeraCrypt's PBKDF2 iteration count.
* Reported by [vastblast](https://github.com/vastblast).
* CVE-2026-53762
* Fix CPU feature detection and crypto implementation edge cases, including AVX2/leaf 7 detection, BLAKE2s/Argon2 no-SSE2 x86 fallback paths, Camellia SSSE3 dispatch, Twofish x64 multiblock tail handling, and Whirlpool alignment.
* Update documentation, including Argon2id/KDF information and split Windows/Unix command line usage pages.
* Update translations.
* **Windows:**
* Fix rare BSOD issue affecting the VeraCrypt driver.
* Fix hibernation crash on fresh Windows 11 25H2 installations.
* Security: Fix [GHSA-jjcr-75w7-58jp](https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-jjcr-75w7-58jp): hidden volume quick format no longer uses the file-container allocation shortcut that wrote plaintext zero sectors at 128 MiB intervals, preserving plausible deniability.
* Reported by [vastblast](https://github.com/vastblast).
* Regression introduced in 1.26.6.
* CVE-2026-54073
* Harden Windows driver input validation and crash dump filter handling. (GH PR #1590)
* Improve driver I/O handling, including safer request completion, ordered volume flush barriers, and better VERIFY/TRIM validation.
* Fix PBKDF XSTATE cleanup and add Win64 unwind metadata for AES assembly.
* Speed up mounting when KDF autodetection is selected.
* Allow selecting which KDF algorithms are included in the benchmark dialog.
* Allow canceling long mount operations from the wait dialog and with the new `/cancelmount` CLI switch, including auto-mount scans.
* Add support for new Microsoft UEFI CA 2023 signed EFI bootloaders while preserving Microsoft UEFI CA 2011 support.
* Improve EFI system encryption repair and upgrade handling, including stuck decryption finalization, Post-OOBE repair, loader restoration verification, and clearer missing-loader reporting.
* Fix EFI `DcsProp` rewrite handling.
* Fix ghost drive letter after command line unmount. (GH #337, GH #1426)
* Fix favorite volume mount race.
* Validate PIM when changing only the KDF.
* Fix elevated COM format drive validation and device path normalization. (GH #1670)
* Fix ReFS formatting during volume creation.
* Fix MSI traveler disk creation with WHQL-signed drivers, ARM64 MSI build, Start Menu folder upgrades, and discovery of newer SDK MSI tools.
* Add CLI switch `/protectScreen` to allow disabling screen protection in portable mode.
* Add argument to CLI switch `/protectMemory` to allow disabling memory protection in portable mode.
* Add setting and CLI switch `/enableIME` to allow enabling Input Method Editor (IME) in Secure Desktop.
* Use tab control for VeraCrypt preferences to reduce clutter and size of the dialog.
* Provide [VeraCrypt C/C++ SDK](https://github.com/veracrypt/VeraCrypt-SDK) for creating volumes.
* Update LZMA SDK to version 26.01.
* **Linux:**
* Update Ubuntu 25.04 dependency to require `libwxgtk3.2-1t64`.
* Add support for building against FUSE3.
* Add in-kernel NTFS driver selection for NTFS mounts,
_[Truncated at 4000 characters — full notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.29]_
### 1.26.28_Beta4 — VeraCrypt 1.26.28 Beta4
- Date: 2026-05-27
- Version: 1.26.28_Beta4
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.28_Beta4
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.28-beta4
- Labels: Pre-release; Platforms: Desktop
- **changed** — Use "unmount" instead of "dismount" in scripts and in text shown to the user
- **changed** — Update logo icons on all platforms
- **changed** — Column widths correct initially and on update on Linux/FreeBSD/macOS
- **fixed** — Fix code compilation
- **fixed** — Fix problems inside crash dump filter path
- **fixed** — Fix ghost drive letter after CLI dismount in silent mode
- **fixed** — Fix erroneous 2 TiB limit for hidden file containers in GUI wizard
- **fixed** — Fix hibernation crash on fresh Windows 11 25H2 (BSOD Event 41)
- **fixed** — Windows: Fix elevated COM format drive validation and device path normalization
- **fixed** — Fix undefined behavior in StartElevated stderr read loop
- **added** — Linux: Allow mounting NTFS volumes with ntfs3
- **fixed** — Fix Off-By-One Stack Buffer Overflows in XML Parser
##### What's Changed
* Use “unmount” instead of “dismount” in scripts and in text shown to the user by @samhocevar in https://github.com/veracrypt/VeraCrypt/pull/1548
* All platforms: Update logo icons by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1546
* Documentation: Remove XHTML spec and fix errors by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1547
* Linux/FreeBSD/macOS: Column widths correct initially and on update by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1552
* Linux: Update Ubuntu 25.04 Plucky dependencies by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1556
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1564
* Update Corsican translation on 2025-06 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1566
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1565
* Fix IDC_MOUNTALL in German translation by @helmutbuhler in https://github.com/veracrypt/VeraCrypt/pull/1568
* Fix code compilation. by @uni-kod in https://github.com/veracrypt/VeraCrypt/pull/1583
* Update Corsican translation on 2025-08 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1591
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1592
* Update Swedish translation by @NickWick13 in https://github.com/veracrypt/VeraCrypt/pull/1594
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1597
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1598
* Fix problems inside crash dump filter path by @Chuccle in https://github.com/veracrypt/VeraCrypt/pull/1590
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1606
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1607
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1608
* Update Corsican translation on 2025-09 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1609
* Fix links to documentation in README.md by @codytubbs in https://github.com/veracrypt/VeraCrypt/pull/1617
* Fix: Incorrect tooltip on mouseover due to bad translation key (fix #1635) by @babastienne in https://github.com/veracrypt/VeraCrypt/pull/1637
* Fix ghost drive letter after CLI dismount (Silent mode) by @amail80 in https://github.com/veracrypt/VeraCrypt/pull/1658
* Fix erroneous 2 TiB limit for hidden file containers in GUI wizard by @Computeiful in https://github.com/veracrypt/VeraCrypt/pull/1672
* Update Language.ro.xml by @TigerxWood in https://github.com/veracrypt/VeraCrypt/pull/1636
* Fix hibernation crash on fresh Windows 11 25H2 (BSOD Event 41) by @audriusbuika in https://github.com/veracrypt/VeraCrypt/pull/1671
* Windows: Fix elevated COM format drive validation and device path normalization by @audriusbuika in https://github.com/veracrypt/VeraCrypt/pull/1670
* Added line break between AM Crypto and IDRIX by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1679
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1685
* Fix undefined behavior in StartElevated stderr read loop (#1550) by @curious-rabbit in https://github.com/veracrypt/VeraCrypt/pull/1687
* Update Swedish translation by @NickWick13 in https://github.com/veracrypt/VeraCrypt/pull/1688
* Update Dutch translations by @RockyTDR in https://github.com/veracrypt/VeraCrypt/pull/1691
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1692
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1696
* Update Norwegian Bokmål translation by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1697
* Some minor fixes to Norwegian Bokmål translation by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1699
* Update Language.
_[Truncated at 4000 characters — full notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.28_Beta4]_
### 1.26.28_Beta3 — VeraCrypt 1.26.28 Beta3
- Date: 2026-05-15
- Version: 1.26.28_Beta3
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.28_Beta3
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.28-beta3
- Labels: Pre-release; Platforms: Desktop
- **changed** — Use "unmount" instead of "dismount" in scripts and in text shown to the user
- **changed** — Update logo icons on all platforms
- **changed** — Column widths correct initially and on update on Linux/FreeBSD/macOS
- **changed** — Update Ubuntu 25.04 Plucky dependencies on Linux
- **fixed** — Fix code compilation
- **fixed** — Fix problems inside crash dump filter path
- **fixed** — Fix links to documentation in README.md
- **fixed** — Fix incorrect tooltip on mouseover due to bad translation key
- **fixed** — Fix ghost drive letter after CLI dismount in silent mode
- **fixed** — Fix erroneous 2 TiB limit for hidden file containers in GUI wizard
- **fixed** — Fix hibernation crash on fresh Windows 11 25H2 (BSOD Event 41)
- **fixed** — Fix elevated COM format drive validation and device path normalization on Windows
- **fixed** — Fix undefined behavior in StartElevated stderr read loop
- **added** — Allow mounting NTFS volumes with ntfs3 on Linux
- **fixed** — Fix off-by-one stack buffer overflows in XML parser
##### What's Changed
* Use “unmount” instead of “dismount” in scripts and in text shown to the user by @samhocevar in https://github.com/veracrypt/VeraCrypt/pull/1548
* All platforms: Update logo icons by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1546
* Documentation: Remove XHTML spec and fix errors by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1547
* Linux/FreeBSD/macOS: Column widths correct initially and on update by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1552
* Linux: Update Ubuntu 25.04 Plucky dependencies by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1556
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1564
* Update Corsican translation on 2025-06 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1566
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1565
* Fix IDC_MOUNTALL in German translation by @helmutbuhler in https://github.com/veracrypt/VeraCrypt/pull/1568
* Fix code compilation. by @uni-kod in https://github.com/veracrypt/VeraCrypt/pull/1583
* Update Corsican translation on 2025-08 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1591
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1592
* Update Swedish translation by @NickWick13 in https://github.com/veracrypt/VeraCrypt/pull/1594
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1597
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1598
* Fix problems inside crash dump filter path by @Chuccle in https://github.com/veracrypt/VeraCrypt/pull/1590
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1606
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1607
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1608
* Update Corsican translation on 2025-09 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1609
* Fix links to documentation in README.md by @codytubbs in https://github.com/veracrypt/VeraCrypt/pull/1617
* Fix: Incorrect tooltip on mouseover due to bad translation key (fix #1635) by @babastienne in https://github.com/veracrypt/VeraCrypt/pull/1637
* Fix ghost drive letter after CLI dismount (Silent mode) by @amail80 in https://github.com/veracrypt/VeraCrypt/pull/1658
* Fix erroneous 2 TiB limit for hidden file containers in GUI wizard by @Computeiful in https://github.com/veracrypt/VeraCrypt/pull/1672
* Update Language.ro.xml by @TigerxWood in https://github.com/veracrypt/VeraCrypt/pull/1636
* Fix hibernation crash on fresh Windows 11 25H2 (BSOD Event 41) by @audriusbuika in https://github.com/veracrypt/VeraCrypt/pull/1671
* Windows: Fix elevated COM format drive validation and device path normalization by @audriusbuika in https://github.com/veracrypt/VeraCrypt/pull/1670
* Added line break between AM Crypto and IDRIX by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1679
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1685
* Fix undefined behavior in StartElevated stderr read loop (#1550) by @curious-rabbit in https://github.com/veracrypt/VeraCrypt/pull/1687
* Update Swedish translation by @NickWick13 in https://github.com/veracrypt/VeraCrypt/pull/1688
* Update Dutch translations by @RockyTDR in https://github.com/veracrypt/VeraCrypt/pull/1691
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1692
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1696
* Update Norwegian Bokmål translation by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1697
* Some minor fixes to Norwegian Bokmål translation by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1699
* Update Language.
_[Truncated at 4000 characters — full notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.28_Beta3]_
### 1.26.28_Beta2 — VeraCrypt 1.26.28 Beta2
- Date: 2026-05-13
- Version: 1.26.28_Beta2
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.28_Beta2
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.28-beta2
- Labels: Pre-release; Platforms: Desktop
- **changed** — Use unmount instead of dismount in scripts and user-facing text
- **changed** — Update logo icons on all platforms
- **changed** — Fix column widths to display correctly initially and on update on Linux, FreeBSD, and macOS
- **fixed** — Fix code compilation issues
- **fixed** — Fix problems inside crash dump filter path
- **fixed** — Fix ghost drive letter after CLI dismount in silent mode
- **fixed** — Fix erroneous 2 TiB limit for hidden file containers in GUI wizard
- **fixed** — Fix hibernation crash on fresh Windows 11 25H2 (BSOD Event 41)
- **fixed** — Fix elevated COM format drive validation and device path normalization on Windows
- **fixed** — Fix undefined behavior in StartElevated stderr read loop
- **fixed** — Fix incorrect tooltip on mouseover due to bad translation key
- **added** — Allow mounting NTFS volumes with ntfs3 on Linux
- **fixed** — Fix Off-By-One Stack Buffer Overflows in XML Parser
- **security** — Fix Off-By-One Stack Buffer Overflows in XML Parser
##### What's Changed
* Use “unmount” instead of “dismount” in scripts and in text shown to the user by @samhocevar in https://github.com/veracrypt/VeraCrypt/pull/1548
* All platforms: Update logo icons by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1546
* Documentation: Remove XHTML spec and fix errors by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1547
* Linux/FreeBSD/macOS: Column widths correct initially and on update by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1552
* Linux: Update Ubuntu 25.04 Plucky dependencies by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1556
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1564
* Update Corsican translation on 2025-06 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1566
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1565
* Fix IDC_MOUNTALL in German translation by @helmutbuhler in https://github.com/veracrypt/VeraCrypt/pull/1568
* Fix code compilation. by @uni-kod in https://github.com/veracrypt/VeraCrypt/pull/1583
* Update Corsican translation on 2025-08 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1591
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1592
* Update Swedish translation by @NickWick13 in https://github.com/veracrypt/VeraCrypt/pull/1594
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1597
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1598
* Fix problems inside crash dump filter path by @Chuccle in https://github.com/veracrypt/VeraCrypt/pull/1590
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1606
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1607
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1608
* Update Corsican translation on 2025-09 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1609
* Fix links to documentation in README.md by @codytubbs in https://github.com/veracrypt/VeraCrypt/pull/1617
* Fix: Incorrect tooltip on mouseover due to bad translation key (fix #1635) by @babastienne in https://github.com/veracrypt/VeraCrypt/pull/1637
* Fix ghost drive letter after CLI dismount (Silent mode) by @amail80 in https://github.com/veracrypt/VeraCrypt/pull/1658
* Fix erroneous 2 TiB limit for hidden file containers in GUI wizard by @Computeiful in https://github.com/veracrypt/VeraCrypt/pull/1672
* Update Language.ro.xml by @TigerxWood in https://github.com/veracrypt/VeraCrypt/pull/1636
* Fix hibernation crash on fresh Windows 11 25H2 (BSOD Event 41) by @audriusbuika in https://github.com/veracrypt/VeraCrypt/pull/1671
* Windows: Fix elevated COM format drive validation and device path normalization by @audriusbuika in https://github.com/veracrypt/VeraCrypt/pull/1670
* Added line break between AM Crypto and IDRIX by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1679
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1685
* Fix undefined behavior in StartElevated stderr read loop (#1550) by @curious-rabbit in https://github.com/veracrypt/VeraCrypt/pull/1687
* Update Swedish translation by @NickWick13 in https://github.com/veracrypt/VeraCrypt/pull/1688
* Update Dutch translations by @RockyTDR in https://github.com/veracrypt/VeraCrypt/pull/1691
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1692
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1696
* Update Norwegian Bokmål translation by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1697
* Some minor fixes to Norwegian Bokmål translation by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1699
* Update Language.
_[Truncated at 4000 characters — full notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.28_Beta2]_
### 1.26.28_Beta — VeraCrypt 1.26.28 Beta
- Date: 2026-05-12
- Version: 1.26.28_Beta
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.28_Beta
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.28-beta
- Labels: Pre-release; Platforms: Desktop
- **changed** — Use "unmount" instead of "dismount" in scripts and text shown to the user
- **changed** — Update logo icons on all platforms
- **changed** — Fix column widths to display correctly initially and on update on Linux, FreeBSD, and macOS
- **changed** — Update Ubuntu 25.04 Plucky dependencies on Linux
- **fixed** — Fix code compilation
- **fixed** — Fix problems inside crash dump filter path
- **fixed** — Fix incorrect tooltip on mouseover due to bad translation key
- **fixed** — Fix ghost drive letter after CLI dismount in silent mode
- **fixed** — Fix erroneous 2 TiB limit for hidden file containers in GUI wizard
- **fixed** — Fix hibernation crash on fresh Windows 11 25H2 (BSOD Event 41)
- **fixed** — Fix elevated COM format drive validation and device path normalization on Windows
- **fixed** — Fix undefined behavior in StartElevated stderr read loop
- **added** — Allow mounting NTFS volumes with ntfs3 on Linux
- **security** — Fix off-by-one stack buffer overflows in XML parser
##### What's Changed
* Use “unmount” instead of “dismount” in scripts and in text shown to the user by @samhocevar in https://github.com/veracrypt/VeraCrypt/pull/1548
* All platforms: Update logo icons by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1546
* Documentation: Remove XHTML spec and fix errors by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1547
* Linux/FreeBSD/macOS: Column widths correct initially and on update by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1552
* Linux: Update Ubuntu 25.04 Plucky dependencies by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1556
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1564
* Update Corsican translation on 2025-06 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1566
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1565
* Fix IDC_MOUNTALL in German translation by @helmutbuhler in https://github.com/veracrypt/VeraCrypt/pull/1568
* Fix code compilation. by @uni-kod in https://github.com/veracrypt/VeraCrypt/pull/1583
* Update Corsican translation on 2025-08 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1591
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1592
* Update Swedish translation by @NickWick13 in https://github.com/veracrypt/VeraCrypt/pull/1594
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1597
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1598
* Fix problems inside crash dump filter path by @Chuccle in https://github.com/veracrypt/VeraCrypt/pull/1590
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1606
* Update Language.zh-cn.xml by @nkh0472 in https://github.com/veracrypt/VeraCrypt/pull/1607
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1608
* Update Corsican translation on 2025-09 by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1609
* Fix links to documentation in README.md by @codytubbs in https://github.com/veracrypt/VeraCrypt/pull/1617
* Fix: Incorrect tooltip on mouseover due to bad translation key (fix #1635) by @babastienne in https://github.com/veracrypt/VeraCrypt/pull/1637
* Fix ghost drive letter after CLI dismount (Silent mode) by @amail80 in https://github.com/veracrypt/VeraCrypt/pull/1658
* Fix erroneous 2 TiB limit for hidden file containers in GUI wizard by @Computeiful in https://github.com/veracrypt/VeraCrypt/pull/1672
* Update Language.ro.xml by @TigerxWood in https://github.com/veracrypt/VeraCrypt/pull/1636
* Fix hibernation crash on fresh Windows 11 25H2 (BSOD Event 41) by @audriusbuika in https://github.com/veracrypt/VeraCrypt/pull/1671
* Windows: Fix elevated COM format drive validation and device path normalization by @audriusbuika in https://github.com/veracrypt/VeraCrypt/pull/1670
* Added line break between AM Crypto and IDRIX by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1679
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1685
* Fix undefined behavior in StartElevated stderr read loop (#1550) by @curious-rabbit in https://github.com/veracrypt/VeraCrypt/pull/1687
* Update Swedish translation by @NickWick13 in https://github.com/veracrypt/VeraCrypt/pull/1688
* Update Dutch translations by @RockyTDR in https://github.com/veracrypt/VeraCrypt/pull/1691
* Update Language.de.xml by @Mr-Update in https://github.com/veracrypt/VeraCrypt/pull/1692
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1696
* Update Norwegian Bokmål translation by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1697
* Some minor fixes to Norwegian Bokmål translation by @sandakersmann in https://github.com/veracrypt/VeraCrypt/pull/1699
* Update Language.
_[Truncated at 4000 characters — full notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.28_Beta]_
### 1.26.24 — VeraCrypt version 1.26.24
- Date: 2025-05-31
- Version: 1.26.24
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.24
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.24
- Labels: Platforms: Desktop
Binaries for supported operating systems are also available at [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.26.24/).
###### Changes between 1.26.20 and 1.26.24 (30 May 2025):
* **All OSes:**
* Fix Whirlpool implementation for big-endian platforms. (GH #1529)
* Rename "Dismount All" to "Unmount All" in UI, with ALT+u as the new accelerator key (previously ALT+s).
* Add contributed Chinese and Russian CHM documentation.
* Update translations.
* **Windows:**
* Implement screen protection against screenshots and screen recording, enabled by default.
* This feature can be disabled during installation or via Performance/Driver Configuration settings.
* Add checkboxes in the MSI installer for controlling memory protection and screen protection features.
* Introduce command-line options `DISABLEMEMORYPROTECTION` and `DISABLESCREENPROTECTION` for MSI installer configuration.
* Both options accept values `0` (enabled) or `1` (disabled).
* *Example:*
```
msiexec /i VeraCrypt_Setup_x64_1.26.24.msi DISABLESCREENPROTECTION=1 /qn REBOOT=ReallySuppress MSIRESTARTMANAGERCONTROL=Disable ACCEPTLICENSE=YES
```
* Fix race conditions when multiple instances of `veracrypt.exe` are launched simultaneously.
* Update bundled libzip to version 1.11.3.
* **Linux:**
* Add support for AppImage packaging and usage.
* Fix absolute path usage for `true` command when checking sudo session status.
* Fix failure to use Hungarian language translations.
* Improve generic installer scripts. (GH #1514)
* Add support for `/run/media/veracrypt` as default mount prefix when `/media` is not available. (GH #1524)
* Remove `pcsclite` dependency from `.deb`/`.rpm` packages—now detected/loaded dynamically at runtime.
* **macOS:**
* Fix absolute path usage for `true` command when checking sudo session status.
* Create symlink for VeraCrypt in `/usr/local/bin` to allow CLI usage.
* Fix failure to use Hungarian language translations.
##### Merged Github Pull Requests
* Update Language.de.xml by @bugtracker2019 in https://github.com/veracrypt/VeraCrypt/pull/1489
* CI: Enable XML Validation Workflow by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1497
* Fix SetupDLL and ExpandVolume Error by @Feryquence in https://github.com/veracrypt/VeraCrypt/pull/1495
* Update Language.nl.xml by @RockyTDR in https://github.com/veracrypt/VeraCrypt/pull/1502
* Linux/FreeBSD: Improvements on installation scripts by @Jertzukka in https://github.com/veracrypt/VeraCrypt/pull/1514
* Refactor: Use symbolic constants for volume header magic numbers by @bernardladenthin in https://github.com/veracrypt/VeraCrypt/pull/1525
* Add alignment constants for derived key and KEY_INFO buffers to ensure SIMD compatibility. by @bernardladenthin in https://github.com/veracrypt/VeraCrypt/pull/1526
* User Guide with HTML by @fzxx in https://github.com/veracrypt/VeraCrypt/pull/1523
* Update Tradition Chinese (Hong Kong) by @harryytm in https://github.com/veracrypt/VeraCrypt/pull/1486
* Fix the whirlpool for big-endian platform by @pingwcy in https://github.com/veracrypt/VeraCrypt/pull/1529
* Fix a mistake by @fzxx in https://github.com/veracrypt/VeraCrypt/pull/1530
* modify unix default mounting point prefix (use /run/media/veracrypt t… by @stevenleeS0ht in https://github.com/veracrypt/VeraCrypt/pull/1524
* Update Polish translation by @Matthaiks in https://github.com/veracrypt/VeraCrypt/pull/1533
* Update Corsican translation on 2025-05 (1t4s) by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1535
* typo Readme.txt by @zaphodapriest in https://github.com/veracrypt/VeraCrypt/pull/1538
* Update Corsican translation on 2025-05 (2) by @Patriccollu in https://github.com/veracrypt/VeraCrypt/pull/1543
##### New Contributors
* @bugtracker2019 made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1489
* @Feryquence ma
_[Truncated at 4000 characters — full notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.24]_
### 1.26.20 — VeraCrypt version 1.26.20
- Date: 2025-02-05
- Version: 1.26.20
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.20
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.20
- Labels: Platforms: Desktop
Binaries for supported operating systems are also available at [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.26.20/).
###### Changes between 1.26.18 and 1.26.20 (3 February 2025):
- All OSes:
* Implement SHA-256 acceleration on ARM64 platforms using CPU instructions.
* Update translations.
* Replace "Dismount" with "Unmount" across the UI and documentation to align with IT standards (GH #1478)
- Windows:
* Fix regression in driver that always allowed defragmentation and caused other side effects.
* Revert to the previous method of gathering system entropy due to stability issues reported by users.
- Linux:
* Fix a regression in Linux Mint affecting administrator password authentication. (GH #1473)
- macOS:
* Fix regression that blocked dismounting of volumes. (GH #1467)
* Resolve a wxWidgets 3.2.6 assertion error related to the undefined switch `use-dummy-sudo-password`. (GH #1470)
##### Merged Github Pull Requests
* Update Language.pl.xml by @p0k33m0n in https://github.com/veracrypt/VeraCrypt/pull/1471
* Enable AESNI only on x86 by @Xeonacid in https://github.com/veracrypt/VeraCrypt/pull/1479
* refactor: use the term unmount instead of dismount by @tessus in https://github.com/veracrypt/VeraCrypt/pull/1478
* Update Chinese (Hong Kong) translation by @harryytm in https://github.com/veracrypt/VeraCrypt/pull/1408
##### New Contributors
* @p0k33m0n made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1471
* @Xeonacid made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1479
* @tessus made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1478
**Full Changelog**: https://github.com/veracrypt/VeraCrypt/compare/VeraCrypt_1.26.18...VeraCrypt_1.26.20
### 1.26.19 — VeraCrypt version 1.26.19
- Date: 2025-01-23
- Version: 1.26.19
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.19
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.19
- Labels: Platforms: Desktop
Binaries for supported operating systems are also available at [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.26.19/).
###### Changes between 1.26.18 and 1.26.19 (22 January 2025):
- macOS:
* Fix regression that blocked dismounting of volumes. (GH #1467, GH #1469)
**Full Changelog**: https://github.com/veracrypt/VeraCrypt/compare/VeraCrypt_1.26.18...VeraCrypt_1.26.19
### 1.26.18 — VeraCrypt version 1.26.18
- Date: 2025-01-22
- Version: 1.26.18
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.18
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.18
- Labels: Platforms: Desktop
Binaries for supported operating systems are also available at [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.26.18/).
###### Changes between 1.26.15 and 1.26.18 (20 January 2025):
- All OSes:
* Added support for SHA-256 x86 intrinsic to enhance the performance of PBKDF2-HMAC-SHA256.
* Added support for AES hardware on ARM64 platforms (e.g. Windows ARM64, macOS on Apple Silicon Mx).
* Updated translations
- Windows:
* Dropped support for Windows 32-bit.
* Set Windows 10 October 2018 Update (version 1809) as the minimum supported version.
* Reduce driver deadlock occurences under low-memory scenarios caused by re-entrant IRP completions.
* Fixed failed EFI detection on some PCs where the BootOrder variable is not defined (proposed by @kriegste, GH #360).
* Fixed "Access Denied" error when updating VeraCrypt using EXE setup following a Windows upgrade.
* Fixed various issues affecting the EFI system encryption configuration editor.
* Fixed regression in Traveler Disk creation (GH #886)
* Replaced the deprecated CryptGenRandom with BCryptGenRandom for generating secure random bytes.
* Use modern API to gather system entropy for random generation instead of obsolete ones.
* Update LZMA SDK to version 24.09
* Update libzip to version 1.11.2
- Linux:
* CVE-2024-54187: Added absolute paths when executing system binaries to prevent path hijacking (collaboration with SivertPL @__tfr)
* CVE-2025-23021: Prevent mounting volumes on system directories and PATH (reported by SivertPL @__tfr)
* Fixed an assertion issue with the wxWidgets library included in Ubuntu.
* Improved directory-opening logic by prioritizing xdg-open and adding fallback mechanisms.
* Ensure that volume exists before starting the mount operation.
* Fix "Password too long" error message not expanded to include max length (GH #1456)
* Simplify sudo session detection logic.
- macOS:
* CVE-2024-54187: Added absolute paths when executing system binaries to prevent path hijacking (collaboration with SivertPL @__tfr)
* CVE-2025-23021: Prevent mounting volumes on system directories and PATH (reported by SivertPL @__tfr)
* Disabled screen capture by default. Added the --allow-screencapture CLI switch to enable it if needed.
* Ensure that volume exists before starting the mount operation.
* Implement sudo session detection logic
##### Contributors
* Update Language.sv.xml by @NickWick13 in https://github.com/veracrypt/VeraCrypt/pull/1416
* Add Option to Enable/Disable Screen Capture by @denizt in https://github.com/veracrypt/VeraCrypt/pull/1418
* Update Language.ro.xml by @TigerxWood in https://github.com/veracrypt/VeraCrypt/pull/1434
**Full Changelog**: https://github.com/veracrypt/VeraCrypt/compare/VeraCrypt_1.26.15...VeraCrypt_1.26.18
### 1.26.15 — VeraCrypt version 1.26.15 (Windows Hotfix)
- Date: 2024-09-03
- Version: 1.26.15
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.15
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.15
- Labels: Platforms: Desktop
Binaries for supported operating systems are also available at [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.26.15/).
###### Changes between 1.26.14 and 1.26.15 (2 September 2024):
- Windows:
* Fix MSI install/uninstall issues:
- Fixed error 1603 returned by MSI silent install when REBOOT=ReallySuppress is specified and a reboot is required.
- Fixed missing documentation and language files from the MSI package.
- Fixed MSI not installing new documentation and language files when upgrading from an EXE-based installation.
- Fixed installation folder not being removed after MSI uninstall in some cases.
* Fix regression during UEFI system decryption that caused the bootloader to persist.
**Full Changelog**: https://github.com/veracrypt/VeraCrypt/compare/VeraCrypt_1.26.14...VeraCrypt_1.26.15
### 1.26.14 — VeraCrypt version 1.26.14
- Date: 2024-08-27
- Version: 1.26.14
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.14
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.14
- Labels: Platforms: Desktop
Binaries for supported operating systems are also available at [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.26.14/).
###### Changes between 1.26.7 and 1.26.14 (25 August 2024):
- All OSes:
* Update translations and documentation.
* Implement language selection settings in non-Windows versions.
* Make codebase compatible with wxWidgets 3.3 in non-Windows versions.
* Implement detection of volumes affected by XTS master key vulnerability and warn user about it.
* Update mount failure error messages to mention removal of TrueCrypt support and old algorithms.
- Windows:
* Better fix for Secure Desktop issues under Windows 11 22H2.
- IME is now disabled in Secure Desktop because it is known to cause issues.
* VeraCrypt Expander: Fix expansion of volumes on disks with a sector size different from 512 (by skl0n6).
* Fix writing wrong EFI System Encryption Advanced Options to registry.
* Don't close Setup when exiting VeraCrypt process through system tray Exit menu.
* Fix failure to format some disks (e.g., VHDX) caused by virtual partition offset not 4K aligned.
* Fallback to absolute positioning when accessing disks if relative positioning fails.
* Update zlib to version 1.3.1.
- Linux:
* Focus PIM field when selected (GH #1239).
* Fix generic installation script on Konsole in Wayland (GH #1244).
* Added the ability to build using wolfCrypt as the cryptographic backend. Disabled by default. (Contributed by wolfSSL, GH PR #1227).
* Allows GUI to launch in a Wayland-only environment (GH #1264).
* CLI: Don't initially re-ask PIM if it was already specified (GH #1288).
* CLI: Fix incorrect max hidden volume size for file containers (GH #1338).
* Enhance ASLR security of generic installer binaries by adding linked flag for old GCC version (reported by @morton-f on Sourceforge).
- macOS:
* Fix corrupted disk icon in main UI (GH #1218).
* Fix near zero width PIM input box and simplify wxTextValidator logic (GH #1274).
* Use correct Disk Utility location when "check filesystem" is ran (GH #1273).
* Add support for FUSE-T as an alternative to MacFUSE (GH #1055).
- FreeBSD:
* Fix privilege escalation prompts not showing up (GH #1349).
* Support automatic detection and mounting of ext2/3/4, exFAT, NTFS filesystems (GH #1350).
* Use correct Disk Utility location when "check filesystem" is ran (GH #1273).
##### New Contributors
* @Mattoje made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1226
* @udev2045 made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1230
* @MayanTigger made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1241
* @lealem47 made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1227
* @kayazeren made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1254
* @JonatanWick made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1270
* @pji2918 made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1291
* @RoboSchmied made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1324
* @nerun made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1306
* @Ozero4 made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1372
* @SebastienGeeraert made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1373
* @chatgptdev made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1386
* @lollolong made their first contribution in https://github.com/veracrypt/VeraCrypt/pull/1389
**Full Changelog**: https://github.com/veracrypt/VeraCrypt/compare/VeraCrypt_1.26.7...VeraCrypt_1.26.14
### 1.26.7 — VeraCrypt version 1.26.7
- Date: 2023-10-01
- Version: 1.26.7
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.7
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.26.7
- Labels: Platforms: Desktop
Binaries for supported operating systems are also available at [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.26.7/).
###### Changes between 1.25.9 and 1.26.7 (1 October 2023) :
- All OSes:
* Security: Ensure that XTS primary key is different from the secondary key when creating volumes
* Issue unlikely to happen thanks to random generator properties but this check must be added to prevent attacks
* Reference: CCSS,NSA comment at page 3: https://csrc.nist.gov/csrc/media/Projects/crypto-publication-review-project/documents/initial-comments/sp800-38e-initial-public-comments-2021.pdf
* Remove TrueCrypt Mode support. Version 1.25.9 can be used to mount or [convert TrueCrypt volumes](https://veracrypt.fr/en/Converting%20TrueCrypt%20volumes%20and%20partitions.html).
* Complete removal of RIPEMD160 and GOST89 algorithms. Legacy volumes using any of them cannot be mounted by VeraCrypt anymore.
* Add support for BLAKE2s as new PRF algorithm for both system encryption and standard volumes.
* Introducing support for EMV banking smart cards as keyfiles for non-system volumes.
* No need for a separate PKCS#11 module configuration.
* Card PIN isn't required.
* Generates secure keyfile content from unique, encoded data present on the banking card.
* Supports all EMV standard-compliant banking cards.
* Can be enabled in settings (go to Settings->Security Tokens).
* Developed by a team of students from the Institut national des sciences appliquées de Rennes.
* More details about the team and the project are available at https://projets-info.insa-rennes.fr/projets/2022/VeraCrypt/index_en.html.
* When overwriting an existing file container during volume creation, add its current size to the available free space
* Add Corsican language support. Update several translations.
* Update documentation
- Windows:
* Officially, the minimum supported version is now Windows 10. VeraCrypt may still run on Windows 7 and Windows 8/8.1, but no active tests are done on these platforms.
* EFI Bootloader:
* Fix bug in PasswordTimeout value handling that caused it to be limited to 255 seconds.
* Rescue Disk: enhance "Boot Original Windows Loader" by using embedded backup of original Windows loader if it is missing from disk
* Addition of Blake2s and removal of RIPEMD160 & GOST89
* Enable memory protection by default. Add option under Performance/Driver Configuration to disable it if needed.
* Memory protection blocks non-admin processes from reading VeraCrypt memory
* It may block Screen Readers (Accessibility support) from reading VeraCrypt UI, in which case it can be disabled
* It can be disabled by setting registry value "VeraCryptEnableMemoryProtection" to 0 under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veracrypt
* Add process mitigation policy to prevent VeraCrypt from being injected by other processes
* Minor enhancements to RAM Encryption implementation
* Fix Secure Desktop issues under Windows 11 22H2
* Implement support for mounting partially encrypted system partitions.
* Fix false positive detection of new device insertion when Clear Encryption Keys option is enable (System Encryption case only)
* Better implementation of Fast Create when creating file containers that uses UAC to request required privilege if not already held
* Allow choosing Fast Create in Format Wizard UI when creating file containers
* Fix formatting issues during volume creation on some machines.
* Fix stall issue caused by Quick Format of large file containers
* Add dropdown menu to Mount button to allow mounting without using the cache.
* Possible workaround for logarithmic slowdown for Encrypt-In-Place on large volumes.
* Make Expander first check file e
_[Truncated at 4000 characters — full notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.7]_
### 1.25.9 — VeraCrypt version 1.25.9
- Date: 2022-02-20
- Version: 1.25.9
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.25.9
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.25.9
- Labels: Platforms: Desktop
Binaries for FreeBSD, Linux, macOS and Windows are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.25.9) and [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.25.9/).
###### Changes between 1.25.7 and 1.25.9 (19 February 2022) :
- All OSes:
- Update translations (Chinese, Dutch, French, German, Turkish).
- Windows:
- Make MSI installer compatible with system encryption (Issue #869).
- Set minimum support for MSI installation to Windows 7.
- Fix failure to create Traveler Disk when VeraCrypt is installed using MSI (Issue #886).
- Don't cache the outer volume password when mounting with hidden volume protection if wrong hidden volume password was specified.
- Reduce the size of EXE installers by almost 50% by using LZMA compression instead of DEFLATE.
- Fix double-clicking mounted drive in VeraCrypt UI not working in some special Windows configurations (Issue #873).
- Add registry key to fix BSOD during shutdown/reboot on some machines when using system encryption (Issue #871).
- Under "`HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veracrypt`", create a REG_DWORD value named "`VeraCryptEraseKeysShutdown`".
- Setting this registry value to 0 disables erasing system encryption keys which is the cause of BSOD during shutdown on some machines.
- Linux:
- Fix hidden volume settings not correctly displayed when enabling hidden volume protection in mount options window.
- Fix generic Linux installer overwriting /usr/sbin if it is a symlink (Issue #888).
- Fix crash when building with _GLIBCXX_ASSERTIONS defined (Issue #896).
- Enable building from source without AES-NI support (Issue #892).
- MacOSX:
- Fix hidden volume settings not correctly displayed when enabling hidden volume protection in mount options window.
### 1.25.7 — VeraCrypt version 1.25.7
- Date: 2022-01-08
- Version: 1.25.7
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.25.7
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.25.7
- Labels: Platforms: Desktop
Binaries for Windows and MacOSX are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.25.7) and [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.25.7/).
###### Changes between 1.25.4 and 1.25.7 (7 January 2022) :
- All OSes:
- Update translations.
- Windows:
- Restore support of Windows Vista, Windows 7 and Windows 8/8.1.
- Windows 7 support requires that either **KB3033929** or **KB4474419** is installed.
- Windows Vista support requires that either **KB4039648** or **KB4474419** is installed.
- MSI installation only: Fix double-clicking .hc file container inserting %1 instead of volume name in path field.
- Advanced users: Add registry settings to control driver internal encryption queue to allow tuning performance for SSD disks and having better stability under heavy load.
- Under registry key `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\veracrypt`:
- `VeraCryptEncryptionFragmentSize` (REG_DWORD): size of encryption data fragment in KiB. Default is 256. Maximum is 2048.
- `VeraCryptEncryptionIoRequestCount` (REG_DWORD): maximum number of parallel I/O requests. Default is 16. Maximum is 8192.
- `VeraCryptEncryptionItemCount` (REG_DWORD): maximum number of encryption queue items processed in parallel. Default as well as maximum is half of `VeraCryptEncryptionIoRequestCount`.
- The triplet (FragmentSize=512, IoRequestCount=128, ItemCount=64) is an example of parameters that enhance sequential read speed on some SSD NVMe systems.
- Fix truncate text in installer for some languages.
- MacOSX:
- Fix resource files inside VeraCrypt application bundle (e.g. HTML documentation, languages XML files) being world-writable. (Reported by Niall O'Reilly)
### 1.25.4 — VeraCrypt version 1.25.4
- Date: 2021-12-04
- Version: 1.25.4
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.25.4
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.25.4
- Labels: Platforms: Desktop
Binaries for Windows, Linux and MacOSX are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.25.4) and [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.25.4/).
###### Changes between 1.24-Update8 and 1.25.4 (3 December 2021) :
- All OSes:
- Speed optimization of Streebog.
- Update translations.
- Windows:
- Add support for Windows on ARM64 (e.g. Microsoft Surface Pro X) but system encryption not yet supported.
- Add MSI installer for silent mode deployment (ACCEPTLICENSE=YES must be set in msiexec command line).
- For now, MSI installer cannot be used if system partition is encrypted with VeraCrypt
- MSI installer requires Windows 10 or newer
- Drop support of Windows Vista, Windows 7, Windows 8 and Windows 8.1 because of new requirement for driver code signing.
- Reduce time of mount when PRF auto-detection is selected.
- Fix potential memory corruption in driver caused by integer overflow in IOCTL_STORAGE_MANAGE_DATA_SET_ATTRIBUTES (reported by Ilja van Sprundel).
- Replace insecure wcscpy/wcscat/strcpy runtime functions with secure equivalents.
- Changes EFI Bootloader:
- Fix memory leak in some cases caused by wrong check of pointer for calling MEM_FREE
- Clear bootParams variable that may contain sensitive information when halting the system in case of fatal error
- Add option "KeyboardInputDelay" in DcsProp to control the minimum delay supported between two key strokes
- Try to workaround Windows Feature Updates issues with system encryption by fixing of bootloader and SetupConfig.ini when system resumes or when session is opened/unlocked
- Fix failure to load local HTML documentation if application running with administrative privileges
- Fix freeze when password dialog displayed in secure desktop and try to access token keyfiles protected by PIN
- Fix failure to launch keyfile generator in secure desktop mode
- Block Windows from resizing system partition if it is encrypted
- Add keyboard shortcut to "TrueCrypt mode" in the mount dialog.
- MacOSX:
- Native support of Apple Silicon M1.
- Drop official support of Mac OS X 10.7 Lion and Mac OS X 10.8 Mountain Lion.
- Add UI language support using installed XML files. Language is automatically detected using "LANG" environment variable.
- Add CLI switch (`--size=max`) and UI option to give a file container all available free space on the disk where it is created.
- Return error if unknown filesystem value specified in CLI --filesystem switch instead of silently skipping filesystem creation.
- Linux:
- Add UI language support using installed XML files. Language is automatically detected using "LANG" environment variable
- Compatiblity with with pam_tmpdir.
- Display icon in notification area on Ubuntu 18.04 and newer (contibuted by https://unit193.net/).
- Add CLI switch (`--size=max`) and UI option to give a file container all available free space on the disk where it is created.
- Return error if unknown filesystem value specified in CLI --filesystem switch instead of silently skipping filesystem creation.
- FreeBSD:
- Make system devices work under FreeBSD
- Add CLI switch (`--size=max`) and UI option to give a file container all available free space on the disk where it is created.
- Return error if unknown filesystem value specified in CLI --filesystem switch instead of silently skipping filesystem creation.
- OpenBSD:
- Add basic support of OpenBSD
- Add CLI switch (`--size=max`) and UI option to give a file container all available free space on the disk where it is created.
- Return error if unknown filesystem value specified in CLI --filesystem switch instead of silently skipping filesystem creation.
### 1.24-Update8_MacOSX — VeraCrypt version 1.24-Update8 for MacOSX
- Date: 2020-11-29
- Version: 1.24-Update8_MacOSX
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.24-Update8_MacOSX
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.24-update8-macosx
- Labels: Platforms: Desktop
Package for MacOSX is available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.24-update8) and [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.24-Update8/).
###### Changes between 1.24-Update7 and 1.24-Update8 (28 November 2020) :
- MacOSX:
- Fix compatibility issues with macOS Big Sur, especially on Apple Silicon M1 with macFUSE 4.0.x (#699 )
### 1.24-Update7 — VeraCrypt version 1.24-Update7
- Date: 2020-08-09
- Version: 1.24-Update7
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.24-Update7
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.24-update7
- Labels: Platforms: Desktop
Binaries for Windows, Linux and MacOSX are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.24-update7) and [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.24-Update7/).
###### Changes between 1.24-Update6 and 1.24-Update7 (7 August 2020) :
- Windows:
- Fix regression in Expander and Format when RAM encryption is enable that was causing volume headers to be corrupted.
- All OSes:
- Don't allow Hidden volume to have the same password, PIM and keyfiles as Outer volume
- Fix random crash in 32-bit builds when using Streebog.
- Enable FIPS mode in JitterEntropy random generator.
- Update Beginner's Tutorial in documentation to use "MyVolume.hc" instead of "My Volume" for file container name in order to avoid confusion about nature of file nature.
- Minor code cleanup
- Windows:
- Fix wrong results in benchmark of encryption algorithms when RAM encryption is enabled
- Fix issue when RAM encryption used, AES selected and AES-NI not supported by CPU that caused the free space of newly created volumes not filled with random data even if "quick format" is not selected.
- Fix UI for blocking TRIM in system encryption not working in MBR boot mode.
- Support password drag-n-drop from external applications (e.g. KeePass) to password UI fields which is more secure than using clipboard.
- Implements compatibility with Windows 10 Modern Standby and Windows 8.1 Connected Standby power model. This makes detection of entering power saving mode more reliable.
- Avoid displaying waiting dialog when /silent specified for "VeraCrypt Format" during creating of file container using /create switch and a filesystem other than FAT.
- Use native Windows format program to perform formatting of volume since it is more reliable and only fallback to FormatEx function from fmifs.dll in case of issue.
- Don't use API for Processor Groups support if there is only 1 CPU group in the system. This can fix slowness issue observed on some PCs with AMD CPUs.
- Don't allow to encrypt the system drive if it is already encrypted by BitLocker.
- Implement detection of Hibernate and Fast Startup and disable them if RAM encryption is activated.
- Warn about Fast Startup if it is enabled during VeraCrypt installation/upgrade, when starting system encryption or when creating a volume, and propose to disable it.
- Add UI options to control the behavior of automatic bootloader fixing when System Encryption used.
- Don't allow a directory path to be entered for the file container to be created in Format wizard.
- Don't try to use fix for CVE-2019-19501 if Windows Shell has been modified or is not running since there is no reliable way to fix it in such non standard configuation.
- MBR bootloader: fix incorrect compressed data size passed to decompressor in boot sector.
- Add warning message when typed password reaches maximum length during the system encryption wizard.
- Fix wrong error message when UTF-8 encoding of entered password exceeds the maximum supported length.
- Fix crash when using portable 32-bit "VeraCrypt Format.exe" to create hidden volume on a 64-bit machine where VeraCrypt is already installed.
- Update libzip to latest version 1.7.3.
- Update translations.
- Linux/MacOSX:
- Force reading of at least 32 bytes from /dev/random before allowing it to fail gracefully
- Allow choosing a filesystem other than FAT for Outer volume but display warning about risks of such choice. Implement an estimation of maximum possible size of hidden volume in this case.
- Erase sensitive memory explicitly instead of relying on the compiler not optimizing calls to method Memory::Erase.
- Add support for Btrfs filesystem when creating volumes (Linux Only).
- Update wxWidgets for static builds to version 3.0.5.
### 1.24-Update6 — VeraCrypt version 1.24-Update6 (Windows Only)
- Date: 2020-03-11
- Version: 1.24-Update6
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.24-Update6
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.24-update6
- Labels: Platforms: Desktop
Binaries for Windows are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.24-update6), [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.24-Update6/) and [Bitbucket](https://bitbucket.org/veracrypt/veracrypt/downloads/)
###### Changes between 1.24-Update5 and 1.24-Update6 (10 March 2020) :
- Windows:
- Fix PIM label text truncation in password dialog
- Fix wrong language used in installer if user selects a language other than English and then selects English before clicking OK on language selection dialog.
### 1.24-Update5 — VeraCrypt version 1.24-Update5 (Windows Only)
- Date: 2020-03-11
- Version: 1.24-Update5
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.24-Update5
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.24-update5
- Labels: Platforms: Desktop
Binaries for Windows are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.24-update5), [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.24-Update5/) and [Bitbucket](https://bitbucket.org/veracrypt/veracrypt/downloads/)
###### Changes between 1.24-Update4 and 1.24-Update5 (9 March 2020) :
- Windows:
- Optimize performance for CPUs that have more than 64 logical processors (contributed by Sachin Keswani from AMD)
- Support specifying keyfiles (both in tokens and in filesystem) when creating file containers using command line (switches /keyfile, /tokenlib and /tokenpin supported in VeraCrypt Format)
- Fix leak of keyfiles path and name after VeraCrypt process exits.
- Add CLI switch /secureDesktop to VeraCrypt Format.
- Update libzip to version 1.6.1
- Minor UI fixes
### 1.24-Update4 — VeraCrypt version 1.24-Update4
- Date: 2020-01-24
- Version: 1.24-Update4
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.24-Update4
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.24-update4
- Labels: Platforms: Desktop
Binaries for Windows, Linux and MacOSX are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.24-update4), [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.24-Update4/) and [Bitbucket](https://bitbucket.org/veracrypt/veracrypt/downloads/)
###### Changes between 1.24-Update2 and 1.24-Update4 (23 January 2020) :
- Windows:
- Fix regression in Expander and Format when RAM encryption is enable that was causing volume headers to be corrupted.
- Fix failure of Screen Readers (Accessibility support) to read UI by disabling newly introduced memory protection by default and adding a CLI switch (/protectMemory) to enable it when needed.
- Fix side effects related to the fix for CVE-2019-19501 which caused links in UI not to open.
- Add switch /signalExit to support notifying [WAITFOR](https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/waitfor) Windows command when VeraCrypt.exe exits if /q was specified in CLI (cf documentation for usage).
- Don't display mount/dismount examples in help dialog for command line in Format and Expander.
- Documentation and translation updates.
- Linux:
- Fix console-only build to remove dependency on GTK that is not wanted on headless servers.
- Fix regression that limited the size available for hidden volumes created on disk or partition.
- MacOSX:
- Fix regression that limited the size available for hidden volumes created on disk or partition.
### 1.24-Update2 — VeraCrypt version 1.24-Update2
- Date: 2019-12-17
- Version: 1.24-Update2
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.24-Update2
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.24-update2
- Labels: Platforms: Desktop
Binaries for Windows, Linux and MacOSX are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.24-update2), [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.24-Update2/) and [Bitbucket](https://bitbucket.org/veracrypt/veracrypt/downloads/)
###### Changes between 1.24-Hotfix1 and 1.24-Update2 (16 Decembre 2019) :
- All OSs:
- clear AES key from stack memory when using non-optimized implementation. Doesn't apply to VeraCrypt official build (Reported and fixed by Hanno Böck)
- Update Jitterentropy RNG Library to version 2.2.0
- Start following IEEE 1541 agreed naming of bytes (KiB, MiB, GiB, TiB, PiB).
- Various documentation enhancements.
- Windows:
- Fix possible local privilege escalation vulnerability during execution of VeraCrypt Expander (CVE-2019-19501)
- MBR bootloader:
- workaround for SSD disks that don't allow write operations in BIOS mode with buffers less than 4096 bytes.
- Don't restore MBR to VeraCrypt value if it is coming from a loader different from us or different from Microsoft one.
- EFI bootloader:
- Fix "ActionFailed" not working and add "ActionCancelled" to customize handling of user hitting ESC on password prompt
- Fix F5 showing previous password after failed authentication attempt. Ensure that even wrong password value are cleared from memory.
- Fix multi-OS boot compatibility by only setting VeraCrypt as first bootloader of the system if the current first bootloader is Windows one.
- Add new registry flags for SystemFavoritesService to control updating of EFI BIOS boot menu on shutdown.
- Allow system encrypted drive to be mounted in WindowsPE even if changing keyboard layout fails (reported and fixed by Sven Strickroth)
- Enhancements to the mechanism preserving file timestamps, especially for keyfiles.
- Fix RDRAND instruction not detected on AMD CPUs.
- Detect cases where RDRAND is flawed (e.g. AMD Ryzen) to avoid using it if enabled by user.
- Don't write extra 0x00 byte at the end of DcsProp file when modifying it through UI
- Reduce memory usage of IOCTL_DISK_VERIFY handler used in disk verification by Windows.
- Add switch /FastCreateFile for VeraCrypt Format.exe to speedup creation of large file container if quick format is selected.
- Fix the checkbox for skipping verification of Rescue Disk not reflecting the value of /noisocheck switch specified in VeraCrypt Format command line.
- check "TrueCrypt Mode" in password dialog when mounting a file container with .tc extension
- Update XML languages files.
- Linux:
- Fix regression causing admin password to be requested too many times in some cases
- Fix off by one buffer overflow in function Process::Execute (Reported and fixed by Hanno Böck)
- Make sure password gets deleted in case of internal error when mounting volume (Reported and fixed by Hanno Böck)
- Fix passwords using Unicode characters not recognized in text mode.
- Fix failure to run VeraCrypt binary built for console mode on headless machines.
- Add switch to force the use of legacy maximum password length (64 UTF8 bytes)
- Add CLI switch (--use-dummy-sudo-password) to force use of old sudo behavior of sending a dummy password
- During uninstall, output error message to STDERR instead of STDOUT for better compatibility with package managers.
- Make sector size mismatch error when mounting disks more verbose.
- Speedup SHA256 in 64-bit mode by using assembly code.
- MacOSX:
- Add switch to force the use of legacy maximum password length (64 UTF8 bytes)
- Fix off by one buffer overflow in function Process::Execute (Reported and fixed by Hanno Böck)
- Fix passwords using Unicode characters not recognized in text mode.
- Make sector size mismatch error when mounting disks more verbose.
- Speedup SHA256 in 64-bit mode by using assembly code.
### 1.24-Hotfix1 — VeraCrypt version 1.24-Hotfix1
- Date: 2019-10-27
- Version: 1.24-Hotfix1
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.24-Hotfix1
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.24-hotfix1
- Labels: Platforms: Desktop
Binaries for Windows, Linux and MacOSX are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.24-hotfix1), [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.24-Hotfix1/) and [Bitbucket](https://bitbucket.org/veracrypt/veracrypt/downloads/)
###### Changes between 1.24 and 1.24-Hotfix1 (27 October 2019) :
- All OSs:
- Fix 1.24 regression that caused system favorites not to mount at boot if VeraCrypt freshly installed.
- Fix failure to encrypt system if the current Windows username contains a Unicode non-ASCII character.
- Make VeraCrypt Expander able to resume expansion of volumes whose previous expansion was aborted before it finishes.
- Add "Quick Expand" option to VeraCrypt Expander to accelarate the expansion of large file containers.
- Add several robustness checks and validation in case of system encryption to better handle some corner cases.
- Minor UI and documentation changes.
- Linux:
- Workaround gcc 4.4.7 bug under CentOS 6 that caused VeraCrypt built under CentOS 6 to crash when Whirlpool hash is used.
- Fix "incorrect password attempt" written to /var/log/auth.log when mounting volumes.
- Fix dropping file in UI not showing its correct path , specifically under GTK-3.
- Add missing JitterEntropy implementation/
- MacOSX:
- Fix some devices and partitions not showing in the device selection dialog under OSX 10.13 and newer.
- Fix keyboard tab navigation between password fields in "Volume Password" page of volume creation wizard.
- Add missing JitterEntropy implementation/
- Support APFS filesystem for creation volumes.
- Support Dark Mode.
### 1.24 — VeraCrypt version 1.24
- Date: 2019-10-07
- Version: 1.24
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.24
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.24
- Labels: Platforms: Desktop
Binaries for Windows, Linux and MacOSX are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.24), [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.24/) and [Bitbucket](https://bitbucket.org/veracrypt/veracrypt/downloads/)
###### Changes between 1.23-Hotfix-2 and 1.24 (6 October 2019) :
- All OSs:
- Increase password maximum length to 128 bytes in UTF-8 encoding for non-system volumes.
- Add option to use legacy maximum password length (64) instead of new one for compatibility reasons.
- Use Hardware RNG based on CPU timing jitter "Jitterentropy" by Stephan Mueller as a good alternative to CPU RDRAND (http://www.chronox.de/jent.html)
- Speed optimization of XTS mode on 64-bit machine using SSE2 (up to 10% faster).
- Fix detection of CPU features AVX2/BMI2. Add detection of RDRAND/RDSEED CPU features. Detect Hygon CPU as AMD one.
- Windows:
- Implement RAM encryption for keys and passwords using ChaCha12 cipher, t1ha non-cryptographic fast hash and ChaCha20 based CSPRNG.
- Available only on 64-bit machines.
- Disabled by default. Can be enabled using option in UI.
- Less than 10% overhead on modern CPUs.
- Side effect: Windows Hibernate is not possible if VeraCrypt System Encryption is also being used.
- Mitigate some memory attacks by making VeraCrypt applications memory inaccessible to non-admin users (based on KeePassXC implementation)
- New security features:
- Erase system encryption keys from memory during shutdown/reboot to help mitigate some cold boot attacks
- Add option when system encryption is used to erase all encryption keys from memory when a new device is connected to the system.
- Add new driver entry point that can be called by applications to erase encryption keys from memory in case of emergency.
- MBR Bootloader: dynamically determine boot loader memory segment instead of hardcoded values (proposed by neos6464)
- MBR Bootloader: workaround for issue affecting creation of hidden OS on some SSD drives.
- Fix issue related to Windows Update breaking VeraCrypt UEFI bootloader.
- Several enhancements and fixes for EFI bootloader:
- Implement timeout mechanism for password input. Set default timeout value to 3 minutes and default timeout action to "shutdown".
- Implement new actions "shutdown" and "reboot" for EFI DcsProp config file.
- Enhance Rescue Disk implementation of restoring VeraCrypt loader.
- Fix ESC on password prompt during Pre-Test not starting Windows.
- Add menu entry in Rescue Disk that enables starting original Windows loader.
- Fix issue that was preventing Streebog hash from being selected manually during Pre-Boot authentication.
- If "VeraCrypt" folder is missing from Rescue Disk, it will boot PC directly from bootloader stored on hard drive
- This makes it easy to create a bootable disk for VeraCrypt from Rescue Disk just by removing/renaming its "VeraCrypt" folder.
- Add option (disabled by default) to use CPU RDRAND or RDSEED as an additional entropy source for our random generator when available.
- Add mount option (both UI and command line) that allows mounting a volume without attaching it to the specified drive letter.
- Update libzip to version 1.5.2
- Do not create uninstall shortcut in startmenu when installing VeraCrypt. (by Sven Strickroth)
- Enable selection of Quick Format for file containers creation. Separate Quick Format and Dynamic Volume options in the wizard UI.
- Fix editor of EFI system encryption configuration file not accepting ENTER key to add new lines.
- Avoid simultaneous calls of favorites mounting, for example if corresponding hotkey is pressed multiple times.
- Ensure that only one thread at a time can create a secure desktop.
- Resize some dialogs in Format and Mount Options to fix some text truncation issues with non-English languages.
- Fix high CPU usage when using favor
_[Truncated at 4000 characters — full notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.24]_
### 1.23 — VeraCrypt version 1.23
- Date: 2018-09-13
- Version: 1.23
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.23
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.23
- Labels: Platforms: Desktop
Binaries for Windows, Linux and MacOSX are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.23), [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.23/) and [Bitbucket](https://bitbucket.org/veracrypt/veracrypt/downloads/)
###### Changes between 1.22 and 1.23 (12 September 2018) :
- Windows:
- VeraCrypt is now compatible with default EFI SecureBoot configuration for system encryption.
- Fix EFI system encryption issues on some machines (e.g. HP, Acer).
- Support EFI system encryption on Windows LTSB.
- Add compatibility of system encryption with Windows 10 upgrade using ReflectDrivers mechanism
- Make EFI Rescue Disk decrypt partition correctly when Windows Repair overwrites first partition sector.
- Add Driver option in the UI to explicitly allow Windows 8.1 and Windows 10 defragmenter to see VeraCrypt encrypted disks.
- Add internal verification of binaries embedded signature to protect against some types to tampering attacks.
- Fix Secure Desktop not working for favorites set to mount at logon on Windows 10 under some circumstances.
- when Secure Desktop is enabled, use it for Mount Options dialog if it is displayed before password dialog.
- when extracting files in Setup or Portable mode, decompress zip files docs.zip and Languages.zip in order to have ready to use configuration.
- Display a balloon tip warning message when text pasted to password field is longer than maximum length and so it will be truncated.
- Implement language selection mechanism at the start of the installer to make easier for international users.
- Add check on size of file container during creation to ensure it's smaller than available free disk space.
- Fix buttons at the bottom not shown when user sets a large system font under Window 7.
- Fix compatibility issues with some disk drivers that don't support IOCTL_DISK_GET_DRIVE_GEOMETRY_EX ioctl.
- MacOSX:
- Support pasting values to password fields using keyboard (CMD+V and CMD+A now working properly).
- Add CheckBox in mount option dialog to force the use of embedded backup header during mount.
- When performing backup of volume header, automatically try to use embedded backup header if using the main header fails.
- Implement benchmarking UI for Hash and PKCS-5 PRF algorithms.
- Linux:
- Don't allow waiting dialog to be closed before the associated operation is finished. This fix a crash under Lubuntu 16.04.
- Add CheckBox in mount option dialog to force the use of embedded backup header during mount.
- When performing backup of volume header, automatically try to use embedded backup header if using the main header fails.
- Implement benchmarking UI for Hash and PKCS-5 PRF algorithms.
- Remove limitation of hidden volume protection on disk with sector size larger than 512 bytes.
### 1.22 — VeraCrypt version 1.22
- Date: 2018-04-04
- Version: 1.22
- Original notes: https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.22
- Permalink: https://whatsnew.fyi/product/veracrypt/releases/1.22
- Labels: Platforms: Desktop
Binaries for Windows, Linux and MacOSX are available at [Launchpad](https://launchpad.net/veracrypt/trunk/1.22), [Sourceforge](https://sourceforge.net/projects/veracrypt/files/VeraCrypt%201.22/) and [Bitbucket](https://bitbucket.org/veracrypt/veracrypt/downloads/)
###### Changes between 1.21 and 1.22 (30 March 2018) :
- All OSs:
- SIMD speed optimization for Kuznyechik cipher implementation (up to 2x speedup).
- Add 5 new cascades of cipher algorithms: Camellia-Kuznyechik, Camellia-Serpent, Kuznyechik-AES, Kuznyechik-Serpent-Camellia and Kuznyechik-Twofish.
- Windows:
- MBR Bootloader: Fix failure to boot hidden OS on some machines.
- MBR Bootloader: Reduce CPU usage during password prompt.
- Security enhancement: Add option to block TRIM command for system encryption on SSD drives.
- Implement TRIM support for non-system SSD drives and add option to enable it (TRIM is disabled by default for non-system volumes).
- Better fix for "Parameter Incorrect" issues during EFI system encryption in some machines.
- Driver: remove unnecessary dependency to wcsstr which can cause issues on some machines.
- Driver: Fix "Incorrect Parameter" error when mounting volumes on some machines.
- Fix failure to mount system favorites during boot on some machines.
- Fix current application losing focus when VeraCrypt is run in command line with /quit /silent switches.
- Fix some cases of external applications freezing during mount/dismount.
- Fix rare cases of secure desktop for password dialog not visible which caused UI to block.
- Update libzip to version 1.5.0 that include fixes for some security issues.
- Extend Secure Desktop feature to smart card PIN entry dialog.
- Fix truncated license text in installer wizard.
- Add portable package that allows extracting binaries without asking for admin privileges.
- Simplify format of language XML files.
- Workaround for cases where password dialog doesn't get keyboard focus if Secure Desktop is not enabled.
- Linux:
- Fix failure to install GUI version under recent versions of KDE.
- Fix wxWidgets assertion failed when backing up/restoring volume header.
- MacOSX:
- Fix issue preventing some local help files from opening in the browser.