Questions tagged [veracrypt]
VeraCrypt is a disk encryption add-on for Windows, Linux and other operating systems. It is a successor of TrueCrypt.
150
questions
3
votes
3
answers
4k
views
Securely changing Veracrypt password
How can I change a Veracrypt (master) password efficiently and securely?
Based on the answers here, it is not safe to use system --> change password due to various reasons.
I cannot simply image ...
0
votes
0
answers
84
views
I need help properly encrypting my computer SSD
My main laptop recently broke down and i've been forced to use an older laptop I had in storage.
This machine was encrypted years ago with veracrypt and only has an SSD. It's around 250 GB of storage.
...
1
vote
1
answer
2k
views
Using DD to get the hash of a non-system partition encrypted by VeraCrypt
I am trying to use DD for Windows to obtain the hash of a non-system partition that was encrypted via Veracrypt, but have run into a bit of a problem.
The command I used to get the hash of the ...
1
vote
0
answers
106
views
Do I retain plausible deniability if using "quick format" in veracrypt on new SSD?
I bought a new 2 TB SSD (NVMe). I want to turn it entirely into a veracrypt volume, nearly all of the drive being for a hidden volume. First, I told it to do a "quick format", which was done ...
1
vote
1
answer
3k
views
How to crack a forgotten VeraCrypt password
Bad news, I lost my VeraCrypt password. (Yes, it was extremely stupid.) Good news I used a self-created formula to build the password. I do this because it makes the password long and complex, but ...
17
votes
3
answers
78k
views
Veracrypt: Which encryption algorithm + hash algorithm to use?
Which between the two encryption algorithms AES(Twofish(Serpent)) and Serpent(Twofish(AES)) is most secure and which hash algorithm to use between SHA-512, Whirlpool, SHA-256 , and Streebog?
0
votes
0
answers
99
views
What are the security threats of VeraCrypt on Windows?
I'm having some kind of (IMHO) useless discussion on VeraCrypt being a "trojan" on Windows:
We have a product named "Checkpoint Harmony Endpoint Security" that is intended to ...
0
votes
3
answers
813
views
How is one supposed to choose between encryption algorithms/settings in VeraCrypt? [duplicate]
Every single time I install an new storage device, I'm faced with the same impossible task: how to determine what is the most secure encryption algorithm/settings?
Over the years, I have basically ...
0
votes
1
answer
183
views
I've read veracrypt documentation, but dont understand these 3 points
I've read veracrypt documentation, but don't understand these 3 points.
• A VeraCrypt volume resides on a device/filesystem that saves data (or on a device/filesystem that is controlled or monitored ...
0
votes
2
answers
827
views
How can we estimate the time and computing resources needed to break or crack an encryption algorithm and/or password?
I am not too familiar with the technical jargon, so bear with me while I explain the issue in simple and naive words. I have looked into many places but still haven't found a solution to this specific ...
1
vote
2
answers
169
views
Is it sufficient to just change the password of a container after a leak?
Let's assume, an attacker gains access to an encrypted container with a weak password. They start a brute-force attack and I assume they will succeed. To protect any content which has been added to ...
1
vote
2
answers
1k
views
Full disk encryption: Legacy boot mode (MBR) vs. EFI boot mode
FDE tools like VeraCrypt will encrypt the whole system drive when the machine uses legacy boot mode (MBR). But they will only encrypt the system partition if the machine uses EFI boot mode (the EFI ...
0
votes
1
answer
462
views
Can someone access my veracrypt quick formatted container's files more easily than if I'd performed a full format?
I'd like to perform a quick format on my external HDD through veracrypt but I'm not sure if a quick format will allow an outsider to download my data from the HDD with ease compared to a full format. ...
0
votes
1
answer
302
views
USN Journal leaks information on exFAT-hosted files (in VeraCrypt containers)
I'm using a secondary drive to store encrypted files, in VeraCrypt file containers.
Unfortunately, even if the external drive is formatted as exFAT, Windows leaks information on files inside mounted ...
1
vote
1
answer
1k
views
Veracrypt SSD encryption security analysis vs HDD
I have a SSD and wanted to use VeraCrypt for plausible deniability and protection against any & all level attacks e.g. state sponsored, non sponsored. My goal was to use a VM and place it in the ...
2
votes
1
answer
924
views
Veracrypt and Bitlocker VS Bad Sector
Want to know what happen to:
Bitlocker partition
Veracrypt partition
Veracrypt container
If there's bad sector appear in the encryption area.
Can I still mount/open the encryption to save non-...
2
votes
2
answers
2k
views
A way to know a VeraCrypt volume/header is intact?
Is there a way to know a VeraCrypt volume/header is intact? is there a way to know what hash algorithm was used?
I have a VeraCrypt volume that I can't log into. I think the password should have ...
3
votes
2
answers
5k
views
Partially forgotten encryption password
I encrypted important files with Veracrypt and I remember most of the password but some parts are forgotten. I need some advice as to what would be the most efficient way of getting the encryption ...
2
votes
2
answers
464
views
Veracrypt container dismounted... chances the master key still in RAM or that it can be decrypted by someone after some hours?
Suppose a Veracrypt container was mounted and dismounted later. Then CCleaner was run, Youtube was used to watch videos, websites are browsed, and so on for 3 hours. Then computer went to sleep (...
14
votes
2
answers
8k
views
How robust is a VeraCrypt Container against disk errors (bit rot)?
I am planning to encrypt backup data using VeraCrypt. How safe are the generated containers? My worries is not so much the encryption, but potential data loss due to degrading harddisk media (bit rot) ...
1
vote
0
answers
39
views
Open Veracrypt container (password+keyfile) without password? [duplicate]
I lost my password for encrypted disk.
Is there a way to do something without dumb cracking?
Maybe recovery mode? Because I just lost 50% of my auth data...?
0
votes
1
answer
2k
views
VeraCrypt New Processor TPM Message Issue
I upgraded my processor and now I get this message when starting my computer:
We detected a new processor which will change the data/structure of the storage space for firmware TPM. If you did not ...
3
votes
2
answers
293
views
What program can Decrypt specific a Folder/Files during Windows Boot/Loading? (Windows)
I've been looking into Encryption of my data for some time now; I've decided to move ahead with VeraCrypt for encryption all of my partitions (I have 2 disks in 1 laptop) except for the OS (C:) ...
0
votes
2
answers
2k
views
Which would be the best "keyfile" for KeepassXC and/or Veracrypt?
I am a Mac user. I opened a keyfile generated by Veracrypt and one generated by KeepassXC. The texts in both of them were quite short. Which keyfile is best (i.e., most random and harder to break ...
3
votes
1
answer
6k
views
Do PKCS #11 keyfiles on a yubikey actually improve security for Veracrypt?
I am trying to understand the benefits of a PKCS #11 keyfile stored on a smartcard such as a YubiKey with regards to Veracrypt volumes. Am I correct that the file will be taken off of the hardware ...
1
vote
2
answers
939
views
Please explain more tech details how VeraCrypt mounting works
I've read the docs but could not find an answer to my specific question (or didn't understand which one was the answer).
My question context: after I mount the encrypted partition USB drive) on Win10 ...
3
votes
3
answers
7k
views
Bruteforce Veracrypt
I forgot my Veracrypt password, I have around 1000-2000 possible password combination and I need a software to bruteforce the password on Windows.
What software would that be?
-1
votes
2
answers
381
views
Defending against key recovery from RAM attack
After reading an article from a forensics software company. I'm worried about attacks that may be able to recovery the OTFE(on-the-fly encryption) key of VeraCrypt from RAM.
Thereat model:
On Windows,...
1
vote
1
answer
2k
views
Is it problematic to use file encryption (for cloud storage) inside an encrypted drive?
Background / Requirements
using a Windows machine
hard drives are already (veracrypt) encrypted volumes
not relying on any cloud service provider to trust them with their encryption
file by file ...
0
votes
1
answer
343
views
Compromising the UEFI recovery partition
I have a Windows 10 OS, drives are encrypted with the latest version.
UEFI is not encrypted, and I have recently installed a BIOS update.
I wonder about the possibility of a hacker (if secure boot is ...
0
votes
1
answer
1k
views
VeraCrypt: Is it possible to change the master key?
The password in VeraCrypt is used to en-/decrypt a header, that contains a master key, that is used to en-/decrypt the data.
I know, that I can change the password, which will not change the master ...
5
votes
2
answers
3k
views
Is it cryptographically safe to use veracrypt in a virtualbox virtual machine?
Does virtualbox provide enough entropy (random numbers) for the veracrypt program on the virtual machine? Is it cryptographically safe to use veracrypt inside a virtualbox in a windows 10 guest?
20
votes
3
answers
12k
views
Is LUKS still an effective option for consumer FDE considering Elcomsoft can break it?
I use Fedora Linux and was recently looking into doing Full Disk Encryption on data drives such as /home on some of my / my family's PCs. I understand that LUKS security will be partially dependent on ...
1
vote
1
answer
969
views
Remove all traces of files used in Veracrypt container... is this enough?
Suppose that I have a Veracrypt container on Windows 10. I unlock it, open and edit a Text document, open an image, watch a video. Then I close all files, unmount the container.
Then I run CCleaner to ...
0
votes
0
answers
177
views
MacBook Pro is Powered On but Locked. Is my VeraCrypt data Readable if Laptop Stolen?
Secenario
Consider the case of a MacBook Pro with FileVault active. The computer is on and I'm properly logged on.
I frequently need to access sensitive data located in text files on an encrypted ...
15
votes
2
answers
7k
views
Is it secure to mount Veracrypt without sudo password in this way
Does this way have any security issues other than what's mentioned in that post?
For reference:
Create a new group called say veracryptusers and give it the necessary permissions to use VeraCrypt ...
2
votes
1
answer
7k
views
How to format Veracrypt external storage when you don't have the password?
I've created this Veracrypt USB storage once and never used it. I've forgotten the password but I still want to use this storage.
What should I do? When I plug I can't mount it because I don't have ...
0
votes
0
answers
408
views
Veracrypt issue - have I been hacked?
I had two copies of a Veracrypt encrypted drive, and from them, I made two additional copies of the drive, which was a few days ago. the two copies had the exact same SHA hashes of the original two ...
1
vote
1
answer
1k
views
Using Bitlocker and hidden volume feature of VeraCrypt together
I'm currently using Bitlocker encrypted external hard drive. The drive is entire-encrypted and single partition.
After dividing the drive into partition A and B, I'm planning to make a hidden volume ...
6
votes
2
answers
10k
views
Can I use VeraCrypt with an SSD?
I recently got Windows 10, and I am not overly thrilled at Microsoft having a copy of my password on their servers. I will also be forced to make a hotmail account, instead of just using a local ...
-1
votes
1
answer
351
views
Storing TrueCrypt container inside encrypted Veracrypt USB - data corruption
Is there any risk of data corruption if I store TrueCrypt containers inside a fully encrypted USB (USB encrypted using Veracrypt)?
Does encryption inside encryption increase chances of data corruption ...
3
votes
1
answer
392
views
Are many rounds of SHA needed for a random veracrypt key
Assume that I've used white noise from the classic "zener breakdown" circuit to produce 512 bits of random data.
If I use these as the key to a Veracrypt volume, is there any benefit to running 200,...
0
votes
0
answers
403
views
How to have full drive encyption that is unlocked while a USB device is plugged in?
I'd like a solution that autounlocks Bitlocker, VeraCrypt or similar FDE on Windows 10 while I have a device plugged in. When it's not plugged in (or I lose/destroy the device) it should just ask for ...
99
votes
5
answers
49k
views
What is the benefit of having FIPS hardware-level encryption on a drive when you can use Veracrypt instead?
The expensive one: https://www.dustinhome.se/product/5010873750/ironkey-basic-s1000
The cheap one: https://www.dustinhome.se/product/5010887912/datatraveler-100-g3
Over 14,000 SEK difference in price. ...
7
votes
1
answer
785
views
Why we are still required to move the mouse when generating the keys in VeraCrypt?
During the setup of a new encrypted volume, the VeraCrypt requires a random mouse movement within the window. If someone looking from the outside can see that a monkey sitting in front of a computer ...
0
votes
0
answers
53
views
Is storing passwords in encrypted container still bad practice? [duplicate]
Suppose I need to store a bunch of passwords: storing them in a txt or odt file inside an encrypted container, such as the ones produced by VeraCrypt, is bad practice? Would I put myself at risk?
If ...
0
votes
1
answer
320
views
Can VeraCrypt encrypted volume be tampered with?
Reading on the security of Borg backups and both encryption and authentication is used (Encrypt-then-MAC).
My understanding is authentication is used to prevent tampering which is especially important ...
1
vote
2
answers
3k
views
How is the Veracrypt decryption speed faster than simply duplicating the same data?
I'm thinking of installing Veracrypt and I read that it takes Veracrypt about 5 minutes to decrypt a 500 gig SSD. How is this possible? It takes me much longer to duplicate the same 500 gigs on my ...
1
vote
3
answers
249
views
Preventing access to encrypted files at all
Suppose I create an encrypted container using VeraCrypt and want to upload it to Google Drive/One Drive for storage. The container is encrypted with AES-256.
I know that no one can extract any meaning ...
2
votes
3
answers
1k
views
How to eliminate data leaks when accessing encrypted data?
Goal: Encrypt/secure and access sensitive files (PDFs, etc.) locally.
Method 1: Store files in a VeraCrypt file-hosted volume (container).
Concern: Data Leaks. When mounting and reading files from a ...