Information safety is paramount.
VeraCrypt is an open-source tool, it can create a virtual encrypted disk within a file or encrypt a partition or an entire storage device with defense grade protection. Meaning once protected, it's almost impossible to break in.
VeraCrypt is a fork of the discontinued TrueCrypt project.
One can use the following steps as reference to make an encrypted disk within a file (Vault), the Vault can be copied to any media. The vault can be protection as simple as password only or use 2 items to form basic 2 factor protection.
VeraCrypt is an open-source tool, it can create a virtual encrypted disk within a file or encrypt a partition or an entire storage device with defense grade protection. Meaning once protected, it's almost impossible to break in.
VeraCrypt is a fork of the discontinued TrueCrypt project.
One can use the following steps as reference to make an encrypted disk within a file (Vault), the Vault can be copied to any media. The vault can be protection as simple as password only or use 2 items to form basic 2 factor protection.
- password
- keyfile
Download free VeraCrypt for your platform from: veracrypt.codeplex.com/wikipage?title=Downloads
For MAC you may be asked to install filesystem support, just follow the message.
After VeraCrypt installation, open it up, and click Create Volume to create new vault.
Set the size big enough to meet your needs, it's not practicable to resize later. The generated vault is the fixed size whether or not it contains file.
Give a strong password, and Optional to add a keyfile to make 2 factors protection.
check "Use keyfiles", then click Keyfiles... button to create your keyfile.
check "Use keyfiles", then click Keyfiles... button to create your keyfile.
Click Generate Random Keyfile...
Move your mouse randomly inside the window to generate unique keyfile. The randomness guarantees uniqueness of the generated keyfile. After keyfile creation must save the keyfile and add to previous page by using Add Files...
For portability, the vault used cross platform (Mac, Linux, and Windows), recommend to use Filesystem type: exFAT.
Move your mouse randomly again within the window for encrypted file system format.
By this point your Vault is created. Click Exit. You need to mount the Vault before you can access it's contents.
Open VeraCrypt, select a slot in Volume (i.e. Slot 1); and Select Files to browse your generated Vault. Then click Mount
Enter password and set keyfile then click Mount, the Vault is mounted as a new partition and the Mount button is turned into Dismount.
One can add any files into the partition. When the partition is mounted, it's open as a normal partition. When done working with the Vault, click Dismount.
One need to protect the Vault (+keyfile) as any other important files. Make sure don't lose them.
For 2 factor encryption, only the combination of password and keyfile can open the Vault.
The vault can be shared by any method.
There are more advanced encryption modes, including invisible partition. That no one is able to tell you have a hidden partition, so you won't be forced to give passphrase to unlock something doesn't seems to exist.
I'll cover those in future write up.
Cheers,
One can add any files into the partition. When the partition is mounted, it's open as a normal partition. When done working with the Vault, click Dismount.
One need to protect the Vault (+keyfile) as any other important files. Make sure don't lose them.
For 2 factor encryption, only the combination of password and keyfile can open the Vault.
The vault can be shared by any method.
There are more advanced encryption modes, including invisible partition. That no one is able to tell you have a hidden partition, so you won't be forced to give passphrase to unlock something doesn't seems to exist.
I'll cover those in future write up.
Cheers,