en	[[!meta title="Using VeraCrypt encrypted volumes"]]

en	[[!toc levels=2]]

en	Introduction to *VeraCrypt* ==========================================================

en	*[VeraCrypt](https://www.veracrypt.fr/)* is a disk encryption tool that works on Windows, macOS, and Linux.

en	Comparison between *LUKS* and *VeraCrypt*

en	You can also create and open *LUKS* encrypted volumes in Tails. *LUKS* is the standard for disk encryption in Linux. [[See our documentation about *LUKS*.|encrypted_volumes]]

en	[[!inline pages="doc/encryption_and_privacy/luks_vs_veracrypt.inline" raw="yes" sort="age"]]

en	<div class="next">
id	<div class="icon">

en	To create new VeraCrypt volumes, do so outside of Tails. See [[VeraCrypt: Beginner's Tutorial|https://veracrypt.io/en/Beginner%27s%20Tutorial.html]].

en	</div>

en	Difference between file containers and partitions

en	With *VeraCrypt* you can store your files encrypted in two different kinds of *volumes*:

en	File containers

en	<div class="icon">

en	[[!img container-icon.png link="no" alt=""]]

en	<div class="text"> <p>A file container is a single big file inside which you can store several files encrypted, a bit like a ZIP file.</p> </div> </div>

en	Partitions or drives

en	[[!img partition-icon.png link="no" alt=""]]

en	<div class="text"> <p>Usually, drives (USB sticks and hard disks) have a single partition of their entire size. This way, you can encrypt a whole USB stick, for example. But, drives can also be split into several partitions. </div> </div>

en	Unlocking parameters

en	To unlock a *VeraCrypt* volume, you might need the following parameters, depending on the options that were selected when the volume was created:

en	**Passphrase**

en	**Keyfiles**: instead of or in addition to the passphrase, a *VeraCrypt* volume can be unlocked using a particular file or set of files.

en	[See the *VeraCrypt* documentation on keyfiles.](https://www.veracrypt.fr/en/Keyfiles.html)

en	**PIM**: a number that is needed if it was specified when creating the *VeraCrypt* volume.

en	[See the *VeraCrypt* documentation on PIM.](https://www.veracrypt.fr/en/Personal%20Iterations%20Multiplier%20\(PIM\).html)

en	**Hidden volume**: if you want to unlock the hidden volume inside the *VeraCrypt* volume.

en	[See the *VeraCrypt* documentation on hidden volumes.](https://www.veracrypt.fr/en/Hidden%20Volume.html)

en	**System volume**: if you want to unlock an encrypted Windows system partition.

en	[See the *VeraCrypt* documentation on encrypting a Windows system partition.](https://www.veracrypt.fr/en/System%20Encryption.html)

en	Using a file container

en	Unlocking a file container without keyfiles

en	Choose **Apps&nbsp;▸ Utilities&nbsp;▸ Unlock VeraCrypt Volumes**.

en	Click **Add** and choose the file container that you want to unlock.

en	Enter the parameters to unlock the volume. For more information, see the [[Unlocking parameters|veracrypt#parameters]] section above.

en	Click **Unlock**.

en	*Unlock VeraCrypt Volumes* unlocks your volume.

en	If unlocking the volume fails (for example, if you mistyped the password), click on **Unlock** to try unlocking again.

en	Click **Open** to open the volume in the *Files* browser.

en	Unlocking a file container with keyfiles

en	Choose **Apps&nbsp;▸ Utilities&nbsp;▸ Disks** to open the *Disks* utility.

en	Choose **[[!img lib/open-menu.png link="no" class="symbolic" alt=""]]&nbsp;▸ Attach Disk Image** from the top navigation bar.

en	In the **Select Disk Image to Attach** dialog:

en	Unselect the **Set up read-only loop device** check box in the bottom-left corner if you want to modify the content of the file container.

en	[[!img read-only.png class="screenshot" alt=""]]

en	Choose **All Files** in the file filter in the bottom-right corner.

en	[[!img all-files.png class="screenshot" alt=""]]

en	Navigate to the folder containing the file container that you want to open.

en	Select the file container and click **Attach**.

en	A first dialog appears to unlock the container.

en	[[!img authentication.png class="screenshot" alt="Authentication required"]]

en	Select **Cancel**.

en	It is impossible to use keyfiles with this first dialog.

en	A second dialog called **Set options to unlock** appears to unlock the container.

en	[[!img options.png class="screenshot" alt=""]]

en	Open your *VeraCrypt* volume from the sidebar of the *Files* menu.

en	Using a partition or drive

en	Unlocking a partition on an external storage device

en	Plug in the USB stick or hard disk that you want to unlock.

en	An authentication dialog appears.

en	Unlocking a partition on an internal hard disk

en	When starting Tails, [[set up an administration password|doc/first_steps/welcome_screen/administration_password]].

en	In the left pane, select the drive that corresponds to your hard disk.

en	In the right pane, select the partition that corresponds to your *VeraCrypt* volume.

en	It should have an **Encrypted?** label.

en	Click the [[!img lib/unlock.png alt="Unlock selected encrypted partition" class="symbolic" link="no"]] button in the right pane.

en	Select the file system that appears below the unlocked volume.

en	Click the [[!img lib/media-playback-start.png alt="Mount selected partition" class="symbolic" link="no"]] button to mount the volume.

en	Click on the */media/amnesia/* link in the right pane to open the volume in the *Files* browser.

en	Ejecting a VeraCrypt volume

en	Choose **Apps&nbsp;▸ Accessories&nbsp;▸ Files** to open the *Files* browser.

en	In the sidebar of the *Files* browser, click on the [[!img lib/media-eject.png alt="Eject" class="symbolic" link="no"]] button on the label of your *VeraCrypt* volume.