Questions tagged [veracrypt]

VeraCrypt is a disk encryption add-on for Windows, Linux and other operating systems. It is a successor of TrueCrypt.

Filter by
Sorted by
Tagged with
3 votes
3 answers
4k views

Securely changing Veracrypt password

How can I change a Veracrypt (master) password efficiently and securely? Based on the answers here, it is not safe to use system --> change password due to various reasons. I cannot simply image ...
0 votes
0 answers
84 views

I need help properly encrypting my computer SSD

My main laptop recently broke down and i've been forced to use an older laptop I had in storage. This machine was encrypted years ago with veracrypt and only has an SSD. It's around 250 GB of storage. ...
1 vote
1 answer
2k views

Using DD to get the hash of a non-system partition encrypted by VeraCrypt

I am trying to use DD for Windows to obtain the hash of a non-system partition that was encrypted via Veracrypt, but have run into a bit of a problem. The command I used to get the hash of the ...
1 vote
0 answers
106 views

Do I retain plausible deniability if using "quick format" in veracrypt on new SSD?

I bought a new 2 TB SSD (NVMe). I want to turn it entirely into a veracrypt volume, nearly all of the drive being for a hidden volume. First, I told it to do a "quick format", which was done ...
1 vote
1 answer
3k views

How to crack a forgotten VeraCrypt password

Bad news, I lost my VeraCrypt password. (Yes, it was extremely stupid.) Good news I used a self-created formula to build the password. I do this because it makes the password long and complex, but ...
17 votes
3 answers
78k views

Veracrypt: Which encryption algorithm + hash algorithm to use?

Which between the two encryption algorithms AES(Twofish(Serpent)) and Serpent(Twofish(AES)) is most secure and which hash algorithm to use between SHA-512, Whirlpool, SHA-256 , and Streebog?
0 votes
0 answers
99 views

What are the security threats of VeraCrypt on Windows?

I'm having some kind of (IMHO) useless discussion on VeraCrypt being a "trojan" on Windows: We have a product named "Checkpoint Harmony Endpoint Security" that is intended to ...
0 votes
3 answers
813 views

How is one supposed to choose between encryption algorithms/settings in VeraCrypt? [duplicate]

Every single time I install an new storage device, I'm faced with the same impossible task: how to determine what is the most secure encryption algorithm/settings? Over the years, I have basically ...
0 votes
1 answer
183 views

I've read veracrypt documentation, but dont understand these 3 points

I've read veracrypt documentation, but don't understand these 3 points. • A VeraCrypt volume resides on a device/filesystem that saves data (or on a device/filesystem that is controlled or monitored ...
0 votes
2 answers
827 views

How can we estimate the time and computing resources needed to break or crack an encryption algorithm and/or password?

I am not too familiar with the technical jargon, so bear with me while I explain the issue in simple and naive words. I have looked into many places but still haven't found a solution to this specific ...
1 vote
2 answers
169 views

Is it sufficient to just change the password of a container after a leak?

Let's assume, an attacker gains access to an encrypted container with a weak password. They start a brute-force attack and I assume they will succeed. To protect any content which has been added to ...
1 vote
2 answers
1k views

Full disk encryption: Legacy boot mode (MBR) vs. EFI boot mode

FDE tools like VeraCrypt will encrypt the whole system drive when the machine uses legacy boot mode (MBR). But they will only encrypt the system partition if the machine uses EFI boot mode (the EFI ...
0 votes
1 answer
462 views

Can someone access my veracrypt quick formatted container's files more easily than if I'd performed a full format?

I'd like to perform a quick format on my external HDD through veracrypt but I'm not sure if a quick format will allow an outsider to download my data from the HDD with ease compared to a full format. ...
0 votes
1 answer
302 views

USN Journal leaks information on exFAT-hosted files (in VeraCrypt containers)

I'm using a secondary drive to store encrypted files, in VeraCrypt file containers. Unfortunately, even if the external drive is formatted as exFAT, Windows leaks information on files inside mounted ...
1 vote
1 answer
1k views

Veracrypt SSD encryption security analysis vs HDD

I have a SSD and wanted to use VeraCrypt for plausible deniability and protection against any & all level attacks e.g. state sponsored, non sponsored. My goal was to use a VM and place it in the ...
2 votes
1 answer
924 views

Veracrypt and Bitlocker VS Bad Sector

Want to know what happen to: Bitlocker partition Veracrypt partition Veracrypt container If there's bad sector appear in the encryption area. Can I still mount/open the encryption to save non-...
2 votes
2 answers
2k views

A way to know a VeraCrypt volume/header is intact?

Is there a way to know a VeraCrypt volume/header is intact? is there a way to know what hash algorithm was used? I have a VeraCrypt volume that I can't log into. I think the password should have ...
3 votes
2 answers
5k views

Partially forgotten encryption password

I encrypted important files with Veracrypt and I remember most of the password but some parts are forgotten. I need some advice as to what would be the most efficient way of getting the encryption ...
2 votes
2 answers
464 views

Veracrypt container dismounted... chances the master key still in RAM or that it can be decrypted by someone after some hours?

Suppose a Veracrypt container was mounted and dismounted later. Then CCleaner was run, Youtube was used to watch videos, websites are browsed, and so on for 3 hours. Then computer went to sleep (...
14 votes
2 answers
8k views

How robust is a VeraCrypt Container against disk errors (bit rot)?

I am planning to encrypt backup data using VeraCrypt. How safe are the generated containers? My worries is not so much the encryption, but potential data loss due to degrading harddisk media (bit rot) ...
1 vote
0 answers
39 views

Open Veracrypt container (password+keyfile) without password? [duplicate]

I lost my password for encrypted disk. Is there a way to do something without dumb cracking? Maybe recovery mode? Because I just lost 50% of my auth data...?
0 votes
1 answer
2k views

VeraCrypt New Processor TPM Message Issue

I upgraded my processor and now I get this message when starting my computer: We detected a new processor which will change the data/structure of the storage space for firmware TPM. If you did not ...
3 votes
2 answers
293 views

What program can Decrypt specific a Folder/Files during Windows Boot/Loading? (Windows)

I've been looking into Encryption of my data for some time now; I've decided to move ahead with VeraCrypt for encryption all of my partitions (I have 2 disks in 1 laptop) except for the OS (C:) ...
0 votes
2 answers
2k views

Which would be the best "keyfile" for KeepassXC and/or Veracrypt?

I am a Mac user. I opened a keyfile generated by Veracrypt and one generated by KeepassXC. The texts in both of them were quite short. Which keyfile is best (i.e., most random and harder to break ...
3 votes
1 answer
6k views

Do PKCS #11 keyfiles on a yubikey actually improve security for Veracrypt?

I am trying to understand the benefits of a PKCS #11 keyfile stored on a smartcard such as a YubiKey with regards to Veracrypt volumes. Am I correct that the file will be taken off of the hardware ...
1 vote
2 answers
939 views

Please explain more tech details how VeraCrypt mounting works

I've read the docs but could not find an answer to my specific question (or didn't understand which one was the answer). My question context: after I mount the encrypted partition USB drive) on Win10 ...
3 votes
3 answers
7k views

Bruteforce Veracrypt

I forgot my Veracrypt password, I have around 1000-2000 possible password combination and I need a software to bruteforce the password on Windows. What software would that be?
-1 votes
2 answers
381 views

Defending against key recovery from RAM attack

After reading an article from a forensics software company. I'm worried about attacks that may be able to recovery the OTFE(on-the-fly encryption) key of VeraCrypt from RAM. Thereat model: On Windows,...
1 vote
1 answer
2k views

Is it problematic to use file encryption (for cloud storage) inside an encrypted drive?

Background / Requirements using a Windows machine hard drives are already (veracrypt) encrypted volumes not relying on any cloud service provider to trust them with their encryption file by file ...
0 votes
1 answer
343 views

Compromising the UEFI recovery partition

I have a Windows 10 OS, drives are encrypted with the latest version. UEFI is not encrypted, and I have recently installed a BIOS update. I wonder about the possibility of a hacker (if secure boot is ...
0 votes
1 answer
1k views

VeraCrypt: Is it possible to change the master key?

The password in VeraCrypt is used to en-/decrypt a header, that contains a master key, that is used to en-/decrypt the data. I know, that I can change the password, which will not change the master ...
5 votes
2 answers
3k views

Is it cryptographically safe to use veracrypt in a virtualbox virtual machine?

Does virtualbox provide enough entropy (random numbers) for the veracrypt program on the virtual machine? Is it cryptographically safe to use veracrypt inside a virtualbox in a windows 10 guest?
20 votes
3 answers
12k views

Is LUKS still an effective option for consumer FDE considering Elcomsoft can break it?

I use Fedora Linux and was recently looking into doing Full Disk Encryption on data drives such as /home on some of my / my family's PCs. I understand that LUKS security will be partially dependent on ...
1 vote
1 answer
969 views

Remove all traces of files used in Veracrypt container... is this enough?

Suppose that I have a Veracrypt container on Windows 10. I unlock it, open and edit a Text document, open an image, watch a video. Then I close all files, unmount the container. Then I run CCleaner to ...
0 votes
0 answers
177 views

MacBook Pro is Powered On but Locked. Is my VeraCrypt data Readable if Laptop Stolen?

Secenario Consider the case of a MacBook Pro with FileVault active. The computer is on and I'm properly logged on. I frequently need to access sensitive data located in text files on an encrypted ...
15 votes
2 answers
7k views

Is it secure to mount Veracrypt without sudo password in this way

Does this way have any security issues other than what's mentioned in that post? For reference: Create a new group called say veracryptusers and give it the necessary permissions to use VeraCrypt ...
2 votes
1 answer
7k views

How to format Veracrypt external storage when you don't have the password?

I've created this Veracrypt USB storage once and never used it. I've forgotten the password but I still want to use this storage. What should I do? When I plug I can't mount it because I don't have ...
0 votes
0 answers
408 views

Veracrypt issue - have I been hacked?

I had two copies of a Veracrypt encrypted drive, and from them, I made two additional copies of the drive, which was a few days ago. the two copies had the exact same SHA hashes of the original two ...
1 vote
1 answer
1k views

Using Bitlocker and hidden volume feature of VeraCrypt together

I'm currently using Bitlocker encrypted external hard drive. The drive is entire-encrypted and single partition. After dividing the drive into partition A and B, I'm planning to make a hidden volume ...
6 votes
2 answers
10k views

Can I use VeraCrypt with an SSD?

I recently got Windows 10, and I am not overly thrilled at Microsoft having a copy of my password on their servers. I will also be forced to make a hotmail account, instead of just using a local ...
-1 votes
1 answer
351 views

Storing TrueCrypt container inside encrypted Veracrypt USB - data corruption

Is there any risk of data corruption if I store TrueCrypt containers inside a fully encrypted USB (USB encrypted using Veracrypt)? Does encryption inside encryption increase chances of data corruption ...
3 votes
1 answer
392 views

Are many rounds of SHA needed for a random veracrypt key

Assume that I've used white noise from the classic "zener breakdown" circuit to produce 512 bits of random data. If I use these as the key to a Veracrypt volume, is there any benefit to running 200,...
0 votes
0 answers
403 views

How to have full drive encyption that is unlocked while a USB device is plugged in?

I'd like a solution that autounlocks Bitlocker, VeraCrypt or similar FDE on Windows 10 while I have a device plugged in. When it's not plugged in (or I lose/destroy the device) it should just ask for ...
99 votes
5 answers
49k views

What is the benefit of having FIPS hardware-level encryption on a drive when you can use Veracrypt instead?

The expensive one: https://www.dustinhome.se/product/5010873750/ironkey-basic-s1000 The cheap one: https://www.dustinhome.se/product/5010887912/datatraveler-100-g3 Over 14,000 SEK difference in price. ...
7 votes
1 answer
785 views

Why we are still required to move the mouse when generating the keys in VeraCrypt?

During the setup of a new encrypted volume, the VeraCrypt requires a random mouse movement within the window. If someone looking from the outside can see that a monkey sitting in front of a computer ...
0 votes
0 answers
53 views

Is storing passwords in encrypted container still bad practice? [duplicate]

Suppose I need to store a bunch of passwords: storing them in a txt or odt file inside an encrypted container, such as the ones produced by VeraCrypt, is bad practice? Would I put myself at risk? If ...
0 votes
1 answer
320 views

Can VeraCrypt encrypted volume be tampered with?

Reading on the security of Borg backups and both encryption and authentication is used (Encrypt-then-MAC). My understanding is authentication is used to prevent tampering which is especially important ...
1 vote
2 answers
3k views

How is the Veracrypt decryption speed faster than simply duplicating the same data?

I'm thinking of installing Veracrypt and I read that it takes Veracrypt about 5 minutes to decrypt a 500 gig SSD. How is this possible? It takes me much longer to duplicate the same 500 gigs on my ...
1 vote
3 answers
249 views

Preventing access to encrypted files at all

Suppose I create an encrypted container using VeraCrypt and want to upload it to Google Drive/One Drive for storage. The container is encrypted with AES-256. I know that no one can extract any meaning ...
2 votes
3 answers
1k views

How to eliminate data leaks when accessing encrypted data?

Goal: Encrypt/secure and access sensitive files (PDFs, etc.) locally. Method 1: Store files in a VeraCrypt file-hosted volume (container). Concern: Data Leaks. When mounting and reading files from a ...