VeraCrypt
Free encryption software for protecting whole drives, partitions, USB sticks or individual encrypted containers that behave like a virtual disk.
- Type
- Disk and container encryption
- Platforms
- Windows, macOS, Linux
- License
- Apache-2.0, with parts under the TrueCrypt License 3.0
- Price
- Free
Source code: github.com/veracrypt/VeraCrypt. Flink is not affiliated with the VeraCrypt project.
What it is
VeraCrypt continues the work of TrueCrypt, a well-known encryption tool whose development stopped in 2014. It can create an encrypted container, which is a single file that you mount as a drive letter or folder after entering your password. Anything you save inside is encrypted automatically. It can also encrypt an entire partition or external drive, and on Windows it can encrypt the system drive so the computer asks for a password before it starts.
A distinctive feature is hidden volumes: a second encrypted area inside a container, unlocked with a different password. VeraCrypt offers several encryption algorithms and combinations of them, and lets you strengthen key derivation at the cost of a slower unlock.
Key features
Containers, partitions and system drives
A container is the easiest option: one file that you can copy, back up or move to another computer. Encrypting a partition or USB drive protects everything on it, and on Windows full system encryption asks for a password before the operating system starts.
Choice of algorithms
VeraCrypt supports several ciphers, including AES, Serpent and Twofish, and can chain them together. A setting called PIM lets you raise the number of key-derivation iterations, making brute-force attacks slower in exchange for a longer unlock time.
Portable use
On Windows, VeraCrypt can run in portable mode from a USB stick without being installed, which helps when you need to open a container on a computer you do not control, although administrator rights are still required.
Hidden operating system
On Windows, VeraCrypt can go a step further and create a hidden operating system inside a hidden volume. It is an advanced feature with strict setup requirements, intended for people who may be forced to reveal a password and need a convincing decoy system.
Getting started
Open the volume creation wizard, choose a standard encrypted container, pick its size and set a strong password. If you need to open it on Windows, macOS and Linux, choose the exFAT file system. To use it, select the file, choose a free drive slot and click Mount.
Who it is for
VeraCrypt is a good fit for anyone carrying sensitive data on a laptop or USB drive, keeping encrypted backups, or wanting a cross-platform encrypted container that can be opened on Windows, macOS and Linux alike.
Pros and cons
Pros
- Works across all major desktop systems
- Encrypts containers, partitions and drives
- Hidden volumes for plausible deniability
- Independently audited codebase
Cons
- Interface is technical and old-fashioned
- On macOS it relies on additional system components
- A forgotten password means the data is lost
Alternatives
To protect passwords rather than files, use KeePassXC or Bitwarden.