1

This question already has an answer here:

If one had an encrypted drive using Bitlocker, is it worth it to encrypt that drive again using another tool like VeraCrypt? Does this provide an extra layer of protection?

Not a duplicate of a question which deals with a more generalised point of view.

marked as duplicate by forest, Rory Alsop Apr 3 '18 at 8:09

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

3

Not really unless you are attempting to prevent people that have the bitlocker decryption key from accessing the drive, presuming you can make that work at all.

  • Yeah that's another thing I was wondering, is it even possible? – Azxdreuwa Apr 2 '18 at 18:34
2

You are not adding any security. The difficulty on obtaining two passwords is not double of the work of getting one password. If someone manages to compromise one password, you can assume they can compromise two or three.

If you have a keylogger installed, it will get whatever decryption passwords you have, no matter how many. In this case, encrypting it two or ten times adds nothing.

If you are targeted by a government agency, you may have to hand off the keys, so having an extra layer does not improve anything.

And if you somehow loses one password, you lose the entire drive. By considering security as the called CIA principles (Confidentiality, Integrity, Availability), the more layers you add, the less security you have - because of the decreased availability potential.

  • But if one uses a USB for bitlocker doesn't that mitigate the 'two passwords' issue slightly? – Azxdreuwa Apr 2 '18 at 20:41
  • Actually it doesn't decrease availability necessarily. Use of the TPM chip in the machine means that the password is for recovery purposes. So you'd only need the veracrypt password. – Jim B Apr 2 '18 at 22:13

Not the answer you're looking for? Browse other questions tagged or ask your own question.