Encrypt
in place
the next step (exFAT if yes, FAT if no).
Click Next and you’re ready to configure
and format your volume. You can
change the filesystem here – NTFS and
ReFS are also available – plus choose
whether to perform a quick format (not
recommended). Checking Dynamic
means the file containing your
encrypted volume isn’t formatted as its
actual size, but instead increases in size
as you add content to it – this comes
with several warnings, not least of
which are severely degraded
performance and reduced security.
You’ll see a prompt to move your
mouse within the VeraCrypt window
to improve the cryptographic
strength of the volume’s encryption
keys. When you’ve configured the
drive and the Randomness Collected
From Mouse Movements meter is full,
click Format, and the encrypted
volume is created. Wait until the
confirmation dialog box appears,
then click OK followed by Exit to
return to the main VeraCrypt window,
ready to access your encrypted
container for the first time.
Select a free drive letter from the
list and click the Select File button to
choose your encrypted container.
Click the Mount button and then enter
the volume’s password before – if
applicable – clicking the Keyfiles...
button to select the required files that
will give you access to your container
when you click OK.
You’ll see a Mount Options...
button; clicking this reveals options
such as opening the volume in read-
only fashion, or assigning it a specific
drive label in Windows. If yourvolume contains a further hidden
volume, be sure to tick Protect hidden
volume against damage caused by
writing to outer volume to safeguard
its contents.
After clicking OK, wait while the
volume is mounted – you should see
your encrypted container appear in the
main VeraCrypt window. It can now be
accessed like any other drive – copy or
save files directly into here to ensure
they’re protected going forward. When
you’ve finished with the drive, right-click
its entry in the VeraCrypt window, and
choose Dismount to lock it away from
prying eyes.(QFU\SW:LQGRZV
VeraCrypt can also be used to encrypt
your entire Windows installation. All
files remain encrypted on your disk
even in use – they’re simply decrypted
on demand to allow Windows and your
apps to run normally without exposing
the data to potential problems, such as
sudden power loss.
This form of encryption is particularly
suitable for those who carry sensitive
information with them – typically on a
laptop. Take a drive image backup
before you begin, then launch
VeraCrypt and choose Create Volume
> Encrypt the system partition or
entire system drive. Again, standard
and hidden options are available (click
More information if you like the idea
of hiding your OS from view – it’s a
long, detailed subject, and involves
creating a ‘decoy’ OS).
Assuming you simply want to encrypt
the drive, leave Normal selected and
click Next. You can opt to simply“This form of encryption is particularly
suitable for those who carry sensitive
information with them on a laptop”
VeraCrypt’s benchmark tool shows you how each algorithm or hash performs.It’s possible to encrypt an existing data
drive without wiping it in VeraCrypt
using Encrypt in place. But there are
drawbacks. Unlike encrypting your
Windows installation, the drive won’t be
available while it’s being encrypted.
Also, when done, you’re prompted to
assign it a different drive letter – this
isn’t necessary as we’ll explain shortly.
Choose Encrypt in place, click Next,
read the warning, and click Yes. You’re
prompted to set encryption and
authentication options, then asked to
move your mouse randomly to
strengthen the encryption keys, before
ending up at the ‘Wipe Screen’7KLV
DOORZV\RXWRVKUHGXQHQFU\SWHGÀOHV
after the drive has been encrypted to
prevent them from being recovered by
XQGHOHWHWRROVODWHU2QO\WKHPRVW
paranoid should consider anything
RWKHUWKDQ1RQH IDVWHVW RUSDVV
UDQGRPGDWD
Click Next, then Encrypt. Click Yes
(you may need to click Yes again if
the GULYHLVLQXVHWRGLVPRXQWLW
then wait for the drive to be encrypted.
2QFHGRQHUHDGDQ\ZDUQLQJVDQG
click )LQLVK7RNHHSWKHVDPHGULYH
OHWWHUULJKWFOLFN7KLV3&LQ)LOH([SORUHU
and choose Manage. Identify your
encrypted partition using its drive letter,
right-click it, choose Change Drive
Letter and Paths, select the current
drive letter, and click Remove, then
2. You should now be able to select
the drive letter in the main VeraCrypt
window, and click Auto-Mount
Devices to follow the advice in the
main feature to access the drive. If you
wish to decrypt the drive permanently,
select it, and choose Volumes >
Permanently Decrypt.Key files add an additional layer of security to your
encrypted data drives.
52 |^ |^ March 2020