TrueCrypt is a freeware software application used for on-the-fly encryption (OTFE).

learn more… | top users | synonyms

58
votes
3answers
15k views

Is TrueCrypt not secure now and should I stop using it? [closed]

The official TrueCrypt webpage now states: WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues This page exists only to help migrate existing data encrypted by ...
34
votes
5answers
7k views

Are there any reasonable TrueCrypt forks?

Unfortunately, TrueCrypt may have been discontinued yesterday. I use LUKS on Linux, but I liked the fact that with TrueCrypt I had a portable solution across Windows, Mac, & Linux. TrueCrypt ...
24
votes
3answers
21k views

Is 7-Zip's AES encryption just as secure as TrueCrypt's version?

The main difference being TrueCrypt creates containers and 7-Zip encrypts the file itself, so file sizes can be guessed. Now let's just talk about the strength and breakability of the encryption. ...
15
votes
7answers
5k views

Is TrueCrypt safe enough to store clear-text-passwords?

The reason: I want to be able to use a portable USB drive to access my passwords on any machine and OS. TrueCrypt seems to be the only program that has sufficient support on all major platforms. So I ...
13
votes
3answers
803 views

What are the security implications of 'open-source' vs. 'source-available'?

In light of the current fiasco surrounding TrueCrypt, I have received considerable criticism from current clients and peers in the IT industry for my continued support of the open-source model. Such ...
12
votes
1answer
2k views

TrueCrypt, Master password possible?

I recently was talking with somebody, and they said something along the lines of TrueCrypt having a "master key" password that certain authorities have. Now, from what I know about how TrueCrypt ...
11
votes
1answer
2k views

Truecrypt compromised? (Coldboot attack)

In light of recent developments in computer forensics and "password recovery" utilities, can encryption technologies such as TrueCrypt still be relied on for a high degree of protection? It would ...
11
votes
1answer
1k views

What is the problem with TrueCrypt? [duplicate]

Since a few days, the Sourceforge project page of TrueCrypt is displaying a message saying: WARNING: Using TrueCrypt is not secure as it may contain unfixed security issues And, the authors are ...
10
votes
7answers
7k views

Who tells that TrueCrypt is secure?

Assuming you're not running on a compromised machine and you're following common recommendations (long random passwords, etc.), who specifically (name and affiliation) asserts that TrueCrypt is ...
10
votes
4answers
1k views

Can TrueCrypt encrypt SSDs without performance problems?

I am running windows 7 prof on a SSD (mSATA). My CPU i7-3610QM has AES-NI-support. I want to encrypt my SSD with truecrypt with AES. But I am really unsure if this is a good idea because of (a) the ...
10
votes
7answers
1k views

Does adding dictionary words to passwords weaken them?

This might sound like a stupid question, but hear me out. If I'm encrypting my financial information and sensitive data via a program like TrueCrypt, the strength of the password is going to matter a ...
10
votes
1answer
12k views

Brute Forcing Password to a Truecrypt-encrypted file with Partial Knowledge

A while back, I encrypted a few files with Truecrypt, and stored the password in my head. Now I need to access it again, the password isn't working. I'm sure most of it is right, but I'm off by one or ...
9
votes
4answers
3k views

Why not simply backup the TrueCrypt container file?

The TrueCrypt website has some detailed information on how to backup (TrueCrypt non-system volumes) securely, summarised below: Create a new TrueCrypt volume Mount the main volume. Copy all ...
8
votes
3answers
421 views

Erasing a hard-disk, encrypting it as alternative?

I was pondering about this, sometimes people ask me to erase data on their drive. So I use a shredding program, which takes a long time. However what if instead of shredding all the files, I'd just ...
8
votes
3answers
2k views

Truly deniable encryption

What tools can be used to make truly deniable encryption? Suppose, authorities can use any force to make you open your passwords. Truecrypt can have only one hidden container, which means that ...
8
votes
0answers
859 views

What could replace TrueCrypt? [migrated]

Now that the TrueCrypt project is over, I'm wondering what could replace it. I heard about two projects, both of them are forks of TrueCrypt: TrueCrypt.ch: This one wants to be the successor of ...
7
votes
3answers
2k views

Secure sync of TrueCrypt containers

Need to sync arbitrary files within two TrueCrypt containers; one container is a backup, the other the one actively used by me, both are local during the transaction. Current concern security wise is ...
7
votes
1answer
741 views

Plausible deniability with TrueCrypt

If I have a TrueCrypt container with a capacity of 2 GB which I use to fill 1 GB with real, hidden data, and leave the other GB for decoy data, then if I need to reveal a password and give out the ...
7
votes
1answer
274 views

When TrueCrypt prompts to re-enable automatic mounting, should I be worried?

Assume one day you receive the following error from TrueCrypt: is that a reason to worry that someone may have removed the disk (in my case disk 0) and used it offline and then put it back into the ...
6
votes
3answers
2k views

For how much time should I randomly move the mouse for generating encryption keys?

When creating a Truecrypt volume, there is the wizard page in which the user is told to randomly move the mouse (the longer the better) to generate entropy, and that it will significantly increase the ...
6
votes
2answers
330 views

Full-disk encryption and theft mitigation?

Is it possible to combine the security of full-disk encryption (e.g. Truecrypt) with the honeypot-like performance of anti-theft tools (e.g. Prey)? In other words, is it feasible to have both strong ...
6
votes
2answers
3k views

Full disk encryption and multi-factor authentication

All serious full disk encryption schemes I have looked into use a static password for authentication. For example, TrueCrypt supports two-factor authentication with keyfiles, but not for system ...
6
votes
1answer
822 views

Are there other ways to encrypt files other then TrueCrypt and BitLocker [closed]

I don't trust BitLocker. Probably backdoored and relies on TPM which can be hacked according to DEFON. It also does not allow for hidden partitions or other advantages like TrueCrypt. With TrueCrypt ...
6
votes
3answers
9k views

Full Disk Encryption with GPT disk support

On my old computer I used Truecrypt full disk encryption. My old computer however was running Windows 7 with a standard MBR partition scheme. I recently got a new laptop with the fancy UEFI support. ...
5
votes
3answers
1k views

Is using the same password for multiple TrueCrypted volumes safe?

I want to use TrueCrypt for encrypting multiple disk volumes. Assume I use the default cryptographic algoritm (AES) and hash algorithm (RIPEMD-160) and that nobody can get my passwords through ...
5
votes
4answers
3k views

TrueCrypt -vs- MacOS encrypted sparse image - equally secure? Other alternatives?

I'm currently trying to find my personal best solution for storing passwords and other sensible data. Recently I've used 1Password on iPhone and Mac but I'm not really satisfied with its predefined ...
5
votes
4answers
288 views

Is Encrpyting Home Sufficient?

I currently have a fully encrypted Windows System, and I'm looking at switching to Ubuntu. Is encrypting my home directory (with ecryptfs) sufficient? On windows this would be problematic due to ...
5
votes
3answers
4k views

How easily could be truecrypt and EFS cracked in this scenario

I suspect some info was subtracted in the past months from my laptop. Therefore Im looking for methods to encrypt my data. I want to try using truecrypt for the sensitive files folder plus EFS for ...
5
votes
1answer
11k views

Repairing corrupt TrueCrypt volumes/disks?

(I'm asking this for a friend of mine as I'm trying to help him with this problem over remote desktop, so if any details are needed, just ask and I will get them). Two entire hard disks were encrypted ...
5
votes
1answer
812 views

Do TrueCrypt volumes look like random data?

Let say I use Eraser (or other tools) to erase my hard drive (using DoD standards which is 7 times or Gutmann which is 35 times), These eraser tools just write random data on the hard drive many ...
5
votes
1answer
2k views

Can the TrueCrypt hash be slowed down?

I have read that TrueCrypt uses ~2k SHA-1 hashes on the password. The iteration count is part of the TrueCrypt specification and is 2000 for SHA1, 2000 for RIPEMD-160 and 1000 for Whirlpool ...
5
votes
1answer
1k views

Truecrypt - One keyfile multiple passwords

Is it possible to create one keyfile that opens a Truecrypt volume and this keyfile is protected (aes encryption fe) with a password? The use case is a True crypt volume accessed by multiple ...
5
votes
1answer
316 views

AV boot disks and Truecrypt encrypted drives

I was wondering if there were any "how-to" guides on what is needed to modify AV boot disks, such as Sophos, kaspersky, AVG etc in order to load the decryption drivers/bootloader for Truecrypt before ...
4
votes
2answers
2k views

TrueCrypt and Keyfiles hidden among 500,000 other .pdf files

A question from a newby: I have a USB or Standalone HardDrive with a TRUECRYPT hidden partition on it that needs one or more "keyfiles" and a password to access. What tells the attacker what kind ...
4
votes
3answers
2k views

Nested Truecrypt containers

Which is more secure: use one container encrypted with AES > Twofish > Serpent = 768bits key size make an AES container, and inside it make another Twofish container then inside it make a third ...
4
votes
2answers
3k views

Faster methods for decrypting a TrueCrypt disk, esp. knowing the algorithms used

I encrypted (with TrueCrypt) all my hard drives and had the passwords stored in an encrypted file on my USB disk. The passwords are all (except one) 50 character randomly-generated ciphers, there's no ...
4
votes
2answers
150 views

Does adding a non-entropic part to a password makes it less secure?

Suppose I'm encrypting a file via AES using a password of my choice, or creating a TrueCrypt volume using a password and no keyfiles. Which of the following two passwords would be more secure: ...
4
votes
2answers
1k views

How can TrueCrypt encrypt a System Drive on a live OS?

When setting up whole disk encryption with TrueCrypt, one re-boot is required to test the operation of the TrueCrypt Boot Loader. After this reboot is when actual encryption of the system takes ...
3
votes
3answers
2k views

Securing my USB flash drive with Truecrypt and FreeOTFE

I want to know if I encrypt my flash with Truecrypt "Encrypt a non-system partition/drive" option and then mount it and then make a container with FreeOTFE on the Truecrypt encrypted drive and then ...
3
votes
5answers
1k views

TrueCrypt dataleaks that might betray the “Deniable File System” option

Reading into "Operation Satyagraha", one would have to believe give all the resources used that the investigators had some reason to believe there was data to decrypt, even though in theory and in ...
3
votes
3answers
5k views

Can files deleted from a true crypt volume be recovered?

I have a True Crypt volume that's set as a file. When I mount the volume and delete a file within the container, windows asks if I'd like to send the file to the recycle bin. While the volume is ...
3
votes
3answers
4k views

using truecrypt keyfiles with weak passwords

I'm using Truecrypt and I have multiple volumes on multiple computers. Keeping each of the 20+ character passwords straight is getting complicated, so I want to use keyfiles. Since the password is ...
3
votes
1answer
566 views

Recognizing PGP-encrypted disks

I am studying various disk encryption schemes (such as PGP, MS Bit Locker, BestCrypt and TrueCrypt) on my Windows OS. I am interested to know how an encrypted partition/disk/file with a particular ...
3
votes
2answers
3k views

Best practices for TrueCrypt + Yubikey combination

I'm trying to find a secure and convenient way to encrypt my external disk with TrueCrypt. Currently I use a 50 character strong password but I'm tired of typing it every single time. I have a Yubikey ...
3
votes
3answers
531 views

Truecrypt Plausible Deniability - Linux

As I understand it plausible deniability gives the user the option of having two passwords, one you provide the authorities/extortionist with and another that you might use for your self and files you ...
3
votes
2answers
1k views

TrueCrypt vs “native” whole-disk encryption on Linux?

When preparing to encrypt an entire partition, is it better to rely on "native" whole-disk encryption (eg following this tutorial), or an external tool like TrueCrypt? The wikipedia article comparing ...
3
votes
2answers
625 views

How to secure a truecrypt container allowing access with multiple SSH public keys?

I would like to create a TrueCrypt container which can be accessed by multiple people. The container itself can be stored anywhere, e.g. in a shared folder in Dropbox or Google Drive, ... I would ...
2
votes
2answers
1k views

Use truecrypt to make data unrecoverable

If I format all my drivers c,d,e,f and then make a truecrypt volumes equal to drive size then delete it 'the voulme' will that make the old data unrecoverable ex. d:= 30g i use truecrypt to make 30g ...
2
votes
2answers
310 views

Hiding Keepass databases and Truecrypt containers

If I change the extension of a Keepass database (i.e. change the .kdbx to something like .txt), Keepass is still able to open it. Is this an effective way for hiding the databases from an adversary?! ...
2
votes
2answers
770 views

Erasing Truecrypt keyfile(s) after volume has been mounted

To improve security to some extent, I use keyfile generation technique (to change an existing file into an actual keyfile). The actual keyfile is stored on volatile file system that doesn't survive ...