The GNOME desktop*Disks* utility allows you to opencreate encrypted volumes.

The *Disks* utility allows you to create encrypted volumes.

The GNOME desktop allows you to open encrypted volumes.

The GNOME desktop allows you to open encrypted volumes.

Such encrypted volumes are not hidden. <p>An attacker in possession of the device can know that there is an encrypted volume on it. Take into consideration that you can be forced or tricked to give out its passphrase.</p>

<p>An attacker in possession of the device can know that there is an encrypted
volume on it. Take into consideration that you can be forced or tricked to give
out its passphrase.</p>

The *Disks* utility lists all the current storage
devices on the left side of the screen.

The *Disks* utility lists all the current storage devices on the left side of the screen.

A new device appears in the list of storage devices. Click on it:.

A new device appears in the list of storage devices. Click on it.

In the **Format Disk** dialog:

In the **Format Disk** dialog:

If you want to erasoverwrite all data securely, choose to <span class="guilabel">on the device, choose **Overwrite existing data with zeroes</span>** in the **Erase** drop-down listmenu.

If you want to overwrite all data on the device, choose **Overwrite existing data with zeroes** in the **Erase** menu.

Choose <span class="guilabel">**Compatible with all systems and devices (MBR/DOS)</span>** in the **Partitioning** drop-down listmenu.

Choose **Compatible with all systems and devices (MBR/DOS)** in the **Partitioning** menu.

In the confirmation dialog, make sure that the device is correct. Click **Format** to confirm.

In the confirmation dialog, make sure that the device is correct.

[[!img empty_device.png link=noclass="screenshot" alt="Free Space 123 GB"]]

[[!img empty_device.png class="screenshot" alt="Free Space 123 GB"]]

In the **Create Partition** dialogscreen:

In the **Create Partition** screen:

**Partition Size**: you can create a partition on the whole device or only on part of it. In this example we are creating a partition of 4.0 GB on a device of 8.1 GB.

**Partition Size**: you can create a partition on the whole device or only on part of it.

In the **Format DiskVolume** dialog:

In the **Format Volume** dialog:

**Name**: y You can setgive a name forto the partition. This name remains invisible until the partition is open but can help you to identify it during use.

You can give a name to the partition.
This name remains invisible until the partition is open but can help
you to identify it during use.

**Type**: c Choose **Internal disk for use with Linux systems only (Ext4)** and **Password protect volume (LUKS)**.

Choose **Internal disk for use with Linux systems
only (Ext4)** and **Password protect volume (LUKS)**.

In the **Create Partition** dialogSet Password** screen:

In the **Set Password** screen:

**Passphraseword**: type a passphrase for the encrypted partition and repeat it to confirm.

**Password**: type a passphrase for the encrypted partition and repeat it to confirm.

[[!img encrypted_partition.png link="noclass="screenshot" alt="Partition 1 4.0 GB LUKS / secretFilesystem 4.0 GB Ext4"]]

[[!img encrypted_partition.png class="screenshot" alt="Partition 1 4.0 GB LUKS / Filesystem 4.0 GB Ext4"]]

You can open this new partition from the sidebar of the f*Files* browser with the name you gave it.

You can open this new partition from the sidebar of the *Files* browser with the name you gave it.

When plugginyou plug in a device containingthat has an encrypted partition, Tails does not open the partition automatically but you can do so from the file browseroffers to unlock the encryption automatically.

When you plug in a device that has an encrypted partition, Tails offers to unlock the encryption automatically.