en	[[!meta title="Using VeraCrypt encrypted volumes"]]

en	[[!toc levels=2]]

en	Introduction to VeraCrypt

en	[VeraCrypt](https://www.veracrypt.fr/) is a disk encryption tool that works on Windows, macOS, and Linux.

en	Comparison between LUKS and VeraCrypt

en	You can also create and open LUKS encrypted volumes in Tails. LUKS is the standard for disk encryption in Linux. [[See our documentation about LUKS.|encrypted_volumes]]

en	[[!inline pages="doc/encryption_and_privacy/luks_vs_veracrypt.inline" raw="yes" sort="age"]]
zh	[[!inline pages="doc/encryption_and_privacy/luks_vs_veracrypt.inline.zn" raw="yes" sort="age"]]

en	To create new VeraCrypt volumes, do so outside of Tails. See the step-by-step guides by Security-in-a-Box on [VeraCrypt for Windows](https://securityinabox.org/en/tools/veracrypt/).

en	Difference between file containers and partitions

en	With VeraCrypt you can store your files encrypted in two different kinds of *volumes*:

en	File containers

en	<div class="icon">

en	[[!img container-icon.png link="no"]]

en	<div class="text"> <p>A file container is a single big file inside which you can store several files encrypted, a bit like a ZIP file.</p> </div> </div>

en	Partitions or drives

en	[[!img partition-icon.png link="no"]]

en	<div class="text"> <p>Usually, drives (USB sticks and hard disks) have a single partition of their entire size. This way, you can encrypt a whole USB stick, for example. But, drives can also be split into several partitions. </div> </div>

en	Unlocking parameters

en	To unlock a VeraCrypt volume, you might need the following parameters, depending on the options that were selected when the volume was created:

en	- **Passphrase**

en	**Keyfiles**: instead of or in addition to the passphrase, a VeraCrypt volume can be unlocked using a particular file or set of files.

en	[See the VeraCrypt documentation on keyfiles.](https://www.veracrypt.fr/en/Keyfiles.html)

en	**PIM**: a number that is needed if it was specified when creating the VeraCrypt volume.

en	[See the VeraCrypt documentation on PIM.](https://www.veracrypt.fr/en/Personal%20Iterations%20Multiplier%20\(PIM\).html)

en	**Hidden volume**: if you want to unlock the hidden volume inside the VeraCrypt volume.

en	[See the VeraCrypt documentation on hidden volumes.](https://www.veracrypt.fr/en/Hidden%20Volume.html)

en	- **System volume**: if you want to unlock an encrypted Windows system partition.

en	[See the VeraCrypt documentation on encrypting a Windows system partition.](https://www.veracrypt.fr/en/System%20Encryption.html)

en	Using a file container

en	[[!img container-icon.png link="no" alt=""]]

en	Unlocking a file container without keyfiles

en	1. Choose <span class="menuchoice"> <span class="guimenu">Applications</span>&nbsp;▸ <span class="guisubmenu">Utilities</span>&nbsp;▸ <span class="guisubmenuitem">Unlock VeraCrypt Volumes</span></span>.

en	Click Add and choose the file container that you want to unlock.

en	Enter the parameters to unlock the volume. For more information, see the [[Unlocking parameters|veracrypt#parameters]] section above.

en	Click **Unlock**.

en	Unlock VeraCrypt Volumes unlocks your volume.

en	If unlocking the volume fails (for example, if you mistyped the password), click on Unlock to try unlocking again.

en	Click Open to open the volume in the Files browser.

en	Unlocking a file container with keyfiles

en	1. Choose <span class="menuchoice"> <span class="guimenu">Applications</span>&nbsp;▸ <span class="guisubmenu">Utilities</span>&nbsp;▸ <span class="guisubmenuitem">Disks</span></span> to start the <span class="application">Disks</span> utility.

en	Choose **[[!img lib/open-menu.png alt="" class=symbolic link="no"]]&nbsp;▸ Attach Disk Image&hellip;** from the top navigation bar.

en	In the Select Disk Image to Attach dialog:

en	Unselect the Set up read-only loop device check box in the bottom-left corner if you want to modify the content of the file container.

en	[[!img read-only.png link="no" class="screenshot" alt=""]]

en	Choose All Files in the file filter in the bottom-right corner.

en	[[!img all-files.png link="no" class="screenshot" alt=""]]

en	Navigate to the folder containing the file container that you want to open.

en	Select the file container and click Attach.

en	An authentication dialog appears.

en	[[!img authentication.png link="no" class="screenshot" alt="Authentication required"]]

en	Open your *VeraCrypt* volumes from the **Places** menu.

en	Using a partition or drive

en	[[!img partition-icon.png link="no" alt=""]]

en	Unlocking a partition on an external storage device

en	Plug in the USB stick or hard disk that you want to unlock.

en	Unlocking a partition on an internal hard disk

en	When starting Tails, [[set up an administration password|doc/first_steps/welcome_screen/administration_password]].

en	Choose **Applications**&nbsp;▸ **Utilities**&nbsp;▸ **Disks** to start the *Disks* utility.

en	In the left pane, select the drive that corresponds to your hard disk.

en	In the right pane, select the partition that corresponds to your *VeraCrypt* volume.

en	It should have an **Encrypted?** label.

en	Click the [[!img lib/unlock.png alt="Unlock selected encrypted partition" class="symbolic" link="no"]] button in the right pane.

en	Select the file system that appears below the unlocked volume.

en	Click the [[!img lib/media-playback-start.png alt="Mount selected partition" class="symbolic" link="no"]] button to mount the volume.

en	Click on the */media/amnesia/* link in the right pane to open the volume in the *Files* browser.

en	Ejecting a VeraCrypt volume

en	Choose **Applications**&nbsp;▸ **Files** to open the *Files* browser.

en	In the sidebar of the *Files* browser, click on the [[!img lib/media-eject.png alt="Eject" class="symbolic" link="no"]] button on the label of your *VeraCrypt* volume.