On my old computer I used Truecrypt full disk encryption. My old computer however was running Windows 7 with a standard MBR partition scheme. I recently got a new laptop with the fancy UEFI support. Yes I know I could always reinstall Windows as legacy BIOS with MBR support however I would like to keep GPT\UEFI. Truecrypt does not work with UEFI yet. Neither does PGP full disk encryption.

Does anyone know of a good (prefer free) full disk encryption solution that supports GPT.

I know I could always use Bitlocker but for some reason I do not trust it considering the whole NSA scandal.

  • 2
    If you don't trust BitLocker, you really probably shouldn't trust UEFI either. Putting a back door in BitLocker would be extremely risky (to the scale of MS ceasing to be a company) if it was ever discovered and abused. It's a night and day difference between letting the government access some unencrypted online records vs compromising secure systems everywhere to open a back door of dubious merit. Commented Aug 9, 2013 at 17:56
  • Why do you say that? UEFI is pretty much BIOS 2.0. Does bitlocker offer any kind of "cloud" key backup similar to Apple? Apple will be happy to comply and give up keys. Commented Aug 9, 2013 at 18:00
  • if you are going to doubt that BitLocker will protect your data, then you shouldn't trust that UEFI isn't going to allow something to be loaded before the OS to hijack your system for the government. I'm not saying I think it is likely, but simply pointing out that it's just as likely to open up abuse as BitLocker is. It was a statement about your not wanting to use Bitlocker, not a statement about UEFI being bad. Commented Aug 9, 2013 at 18:03
  • Don't backup the key online then. I can't imagine you are required to share your keys. That would make it a non-starter for many enterprises that use BitLocker. Commented Aug 9, 2013 at 18:05
  • Not just a backdoor either. Truecrypt we know for SURE uses AES with a strong implementation and does not truncate keys or do anything else to reduce entropy. It has been vetted by many professionals. Bitlocker on the other hand hasn't... Commented Aug 9, 2013 at 18:20

5 Answers 5


I don't think you're completely right on the TC/GPT issue. According to their documentation for V4.3:

Support for devices with a GPT partition table (GUID partitions). (Windows Vista/2003/XP)

The problem is that Windows 8 have to have GPT partitioning, so you'll have to run TC in legacy 32 bit mode. So it should work fine if you don't have UEFI BIOS or are using the legacy boot mode.

However, if you're ready to pay for it, then Jetico's BestCrypt Volume Encryption may be the best choice, although there are certainly many others out there as well. (I didn't look.)


You also have Symantec Drive Encryption formerly 'PGP Disk encryption'.



BitLocker and DCPP are only ones, as yet to handle GPT OS, disks. Both work great. DCPP is by far the most secure - but is expensive and not easily transportable.


Dmcrypt luks works fine with gpt partition tables.

The boot partition can afaik be encrypted too, but personally, I think that if an attacker has managed to compromise that then you probably have a bunch of key loggers and other such devices installed anyway so you can say bye-bye to security.

Not that it helps much if you want to run Windows.


If you do not trust Bitlocker, then I would suggest waiting for VeraCrypt to release their support for it (and since it is open source you know exactly what the code is doing). It will most likely be released on their next version. If you are using linux you can use LVM on LUKS or dm-crypt on LUKS, you will have to do a lot of editing of files and command line operations though.

  • What command line operations? I just clicked 'Encrypt system' and typed in a passphrase during the installation. Easy. Commented Aug 10, 2013 at 13:50
  • since it is open source you know exactly what the code is doing ... not since Ken Thompson's Turing Award lecture you don't.
    – mlp
    Commented Sep 10, 2013 at 1:28

I have been a long time TrueCrypt user, however was unable to use it on my new computer because my system drive was a GUID Partition Table (GPT). I am currently using VeraCrypt and everything is working as TrueCrypt. If you have a GPT disk, you need do to the following:

  1. Get rid of the system partition of 100 MB which is automatically created by the Windows installer.
  2. Convert your system disk from GPT to MBR (Master Boot Record).
  3. Go to the BIOS and change the boot mode from UEFI with CSM to Legacy.

For step-by-step instructions, visit http://www.genopro.com/misc/Installing-VeraCrypt/ - How to Install VeraCrypt on a GUID Partition Table (GPT)

  • Sticking to GPT was OP main requirement, while you propose him to convert disk to MBR.
    – Suncatcher
    Commented Jul 12, 2017 at 15:09

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .