Is it safe to create a Veracrypt partition (on a USB) such that
- it takes up the whole device (ie. not a "file", but using the USB as the storage container)
- it contains only a standard volume (no hidden volume)
- it uses a weak password (eg.
- it is quick formatted (ie. not overwritten with garbage)
- no one obtains the volume header during this time (while the weak password is in use)
I then easily mount and dismount the Veracrypt container adding files. After I am done (eg. after a few days or a week), I change the volume password (eg. from
I am concerned that by initially using a weak password then changing it to a sufficiently strong password, the security is reduced.
In particular, if an attacker tries to recover the volume header (of the weak password) from the start and end of the partition, they can use either the complex password (
Zdbze5CVPFTPUrPbxzM4GG3N8sTnAktRRcFyYftkdWsUg) or the weak password (
123456) to unlock the Veracrypt container.