1.8 KiB
1.8 KiB
publish, permalink, title, created, modified, tags, cssclasses
| publish | permalink | title | created | modified | tags | cssclasses | |||
|---|---|---|---|---|---|---|---|---|---|
| true | /apps/veracrypt | VeraCrypt | 2026-01-29T14:04:18.863-07:00 | 2026-02-05T12:16:30.767-07:00 |
|
VeraCrypt is free open-source disk encryption software. I use it predominantly for encrypting data on portable devices (see 10-19 LIFE/13 TECH SETUP/13.12 PROCESSES/Backups for more details).
Installation
Arch Linux:
sudo pacman -S veracrypt
Other distributions: Download from https://veracrypt.io/en/Downloads.html
Usage
Create an encrypted volume
veracrypt -c
Follow the interactive prompts to:
- Choose volume type (normal or hidden)
- Select volume location (file or device)
- Pick encryption algorithm (AES recommended)
- Set volume size
- Create password
Mount a volume
# Mount to /mnt/veracrypt1 (default slot 1)
veracrypt /path/to/volume /mnt/veracrypt1
# Mount with specific slot
veracrypt --slot=2 /path/to/volume /mnt/veracrypt2
Dismount
# Dismount specific volume
veracrypt -d /mnt/veracrypt1
# Dismount all
veracrypt -d
Common Options
| Option | Description |
|---|---|
-c |
Create new volume |
-d |
Dismount |
--slot=N |
Use slot N (1-64) |
-t |
Text mode (no GUI) |
--non-interactive |
For scripts |
-p PASSWORD |
Provide password (insecure, avoid) |
Portable Drive Setup
For encrypted USB drives:
- Create a file-hosted volume on the drive
- Copy the portable VeraCrypt binary to the drive
- Now usable on any machine without installation
Tips
- Use keyfiles for additional security (combine with password)
- For full disk encryption on Linux, consider LUKS instead
- Hidden volumes provide plausible deniability
- Always safely eject before removing portable drives