1.26.29 (June 9th; 2026):$$$$$$All OSes:$$$Add Argon2id as an alternative memory-hard KDF for non-system volumes.$$$Use KDF terminology in the user interface and documentation instead of PKCS-5 PRF.$$$Update logo icons with simplified icons without extra label text.$$$Harden XML and TLV parsers against malformed input.$$$Security: Fix GHSA-94c6-mgmv-mqc5: non-default WOLFCRYPT=1 builds now use wolfCrypt PBKDF2 instead of HKDF and honor VeraCrypts PBKDF2 iteration count.$$$Reported by https://github.com/vastblast$$$CVE-2026-53762$$$Fix CPU feature detection and crypto implementation edge cases; including AVX2/leaf 7 detection; BLAKE2s/Argon2 no-SSE2 x86 fallback paths; Camellia SSSE3 dispatch; Twofish x64 multiblock tail handling and Whirlpool alignment.$$$Update documentation; including Argon2id/KDF information and split Windows/Unix command line usage pages.$$$Update translations.$$$Windows:$$$Fix rare BSOD (Blue Screen of Death) issue affecting the VeraCrypt driver.$$$Fix hibernation crash on fresh Windows 11 25H2 installations.$$$Security: Fix GHSA-jjcr-75w7-58jp: hidden volume quick format no longer uses the file-container allocation shortcut that wrote plaintext zero sectors at 128 MiB intervals; preserving plausible deniability.$$$Reported by https://github.com/vastblast$$$Regression introduced in 1.26.6$$$CVE-2026-54073$$$Harden Windows driver input validation and crash dump filter handling (GH PR #1590).$$$Improve driver I/O handling; including safer request completion; ordered volume flush barriers; and better VERIFY/TRIM validation.$$$Fix PBKDF XSTATE cleanup and add Win64 unwind metadata for AES assembly.$$$Speed up mounting when KDF autodetection is selected.$$$Allow selecting which KDF algorithms are included in the benchmark dialog.$$$Allow canceling long mount operations from the wait dialog and with the new /cancelmount CLI switch; including auto-mount scans.$$$Add support for new Microsoft UEFI CA 2023 signed EFI bootloaders while preserving Microsoft UEFI CA 2011 support.$$$Improve EFI system encryption repair and upgrade handling; including stuck decryption finalization; Post-OOBE repair; loader restoration verification; and clearer missing-loader reporting.$$$Fix EFI DcsProp rewrite handling.$$$Fix ghost drive letter after command line unmount (GH #337; GH #1426).$$$Fix favorite volume mount race.$$$Validate PIM when changing only the KDF.$$$Fix elevated COM format drive validation and device path normalization (GH #1670).$$$Fix ReFS formatting during volume creation.$$$Fix MSI traveler disk creation with WHQL-signed drivers; ARM64 MSI build; Start Menu folder upgrades; and discovery of newer SDK MSI tools.$$$Add CLI switch /protectScreen to allow disabling screen protection in portable mode (cf documentation).$$$Add argument to CLI switch /protectMemory to allow disabling memory protection in portable mode (cf documentation).$$$Add setting and CLI switch /enableIME to allow enabling Input Method Editor (IME) in Secure Desktop.$$$Use tab control for VeraCrypt preferences to reduce clutter and size of the dialog.$$$Provide VeraCrypt C/C++ SDK for creating volumes (https://github.com/veracrypt/VeraCrypt-SDK).$$$Update LZMA SDK to version 26.01.$$$Linux:$$$Update Ubuntu 25.04 dependency to require libwxgtk3.2-1t64 package.$$$Add support for building against FUSE3.$$$Add in-kernel NTFS driver selection for NTFS mounts; including --filesystem=kernel-ntfs and -m kernelntfs.$$$--filesystem=ntfs3 now pins the kernel ntfs3 driver and bypasses mount helpers such as mount.ntfs3.$$$Fix AppImage portability and language loading; bundle a matching FUSE library; and allow AppImage file name to start with veracrypt in any case.$$$Suppress redundant already running dialog and store the GUI instance lock under XDG paths.$$$Add emergency cleanup for stale unmounts.$$$Parallelize header KDF autodetection.$$$Honor nokernelcrypto during external formatting.$$$On WSL; open mounted volumes using Windows Explorer.$$$Add support for reproducible Linux builds; includ

1.26.24 (May 30th; 2025):$$$$$$All OSes:$$$Fix whirlpool implementation for big-endian platforms (GH #1529).$$$Rename Dismount All to Unmount All in UI. Use ALT+u as new accelerator key instead of ALT+s$$$Add contributed Chinese and Russian CHM documentation.$$$Update translations.$$$Windows:$$$Implemented screen protection against screenshots and screen recording; enabled by default.$$$This feature can be disabled during installation or via the Performance/Driver Configuration settings.$$$Added checkboxes to the MSI installer to control memory protection and screen protection features.$$$Introduced command-line options DISABLEMEMORYPROTECTION and DISABLESCREENPROTECTION for the MSI installer to manage these features.$$$Both options accept values 0 (enabled) or 1 (disabled).$$$Example usage:$$$msiexec /i VeraCrypt_Setup_x64_1.26.24.msi DISABLESCREENPROTECTION=1 /qn REBOOT=ReallySuppress MSIRESTARTMANAGERCONTROL=Disable ACCEPTLICENSE=YES$$$Fix race conditions when multiple instances of veracrypt are started simultaneously.$$$Updated libzip to version 1.11.3.$$$Linux:$$$Add support for AppImage packaging and usage.$$$Fix absolute path of true command not being used when checking if sudo session is active.$$$Fix failure to use Hungarian language translations.$$$Improve generic installer scripts (GH #1514).$$$Add support for /run/media/veracrypt as default mount prefix when /media is not available(GH #1524).$$$Remove pcsclite dependency from .deb/.rpm packages since it is detected/loaded dynamically at runtime.$$$macOS:$$$Fix absolute path of true command not being used when checking if sudo session is active.$$$Create simlink of VeraCrypt in /usr/local/bin to allow using it from command line.$$$Fix failure to use Hungarian language translations.

1.26.24 (May 30th; 2025):$$$$$$All OSes:$$$Fix whirlpool implementation for big-endian platforms (GH #1529).$$$Rename Dismount All to Unmount All in UI. Use ALT+u as new accelerator key instead of ALT+s$$$Add contributed Chinese and Russian CHM documentation.$$$Update translations.$$$Windows:$$$Implemented screen protection against screenshots and screen recording; enabled by default.$$$This feature can be disabled during installation or via the Performance/Driver Configuration settings.$$$Added checkboxes to the MSI installer to control memory protection and screen protection features.$$$Introduced command-line options DISABLEMEMORYPROTECTION and DISABLESCREENPROTECTION for the MSI installer to manage these features.$$$Both options accept values 0 (enabled) or 1 (disabled).$$$Example usage:$$$msiexec /i VeraCrypt_Setup_x64_1.26.24.msi DISABLESCREENPROTECTION=1 /qn REBOOT=ReallySuppress MSIRESTARTMANAGERCONTROL=Disable ACCEPTLICENSE=YES$$$Fix race conditions when multiple instances of veracrypt are started simultaneously.$$$Updated libzip to version 1.11.3.$$$Linux:$$$Add support for AppImage packaging and usage.$$$Fix absolute path of true command not being used when checking if sudo session is active.$$$Fix failure to use Hungarian language translations.$$$Improve generic installer scripts (GH #1514).$$$Add support for /run/media/veracrypt as default mount prefix when /media is not available(GH #1524).$$$Remove pcsclite dependency from .deb/.rpm packages since it is detected/loaded dynamically at runtime.$$$macOS:$$$Fix absolute path of true command not being used when checking if sudo session is active.$$$Create simlink of VeraCrypt in /usr/local/bin to allow using it from command line.$$$Fix failure to use Hungarian language translations.

1.26.20 (February 3rd; 2025):$$$$$$All OSes:$$$Implement SHA-256 acceleration on ARM64 platforms using CPU instructions.$$$Update translations.$$$Replace Dismount with Unmount across the UI and documentation to align with IT standards.$$$Windows:$$$Fix regression in driver that always allowed defragmentation and caused other side effects.$$$Revert to the previous method of gathering system entropy due to stability issues reported by users.

All OSes:$$$Added support for SHA-256 x86 intrinsic to enhance the performance of PBKDF2-HMAC-SHA256.$$$Updated translations$$$Windows:$$$Dropped support for Windows 32-bit.$$$Set Windows 10 October 2018 Update (version 1809) as the minimum supported version.$$$Reduce driver deadlock occurences under low-memory scenarios caused by re-entrant IRP completions.$$$Fixed failed EFI detection on some PCs where the BootOrder variable is not defined $$$Fixed Access Denied error when updating VeraCrypt using EXE setup following a Windows upgrade.$$$Fixed various issues affecting the EFI system encryption configuration editor.$$$Fixed regression in Traveler Disk creation.$$$Replaced the deprecated CryptGenRandom with BCryptGenRandom for generating secure random bytes.$$$Use modern API to gather system entropy for random generation instead of obsolete ones.$$$Update LZMA SDK to version 24.09$$$Update libzip to version 1.11.2

1.26.15 (September 2nd; 2024):$$$$$$Windows:$$$Fix MSI install/uninstall issues:$$$Fixed error 1603 returned by MSI silent install when REBOOT=ReallySuppress is specified and a reboot is required.$$$Fixed missing documentation and language files from the MSI package.$$$Fixed MSI not installing new documentation and language files when upgrading from an EXE-based installation.$$$Fixed installation folder not being removed after MSI uninstall in some cases.$$$Fix regression during UEFI system decryption that caused the bootloader to persist.

Minor enhancements to RAM Encryption implementation$$$Fix Secure Desktop issues under Windows 11 22H2$$$Implement support for mounting partially encrypted system partitions.